Sourcefire® Security Education Program
- Who is Sourcefire?
- What is Snort?
- What are the benefits of certification?
- Am I requred to take a class prior to taking the certification exam?
- What are the guidelines for taking the certification exam?
- What certifications are available?
- What are the prerequisites for each Sourcefire certification?
- How long is the certification valid?
- What training delivery methods are available?
- Are classes available globally?
- If I don’t pass the exam, when can I retake it?
- How do I receive my certificate or order a replacement?
- If I have further questions regarding the program or pricing, who may I contact?
WHO IS SOURCEFIRE?
Sourcefire is a world leader in intelligent cybersecurity solutions, transforming the way global mid- to large-size organizations and government agencies manage and minimize network security risks. With solutions from a next-generation network security platform to advanced malware protection, Sourcefire provides customers with Agile SecurityTM that is as dynamic as the real world it protects and the attackers against which it defends. Sourcefire was founded in 2001 by the creator of Snort® open source intrusion detection technology, Martin Roesch.
WHAT IS SNORT®?
Snort is an open source intrusion prevention and detection technology. With nearly 4 million downloads to date, Snort is the single most widely deployed prevention and detection technology in the world. The wide availability of open source brings many advantages. Since the code is open and non-proprietary, open source development occurs at a markedly accelerated pace compared to proprietary models, thanks to a vast community of security experts continually analyzing and improving code. Simply put, users in the open source security community worldwide can detect and respond to bugs and other security threats faster and more efficiently than in a “closed” environment. Sourcefire solutions are based on the Snort rules-driven engine which combines the benefits of signature, protocol and anomaly-based inspection methods. top
WHAT ARE THE BENEFITS OF CERTIFICATION?
Certification provides employers and employees a means by which to measure an individual’s competencies in the industry-leading intrusion prevention and detection and firewall technologies offered by Sourcefire and Snort. top
IS IT A REQUIREMENT TO TAKE A CLASS PRIOR TO TAKING THE CERTIFICATION EXAM?
No. Participating in Sourcefire’s classroom training is optional although highly recommended. Candidates that feel prepared to take the exams may do so at any time. However, Sourcefire recommends the 4-day instructor-led training, which covers all material on the exam and provides a reference manual for study and later use. top
WHAT ARE THE GUIDELINES FOR TAKING THE CERTIFICATION EXAM?
Exams consist of 100 random questions with a time limit of 3 hours. After successful completion of the exam, certificates are available immediately online with a formal certificate mailed 6 weeks after passing the exam. All candidates receive a 60-day subscription and have two attempts to pass the examination within that 60-day period. top
WHAT CERTIFICATIONS ARE AVAILABLE?
Sourcefire has the following certifications:
Sourcefire Certified Expert (SFCE) – Candidates that achieve this expert-level certification will have demonstrated a thorough knowledge of the Sourcefire System, including Next-Generation IPS, Next-Generation Firewall, FireSIGHTTM, FireAMP™ Advanced Malware Protection, analysis, rules.
Sourcefire Certified Professional v5 (SFCP) – Candidates successfully achieving this level of certification will have demonstrated a deep understanding of the underlying technology and operation of the Sourcefire System v5. This includes Next-Generation Firewall, Next-Generation IPS, FireSIGHT, analysis, and rules.
Sourcefire Certified Professional 4.10 (SFCP) – Candidates successfully achieving this level of certification will have demonstrated a deep understanding of the underlying technology and operation of the Sourcefire System 4.10 including analysis, and rules.
Sourcefire Certified Professional (SFCP-AMP) – Candidates successfully achieving this level of certification will have demonstrated a deep understanding of the underlying FireAMP technology.
Sourcefire Certified Administrator v5 (SFCA) – Candidates successfully achieving this level of certification will have demonstrated a high level understanding of the underlying technology and operation of the Sourcefire System v5.
Sourcefire Certified Administrator 4.10 (SFCA) – Candidates successfully achieving this level of certification will have demonstrated a high level understanding of the underlying technology and operation of the Sourcefire System 4.10.
Snort Certified Professional (SnortCP) – Candidates that achieve this certification will have demonstrated a thorough knowledge of Snort and the Snort rules language. top
WHAT ARE THE PREREQUISITES FOR EACH SOURCEFIRE CERTIFICATION?
There are no formal prerequisites for any levels of certification; however, it is strongly recommended that prospective candidates have a substantial background in TCP/IP networking technologies and architecture, general security, and operating systems. top
HOW LONG IS THE CERTIFICATION VALID?
Certification begins the day the exam is passed and is valid for a period of two years on that current version. After two years, students must purchase and pass the certification exam on the newest version in order to renew their certification. top
WHAT TRAINING DELIVERY METHODS ARE AVAILABLE?
Sourcefire offers instructor-led training in public classrooms all over the world, private onsite settings at the customer’s premise and computer-based training. Instructor-led courses are delivered in professional classrooms with fully equipped desktops for each student. For more information regarding onsite and custom training, contact Sourcefire training at services@sourcefire.com. You can reference the Sourcefire site for specific information regarding course availability, class descriptions, and registration information. top
ARE CLASSES AVAILABLE GLOBALLY?
Yes, classes are available on a worldwide basis. To choose a current location or a time that works for you view the Sourcefire training schedule. If your location is not listed on our website, email services@sourcefire.com to let us know. top
IF I DON’T PASS THE EXAM, WHEN CAN I RETAKE IT?
Each candidate receives two attempts within their 60-day subscription period to pass the exam. If the candidate does not pass the exam on their first attempt, a second attempt is provided immediately within the 60-day subscription window. If the candidate does not pass on the second attempt, a new exam will need to be purchased. top
HOW DO I RECEIVE MY CERTIFICATE OR ORDER A REPLACEMENT?
Upon passing your online exam, students can download their certification certificate immediately. A formal certificate will be mailed to the student within 6 weeks. If a student loses their certificate or requires a duplicate, a new certificate can be purchased from Sourcefire online at the cost of $35. For all certificate inquires or to request an additional copy please email trainingadmin@sourcefire.com. top
IF I HAVE FURTHER QUESTIONS REGARDING THE PROGRAM OR PRICING, WHO MAY I CONTACT?
Email Sourcefire Services at services@sourcefire.com or call us at 866.505.9113, or 734.743.6550. top