Battle Card · Palo Alto Networks PA-220
Palo Alto Networks PA-220 Maintenance
side by side.
TechCare TPM vs. Premium / Partner-Enabled Premium Support. Cost range, EOSL advantages, migration path and DACH compliance at a glance — for IT leadership and procurement.
18–28 % OEM list-price share per year
50–70 % EOSL savings vs. OEM
5–10 % Multi-year discount (3–5 yrs)
One contract for all lines · Fixed price in 48 h techcaresolutions.de
01
Cost comparison
OEM list-price share approx. 18–28 % of list price per year (Premium Support high, incl. Threat Prevention subscription)
Example Palo Alto PA-5220 with 4-year Premium Support: EUR 8,000–12,200/year OEM, EUR 5,200–5,400/year with TechCare TPM (hardware layer without threat subscription).
EOSL hardware: On EOSL appliances (PA-200/500/2000 series, PA-3020/3060, older PA-5020/5050/5060) 50–70 % savings vs. Premium Support — hardware-layer maintenance still possible, Threat Prevention stays with Palo Alto.
Multi-year contract: 3-year TPM contract: additional 5–10 % discount, 5-year contract: 10–15 %. Plus fixed-price lock against OEM list-price increases.
02
OEM vs. TechCare — where the switch pays off
| Aspect | Palo Alto Networks Premium / Partner-Enabled Premium Support | TechCare TPM |
|---|---|---|
| Spare-parts stock | OEM global logistics, often 5–10 days lead time | DACH hub + global partner network, 4–8 h on site |
| SLA tiers | 8×5×NBD to 24×7×4, often multi-year committed | 24×7×4 to 24×7×2, per-device flexible |
| Response / language | Ticket → email routing, EMEA hub mostly English | Direct call, DACH field service, German native |
| Sub-outsourcing | OEM sub-contractors, chain not always transparent | Direct contract with TechCare, no black box |
| Compliance docs | Standard OEM documents | BAIT/MaRisk/DORA-ready, ISO 27001 |
| Reporting | Premium tier add-on | Quarterly reports incl. ticket history standard |
Stays with Palo Alto Networks
- Threat Prevention / WildFire / URL Filtering subscriptions
- PAN-OS software updates
- Palo Alto TAC software tickets + GlobalProtect subscription
Moves to TechCare
- Hardware defects (memory, disk, PSU, mainboard, modules)
- 24×7×4 on-site SLA with German-speaking field service
- Spare-parts logistics DACH + global hub network
- Fixed-price contract in 48 h, one inventory — one contract
03
DACH compliance by design.
- BAIT / MaRisk doc package: prepared maintenance annexes for financial and insurance service providers incl. auditor notes.
- DORA Art. 28-compliant contract template: mandatory critical-ICT-service-provider conformity from January 2025.
- ISO 27001: TPM provider certified, sub-contractor chain documented, access-log standards enforced.
- Data protection: GDPR-compliant media handling — disk retention or NIST 800-88 wipe before hardware return.
04
Migration path from first contact to hand-over.
- Inventory Palo Alto Networks install base (PIDs/serials or smart-account export, any format — Excel/CSV/PDF).
- Quote in 48 h Fixed-price offer per line + bundle total. SLA tier, term (1–5 yrs), optional add-ons transparently listed.
- Contract Template review (BAIT/MaRisk/DORA hooks integrated), compliance annex, signature — typically 5–10 working days.
- Hand-over Palo Alto Networks OEM cancellation coordinated, spare-parts provisioning DACH hub, field-service onboarding with site walk.