+49 6430 9227117
CISCO SECURITY HARDWARE MAINTENANCE · TPM AFTER SMARTNET

Cisco Security Maintenance — vendor-independent hardware service for ASA and Firepower

We service the hardware layer of Cisco Security devices — ASA 5500-X firewalls and Firepower family (1000, 2100, 4100, 9300). With OEM original parts and SLA up to 24×7×4. Threat Defense subscriptions, IPS signature updates, AMP, URL Filtering and SecureX continue unchanged via Cisco.

Which Cisco Security models we service

Cisco is historically strong in the DACH security segment — especially ASA 5500-X as classic NGFW and Firepower as successor platform.

ASA 5500-X (klassische NGFW)
ASA 5506-X · 5508-X · 5512-X · 5515-X · 5516-X · 5525-X · 5545-X · 5555-X
Firepower 1000-Serie (Branch)
Firepower 1010 · 1120 · 1140 · 1150
Firepower 2100-Serie (Mid-Range)
Firepower 2110 · 2120 · 2130 · 2140
Firepower 4100-Serie (Enterprise)
Firepower 4110 · 4112 · 4115 · 4120 · 4125 · 4140 · 4145 · 4150
Firepower 9300-Serie (Hyperscale)
Firepower 9300 (modular Chassis mit SM-24/36/40/44/48/56-Modulen)

Why TPM maintenance instead of Cisco SMARTnet (Security)

Cisco SMARTnet for security is above-average expensive — and on ASA 5500-X (5512-X, 5515-X) contracts reach terms suggesting Firepower migration. Yet many DACH enterprise setups with ASA 5525-X/5545-X/5555-X are stable and need no migration.

We service the hardware layer — PSUs, fans, NVMe/SSD, motherboards, SM modules on Firepower 9300 chassis — with OEM original parts. ASA software, FTD, FMC, Snort 3 IPS, AMP for Networks, URL Filtering, SecureX and all Threat Defense subscriptions stay unchanged with Cisco. An ASA without active threat subscription is just a classic stateful firewall.

30–60 %
Savings vs. Cisco SMARTnet (Security)
up to 70 %
Savings on EOSL models
48 h
Fixed-price quote after receipt of your inventory
4 h
Onsite response time with 24×7×4 SLA

Generations timeline & TPM coverage

Per hardware generation: vendor phase (slate) and TechCare coverage window (teal) up to ~5 years post-OEM EOSL.

EOSL status of major generations

Once the vendor ends official support, renewals become unavailable or disproportionately expensive. TPM closes exactly this gap — same hardware coverage, same SLA, significantly cheaper.

Model family Released OEM support ends TPM status
ASA 5505/5510/5520/5540 (Vorgänger) 2008 2017 Recommended
ASA 5512-X / 5515-X 2012-2014 2022 Recommended
ASA 5525-X / 5545-X / 5555-X 2012-2014 2024 Recommended
ASA 5506-X / 5508-X / 5516-X 2014-2015 2025+ Supported
Firepower 4110/4120/4140 2015 2024+ Supported
Firepower 9300 (1. Gen) 2015+ 2025+ Supported

As of 2026. EOSL data based on official vendor roadmaps and subject to change. Binding case-by-case information available on request.

What we deliver

OEM original parts

Our warehouse stocks OEM original components, including for end-of-life generations.

Onsite engineer

German-speaking technicians throughout DACH, 4-hour response time guaranteed.

Flexible SLA per server

Parts Only, 5×9 NBD or 24×7×4 — freely combinable by location and criticality.

Multi-vendor contract

One contract for Cisco Security and all other vendors. No more individual contracts.

EOSL tracking & reporting

Monthly SLA reports, asset overview, automatic EOSL notifications.

Vendor tools stay

Cisco Security-specific management tools remain usable.

FAQ on Cisco Security maintenance

Which Cisco Security hardware do you service?
We service the hardware layer: ASA 5500-X firewalls and Firepower family (1000 for branch, 2100 mid-range, 4100 enterprise, 9300 chassis for hyperscale).
What does 'hardware-only maintenance' mean for Cisco Security?
We replace defective hardware components — PSUs, fans, disks/NVMe, motherboards, SM modules on Firepower 9300 — with OEM original parts. ASA software, FTD (Firepower Threat Defense), Firepower Management Center (FMC), IPS signatures, AMP for Networks, URL Filtering, SecureX and all Threat Defense subscriptions continue unchanged via Cisco.
What does TPM cost compared to SMARTnet?
30 to 60 percent savings vs. SMARTnet for the hardware layer. An ASA 5525-X with 24×7×4 costs 2,200 to 3,000 EUR/year for the hardware layer with Cisco, 900 to 1,500 EUR with TechCare.
Does FTD and Threat Defense remain fully functional?
Yes, fully. FTD, FMC, Snort 3 IPS engine, AMP for Networks, URL Filtering, Application Visibility & Control and all subscription-based security features continue unchanged via Cisco.
Can you service older ASA 5512-X/5515-X?
Yes. ASA 5512-X and 5515-X (released 2012-2014, EOSL 2022) are still productive in many DACH enterprise environments.
Which SLA levels for firewalls?
Parts Only, 5×9 NBD, 24×7×4 — freely selectable. For productive edge firewalls and data center security paths we recommend 24×7×4.
Do we lose the warranty or Cisco licenses?
No. Factory warranty and SMARTnet are contractual services. Threat Defense subscriptions, FTD licenses, FMC licenses and Smart Licensing run separately via Cisco.
Service performance

Real actuals Q1 2026 — straight from our ITIL ticketing.

99,2 %
Tickets resolved within agreed response time
2,4 h
Avg. first response on 4h SLA tier
88 %
First-time fix on initial dispatch
97 %
Spare part on site within 4 h, DACH depots
More from Cisco

Other Cisco models and service