Hi,
CCSP is in the middle of restructuring right now:
http://www.cisco.com/web/learning/le3/le2/le37/le54/learning_certification_type_home.html
However, the devices required will probably remain the same.
You will need a Switch (like 3750). On the switch you probably need to have the Advanced IP image to configure the security features.
Routers will require VPN (cryptography) support, basically the images that have K9 keyword part of the name (like advanced security or Enterprise Base). However, these images will require additional Flash and Memory support.
Anything from 1800 or 2800 series will do the trick if the current routers do not support the new IOS.
You will probably need an ASA Firewall as well. An IPS system is also a nice to have.
There are some simulators, but not sure in what extent they cover the Security path:
http://www.gns3.net/
Please rate if this helped.
Regards,
Daniel
some people adviese this product:
http://www.gns3.net/