Status Update:

This is an update on my progress studying for the CCIE Security v6.1 Lab exam. Today is the 17th of January 2026 and im going to do an inventory of where im at and what i will be focusing on for the coming week.

Status Update:

Its weekend, which means its time to do a review on my study progress (along with other life items), but lets focus on the study part.

First off, i have about 12 weeks left before my next attempt. It is scheduled for April 13th.

So i just finished a lab that included integrating the WSA to my Lab Active Directory. One that thats certain is that you must enable NTP for this to work. I tried manually setting the time and even though it was just off by a few seconds, the WSA would not tolerate it and would cancel the integration.

I am currently setting up a home lab for practicing Cisco Web Security Appliance (WSA). I am using EVE-NG with an image for the WSA called: Coeus-10-5-2-072-S100V, which means its version 10.5.

I have it setup in my lab and was able to access it through the GUI after setting up IP + default gateway on it. However, i got an SSL error and was unable to use the GUI.

In my continued journey with Cisco TrustSec, I now have a verified switch configuration with all the components of basic TrustSec with ISE doing the policy and the switch doing the enforcement.

It was important to me to reach this point, as i now have to remember everything until this point in my practice. That and i dont have to fumble around a million different blog posts scattered all over the interwebs, in order to figure out what to do.

So today i spent some time setting up Cisco TrustSec on my ISE installation as well as my Catalyst 3650 switch. I did all the mandatory configuration on the switch, including:

• Setting up ISE / Radius with a pac key.
• Setting up a CTS authorization list that references the ISE / Radius server.
• Setting up device credentials on the Switch.
• Setup ISE to allow TLS 1.0 (this is required in order to get a PAC key assigned from ISE).
• Getting the PAC key on the Switch.

Everything was looking good so far, but for the life of me i could not get the environment data from ISE. This was even though ISE said it was sending it back to the Switch, which i could verify from the Radius Live Logs.

Happy New year… Welcome to 2026.

I actually failed my blog aspirations for 2025.. I didnt post a single time. Work and real life issues took up my time in 2025. I also didnt progress much in the first 9 months study wise.

Well, its late March 2024 and I have a little under 2 months left to prepare for my attempt #2 at the CCIE Security Lab exam.

I dont have much confidence yet, but I do hope I have improved in certain areas of the exam.

Happy February - 2024 everybody.

I wanted to take a moment to express my thoughts on why I have such a difficulty with the CCIE Security program as compared to the other certifications I have taken.

First and foremost, it deals with a lot of different technologies within the security realm. All the way from IPS to security provided by Cloud services such as Umbrella.

Happy New Year - 2024 everyone!!

Its a new year, which means a new beginning.

For the last couple of years I have been very incognito and focused on some personal areas of my life. This meant that I have not been active in the networking community as much as I would have liked and not attended as many things either.

I am currently deep diving into the whole TrustSec architecture. It has quickly become apparent to me, that i need to lab alot of this out in detail. That means upgrading my homelab with a 3650 switch as well as a refurbished laptop for acting as the supplicant for Dot1x operations.

Today I made the decision to drop my next lab date for the CCIE Security V6 lab exam.

Why?

Im simply not ready for another attempt yet and im not sure im going to be ready for the V6 before they transition to V7.

Hi Folks,

I wanted to take a few moments to share an idea I learned way back. Its very simple, because its the simple of act of “investing in yourself”.

What I mean by that is, that you should set aside some amount of $$$ each year and use that to further educate yourself in a suitable area.

So a couple of days ago I was going through the CCIE Security training videos on Cisco Learning Network and I noticed a golden nugget.

It was mentioned that Cisco was on track, to release some learning labs for practice use for the CCIE Security lab exam!!

Its been almost a year since my last post. Wow, do I feel bad about that! :(

Anyways, ive been studying on and off for the last year and I was scheduled to have my first lab attempt this coming thursday. However, with the rising numbers of Corona, I made the tough decision to postpone it until March 10th 2022.

So I have had some time to put everything together in my small CCIE Security V6 lab.

I want to spend a few moments explaining how everything is put together so others can benefit from it.

At the core of the whole thing is my new server, which is running great! (and importantly, fairly silent :) )

It was a scary experience, but a few moments ago I pressed the “Buy” button on a new (refurbished) server that is going to be the backbone and workhorse of my lab preparation.

Basically its a 1U HPE server (DL360 Generation 9) with 2x Xeon E5-2690v3 processors (12 Cores/2.6Ghz each). I had it upgraded to 256Gig of memory and 6x 200Gb SSD drives.

So a couple of days ago, I passed the Cisco 350-701 SCOR (Secure Core) Exam. I passed on my 2nd attempt.

I spent quite a bit of time preparing for this exam, as alot of security technologies are new to me.

This is the sequel to what was my first introduction to Forward Networks a year ago at Cisco Live Barcelona 2019. No surprise that, since I put their presentation among the highest rated during that time, that I was really looking forward to an update on their technology.

I am very happy to announce, that I have been invited to attend “Networking Field Day #22”.

As you might know, the Tech Field Day events are all about getting a bunch of people together to figure out what the presenting companies are all about, with the products they bring to the table. It is also a great opportunity for the presenters to get direct feedback from people in the industry. So its a win-win situation for everyone involved in these events.

The Concept:

In legacy site to site (S2S) VPN’s we are used to defining crypto maps and applying them to a physical interface. However, since these does not utilize GRE, you have no way of supporting multicast and routing protocols. This leads to having to define “interesting” traffic using ACL’s. Something which is clearly not scalable.

I am catching up on my RSS feeds and fell upon Ivan’s post on “Hard Work”. The article references Seth Godins post Hard Work, which examines 3 types of work being carried out.

In summary we have the following types:

1. Doing repetitive, back grueling work. One task at a time until completion.

   [Read More]

In this post I will go through an example of setting up redundancy between a pair of ASA’s using one of the two methods of accomplishing this. The 2 methods are:

• Failover
• Clustering

This post is exclusively about the failover option.

So I have further evidence that I might be crazy:

I have decided to abandon any and all CCIE DC studies. Why you might ask? Simple: I dont have access to the required equipment continually so I can practice and reinforce any knowledge.

This week, I am attending Cisco’s EMEAR Enterprise Networking PVT in Amsterdam and I wanted to highlight some key takeaways.

Cisco is really doubling down on getting its software strategy in place. Everything, and I mean everything gets a mention in regards to what sort of software is enabling it (DNA Center/SD-Access/SD-WAN etc.).

I decided a while back I would spend a bit of time learning about the Cisco ASA firewall. This is the first post surrounding some technologies I have explored during that time.

For some of you it might be easy stuff, but for others, including myself, might find it interesting for reference.

Im currently listening to an awesome book called Extreme Ownership. I wish to share some thoughts on its teachings as I think they are very valuable in any industry and particularly the IT industry.

First off, this is the book (im using the Audible service for audio-books):

I am modifying my learning path for the year. Basically I will be focusing on automation, Python and Network API’s.

These are the courses/goals I will be trying to attain:

• Course: PRNE (Completed)
• Course: NPDESI (Completed)
• Course: NPDEV (Completed)
• Book: Network Programmability and Automation (100% Done)

With those 3 courses completed, I will have re-certified my CCIE’s and CCDE using the Continuing Education Program.

Just a quick update on the site migration process. Everything should be in working order now, including certificates and the image repository. As always, give me a shout if you find something broken.

The old VPS server is about to be taken down, which will be the final test for something cross-function that might be left behind.

A quick update on the site maintenance progress.

I have chosen to move away from Wordpress and instead using a CI/CD workflow using Hugo+Netlify+Github. Im still learning the ropes, so expect some mistakes here and there. Its a work in progress like anything else.

This is my first post to hugo using CI/CD pipeline