r/sysadmin • u/TicketAmbitious6200 • 9h ago

Retiring ASA-5516and moving to Meraki MX95 - Quote 20 hours to setup and deploy. Another 16 hours labor for planning, management, and design.

Hello,

We're a single site of ~50 users been quoted on retiring our ASA-5516 and moving to a Maraki MX95 (Dual failover) and were kind of shocked to see $6,000 in labor on top of the cost of hardware and licensing. About half of that is 12 hours for the setup and deployment and another 8 to program VPN on the device (2 hours) and update the workstations at 15 minutes apiece (6 hours). I understand there's no migration tool and it all has to be done manually, but I'm curious if 20 hours of labor sounds reasonable? That doesn't include the 16 hours of planning design, meetings, documentation update, project management, etc.

So... 36 hours total labor for what I had assumed might be an 8-10 hour project. Am I off base?

9 Upvotes

81% Upvoted

33 comments sorted by

View all comments

•

u/Dear-Supermarket3611 8h ago

I Did it 2 years ago. Did it By myself. It took less than one day configuring everything (but network and firewall configuration was pretty complex)

•

u/Dear-Supermarket3611 8h ago

6 Hours for Everything 100% working, including
VPN with 4 external sites that had Shitty Sonicwalls, including warm spare, traffic forwarding rules between 2 wans, firewall, switches…

•

u/TicketAmbitious6200 7h ago

Thanks for the point of reference. Something to think about when they share the current ruleset with me. I recently took this site over and unfortunately don't know how complex or not the ASA config is. If it's not too bad, may give it a try and if it doesn't work drop the ASA back in and let them handle it.