Cisco Expert-Level Certification

CCIE
SecurityExpert-Level Mastery of Enterprise Security Networks

Demonstrate expert-level mastery of planning, designing, deploying, operating, and optimizing complex enterprise security networks. CCIE Security marks you as a recognized leader in security technologies and solutions, validated through a written qualification exam plus an 8-hour hands-on lab.

Start Your Learning Path

Expert FirewallsASA, FTD & NGIPS at scale

ISE ArchitecturesIdentity & access at enterprise scale

Threat ResponseAMP, Stealthwatch & Umbrella

118 Video Classes68:30 hrs of expert instruction

Make your mark with end-to-end secure infrastructure skills

The CCIE Security certification builds cutting-edge skills that position you as a technical leader in the ever-changing landscape of security technologies and solutions.

No formal prerequisites — open to all learners

5-7 years of experience designing and operating security solutions recommended

Cisco's most advanced security certification

Validates contextual policy enforcement and rapid threat containment

Expert Security Skills

Lead enterprise security at the highest level

From contextual policy enforcement and centralized orchestration with Cisco Catalyst Center to cloud-delivered security and automation, build the deep skills that define a CCIE.

Firewall & IPS Mastery

Architect and operate Cisco ASA, FTD, and NGIPS deployments at expert depth, including clustering and HA.

VPN & Segmentation

Design FlexVPN, DMVPN, and TrustSec-based segmentation for complex enterprise topologies.

Infrastructure Hardening

Apply control, management, and data plane protections aligned to Cisco SAFE and compliance standards.

Identity & Access (ISE)

Deploy scalable Cisco ISE architectures for AAA, posture, profiling, BYOD, and MFA integration.

Threat Detection & Response

Investigate and remediate advanced threats using AMP, Stealthwatch, and Cisco Threat Response.

Security Automation

Automate security operations with Python, REST APIs, and Cisco DNA Center northbound integrations.

Exam Blueprint

Five domains. Expert-level depth.

The curriculum tracks the official CCIE Security written qualification blueprint, covering everything from perimeter security to advanced threat protection.

Explore the curriculum

DOMAIN 0125%

Perimeter Security & Intrusion Prevention

Deploy and manage Cisco ASA, FTD, and NGIPS to enforce firewall and intrusion prevention policies.

DOMAIN 0220%

Secure Connectivity & Segmentation

Build resilient VPN architectures and segment infrastructure with VRF, TrustSec, and PVLANs.

DOMAIN 0320%

Security Infrastructure

Harden devices across control, management, and data planes, and automate via Python and APIs.

DOMAIN 0420%

Identity Management & Access Control

Architect scalable Cisco ISE deployments for AAA, posture, profiling, and BYOD across the network.

DOMAIN 0515%

Advanced Threat Protection & Content Security

Detect and respond to advanced threats with Cisco AMP, Umbrella, Stealthwatch, and Threat Response.

Domain percentages can change. Always review Cisco's official exam page before scheduling.

What You Will Learn

A clear, exam-aligned curriculum

Expand each domain to see the expert-level configurations, architectures, and tooling you will master throughout the course.

Deployment modes on Cisco ASA and FTD: routed, transparent, multi-context
Firewall features: NAT, application inspection, traffic zones, identity firewall
Cisco IOS/IOS XE security: zone-based firewall, application awareness
Cisco FMC alerting, logging, reporting, and dynamic objects
Cisco NGIPS deployment modes: in-line, passive, and TAP
Detect and mitigate DoS/DDoS, spoofing, MITM, and botnet attacks

Cisco AnyConnect remote-access VPN on ASA, FTD, and routers
FlexVPN, DMVPN, and IPsec site-to-site tunnels
VPN high availability: ASA clustering and dual-hub DMVPN
Infrastructure segmentation: VLAN, PVLAN, GRE, VRF-Lite
Micro-segmentation with Cisco TrustSec using SGT and SXP
Cisco IOS CA for VPN authentication

Control plane protection: CoPP, IP source routing, infrastructure ACLs
Layer 2 security: DAI, IPDT, STP security, port security, DHCP snooping
Wireless security: WPA, WPA2, WPA3, TKIP, and AES
Monitoring protocols: NetFlow, SNMP, Syslog, RMON, eStreamer
Compliance frameworks: ISO 27001, RFC 2827, PCI-DSS, Cisco SAFE model
REST API automation with Python: JSON/XML/YAML and DNAC northbound APIs

Cisco ISE scalability with multiple nodes and personas
AAA for network access with 802.1X and MAB using Cisco ISE
Guest lifecycle management and BYOD on-boarding flows
Posture assessment and endpoint profiling with Cisco ISE
pxGrid integration across WSA, ISE, and FMC
Multifactor authentication with Cisco Duo and IBNS 2.0 (C3PL)

Cisco AMP for networks, endpoints, and content security (ESA/WSA)
Detect, analyze, and mitigate malware incidents
Packet capture and analysis: Wireshark, tcpdump, SPAN, ERSPAN
Cloud security with Cisco Umbrella: DNS, RBI, CASB, and DLP policies
Email security: mail policies, DLP, quarantine, and encryption
Threat solution integration: Stealthwatch, FMC, AMP, CTA, and Threat Response

Career Outcomes

Step into senior security leadership

CCIE Security is for experienced professionals aiming for senior-level or leadership positions in IT security.

Who should learn?Experienced security professionals targeting senior or leadership roles

Security Architect

Design, build, and maintain enterprise security systems that protect digital assets at scale.

Senior Security Analyst

Lead investigations to curtail breaches by identifying root causes and sources of threats.

IT Security Officer

Oversee information security, cybersecurity, and IT risk management programs.

Principal Network Security Engineer

Lead design and operation of complex, multi-vendor secure network infrastructures.

Your Roadmap

From advanced security to expert lab readiness

Follow a hands-on progression that takes you from perimeter and connectivity through identity, threat protection, and full lab simulation.

Perimeter & Connectivity

Master ASA, FTD, NGIPS, VPNs, and segmentation across complex topologies.

Infrastructure Hardening

Apply control/data/management plane protections and security automation with Python.

Identity & Access (ISE)

Architect scalable AAA, posture, profiling, and BYOD solutions with Cisco ISE.

Lab Readiness

Practice advanced threat response scenarios and prepare for the 8-hour CCIE lab exam.

Exam domains and weightings are based on Cisco's official CCIE Security page.

Ready to become a CCIE?

Talk with a course advisor about lab readiness, the CCIE Security learning path, and how to prepare for both the written and practical exams.

Chat on WhatsApp

CCIE SecurityExpert-Level Mastery of Enterprise Security Networks

Make your mark with end-to-end secure infrastructure skills

Lead enterprise security at the highest level

Firewall & IPS Mastery

VPN & Segmentation

Infrastructure Hardening

Identity & Access (ISE)

Threat Detection & Response

Security Automation

Five domains. Expert-level depth.

Perimeter Security & Intrusion Prevention

Secure Connectivity & Segmentation

Security Infrastructure

Identity Management & Access Control

Advanced Threat Protection & Content Security

A clear, exam-aligned curriculum

01. Perimeter Security & Intrusion Prevention25% OF EXAM

02. Secure Connectivity & Segmentation20% OF EXAM

03. Security Infrastructure20% OF EXAM

04. Identity Management & Access Control20% OF EXAM

05. Advanced Threat Protection & Content Security15% OF EXAM

Step into senior security leadership

Security Architect

Senior Security Analyst

IT Security Officer

Principal Network Security Engineer

From advanced security to expert lab readiness

Perimeter & Connectivity

Infrastructure Hardening

Identity & Access (ISE)

Lab Readiness

Ready to become a CCIE?

CCIE
SecurityExpert-Level Mastery of Enterprise Security Networks