When to use Practice
- ›Targeted drill on a specific domain or topic
- ›Working through guides between mentor sessions
- ›Studying at your own rhythm, any time of day
- ›Shorter budgeted sessions — 3 hours instead of 5
Practice Labs
Self-paced drill work.
Fully virtual.
EVE-NG topologies running on dedicated ESXi infrastructure. Three-hour sessions, guides covering every CCIE Security topic, all software licensed — including SecureCRT. Use a pre-built scenario or build your own topology. Drill any domain, at your own pace.
$15
per block
3 hours
Check current offers & deals →
Lab canvas · practice_01
RUNNING
Pre-built
5 nodes · 4 links
Practice vs DOO
Two tools. Different jobs.
Practice Labs are the drill ground — flexible, self-paced, guide-led. DOO Labs are the exam rehearsal — fixed 5-hour blocks on real Cisco hardware. You'll need both in a full prep cycle.
When to use DOO
- ›Exam-condition rehearsal on the real hardware
- ›Full 5-hour block that mirrors the DOO module
- ›Hidden troubleshooting under time pressure
- ›See DOO Labs →
The environment
Two racks. Zero compromise.
01
Practice 01
Virtual topology
— primary rack
- ›Full CCIE Security topology on EVE-NG
- ›ESXi infrastructure for VM-based products
- ›Identical content to Practice 02
02
Practice 02
Virtual topology
— redundant rack
- ›Full copy of Practice 01 for redundancy
- ›Load-shares with 01 — no waiting for a slot
- ›Same domain coverage, same guides
·
Licensed stack
Everything
licensed properly
- ›All virtual Cisco products licensed
- ›SecureCRT included — no trial nags
- ›No bring-your-own-license requirements
How sessions work
Book a block. Study your way.
Session
3-hour blocks
Each practice session runs three hours — enough to drill one or two domains without burning out.
Pace
Fully self-paced
No mentor clock. You drive the agenda — follow a guide cover-to-cover or jump to whatever weak spot needs attention.
Guides
Unlimited access
Guides unlock on enrollment and stay with you indefinitely — no expiry, no time limit.
Availability
Two racks, no queue
Practice 01 and 02 share load — if one's busy, the other's ready. You never wait for a slot.
Your topology, your call
Pre-built scenarios — or build your own.
Start from a pre-built scenario tied to your guide, or spin up a fresh topology in EVE-NG from scratch. The environment is yours — drill what you need, skip what you've mastered, test theories that don't fit a guide.
Pre-built
Scenarios aligned to each CCIE Security blueprint domain, ready to launch.
Build-your-own
Full EVE-NG access — connect any supported node, build anything.
Guide coverage
Every CCIE Security topic. One library.
Guides covering the full CCIE Security v6.1 blueprint come with your enrollment and never expire. Drill any domain any time.
ASA init · HA · contexts · clustering · ZBFW · DAI
NAT · ACLs · GRE · IPSec · FlexVPN · L2TP
ISE · 802.1X · MAB · DACLs · SXP / CTS / RBACL
DNAC · SGT · access contracts · ISE integration
FTD · FMC · WSA · ACP · URL filtering
Mock topologies + walkthroughs across every domain
Pricing
Self-paced. Fairly priced.
$15
per 3-hr block
Discounts apply when a monthly deal is running.
Always check current offers & deals — discounts may apply.
›3-hour virtual session on EVE-NG + ESXi
›Two racks for redundancy — no queue
›Guides unlock on enrollment — no expiry
›All software licensed, SecureCRT included
Need more than the guides?
Extended workbooks are available.
Contact support for details on extended walkthroughs and additional materials beyond what's in the Practice guides.
Contact support →FAQ
Common questions.
How much does a Practice session cost? +
$15 per 3-hour block. That's the standard rate — check the offers page for current monthly discounts.
What's the difference between Practice 01 and Practice 02? +
Same content. They're two independent racks running identical topologies for redundancy and load sharing — so you're never waiting for a slot. If one's busy, the other's ready.
What do the guides cover? +
Every CCIE Security v6.1 topic — perimeter, VPN, ISE, DNAC, FTD/FMC, WSA — built around the full blueprint. Guides unlock on enrollment and stay accessible indefinitely with no time limit.
What's running on the environment? +
EVE-NG on top of ESXi — a virtualised Cisco Security lab with all products licensed. SecureCRT is included too, so you can drop straight into terminal sessions without dealing with trials or BYO licenses.
Can I build my own topologies, or only use pre-built ones? +
Both. You can launch a pre-built scenario tied to the blueprint guides, or build a custom topology from scratch in EVE-NG — full node library, full flexibility. Use whichever fits what you're drilling.
Can I book multiple 3-hour blocks back to back? +
Yes. Individual sessions are 3 hours, but there's no limit on how many you book. If you need a longer study window, chain them back-to-back.
Do I need the training package to access Practice? +
No — Practice is available standalone for $15 per block. If you're in the CCIE Security full prep program, you can spend your 60 hours of lab credit on Practice sessions, DOO blocks, or any split between the two.
When should I use Practice vs DOO? +
Practice is for targeted drill and self-paced study — work through a guide, break something, rebuild it. DOO Labs are for exam-condition rehearsal on real Cisco hardware with hidden troubleshooting and the full 5-hour block. A good prep cycle uses both.
Start drilling. At your pace.
Virtual topology, licensed stack, guides that never expire. Three hours for fifteen dollars — pick a domain and go.