SANS SEC660 is wild. Every time I take a SANS course I say it's the best I've ever taken, and I'm right every time.
I wouldn't say I've ever taken a course where all the material is new to me, but I can say I've never walked away from a SANS course without learning a lot. If your employers pay for training and it's within budget, take a SANS course.
@PrivacyL0st whichever way you look at it, I think SANS is overpaid.
@senthenes I won't argue that, for the most part, which is why I say if your employer is paying...
@PrivacyL0st unfortunately, this is not the case everywhere and most employers want vendor-certified personnel.
Cisco, Juniper, Arista, Palo Alto, Fortinet
@PrivacyL0st I am a certified GIAC Security Expert (GSE) is also built on SANS
@senthenes I hold a variety of certs as well, that's where the real BS costs come in... the maintenance fees are ridiculous.
@PrivacyL0st is known to me, but explain that to a purely theoretical boss
@senthenes Also, hats off to you, I hear the GSE exam is a real pain in the ass.
@PrivacyL0st II have dozens of manufacturer certifications because the manufacturers require them in order to keep the partner status etc.
Cisco, Juniper, Arista, Palo Alto, Fortinet etc. etc.
You can get these for almost free with vouchers from the vendors.
The expensive certifications that pay off in salary are.
CISSP
CISSP Concentrations
OSCP
CISM
GSE
And to these no employer pays
@PrivacyL0st I'm currently taking SEC301. They're very good at what they do.