9/19/2005 -- Cisco Systems today unveiled a new slate of exams for its security certifications.

The titles affected by the change are the Cisco Certified Security Professional (CCSP) and the security-related Cisco Qualified Specialist certifications: Firewall, IDS and VPN.

According to Don Field, Cisco's director of certifications, the revamp is solely a content change, reflecting the program's shifting security focus and deemphasizing some older technologies in favor of the new, like the Cisco Security Agent and the Adaptive Security Appliances line. "As threats have changed and as customers have looked for more complete solutions…Cisco has introduced new products and solutions under the Self-Defending Network initiative," he said. "The changes that we're making to these certifications are a reflection of the need to validate relevant skills."  

Among the old exams for the CCSP, only exam, 642-511 CSVPN, remains. However, it is now an elective requirement, with Cisco allowing candidates to choose between it and one of the new exams. The new exams for the CCSP are:

• 642-502 SNRS: Securing Networks with Cisco Routers and Switches
• 642-522 SNPA: Securing Networks with PIX and ASA
• 642-523 IPS: Implementing Cisco Intrusion Prevention Systems
• 642-551 SND: Securing Cisco Network Devices
• 642-513 HIPS: Securing Hosts using Cisco Security Agent (elective requirement, choose between this or CSVPN)

Though exam 642-541 CSI: Cisco SAFE Implementation is no longer a required exam, it -- or a Cisco Certified Internetworking Expert (CCIE) written exam -- can still be taken to recertify your CCSP.  

The foundation exam for all three Cisco Qualified Specialist certifications is now the 642-551 SND, which replaces 642-501 SECUR: Securing IOS Networks. The other required exams for the titles (two of which are new) are as follows:

• Firewall Specialist: 642-522 SNPA
• IPS Specialist: 642-532 IPS
• VPN Specialist: 642-511 CSVPN (unchanged)

All of the new exams, with the exception of exams 642-513 HIPS and 642-551 SND-- both to be released "by the end of October," Field said -- will be available starting today, as will most related courses.

The last date for registering for the older exams is Dec. 19. Candidates will be able to mix-and-match the old and new exams for the foreseeable future in order to earn their titles, Field said.

Simulation questions will continue to be a large part of the new exams, but possibly to a lesser degree on the upcoming exams 642-513 HIPS and 642-551 SND, according to Field. However, Field notes that Cisco "reserves the right at any time to change the question types" as well as any other aspect of any exam.

For more information on these changes, go here. -Dan Hong