Re: Snort Network Admin Training / Certification

["Turnbough, Bradley E." <bturnbough () belcan com>]

At this point, I think I want to stick to the administration piece first.

Once I feel more comfortable administering the platform, I'll request training for rule writing / maintenance.


________________________________
From: Y M [snort () outlook com]
Sent: Wednesday, July 22, 2015 11:24 AM
To: Turnbough, Bradley E.
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort Network Admin Training / Certification

I am glad I was of help. If you want to go the extra mile, there is a 3-day course called SSFRULES, which focuses on 
writing Snort rules as opposed to administration. I haven't set the training nor the exam, but the course seems 
interesting.

Sent from Mobile




On Wed, Jul 22, 2015 at 8:57 AM -0700, "Turnbough, Bradley E." <bturnbough () belcan com<mailto:bturnbough () belcan 
com>> wrote:

Excellent.  You've provided invaluable information.

Thanks!

Brad
________________________________
From: Y M [snort () outlook com]
Sent: Wednesday, July 22, 2015 9:34 AM
To: Turnbough, Bradley E.
Cc: Joel Esler (jesler); snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort Network Admin Training / Certification

Bradley,

I am glad that you asked. At all cost avoid the Cisco's exam 500-280 SSFSNORT (which to my understanding is equivalent 
to SnortCP which used to be offered by SourceFire). Why you ask?

Well I took the exam to renew my SnortCP which expired in May. I passed the 500-280 SSFSNORT exam, and Cisco's Tracking 
System explicitly says that I am "Certified" and I was told by a trainer (on different occasion) that there is a 
certificate. Only after the fact I learned that this is only an exam "to validate skills". So if you lose the report 
that gets immediately generated when you complete the exam, there is no way you can prove that you are certified.

To make things even worse, exam 500-285 SSFIPS (exam for the commercial product) is the same, no certification 
whatsoever.

I opened a ticket with Cisco, which resulted to dead end. There are other annoying details that I will spare you from.

In my humble opinion, Cisco is underestimating both exams, and hence underestimating the products themselves and the 
people who spend time, effort, and money ($250) per exam. If I knew before hand, then I would have not set the exam.

YM

Sent from Mobile




On Wed, Jul 22, 2015 at 6:40 AM -0700, "Turnbough, Bradley E." <bturnbough () belcan com<mailto:bturnbough () belcan 
com>> wrote:

Hi All,

I'm looking for information regarding any Snort Training and whether or not there is a certification associated with it.

Any help would be appreciated.

Brad
_____________________________________________________________ This e-mail transmission contains information that is 
confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in 
error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, 
copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately 
by informing the sender that the message was misdirected. After replying, please erase it from your computer system. 
Your assistance in correcting this error is appreciated.

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
_____________________________________________________________ This e-mail transmission contains information that is 
confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in 
error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, 
copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately 
by informing the sender that the message was misdirected. After replying, please erase it from your computer system. 
Your assistance in correcting this error is appreciated.

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
_____________________________________________________________ This e-mail transmission contains information that is 
confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in 
error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, 
copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately 
by informing the sender that the message was misdirected. After replying, please erase it from your computer system. 
Your assistance in correcting this error is appreciated.

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!