IT Certifications and Career Paths

CCNA Security

CCNA Security Overview

Learn more about the benefits and requirements associated with achieving a CCNA Security certification. (5:18 min)

CCNA Security Exam and Training Revision

The CCNA Security exam and training are being revised from v2.0 to v3.0. Candidates can choose to take either the 640-554 IINS v2.0 exam or 210-260 IINS v3.0 exam. The last day to test for 640-554 IINS v2.0 will be November 30, 2015.
Learn more about the exam updates

Cisco Certified Network Associate Security (CCNA Security) validates associate-level knowledge and skills required to secure Cisco networks. With a CCNA Security certification, a network professional demonstrates the skills required to develop a security infrastructure, recognize threats and vulnerabilities to networks, and mitigate security threats. The CCNA Security curriculum emphasizes core security technologies, the installation, troubleshooting and monitoring of network devices to maintain integrity, confidentiality and availability of data and devices, and competency in the technologies that Cisco uses in its security structure.


Any valid Cisco CCENT, CCNA Routing and Switching, or any CCIE certification can act as a prerequisite.

Exams & Recommended Training

Required Exam(s) Recommended Training
640-554 IINS
Last day to test:
November 30, 2015
Implementing Cisco IOS Network Security (IINS)
210-260 IINS Implementing Cisco Network Security (IINS)
For a complete list of available network security training, visit the Security Training page.

Self-Study Materials

The following resources are suggested study materials:

A comprehensive list of self-study materials is also available.

Cisco Learning Network Resources

Get all your CCNA Security questions answered.

Learning Partner Content

  • Partners: Log in for Partner Education Connection (PEC) curricula.
  • Learning Partner Lounges - Find materials provided by Cisco Authorized Learning Partners.

The best way to prepare for this certification is to take the Cisco-approved training:

Implementing Cisco IOS Network Security (IINS) v2.0

Course content focuses on the design, implementation, and monitoring of a comprehensive security policy, using Cisco IOS security features and technologies as examples.
» Learn More

Implementing Cisco Network Security (IINS) v3.0

The course focuses on security principles and technologies, using Cisco security products to provide hands-on examples. Using instructor-led discussions, extensive hands-on lab exercises, and supplemental materials, this course allows learners to understand common security concepts, and deploy basic security techniques utilizing a variety of popular security appliances within a "real-life" network infrastructure.
» Learn More

To earn this Cisco certification, you must pass the following exam(s):

640-554 IINS

Last day to test: November 30, 2015

The 640-554 Implementing Cisco IOS Network Security (IINS) exam is associated with the CCNA Security certification. This exam tests a candidate's knowledge of securing Cisco routers and switches and their associated networks. It leads to validated skills for installation, troubleshooting and monitoring of network devices to maintain integrity, confidentiality and availability of data and devices and develops competency in the technologies that Cisco uses in its security infrastructure.


210-260 IINS

This exam tests the candidate's knowledge of secure network infrastructure, understanding core security concepts, managing secure access, VPN encryption, firewalls, intrusion prevention, web and email content security, and endpoint security. This exam validates skills for installation, troubleshooting, and monitoring of a secure network to maintain integrity, confidentiality, and availability of data and devices.

CCNA Security certifications are valid for three years. To recertify, pass ONE of the following before the certification expiration date:

  • Pass any current Associate-level exam except for ICND1 exam or
  • Pass any current 642-XXX Professional-level or any 300-XXX Professional-level exam, or
  • Pass any current 642-XXX Cisco Specialist exam (excluding Sales Specialist exams or MeetingPlace Specialist exams, Implementing Cisco TelePresence Installations (ITI) exams, Cisco Leading Virtual Classroom Instruction exams, or any 650 online exams), or
  • Pass any current CCIE Written Exam, or
  • Pass the current CCDE Written Exam OR current CCDE Practical Exam, or
  • Pass the Cisco Certified Architect (CCAr) interview AND the CCAr board review to extend lower certifications

When using a higher level of certification to extend other certifications, the expiration date of other certifications will extend to the expiration date of the higher certification (i.e.: If you have one year left on your CCNA Security certification and you earn a CCIE certification (which has a two-year certification life) then both your CCIE certification and your CCNA Security certification will expire two years from the date you achieved the CCIE certification).

Subscribe for Complete
E-Learning Training

Prepare for your CCNA and CCNP exams with the most comprehensive e-learning and resources available.

Learn More

Associate Exam Logic Tool

Use the Associate Exam Logic Tool to determine the best exam pathway for you in achieving a Cisco Associate-level certification.

Associate Exam Logic Tool

Assess Your Skills

Explore our resources to determine your IT readiness.

Visit Self-Assessments

Cisco Learning Locator

Locate training at a center near you.

Find Training

Track your Progress

View your certification progress and exam history, request logos for your earned certifications, and more.

Certification Tracking System