Certified Ethical Hacker certification, anyone?

[Thor]

After getting my server administrator and finishing soon my exchange server certs, I was thinking about cisco CCNA and then going the security route in my specialization. I've been told here in Iceland to check out the CEH certification and then after that specialize even further.

Has anyone here had any experience with that, or could suggest any good routes for a Server admin looking to go the security route.

[Bobblehead]

I'm not sure about the process, but my company has hired a firm to do just that, hack our website and reveal the vulnerabilities, a couple times so far with our website redevelopment.

It is very expensive to do, but we think critical in attempting to protect client data.

[Cscutch]

http://sans.org/

[Thor]

Sorry are you recommending them or have some knowledge about their courses?

This was the company I was referred to: https://www.eccouncil.org/certificat...al_hacker.aspx

[Rathji]

Always been something that is high on my list of things I want to get.

[sclitheroe]

Originally Posted by Thor

This was the company I was referred to: https://www.eccouncil.org/certificat...al_hacker.aspx

From that site: " A Certified Ethical Hacker is a skilled professional who understands and knows how to look for the weaknesses and vulnerabilities in target systems"

Sounds like any decent network engineer or sysadmin.

"and uses the same knowledge and tools as a malicious hacker."

Which means either the same thing - the same as any decent network or sysadmin, or, more likely in my opinon, they show you how to be a script kiddie.

[Thor]

Sorry but the certification is a base level of understanding of your 'foe' and goes much deeper as you progress.

The vast majority of admins are focused on uptime, IT help, and delegation.

Security is a beast all unto its own.

[sclitheroe]

Originally Posted by Thor

The vast majority of admins are focused on uptime, IT help, and delegation.

Security is a beast all unto its own.

Hence my use of the adjective "decent". If that's the depth of your ability and experience, you're not a decent admin, you're a junior admin.