Who is Sourcefire?
Sourcefire is the world leader in real-time network defense solutions,
transforming the way organizations manage and minimize network
security risks. Sourcefire’s products allow security practitioners
and managers to better leverage essential security data, while
reducing security costs and increasing effectiveness. Sourcefire
was founded in 2001 by the creator of Snort® open source Intrusion
Detection technology, Martin Roesch.
|
 |
What is Snort®?
Snort is an open source intrusion prevention and detection technology. Today,
with more than 3.7 million downloads and over 225,000 registered users, Snort is
the single most widely deployed prevention and detection technology in the world. The wide availability of open source brings
many advantages. Since the code is open and non-proprietary, open
source development occurs at a markedly accelerated pace compared
to proprietary models, thanks to a vast community of security experts
continually analyzing and improving code. Simply, users in the
open source security community worldwide can detect and respond
to bugs and other security threats faster and more efficiently
than in a “closed” environment. |
 |
What are the benefits of certification?
Certification provides employers and employees a means by which
to measure an individual’s competencies in the industry-leading
intrusion prevention and detection technologies offered by Sourcefire
and Snort technology.
|
 |
Is it a requirement to take a class prior to taking the
certification exam?
No. Participating in Sourcefire's classroom training is not a requirement. Candidates that feel prepared to take the exams may do so at any time. However, Sourcefire recommends the 4-day instructor-led training which covers all material on the exam and provides a reference manual for study and later use. |
 |
What are the guidelines for taking the certification exam?
This exam consists of 100 random questions and a time limit of 3 hours. After successful completion of the exam, certificates and scores are available within 48 hours. To print the certification certificate, go to 'My Courses' and click the 'certificate' link below the course title. All candidates receive a 60-day subscription and have two attempts to pass the examination within that 60-day period.
|
 |
What certifications are available?
Sourcefire has the following certifications:
- Sourcefire Certified Professional(SFCP)– Candidates
successfully achieving this level of certification will have
demonstrated a deep understanding of the underlying technology
and operation of the Sourcefire 3D System.
- Snort® Certified Professional (SnortCP) – Candidates
that achieve this certification option will have demonstrated
a thorough knowledge of Snort® and the Snort® rules
language.
- Sourcefire Certified Expert (SFCE) – Candidates that achieve this expert-level certification will have demonstrated a thorough knowledge of both Sourcefire products and open source Snort technology.
|
 |
What are the prerequisites for each Sourcefire certification?
There are no formal prerequisites for the SFCP and SnortCP levels of certification; however, it is strongly recommended that prospective candidates have a substantial background in networking technologies, general security and operating systems for successful completion of these certification programs. Candidates that are interested in both SFCP and SnortCP only need to pass the SFCE to become an expert in both technologies
|
 |
How long is the certification valid?
Certification begins the day the exam is passed and is valid for a period of two years on that current version. After two years, students must retake the certification exam on the newest version in order to renew their certification. |
 |
What training delivery methods are available?
Sourcefire offers instructor-led training in public classrooms all over the world or in private onsite settings at the customer's premise. Instructor-led courses are delivered in professional classrooms with fully equipped desktops for each student. For more information regarding onsite and custom training, contact Sourcefire Training at (training@sourcefire.com). You can reference the Sourcefire site for specific information regarding course availability, class descriptions, and registration information. |
 |
Are classes available globally?
Yes, classes are available on a worldwide basis. To choose a current location or a time that works for you view the Sourcefire training schedule. If your location is not listed on our website, email training@sourcefire.com to let us know. |
 |
If I don’t pass the exam, when can I retake it?
Each candidate receives two attempts within their 60-day subscription period to pass the exam. If the candidate does not pass the exam on their first attempt, a second attempt is provided within the 60-day subscription window. A 30-day exam extension can be purchased within the 60-day subscription period. Students that failed their second attempt cannot purchase the exam extension. |
 |
How do I receive my certificate or order a replacement?
Upon passing your online exam, students can download their certification certificate within 48 hours. A high-quality, paper-based certificate will be mailed to the student within 6 weeks. If a student loses their certificate or requires a duplicate, a new certificate can be purchased from Sourcefire online at the cost of $35. For all certificate inquires or to request an additional copy please email trainingdmin@sourcefire.com. |
 |
If I have further questions regarding the program or pricing,
who may I contact?
Sourcefire Training or call us at 866.505.9113, or 734.743.6550. |
 |