ASA Specialist
Learn more about the ASA Specialist certification.
The Cisco ASA Specialist certification recognizes security professionals who have attained specialized in-depth expertise and proven knowledge of the recommended best practices in designing, implementing, maintaining, and troubleshooting network security solutions, using the Cisco ASA adaptive security appliance. The Cisco ASA adaptive security appliance is widely deployed and in use at leading enterprises and service providers worldwide. The Cisco ASA Specialist is recognized as the benchmark security product certification for engineers, consultants, and architects who configure advanced Cisco security appliances and VPN solutions, including advanced protocol handling, remote access VPNs, Secure Sockets Layer VPNs, site-to-site VPNs, high-availability VPNs, and failover.
Prerequisites
Valid Cisco CCNA Security or any Cisco CCIE certification can act as a prerequisite.
Exams & Recommended Training
| Required Exam(s) | Recommended Training |
| 642-618 FIREWALL | Deploying Cisco ASA Firewall Solutions (FIREWALL) |
| 642-648 VPN | Deploying Cisco ASA VPN Solutions (VPN) |
The best way to prepare for the certification is to take the Cisco-approved training:
Deploying Cisco ASA Firewall Solutions (FIREWALL)
The Deploying Cisco ASA FIREWALL Solutions (FIREWALL) v2.0 course is aimed at providing network security engineers with the knowledge and skills that are needed to implement and maintain perimeter solutions that are based on Cisco ASA security appliances.
» Learn More
Deploying Cisco ASA VPN Solutions (VPN)
The Deploying Cisco ASA VPN Solutions (VPN) 2.0 course is aimed at at choosing, configuring, and troubleshooting the majority of Cisco ASA adaptive security appliance remote access and site-to-site VPN features to reduce risk to IT infrastructure and its applications.
» Learn More
Self-Study Materials
- Exam Topics - 642-618 FIREWALL
- Exam Topics - 642-648 VPN
- Hardening Cisco IOS Devices
- Secure Network Analysis Essentials with Case Studies
- Cisco Learning Network - A variety of self-study materials can be found here.
Learning Partner Content
- Partners: Log in for Partner Education Connection (PEC) curricula.
- Learning Partner Lounges - Find materials provided by Cisco Authorized Learning Partners.
To earn this Cisco certification, you must pass the following exam(s):
642-618 FIREWALL
Deploying Cisco ASA Firewall Solutions (FIREWALL) exam is associated with the CCSP, CCNP Security and Cisco ASA Specialist certifications. This exam tests a candidate's knowledge and skills needed to implement and maintain Cisco ASA-based perimeter solutions. Successful candidates will be able to reduce risk to the IT infrastructure and applications using Cisco ASA features, and provide detailed operations support for the Cisco ASA. Candidates can prepare for this exam by taking the Deploying Cisco ASA FIREWALL course.
- Learn more about the 642-618 FIREWALL exam
- Register for the exam
- Read current exam policies and requirements
642-648 VPN
Deploying Cisco ASA VPN Solutions (VPN) exam is associated with the CCSP, CCNP Security, Cisco ASA Specialist and Cisco IPS Specialist certifications. This exam tests a candidate's knowledge and skills needed to deploy Cisco ASA-based VPN solutions. Successful candidates will be able to reduce risk to the IT infrastructure and applications using Cisco ASA VPN features, and provide detailed operations support for the Cisco ASA. Candidates can prepare for this exam by taking the Deploying Cisco ASA VPN Solutions (VPN) course.
- Learn more about the 642-648 VPN exam
- Register for the exam
- Read current exam policies and requirements
Complete one of the following recertification options every two years. To recertify, pass ONE of the following before the certification expiration date:
- Re-take and pass all exams for each Specialist certification indicated on the specific certification page. Please note: this includes ALL exams whether refreshed or not, or
- Pass the current CCIE written exam, or
- Pass the current CCDE written exam, or current CCDE Practical Exam, or
- Pass the Cisco Certified Architect (CCAr) interview AND the CCAr board review.