Share your IPS v7.0 Experience

Greetings to everyone….preparing for CCNP Security and expecting help from all the friends….

Shohagh
Bangladesh

Recommended Reading
————————————-
1. Network Security Technologies and Solutions (CCIE Professional Development Series)
2. Designing Network Security
3. Network Security Architectures
4. Cisco Network Security Troubleshooting Handbook
5. Network Security Fundamentals
6. Cisco Access Control Security: AAA Administration Services
7. Router Security Strategies: Securing IP Network Traffic Planes
8. Cisco Router Firewall Security
9. Complete Cisco VPN Configuration Guide, The
10. IPSec VPN Design
11. Troubleshooting Virtual Private Networks (VPN) (Lewis, ISBN# 1587051044)

Collected from LearningNetwork website.

Dear All Friends

pls provide download link Ebook for SNRS,SNA,IPS, (CBT,Train signal)
Which is the best Material for CCSP/ CCNP SECURITY

Thanks in Advance

fgcti

hey every one….i wanna ask ..does any one know that when the new ccnp security book will be available …and in case that is not soon ..can i took any old exam and when it is available i can took any old exam ?

sorry 4 repeating i mean that
..does any one know that when the new ccnp security book will be available …and in case that is not soon ..can i took any old exam ?

@hamada, use th old one, if ure in a hurry, l will be using the old one. The technology will be the same

taking this exam in the near future using AT and custom vce from AT I created. I will let you guys know what happens.

Are these Actual test dumps valid?

@syed : yes AT v3.0 still valid

but it’s has a lot of wrong answer, so try to complete the hotspot and the lab or you will fail the exam.

Someone has told me that these dumps are only 70% valid?

yep, the firewall 1.0 exam only valid for about 70-75%

can anyone help me with the IPS. v7 dumps.
thanks
abby

I just passed IPS 7 using AT 3.0. It’s valid. There was one SIM and the 6 question hotspot inside of the AT. Of course there are no answers inside of the AT. However, if you know your way around IDM, you can easily find the answers to the question. The IDM configuration SIM was NOT in the AT.

Once again, if you know your way around the IDM, you’ve got it covered with no problem. I also used nubian’s vce on exam collection. It has all of the questions in AT, minus the hotspot questions.

Good luck to all.

Please share AT 3.0

or send me alscherbakov@gmail.com

anyone got a link for the cisco press release. Thanks

You’re the greaetst! JMHO

please does anyone has this book to download ?

CCNP Security IPS 642-627 Official Cert Guide

Pls l despirately need this book.

Regards

hiii friends, i had probleme when i’m trying to download the ios ips signature from cisco.com
with my CCNA count.
i need it to finish IPS lab practice, plz add the link where i’ll found the package.
ALL THE BEST

Hi All

Could some please upload the SIM I have for IPSv7.0 I have attempted the exam before

Just passed…ditto to what “that guy” said. AT is still valid. Brush up on Event action overrides.

Congrets Sugarfoot,

How was the sims? could you share more information about the sim

can we get DEMO ASDM for IPS 7.0? or is there any simulator??

Hi everybody , does 642-533 still valid ?
I think that I enforced now to take 624-627 instead of 642-533 , plz correct me if I’m wrong !

Hi everybody
Ineed this book CCNP Security IPS 642-627 Official Cert Guide, Rough Cuts
can anyone share it for me?

Hi everybody
I need this book CCNP Security FIREWALL 642-617 Official Cert Guide, Rough Cuts can anyone share it for me?
thx

anybody passed recently ?

please share information about simulators in 642-627 exam.

Hii Guys …Dont forget to update here after taking this exam…

yar really waiting for all CCNP security books excluding secure … can if any one find it then please let us know..

hey and one more thing
http://www.certified-easy.com/online-ebooks/ccnp_security-1.html

found this page can see some of the books not full version if any one find a way to get the whole books then let us know..

Hi All

Please does anyone no where you can the Nuggets from

Hi Ray

Look for this torrent (use ur torrent search skill ) which contains IPS ver 6 . I feel it will help you to pass the exam. I am using the same now for my preparation…..

CBT_Nuggets_-_Cisco_-_CCSP_IPS_642-533.5466581.TPB.torrent

has anyone been able to get the IDS to work in GNS3. Ive been trying to follow the tutorial as follows in windows but when I get access to the IDS and try and change the set up it fails daying I am unable to change the host name, and not showing the interfaces as well. Any help would be appreciated.. Also any one got the Cisco Press quick study notes yet. Thanks

ops forgot the link

http://www.brainbump.net/2011/01/how-to-emulate-cisco-ips/comment-page-2/#comment-8875

Any body took this Exam recently ?

please does anyone have the simulation-Lab for the 642-627 exam. ?

i would like to buy testking for this paper, anyone interest to share? USD99.

No scum, but even if nobody willing to share and i buy myself, i will also destroy it

PM me

hey neo,

sound good, how to approach you?

hi do anyone have the simluation-lab for this exam? just telling what is it all about will be very helpful

@wokie

mail me at kevin.cool.man@hotmail.com

clear the IPS paper

60 question, 21 news question !!!!!

sim is customize signature, straight forward but i think i do it wrong, cause i mis-interpret the engine type…

then got topic on nexus v1000 virtualiztion, wIPS on wireless, update of version 6 to version 7.

there’s also talk about ARC, sensorApp, Correlation App. How to do large file peformance, Asymmetric traffic flow, pesudo-inline, spanning tree.

i am panic once i do the question, but outcome, pass !!!!!

@neo.andersin, congratulations men, thanks for the details, do u find the Sim in any dump ?

Hi friends, What is the exam cost for ccnp secu. exam?? Thanks in advance..

Please share the link for dumps….

pass IPS exam today with 835/1000 score….!!
the exam cost is 800 $ according to pearson vue….!

ccnp security , 200 $ each exam

Hi Sahib ? is the dump is valid ..could you please tell me which sim u got ? and some more details about this exam ?

simu os sam as it as in dumps

simu is same as it as in dumps

@sahib, pls which dump are you talking about ?

Passed the IPS exam today with 897 score…2 Sim …1st one is very easy u should know how to create risk category and event action overrides..best thing is only configurable option available. these are Hot spot question answers

Which three statements about the Cisco IPS appliance configurations are true? (Choose three.)

A. The maximum number of denied attackers is set to 10000.
B. The block action duraton is set to 3600 seconds.
C. The Meta Event Generator is globally enabled.
D. Events Summarization is globally disabled.
E. Threat Rating Adjustment is globally disabled.
Answer: A,B,C

Which two statements about Signature 1104 are true? (Choose two.)
A. This is a custom signature.
B. The severity level is High.
C. This signature has triggered as indicated by the red severity icon.
D. Produce Alert is the only action defined.
E. This signature is enabled, but inactive, as indicated by the/0 to that follows the signature
number.
Answer: A,D

To what extent will the Cisco IPS sensor contribute data to the Cisco SensorBase network?
Cisco 642-627 Exam

A. It will not contribute to the SensorBase network.
B. It will contribute to the SensorBase network, but will withhold some sensitive information
C. It will contribute the victim IP address and port to the SensorBase network.
D. It will not contribute to Risk Rating adjustments that use information from the SensorBase
network.
Answer: B

What action will the sensortake regarding IP addresses listed as known bad hosts in the Cisco
Cisco 642-627 Exam
SensorBase network?
A. Global correlation is configured in Audit mode for testing the feature without actually denying
any hosts.
B. Global correlation is configured in Aggressive mode, which has a very aggressive effect on
deny actions.
C. It will not adjust risk rating values based on the known bad hosts list.
D. Reputation filtering is disabled.
Answer: D

Which signature definition is virtual sensor 0 assigned to use?
A. rules0
B. vs0
C. sig0
D. ad0
E. ad1
F. sigl
Answer: C

Some Wrong q in Exam coleection that is

Which two switching-based mechanisms are used to deploy high availability IPS using multiple
Cisco IPS appliances? (Choose two.)
A. Spanning Tree-based HA
B. HSRP-basedHA
C. EtherChannel-based HA
D. VRRP-basedHA
Answer: A,C

Refer to the exhibit. The scanner threshold is set to 120. Which two statements about this
histogram are true? (Choose two.)
A. From a single source you do not expect to see nonestablished connections to more than 120
different destination IP addresses.

B. From a single source you do not expect to see nonestablished connections to more than 100
different destination IP addresses.
C. You do not expect to see more than 5 sources generate nonestablished connections to 10 or
more different destinations.
D. You do not expect to see more than 10 sources generate nonestablished connections to 5 or
more different destinations.
E. A scanner threshold of 120 is not a valid value for this histogram.
F. Scanning attacks will not be triggered, because the scanner threshold is higher than the
maximum number of destination IP addresses in the histogram.
G. Scanning attacks will not be triggered, because the scanner threshold is higher than the
maximum number of source IP addresses in the histogram.
Answer: A,D

I would like to Thank Sahib for his great input…

It would be an advantage if you read the event action override topic carefully…

Thank you all thanks Sahib

KD could you please send me the dumps to my mail id vils_angel2805@yahoo.com

Hi Vilasini…

Ur mail ID seems to be wrong……….I am unable to send u the mail. The dump is the same except it has Hot spot q answers that i have added here … approach the exam with out fear….just read event action over ride topic it will be easy for you..

KD, Thank U for your reply. Please try sending to vilsangel2805@gmail.com the dumps as am planning to take the exam late by 1st week of Oct’11.

Could you please send me the e book
CCNP Security IPS 642-627 Official Cert Guide at kachakola@yahoo.com

hi kd.
what dump are referring to. please provide the name of the dump.

does any one here use ipexpert ccnp-s training video. I just wonder if it is any good. I plan to buy a set.

HI Guys,
I’d like to ask if there is an exam in ccsp track i can take without the ccna security or can be certified if i passed on it?????

current as I understand it, you can take any ccnps exam, but you will not a ccnps certify until you complete its prerequisite, which is ccnas

Hi all,
Anyone passed the exam 642-627 and could share the material and dumps, please….

kindly guys…can someone assist with a link for IDM simulator…will appreciate alot.

Google for gns3 and ips, the Guy at braindumps be able to integrated.
also, I be able to find the demo from 4share or filecrop.com

anyone here use gns3 with ips. please share your experience. thanks.

Has anyone taken the exam in the past few days using the pass4sure? Can you pass on this alone?

try this one.. don’t know if this is the right one.
http://hotfile.com/dl/71274877/bda7c21/IME-7.0.3.exe

or search around for “IME-7*

here is the link for setting up IPS 6.0
http://www.brainbump.net/2011/01/how-to-emulate-cisco-ips/
i be able to get it working, but some configuration giving me errors. it is a great way to learn IPS when you don’t have access to the real IPS.

to prepare for the exam, use the IME v7 demo instead.

hi everyone
can you send me valid dumps ASAP to mocha.passion@yahoo.com
thanks guys

which version of the dumps are valid??

http://www.examcollection.com/642-627.html

hi jt
is it still valid? what about the simulation answer?

@jt thanks a lot…am grateful for your assistance…

I successfully completed IPS 7.0 today & scored 886/1000.
Thank u so much KD

@Vilasini , congrate men, pls can u send me the dump you used to my e-mail address:-

jeffjones28604@yahoo.com

And which LAB Simulation question was it in the exam ?

@guzel,
i have not take the exam yet, therefore don’t know whether or not it is valid. if you read all posted here, i think you will pass…. i am planning to take the test by week end. will report after i take it.

@vilasini, congrat. is there any new hotspot and/or lab sim that are not in the dump? thx

does anyone know how to post image on this blog?

based on the labsim and hotspot from the dump, here is how i would do to find the answer using IME or IDM.

http://www.mediafire.com/?ij34ovph6ikmv0z

correct me if i am wrong.

thanks,

@jt, how did you setup the IPS on GNS3 to practice ? l am having serious problems in setting up IPS on Gns3.

Regards

@ano,
make sure you already have the latest gns3 installed.

1. download this file: http://www.4shared.com/file/x_sng_bQ/IPS-K9-cd-11-a-60-6-E3.htm
2. follow these steps: http://www.brainbump.net/2011/01/how-to-emulate-cisco-ips/

good lucks

@ano,
oh, 1 more important thing.
once you get the IPS up and running. the first Interface is the management interface, the last 2 are sensing interface.

just passed the exam with 886/1000. the dump is valid.

Guys. Congrat on the success of your exam. Please I need the e-books and dumps for the exam. Pls, send it to my E-mail: prince_dby@yahoo.com.
Thanks

Are these (exam collection dumps jay – 80) are valid?

@jt: was there any simulation in exam?

Heartiest Congratulation to all who passed the exam. Can someone please send me the dumps and the e-books at: zahoor.mirza@gmail.com
I’ll be really grateful. Thank you

If your willing to share (last minute as I’m taking exam on tuesday the 25th, October) please shoot the dumps and e-book to patrick.perry1@gmail.com . Would love some last minute review material…
thanks

Best of luck Patrick …!!! all our prayers are with you, Please share your experience with when you will pass the exam … Thank you

is there any official guide for IPS?

Yes it’s due out on the 2nd Nov according to Amazon.

anyone cleared this paper recently which dumps are valid?

@patrick, what about your exam?

quick reference guide is available on 4shared…

I create my exam and successful. all the question is there in this dumps except one ( sim lap ) but don’t worry this dumps enough to pass.

But I think some of the solution is not correct.

The Dumps is.
http://www.examcollection.com/cisco/Cisco.ActualTests.642-627.v2011-06-16.by.ejg398.76q.vce.file.html

@Muhammed: Which lab? there is no lab in dumps..

@ syed,
Same that you sent from question 37 to 41

@ syed.
Are you pass 642-617 exam ?

NO appearing next week, well there are two question one is simulation lab and other is hotspot…I am bit confused what was there in your paper a simulation lab or hotspot question?

Anyone else can help us out?

Yes both is there.
………….
Please can you send to my Email P4S 642-617 : 86 question thanks.
mohammed_11130@yahoo.com

Sure I will, I have cleared ASA two weeks ago…just to reconfirm is it same LAB coming in exam? configuring risk category & verifying event action override?