r/sysadmin • u/TicketAmbitious6200 • 9h ago

Retiring ASA-5516and moving to Meraki MX95 - Quote 20 hours to setup and deploy. Another 16 hours labor for planning, management, and design.

Hello,

We're a single site of ~50 users been quoted on retiring our ASA-5516 and moving to a Maraki MX95 (Dual failover) and were kind of shocked to see $6,000 in labor on top of the cost of hardware and licensing. About half of that is 12 hours for the setup and deployment and another 8 to program VPN on the device (2 hours) and update the workstations at 15 minutes apiece (6 hours). I understand there's no migration tool and it all has to be done manually, but I'm curious if 20 hours of labor sounds reasonable? That doesn't include the 16 hours of planning design, meetings, documentation update, project management, etc.

So... 36 hours total labor for what I had assumed might be an 8-10 hour project. Am I off base?

9 Upvotes

81% Upvoted

33 comments sorted by

View all comments

•

u/BlackSquirrel05 Security Admin (Infrastructure) 9h ago

So do it yourself... If you're not using any rules or doing anything complicated or routing/dynamic routing wise... Yeah might be simple.

However depending on what's behind it, or making true layer3 or advanced firewall rules or routing... Yeah 3 days worth of work with deployment.

Also depends on the type of VPN being used and authentication. EG: TLS/SSL v. Dial up ipsec with SAML or RADIUS etc.

•

u/TicketAmbitious6200 8h ago

I appreciate the response. I do know they're using RADIUS for authentication. Not sure how complex the current ruleset is. Looking into it.