IT Certifications and Career Paths

CCNP Security

Hierarchical Navigation

CCNP Security Overview

Learn more about the benefits and requirements associated with achieving a CCNP Security certification. (5:06 min)

Certification Listing

CCNA Security and CCNP Security Courses and Written Exams v2.0 Refresh

The courses and written exams for the Cisco CCNA Security and CCNP Security tracks have been refreshed to include the latest wireless technology and products. Learn more.

Cisco Certified Network Professional Security (CCNP Security) certification program is aligned specifically to the job role of the Cisco Network Security Engineer responsible for Security in Routers, Switches, Networking devices and appliances, as well as choosing, deploying, supporting and troubleshooting Firewalls, VPNS, and IDS/IPS solutions for their networking environments.

Prerequisites

Valid CCNA Security Certification or valid CCSP or any CCIE Certification can act as a prerequisite

Exams & Recommended Training

Required Exam(s) Recommended Training
642-637 SECURE Securing Networks with Cisco Routers and Switches (SECURE)
642-618 FIREWALL Deploying Cisco ASA Firewall Solutions (FIREWALL)
642-648 VPN Deploying Cisco ASA VPN Solutions (VPN)
642-627 IPS Implementing Cisco Intrusion Prevention System (IPS )

The best way to prepare for this certification is to take the Cisco-approved training:

Securing Networks with Cisco Routers and Switches (SECURE)

This five-day course is aimed at providing network security engineers with the knowledge and skills needed to secure Cisco IOS Software router- and switch-based networks, and provide security services based on Cisco IOS Software.
» Learn More

Deploying Cisco ASA Firewall Solutions (FIREWALL)

This five-day instructor-led course is aimed at providing network security engineers with the knowledge and skills that are needed to implement and maintain perimeter solutions that are based on Cisco ASA security appliances.
» Learn More

Deploying Cisco ASA VPN Solutions (VPN)

This five-day course is amied at choosing, configuring, and troubleshooting the majority of Cisco ASA adaptive security appliance remote access and site-to-site VPN features to reduce risk to IT infrastructure and its applications.
» Learn More

Implementing Cisco Intrusion Prevention System (IPS)

This five-day instructor-led course is aimed at providing network security engineers with the knowledge and skills needed to deploy Cisco IPS-based security solutions.
» Learn More

Self-Study Materials

The following resources are suggested study supplements; they are not designed to serve as a complete self-study program.

Community-Generated Content

Learning Partner Content

  • Partners: Log in for Partner Education Connection (PEC) curricula.
  • Learning Partner Lounges - Find materials provided by Cisco Authorized Learning Partners.

To earn this Cisco certification, you must pass the following exam(s):

642-637 SECURE

The Securing Networks with Cisco Routers and Switches (SECURE v1.0) exam is associated with the CCSP and CCNP Security certifications. This exam tests a candidate's knowledge and skills needed to secure Cisco IOS Software router and switch-based networks, and provide security services based on Cisco IOS Software. Candidates can prepare for this exam by taking the Securing Networks with Cisco Routers and Switches course.

642-618 FIREWALL

Deploying Cisco ASA Firewall Solutions (FIREWALL) exam is associated with the CCSP, CCNP Security and Cisco ASA Specialist certifications. This exam tests a candidate's knowledge and skills needed to implement and maintain Cisco ASA-based perimeter solutions. Successful candidates will be able to reduce risk to the IT infrastructure and applications using Cisco ASA features, and provide detailed operations support for the Cisco ASA. Candidates can prepare for this exam by taking the Deploying Cisco ASA FIREWALL course.

642-648 VPN

Deploying Cisco ASA VPN Solutions (VPN) exam is associated with the CCSP, CCNP Security, Cisco ASA Specialist and Cisco IPS Specialist certifications. This exam tests a candidate's knowledge and skills needed to deploy Cisco ASA-based VPN solutions. Successful candidates will be able to reduce risk to the IT infrastructure and applications using Cisco ASA VPN features, and provide detailed operations support for the Cisco ASA. Candidates can prepare for this exam by taking the Deploying Cisco ASA VPN Solutions (VPN) course.

642-627 IPS

Implementing Cisco Intrusion Prevention System v7.0 (IPS v7.0) exam is associated with the CCSP, CCNP Security and Cisco IPS Specialist certifications. This exam tests a candidate's knowledge and skills needed to deploy Cisco IPS-based security solutions. Successful graduates will be able to reduce risk to the IT infrastructure and applications using Cisco IPS features, and provide detailed operations support for the Cisco IPS. Candidates can prepare for this exam by taking the Implementing Cisco Intrusion Prevention System course.

CCNP Security Certification Overview

Close

Viewing this video requires the latest version of Adobe Flash Player with JavaScript enabled.

Get the Flash Player

Looking for Help?

Follow Us

Are You Ready to Certify?

Use the self assessment tool to determine whether you are ready.

Take a Self-Assessment

Global Learning Locator

Locate training at a center near you.

Find Training

Track your Progress

View your certification progress and exam history, request logos for your earned certifications, and more.

Certification Tracker