01
Firewall
Cisco ASAs
(real hardware)
- ›Cisco ASA 5516-X
- ›Cisco ASA 5512-X
- ›Physical appliances — not virtual
DOO Labs
Real Cisco hardware.
Exam-day conditions.
Real Cisco gear, pre-configured scenarios aligned with the CCIE Security DOO blueprint, and five-hour blocks that mirror the exam format — so when you sit the real thing, the environment already feels familiar.
$50
per block
5 hours
Check current offers & deals →
DOO Rack · topology
ONLINE
What is DOO
Not a simulator. The real rack.
DOO — Design, Operate, Optimise — is the module that decides whether you pass the CCIE Security lab. It's five hours of real configuration work on real gear, and if you haven't practiced under those conditions, exam day is where you find out the hard way.
Our DOO Labs put you on real Cisco ASAs, switches, and dedicated VM infrastructure — all pre-configured with scenarios aligned to the CCIE Security v6.1 DOO blueprint. You book a five-hour block, log in, and walk straight into the topology. No setup, no waiting, no shared racks.
Hidden troubleshooting is baked into every scenario — so when something breaks during practice, you learn to debug it under pressure. Exactly like exam day.
What's on the rack
The gear. The exact stack.
Cisco ASAs
02
Switching
Catalyst switches
& IOS routers
- ›Physical Catalyst switching
- ›IOS routers for tunnel and NAT labs
- ›Supports 802.1X, SGT propagation, MACsec
03
Identity & Threat
ISE · FMC / FTD
· WSA (dedicated VMs)
- ›Cisco ISE — policy, posture, TrustSec
- ›FMC + FTD — ACP, prefilter, URL filtering
- ›WSA — web access policy & categories
How sessions work
Book a block. Walk straight in.
Session
5-hour blocks
Every block is five hours — the same duration as the real DOO module. No partial sessions, no fragmented practice.
Minimum
Book 1 or 100
No minimum booking. Start with one block to test it out. Book a hundred if you want a full prep cycle — no commitment either way.
Ready time
Instant — no wait
Racks are restored and fully configured the moment your block starts. No setup, no downtime, no surprise resets mid-session.
Traps
Hidden issues baked in
Every scenario has deliberate misconfigurations planted inside — you practice the debug flow before exam day puts you on the clock.
Scenario coverage
Pre-built scenarios. Aligned to the blueprint.
Every DOO scenario is built around a CCIE Security v6.1 blueprint domain. No proprietary exam content — just realistic topologies designed to put every domain under stress.
ASA init · HA · contexts · clustering · ZBFW
NAT · ACLs · GRE · IPSec · FlexVPN · L2TP
ISE · 802.1X · MAB · DACLs · SXP / CTS / RBACL
DNAC · SGT · access contracts · ISE integration
FTD · FMC · WSA · ACP · URL filtering
Hidden troubleshooting scenarios in every domain
Pricing
One block. One flat price.
$50
per 5-hr block
No minimum. Book 1 or 100 blocks.
Always check current offers & deals — discounts may apply.
›5-hour DOO block on real Cisco gear
›Rack restored and ready — zero setup
›Pre-configured blueprint scenarios
›Hidden troubleshooting built in
Want guided workbooks?
Lab workbooks are available separately.
Scenario-by-scenario walkthroughs are available on request. Contact support to see what's on offer and the current pricing.
Contact support →FAQ
Common questions.
How much does a DOO session cost? +
$50 per 5-hour block. That's the standard rate — always check the offers page for current monthly deals and discounts.
Is there a minimum booking? +
No. Book one block or a hundred — same flat rate, no commitment. If you want to try it first, a single block is enough to see what the rack looks like.
What's actually on the rack? +
Real Cisco ASA 5516-X and ASA 5512-X firewalls, physical Catalyst switches, IOS routers, and dedicated VM infrastructure running ISE, FMC/FTD, and WSA. No simulators, no emulators — physical appliances wherever the blueprint calls for them.
How long is each block, and can I extend? +
Blocks are five hours — matching the DOO module format — and not extensible within the same session. If you need more time, book the next block back-to-back and the rack stays with you.
Do I get workbooks or walkthroughs? +
Workbooks are available separately on request. Contact support for details and current pricing.
Can I use training-package credits here? +
Yes. If you're enrolled in the CCIE Security full prep program, your 60 hours of lab credit can be spent on DOO blocks, Practice Labs, or split between both. Credits never expire.
Book a block. Walk in prepared.
Real Cisco gear, pre-configured scenarios, hidden traps — all waiting for you whenever you're ready.