Yesterday I passed the Palo Alto Accredited Configuration Engineer (ACE) Exam – PAN-OS 6.0 Version, the exam was quite easier provided you have hands on experience on Palo Alto firewall.
The Palo Alto Accredited Configuration Engineer (ACE) Exam – PAN-OS 6.0 Version is an entry-level exam of Palo Alto Certifications, which tests your knowledge of the core features and functions of Palo Alto Networks next-generation firewalls. The ACE exam is web-based and consists of 50 multiple-choice questions. The exam is not timed, and you can retake it as many times as necessary to earn a passing score.
Those who wants to be an Accredited Configuration Engineer (ACE) Exam – PAN-OS 6.0 Version, they just need to visit Palo Alto education website and get registered. Once done with registration, one can straight away attempt the Accredited Configuration Engineer (ACE) Exam provided he/she has the through knowledge of Palo Alto firewall. If not the best way to master ACE concepts is to register for Firewall Installation, Configuration, & Management (EDU-101 or EDU-201), EDU-101 is available at no cost as a self-paced online learning experience. EDU-201 is instructor-led with lab exercises and is offered through Palo Alto Network Authorized Training Centers (ATCs).
I took Firewall Installation, Configuration, & Management (EDU-101) self-paced online course which is about 6 hours long. The course is quite informative and the instructor has done an amazing job in explaining the concepts in simple language.
Certainly the Firewall Installation, Configuration, & Management (EDU-101) gives any one a good understanding of the concepts, but what about the hands on experience? You can certainly use the Firewall Installation, Configuration, and Management: Essentials I -Lab Manual for this purpose provided you have an access to any Palo Alto firewall which is not under production. Palo Alto recommends PA -200 firewall for this lab, however if you don’t have physical appliances one can make use of Unified Networking Lab for the preparation of the Accredited Configuration Engineer (ACE) Exam. In the upcoming post I will try to shed some light on Unified Networking Lab and how you can make it as your source of preparation.
Recently Cisco announced threat-focused next-generation firewall (NGFW). Cisco is trying to integrate FirePOWER with Cisco ASA to provide the features of next-generation firewall (NGFW). Only time will say how successful Cisco will be capturing the Next Generation firewall market.
Currently we all know Cisco has a very little presence when it comes to Security products, leaders like Palo Alto, Check point , Juniper and to certain extent Fortinet are making their impact and presence in the firewall world.
According to Cisco the ASA with FirePOWER Services features these comprehensive capabilities:
- Site-to-site and remote access VPN and advanced clustering provide highly secure, high-performance access and high availability to help ensure business continuity.
- Granular Application Visibility and Control (AVC) supports more than 3,000 application-layer and risk-based controls that can launch tailored intrusion prevention system (IPS) threat detection policies to optimize security effectiveness.
- The industry-leading Cisco ASA with FirePOWER next-generation IPS (NGIPS) provides highly effective threat prevention and full contextual awareness of users, infrastructure, applications, and content to detect multivector threats and automate defense response.
- Reputation- and category-based URL filtering offer comprehensive alerting and control over suspicious web traffic and enforce policies on hundreds of millions of URLs in more than 80 categories.
- AMP provides industry-leading breach detection effectiveness, a low total cost of ownership, and superior protection value that helps you discover, understand, and stop malware and emerging threats missed by other security layers.
I do expect Cisco may have some impact on the market share, especially after acquiring Source Fire things may change the trends for Cisco. Cisco is trying to add the rich features and flavors of Source Fire products into its ASA firewall. Once I get an access to their Next Generation Firewall it will be much easier to comment on the services Cisco is offering and can be compared with their competitors.
There is always an end to every journey, so this will be the last series I am going to write on my journey of CCIE, I will come back with articles in future that may hit the topics of CCIE Routing and Switching exam. But as a series this will be the last one.
Lets summarize all the ten series in this post, so that if some one wants to access all the previous series he/she may use the links mentioned here.
Series 5 – We reviewed INE’s CCIE Routing and Switching version 5 workbooks and the great thing about the INE offers with this workbook and the virtual support they render for practicing their workbooks.
I wish you all the best and I am pretty sure hard work never goes into vein, irrespective of the lab result the journey of CCIE it self teaches a lot.
Sometimes we tend to get out of focus and don’t take our preparations seriously, it happened with me many times. We were at our peak, but suddenly for obvious reasons we lost the interest. This situation is really hard to overcome and many people give up at this stage which is so sad.
The best way to overcome this phobia is to schedule the lab and pay for it. This huge step makes life easier in terms of preparations. Your life now evolves most of the times about the lab and the preparations for the lab. You live each and every day not only thinking about the lab but also finding the ways to overcome the challenges you face. So that you are ready to take the challenge in more optimistic way.
So whenever you feel you are getting out of focus and cannot concentrate, then take a break, monitor your progress, estimate the time you need to get ready for lab, and then schedule the lab and pay for it.
By doing so you are empowering your brain to focus more on the lab rather than the distractions. So schedule you lab and enjoy the journey.
I have been asked by many networking professionals to choose which CCIE track? As we all know Cisco is offering CCIE tracks in CCIE Routing and Switching, CCIE Service Provider, CCIE Data Center, CCIE Security, CCIE Collaboration and CCIE Wireless. Cisco will never come out with these tracks if there was no value for any particular CCIE track. Hence there is no point in either asking or following what others are doing, its been observed some of the Networking Professionals failed to follow their heart rather they go with the trends or what their peers are doing. This is not a right approach. Remember in the first post we asked ourselves why do we want to be a CCIE? This question should give you a clarity and reason to focus.
So its better not to follow the mass, follow you heart, drive by your passions. When you do this, the journey of CCIE becomes interesting and easier. When you follow your passions, you have zeal to excel, reason to conquer and motivation to move forward.
While I was attempting to CCIE Routing and Switching Lab exam, most of my professional friends advised me to go with CCIE Data Center, simply because there was a huge demand for CCIE Data Center and there are very few Data Center CCIE’s. Thank to Almighty I followed my passion, followed my heart and attempted the track on which I have good experience and understanding of concepts and I passed my lab.
When you choose a CCIE track, ask yourself what track you are personally comfortable with, in which area you have an experience. Then go for it. Then only the journey becomes easier and interesting.
So follow your passions and live your dreams.
Excuses are mother of failure; it’s a normal human tendency to find excuses to delay many things in their life, be it spending time with their family or even preparations for certifications. We always find a way to run away from this.
The best thing is to overcome this drawback is to “challenge yourself”. Once you challenge yourself, your self-doubt / your excuses will vanish and your brain finds a way to accomplish the challenge both sub consciously and consciously.
The biggest challenge all married persons face is the time, better make your better half part of this project. So he/she can support you in the best possible way. You can never run away from responsibilities as employee/father/ husband or wife. You have to fulfill them and an ideal situation will never arrive, so better challenge yourself.
Many great leaders / CIO, s /CTO,s are much busier then us, yet they achieve more , may be it’s a good idea to read a biography of a great achiever, this may give you an insight and motivation to take up the challenge.
Once I challenged myself I found myself not wasting time on unwanted things, even while driving either to office or home I used to listen either to INE’s Advance Technology Class videos or listening to an interesting Cisco Live video related to CCIE.
So buckle up and challenge yourself.
When it comes human brain it wonders a lot and its hard to focus for a long time, this condition is true especially when you are preparing alone for CCIE. To over come this challenge it’s always better to have a good study partner. There are many benefits of having study partner. My self and my study partner spent countless hours in coffee shops, study room and on phone discussing our progress,practicing Narbik/INE workbooks, helping each other in understanding the concepts and much more.
We were quite adamant and focused on what we need. We were monitoring each other’s progress and pointing out the strong areas and the weak areas. We worked hard and helped each other to overcome the weak areas. There are many benefits of having a study partner some of them are as
- Monitor each other progress
- Guide each other
- Get awareness about your weak areas.
- Accountable to your study partner
- Motivate each other
- Technical talks
I strongly recommend having a great study partner.
So far we were taking about the initial plan one should have to start the journey of CCIE, we went through why we want to be CCIE? We did question ourselves few questions and then we were aware of the major Vendors offering study materials and we did reviewed INE and Narbik workbooks.
The next important thing I personally feel is to make a complete plan for the CCIE journey. This gives you the motivation, accountability and a reason to peruse CCIE. It’s a know fact that when someone writes down his goals and the path to reach towards his goal his success rate is over 70%. So I strongly recommend to make one detailed plan with timelines, which may comprises of the following
- Study Materials to be used
- Study Partner (I will talk about this in detail in next post)
- Study plan (what will be the first step with CCIE study materials)
- When to schedule the lab?
- How to practice the lab?
- What is failed to pass the lab.
Yes I took CCIE as a project and monitored my progress. Everyday night just before going to the bed I used to ask myself
“What did I do today to get closer my dream of CCIE?”
I strongly believe, mental preparation and accounting is very important in the journey of CCIE. So better have your own detailed plan for the journey of CCIE
INE is considered to be one of pioneers in the area of developing workbooks, training videos and boot camps for the CCIE exams. I started my journey of CCIE during the version 4 and I did purchased their CCIE Routing and Switching Ultimate Bundle, which had the following materials.
1450 Rack Rental Tokens included FREE
By having the CCIE Routing and Switching Ultimate Bundle I had access to INE materials along with their racks. This was a great deal for me. I watched most of the CCIE R&S v5 Advanced Technologies Course videos and did started working on their workbooks. INE workbooks are divided into four main sections
- Advance Technology Labs
- Advance Foundation Labs
- Advance Troubleshooting labs
- Full Scale practice Labs
I personally started with Advance Technology Labs, which comprises of over 500 labs, which can be fully virtualized and also someone can use INE online racks. The great thing about this section, is the tasks break down , which not only covers the blue prints of CCIE released by Cisco but also the Blue Print of INE as well, by doing so INE team are preparing you not only for the lab but also to face the day to day challenges at work with upmost confidence. The tasks are explained in details and it gives you hands on experience of the technology in depth. I personally like liked the BGP topic of INE Workbook, which really gave me the better understanding of the topic.
INE’s Full-Scale and Troubleshooting labs are good once you completed the Advance Technology Labs , these labs takes you through the approach one should have in the real lab.
The best part of INE workbooks are, there are no security restrictions which gives you the flexibility to use their workbooks on any platform or device.. The workbooks are presented well both in html and pdf format. Personally I liked their HTML format where one can bookmark the progress and can implement the task without accessing the solution. One can see the solution by clicking it. The second thing I liked about their workbooks is their approach towards building a virtual lab, there are blogs written by Brian Mcgahan on the INE website as well they shared the topology of VIRL . Some one can purchase VIRL and can easily import the topology shared by Brian Mcgahan and can start working on the workbook tasks straight away.
At times I found INE workbooks are more time consuming to complete a tasks, hence I used other workbooks, which were brief in nature and serving my purpose. But for someone who wants to have an in-depth understanding of concepts and technologies there is no other alternative to INE workbooks.
To conclude great workbook which covers topics in detail and takes lots of your time to implement and practice.
As promised I am back with the review for the Configuration workbooks provided by Narbik Kocharians of Micronics Training and Consulting. Personally I had purchased his
R&S Workbook Bundle v5.0
The bundle comprises of following workbooks.
Advanced CCIE Routing & Switching v5.0
Advanced CCIE Routing & Switching Troubleshooting v5.0
Each workbook is divided into two volumes and covers all the topics of the blue print mentioned by Cisco for the CCIE Routing and Switching Lab exam.
Foundation v5.0 workbooks are quite simple and intended for those who want to start from basics and build the strong foundation of the technologies, the great thing I liked about these workbooks are they are quite simple and easy to understand. Also these workbooks have a brief explanation of key technologies. The topology designed by Narbik is quite simple and easy simulate either in the virtual platforms be it GNS3 or VIRL. If you successfully built the structure of the topology then its easy to configure every section of the workbook be it EIGRP, DMVPN or OSPF. You will also have an access to initial configuration files of the each sections of the lab, you can just copy and paste the initial config in a lab built using real equipment’s. For virtual labs you need to some modifications and tweaking.
I personally opted to start with Advanced CCIE Routing & Switching v5.0 workbooks. The workbook straight away starts with Switching and then the DMVPN part; I feel I am not lasted especially when I skipped the Foundation part. I would highly recommend to make sure your foundations are strong, if your foundations are strong it easy to understand and implement the advance topics. The distribution of topics is also quite logical and takes you from one step to next in a smooth way with better understanding of those topics .
Narbik does also offer rack rentals for his workbooks but honestly I have no experience on his racks. One thing certainly Narbik can improve is the virtual support or virtual topology for his workbooks. As some vendors do offer VIRL topology and even the steps to configure VIRL topology on Cisco VIRL.
There are many great things about workbook but in short, a very concise workbook and the time taken to configure each task is considerably shorter compared to other workbooks, this gives an edge for me. A must Workbook not only for those who are aspiring to be a CCIE Routing and Switching, but also for those professionals who just want to configure and practice certain technologies for their own development. I would like to thank Narbik for coming out such an amazing workbook.