Cisco Security Security Maintenance
side by side.

TechCare TPM vs. SMARTnet / Solution Support. Cost range, EOSL advantages, migration path and DACH compliance at a glance — for IT leadership and procurement.

12–18 % OEM list-price share per year

50–70 % EOSL savings vs. OEM

5–10 % Multi-year discount (3–5 yrs)

One contract for all lines · Fixed price in 48 h techcaresolutions.de

Cost comparison

OEM list-price share approx. 12–18 % of list price per year (Solution Support 18–24 %)

Example Catalyst 9300-48P stack with 4-year SMARTnet 24×7×4: TechCare TPM roughly 43–47% below the OEM price.

EOSL hardware: On EOSL models (Catalyst 3850, 6500/6800, Nexus 5500, ASR 1000 series, ISR G2, ASA 5500) 50–70 % savings vs. SMARTnet — Cisco often refuses EOSL extensions entirely.

Multi-year contract: 3-year TPM contract: additional 5–10 % discount, 5-year contract: 10–15 %. Plus fixed-price lock against OEM list-price increases.

Active EOSL lines

ASA 5505/5510/5520/5540 · EOSL 2022-08-31

Which Cisco Security models we service

ASA 5500-X (klassische NGFW): ASA 5506-X · 5508-X · 5512-X · 5515-X · 5516-X · 5525-X · 5545-X · 5555-X
Firepower 1000 series (Branch): Firepower 1010 · 1120 · 1140 · 1150
Firepower 2100 series (Mid-Range): Firepower 2110 · 2120 · 2130 · 2140
Firepower 4100 series (Enterprise): Firepower 4110 · 4112 · 4115 · 4120 · 4125 · 4140 · 4145 · 4150
Firepower 9300 series (Hyperscale): Firepower 9300 (modular Chassis mit SM-24/36/40/44/48/56-Modulen)

EOSL status of major generations

Generation	Released	End of vendor support	TechCare TPM
ASA 5505/5510/5520/5540 (Vorgänger)	2008	2017	Recommended
ASA 5512-X / 5515-X	2012-2014	2022	Recommended
ASA 5525-X / 5545-X / 5555-X	2012-2014	2024	Recommended
ASA 5506-X / 5508-X / 5516-X	2014-2015	2025+	Supported
Firepower 4110/4120/4140	2015	2024+	Supported
Firepower 9300 (1. Gen)	2015+	2025+	Supported

Why TPM maintenance instead of Cisco SMARTnet (Security)

Cisco SMARTnet for security is above-average expensive — and on ASA 5500-X (5512-X, 5515-X) contracts reach terms suggesting Firepower migration. Yet many DACH enterprise setups with ASA 5525-X/5545-X/5555-X are stable and need no migration.

We service the hardware layer — PSUs, fans, NVMe/SSD, motherboards, SM modules on Firepower 9300 chassis — with OEM original parts. ASA software, FTD, FMC, Snort 3 IPS, AMP for Networks, URL Filtering, SecureX and all Threat Defense subscriptions stay unchanged with Cisco. An ASA without active threat subscription is just a classic stateful firewall.

OEM vs. TechCare — where the switch pays off

The full OEM-vs-TPM matrix (spare parts, SLA tiers, language, sub-outsourcing, compliance docs, reporting) is the same for every Cisco line — see the Cisco battle card.

Stays with Cisco Security

IOS-XE / NX-OS / IOS software licenses
DNA Center / Smart Licensing subscriptions
Firepower threat-intelligence feeds + URL filters
Cisco TAC software tickets

Moves to TechCare

Hardware defects (memory, disk, PSU, mainboard, modules)
24×7×4 on-site SLA with German-speaking field service
Spare-parts logistics DACH + global hub network
Fixed-price contract in 48 h, one inventory — one contract

DACH compliance by design.

BAIT/MaRisk documentation package, DORA Art. 28 contract template, ISO 27001 and GDPR-compliant media handling apply identically to every Cisco line — details on the Cisco battle card.

Migration path from first contact to hand-over.

Same four steps for every Cisco line: inventory → fixed-price quote in 48 h → contract (BAIT/MaRisk/DORA hooks) → hand-over with spare-parts provisioning. Details on the Cisco battle card.

FAQ on Cisco Security maintenance

Which Cisco Security hardware do you service?: We service the hardware layer: ASA 5500-X firewalls and Firepower family (1000 for branch, 2100 mid-range, 4100 enterprise, 9300 chassis for hyperscale).
What does 'hardware-only maintenance' mean for Cisco Security?: We replace defective hardware components — PSUs, fans, disks/NVMe, motherboards, SM modules on Firepower 9300 — with OEM original parts. ASA software, FTD (Firepower Threat Defense), Firepower Management Center (FMC), IPS signatures, AMP for Networks, URL Filtering, SecureX and all Threat Defense subscriptions continue unchanged via Cisco.
What does TPM cost compared to SMARTnet?: 30 to 60 percent savings vs. SMARTnet for the hardware layer. For an ASA 5525-X with 24×7×4, TechCare is roughly 50–60% below the Cisco price for the hardware layer.
Does FTD and Threat Defense remain fully functional?: Yes, fully. FTD, FMC, Snort 3 IPS engine, AMP for Networks, URL Filtering, Application Visibility & Control and all subscription-based security features continue unchanged via Cisco.
Can you service older ASA 5512-X/5515-X?: Yes. ASA 5512-X and 5515-X (released 2012-2014, EOSL 2022) are still productive in many DACH enterprise environments.
Which SLA levels for firewalls?: Parts Only, 5×9 NBD, 24×7×4 — freely selectable. For productive edge firewalls and data center security paths we recommend 24×7×4.