The CCNP Security certification demonstrates that you have the skills to design, implement, and manage complex security solutions in enterprise environments. With the August 2026 updates adding AI security, Zero Trust architecture, and cloud-native defense, the certification stays current with the most pressing challenges facing security professionals today.
: Understanding the architecture of Cisco Secure Firewall Threat Defense (formerly Firepower Threat Defense), including hardware and virtual form factors, high availability configurations, and clustering.
WSA Proxy
Automating and Programming Cisco Security Solutions 2. Core Exam Outline: 350-701 SCOR ccnp security course outline
Setting up encrypted tunnels using public key infrastructure (PKI) certificates.
Configuring Cisco Secure Endpoint (formerly AMP for Endpoints) to handle advanced malware outbreaks.
Specialized training for enterprise email defense administrators. The CCNP Security certification demonstrates that you have
3.3 Securing Email with Cisco Email Security Appliance (SESA 300-725)
The CCNP Security certification proves that you possess advanced skills in implementing and operating Cisco security solutions. It is designed for experienced network security engineers who are responsible for securing routers, switches, firewalls, VPNs, and intrusion prevention systems across enterprise networking environments.
In February 2026, Cisco announced sweeping updates to its CCNP Security certifications, with new exams launching in August 2026. The core SCOR exam (v2.0) now includes cutting-edge security domains such as AI and LLM security vulnerabilities, Zero Trust/SSE/SASE, advanced telemetry, and post-quantum cryptography (PQC). The exam has also undergone a major update to focus on cloud security architectures for next-generation applications and services. Legacy concentration exams (SESA 300-720, SWSA 300-725, and SVPN 300-730) are set to retire on August 27, 2026 ; candidates must complete these exams before this date. Legacy concentration exams (SESA 300-720
Option B: 300-715 SISE (Implementing and Configuring Cisco Identity Services Engine)
Configuring Email Security Appliance (ESA) features including SPF, DKIM, DMARC, and outbreak filters.