What is the CCIE Lab Certification (Security) course fee at RST Forum?

The course fee is ₹1,00,000. There are no hidden charges - lab access and course material are included.

How long is the CCIE Lab Certification (Security) course?

240 hours of live instructor-led training (lectures plus hands-on lab practice), running as weekday-evening or weekend batches.

Do I need prior experience to join?

Advanced level. Hands-on experience with Cisco Systems technologies - or an associate-level certification in this track - is strongly recommended before you join.

Is the training classroom or online?

Both. Classroom batches run at our Mumbai campus, and the same batch streams live for online students across India. Both get identical lab access and the same instructor.

Are the labs hands-on?

Yes - the course includes 1 hands-on lab, practiced on real equipment with 24/7 remote lab access through Skillopia, our own lab platform, for practice between classes.

Which certification does this course prepare me for?

CCIE Lab Certification (Security). The curriculum follows the official exam blueprint and the batch ends with structured exam preparation.

Can I attend a demo session before enrolling?

Yes. Sit through a live class with the instructor before you decide - call +91 91672 24466 or send an enquiry and we will schedule it.

Cyber Security

CCIE Lab Certification (Security)

Unleash your cyber sentinel potential: Join the CCIE Security lab course and ascend to the elite rank of cyber security expert. CCIE Lab Certification (Security) at RST Forum is a 240-hour instructor-led course (lectures plus hands-on lab practice) at advanced level. Classroom batches run at our Mumbai campus and the same batch streams live-online across India; the fee is ₹1,00,000.

This course will qualify you for the CCIE Lab Certification (Security) certification.

Duration: 240 hours
Training mode: Classroom & online
Course fees: ₹1,00,000
Level: Advanced
Certification: Security

Course details verified 14 Oct 2026

Please note that the course fees exclude the certification cost.

Overview

Who should attend

This 240hrs (hands-on Lab only) training is designed to help the candidate position themselves as a technical leader in the ever-changing landscape of networking technologies. The certification covers core technology areas and validates your end-to-end lifecycle skills in planning, designing, deploying, operating, and optimizing network security solutions to protect your network. This course is designed for anyone seeking the CCIE Security Lab certification. This program validates your expertise with the latest technologies for today’s networking job roles. To earn CCIE Security Candidates are required to pass two exams: The qualifying exam CCNP SCOR and CCIE Security Lab Exam. In this course candidates will focus on practicing Labs, working on time-management, and troubleshooting skills required to pass CCIE lab exam. This CCIE Lab training course is designed to meet the objective of the CCIE program. The course is customized keeping in mind the aim of achieving technology expertise and success in CCIE Lab Exam. This is a lab-intensive course and objectives are accomplished through hands on learning.

Outcomes

Skills you'll gain

Perimeter Security and Intrusion Prevention.
Secure Connectivity and Segmentation.
Security Infrastructure.

Included

What you get

Curriculum based on course outlines defined by Cisco Systems.
This Instructor-led classroom course is designed with an aim to build theoretical knowledge supplemented by ample hands-on lab exercises.
Facility of Lab on cloud available.
Courseware includes reference material to maximize learning.
Assignments and tests to ensure concept absorption.
Repeating of lectures allowed (On approval basis)
Candidates can attend lectures online.

After the course

Placements & outcomes

Placement assistance is included: CV preparation, interview drills with real scenario questions, and referrals through our alumni network of 1 million+ engineers trained since 1997.

5 modules

Full syllabus

Every module below is taught live and practiced hands-on - nothing here is a slide-only topic.

Perimeter Security and Intrusion Prevention

Deployment modes on Cisco ASA and Cisco FTD
- Routed
- Transparent
- Single
- Multi-context
- Multi-instance
Firewall features on Cisco ASA and FTD
- NAT
- Application inspection
- Traffic zones
- Policy-based routing
- Traffic redirection to service modules
- Identity firewall
Security features on Cisco IOS/IOS XE
- Application awareness
- Zone-based firewall
- NAT
Cisco FMC features
- Alerting
- Logging
- Reporting
- Dynamic objects
Cisco NGIPS deployment modes
- In-line
- Passive
- TAP
Cisco NGFW features
- SSL inspection
- User identity
- Geolocation
- AVC
Detect and mitigate common types of attacks
- DoS/DDoS
- Evasion techniques
- Spoofing
- Man-in-the-middle
- Botnet
Clustering and high availability features on Cisco ASA and Cisco FTD
Policies and rules for traffic control on Cisco ASA and Cisco FTD
Routing protocols security on Cisco IOS, Cisco ASA, and Cisco FTD
Network connectivity through Cisco ASA and Cisco FTD
Correlation and remediation rules on Cisco FMC

Secure Connectivity and Segmentation

Cisco AnyConnect client-based, remote-access VPN technologies on Cisco ASA, Cisco FTD, and Cisco routers
Cisco IOS CA for VPN authentication
FlexVPN, DMVPN, and IPsec L2L tunnels
VPN high availability methods
- Cisco ASA VPN clustering
- Dual-hub DMVPN deployments
Infrastructure segmentation methods
- VLAN
- PVLAN
- GRE
- VRF-Lite
Microsegmentation with Cisco TrustSec using SGT and SXP

Security Infrastructure

Device hardening techniques and control plane protection methods
- CoPP
- IP source routing
- iACLs
Management plane protection techniques
- CPU
- Memory thresholding
- Securing device access
Data plane protection techniques
- uRPF
- QoS
- RTBH
Layer 2 security techniques
- DAI
- IPDT
- STP security
- Port security
- DHCP snooping
- RA Guard
- VACL
Wireless security technologies
- WPA
- WPA2
- WPA3
- TKIP
- AES
Monitoring protocols
- NetFlow/IPFIX/NSEL
- SNMP
- SYSLOG
- RMON
- eStreamer
Security features to comply with organizational security policies, procedures, and standards BCP 38
- ISO 27001
- RFC 2827
- PCI-DSS
Cisco SAFE model to validate network security design and to identify threats to different PINs
Interaction with network devices through APIs using basic Python scripts
- REST API requests and responses: HTTP action verbs, error codes, cookies, headers
- REST API requests and responses: JSON or XML payload
- REST API requests and responses: authentication
- Data encoding formats: JSON, XML, YAML
Cisco DNAC Northbound APIs use cases
- Authentication and authorization
- Network discovery
- Network device
- Network host

Identity Management, Information Exchange, and Access Control

Cisco ISE scalability using multiple nodes and personas
Cisco switches and Cisco Wireless LAN Controllers for network access AAA with Cisco ISE
Cisco devices for administrative access with Cisco ISE
AAA for network access with 802.1X and MAB using Cisco ISE
Guest lifecycle management using Cisco ISE and Cisco WLC
BYOD on-boarding and network access flows
Cisco ISE integration with external identity sources
- LDAP
- AD
- External RADIUS
Provisioning Cisco AnyConnect with Cisco ISE and Cisco ASA
Posture assessment with Cisco ISE
Endpoint profiling using Cisco ISE and Cisco network infrastructure including device sensor
Integration of MDM with Cisco ISE
Certification-based authentication using Cisco ISE
Authentication methods
- EAP Chaining and TEAP
- MAR
Identity mapping on Cisco ASA, Cisco ISE, Cisco WSA, and Cisco FTD
pxGrid integration between security devices Cisco WSA, Cisco ISE, and Cisco FMC
Integration of Cisco ISE with multifactor authentication
Access control and single sign-on using Cisco DUO security technology
Cisco IBNS 2.0 (C3PL) for authentication, access control, and user policy enforcement

Advanced Threat Protection and Content Security

Cisco AMP for networks, Cisco AMP for endpoints, and Cisco AMP for content security (Cisco ESA, and Cisco WSA)
Detect, analyze, and mitigate malware incidents
Perform packet capture and analysis using Wireshark, tcpdump, SPAN, ERSPAN, and RSPAN
Cloud security
- DNS proxy through Cisco Umbrella virtual appliance
- DNS security policies in Cisco Umbrella
- RBI policies in Cisco Umbrella
- CASB policies in Cisco Umbrella
- DLP policies in Cisco Umbrella
Web filtering, user identification, and Application Visibility and Control (AVC) on Cisco FTD and Cisco WSA
WCCP redirection on Cisco devices
Email security features
- Mail policies
- DLP
- Quarantine
- Authentication
- Encryption
HTTP decryption and inspection on Cisco FTD, Cisco WSA, and Cisco Umbrella
Cisco SMA for centralized content security management
Cisco advanced threat solutions and their integration: Cisco Stealthwatch, Cisco FMC, Cisco AMP, Cisco CTA, Threat Grid, ETA, Cisco WSA, Cisco SMA, Cisco Threat Response, and Cisco Umbrella

Reserve your seat

Watch a real class. Meet your instructor. Then decide.

Hold a place on the next batch and sit in on the opening session. See the teaching, the racks and the labs exactly as students do, then enrol if it's right for you.

Reserve my seat Chat on WhatsApp

1 million+

engineers trained

1997

training since

24/7

Skillopia lab access

Cisco certification roadmap

The whole Cisco path, and where you are on it

CCIE Security is the top of the ladder - the track core exam again, then an eight-hour lab. The Automation and Cybersecurity tracks each have an associate exam of their own that most people sit first - useful, not required.

Associate

CCNA
200-301

Professional

CCNP
Enterprise
350-401 ENCOR
+ 5 more courses
CCNP
Wireless
350-101 WLCOR
Not on our calendar yet
CCNP
Security
350-701 SCOR
+ 3 more courses
CCNP
Collaboration
350-801 CLCOR
+ 2 more courses
CCNP
Data Center
350-601 DCCOR
+ 5 more courses
CCNP
Service Provider
350-501 SPCOR
+ 3 more courses
CCNP
Automation
350-901 AUTOCOR
+ 2 more courses
CCNP
Cybersecurity
350-201 CBRCOR

Expert

CCIE
Enterprise Infrastructure
350-401 ENCOR + lab
design
CCDE
400-007 + elective lab
CCIE
Wireless
350-101 WLCOR + lab
Not on our calendar yet
You are here
CCIE
Security
350-701 SCOR + lab
CCIE
Collaboration
350-801 CLCOR + lab
CCIE
Data Center
350-601 DCCOR + lab
CCIE
Service Provider
350-501 SPCOR + lab
CCIE
Automation
350-901 AUTOCOR + lab

Associate

CCNA
200-301

Professional

CCNP
Enterprise
350-401 ENCOR
+ 5 more courses
CCIE
Enterprise Infrastructure
350-401 ENCOR + lab
design
CCDE
400-007 + elective lab
CCNP
Wireless
350-101 WLCOR
Not on our calendar yet
CCIE
Wireless
350-101 WLCOR + lab
Not on our calendar yet
CCNP
Security
350-701 SCOR
+ 3 more courses
You are here
CCIE
Security
350-701 SCOR + lab
CCNP
Collaboration
350-801 CLCOR
+ 2 more courses
CCIE
Collaboration
350-801 CLCOR + lab
CCNP
Data Center
350-601 DCCOR
+ 5 more courses
CCIE
Data Center
350-601 DCCOR + lab
CCNP
Service Provider
350-501 SPCOR
+ 3 more courses
CCIE
Service Provider
350-501 SPCOR + lab
CCNA Automation
200-901 CCNAAUTO
CCNP
Automation
350-901 AUTOCOR
+ 2 more courses
CCIE
Automation
350-901 AUTOCOR + lab
CCNA Cybersecurity
200-201 CCNACBR
CCNP
Cybersecurity
350-201 CBRCOR

Cards you can click are certifications we run a live course for; the rest are on the chart for context. Cisco's program is wider than this - the complete version is linked below. Levels, tracks and exam codes follow Cisco's own career certifications chart, rev 08/26, which sets no formal prerequisite between levels: the lines are the route people take, not a gate.

See every concentration exam on the full map Or follow the Networking path with us

Keep exploring

View the full Cyber Security track

Fee

₹1,00,000

Reserve a seat

CCIE Lab Certification (Security)

Who should attend

Skills you'll gain

What you get

Placements & outcomes

Full syllabus

Perimeter Security and Intrusion Prevention

Secure Connectivity and Segmentation

Security Infrastructure

Identity Management, Information Exchange, and Access Control

Advanced Threat Protection and Content Security

Hands-on labs

Hands-on labs

CCIE LAB Rack Access: 30 sessions (8hrs each) not exceeding a month from start date of Lab Practice.

Upcoming start dates

Course Fees

Frequently asked questions

Watch a real class. Meet your instructor. Then decide.

The whole Cisco path, and where you are on it

Automating Security Solutions (SAUTO)

CCNA Cybersecurity (200-201 CCNACBR)

CCNP Cybersecurity (350-201 CBRCOR)

CCNP SCOR - Cisco Security Core

Who should attend

Skills you'll gain

What you get

Placements & outcomes

Full syllabus

Perimeter Security and Intrusion Prevention

Secure Connectivity and Segmentation

Security Infrastructure

Identity Management, Information Exchange, and Access Control

Advanced Threat Protection and Content Security

Hands-on labs

Hands-on labs

CCIE LAB Rack Access: 30 sessions (8hrs each) not exceeding a month from start date of Lab Practice.

Upcoming start dates

Course Fees

Frequently asked questions

Watch a real class. Meet your instructor. Then decide.

The whole Cisco path, and where you are on it

More Cyber Security courses

Automating Security Solutions (SAUTO)

CCNA Cybersecurity (200-201 CCNACBR)

CCNP Cybersecurity (350-201 CBRCOR)

CCNP SCOR - Cisco Security Core