ITAMG Network Retirement

Network Equipment Decommissioning Checklist

Network equipment decommissioning requires more than disconnecting a switch, router or firewall. ITAMG handles nationwide equipment removal, data erasure or destruction, buyback and recycling after your network team approves retirement. Use this checklist to protect live services, identify stored data and account for hardware, licenses and records before devices leave your control.

A factory reset may leave stored data or remote accounts unchanged. Check both before the equipment changes hands.

PLAN MY NETWORK RETIREMENT

Recover Resale Value From Network Hardware

ITAMG evaluates models, installed modules, condition and current demand. Get a line-item buyback quote for the switches, routers, firewalls and parts you are selling.

Erase Network Data Before Resale or Recycling

ITAMG is NAID AAA certified for erasure and physical destruction. Define the storage to treat, the work location and the completion records for your retired devices.

Track Retired Network Assets 24/7

Access asset status through ITAMG’s secure client portal. Follow processing and match the final records to your device and component inventory.

Project Consultation

Plan Network Equipment Removal With ITAMG

ITAMG can plan the removal, data destruction, resale and recycling work for your retired network equipment. Models, quantities and site details help identify the work and equipment to include. You can start with a partial list while your network owners confirm when each device can be removed.

  • Switches, routers, firewalls, modules and optics to remove.
  • Equipment location, access needs and expected removal date.
  • Drives and other storage to erase or destroy, hardware to sell or recycle, and records to receive.
5.0 Gartner Peer Insights
4.9 Google Reviews 100+ reviews
A+ BBB Accredited Business
R2v3 Certified NAID AAA Certified RIOS Certified Aligned to NIST SP 800-88 Rev. 2 SOC 2 compliant

Certified: R2v3, NAID AAA, RIOS · Aligned to NIST SP 800-88 Rev. 2 · SOC 2 compliant

Since 1999 Enterprise IT asset disposition

Mark unknown models, missing parts and devices that must stay on site. Resolve those details before approving the pickup list.

Project Consultation ITAMG

Plan My Network Retirement

Request a quote for network equipment removal, data destruction and buyback. Use the follow-up discussion to confirm models, site access and when the hardware can leave service. Flag any storage that must be erased or destroyed before collection.

Loading the consultation form.

Company credentials: R2v3, NAID AAA and RIOS.
“The whole experience was professional, excellent and efficient”
Finance, Banking, <50M USD Source: Gartner Peer Insights

ITAMG Planning Checklist

Protect Live Services Before Network Equipment Removal

Network decommissioning can interrupt production when a shared switch, firewall rule or recovery path is removed too soon. Approve traffic cutover, data handling and hardware ownership before scheduling erasure or pickup. These decisions tell ITAMG which devices can leave and what must remain under your control.

Approve Traffic Cutover and Rollback Closure

Name the network owner who accepts the replacement service and confirms when the old hardware is no longer needed for rollback. Release only the devices on the approved removal list.

Preserve Required Logs and Remove Sensitive Data

Identify configuration backups and firewall logs that must be retained. Set the erasure or destruction method, work location and completion evidence for each storage component.

Separate Owned, Leased and Shared Equipment

Confirm which hardware the business owns and which units must return to a lessor or manufacturer. Mark retained devices, modules and cables so live infrastructure stays intact.

01

Network Hardware Inventory

Network Equipment Inventory: Chassis, Modules, Optics and Storage

A network hardware inventory must identify the complete configuration offered for sale or released for disposal. Include each chassis, supervisor, line card, transceiver and storage device, with its serial number and intended destination. Reconcile discovery reports with the physical equipment so ITAMG’s quote, pickup manifest and data-removal records refer to the same assets.

Equipment to listDetails to record
Switches, Routers and Stack MembersRecord the manufacturer, model, part number, serial number, software release, rack position and condition. List every stack or Virtual Chassis member separately, even when the group uses one management address.
Firewalls and Security AppliancesList each firewall, its installed storage and its management platform. Record paired units used for high availability (HA), so both devices appear in the retirement plan.
Supervisors and Routing EnginesThese control modules may have their own storage and serial numbers. Record each module’s part number, serial, chassis and slot, including active and standby units.
Line Cards and Service ModulesList each card or module by chassis, slot, condition and destination. Check its documentation for memory that keeps data without power; a supervisor reset may leave that memory untouched.
Optics and TransceiversRecord each transceiver’s part number, serial number when available, device, port and quantity. Mark retained optics and missing identifiers. Keep component valuation separate from media sanitization; an optic does not automatically require the same treatment as a firewall drive.
Bootflash, NVRAM and Storage MediaIdentify bootflash, NVRAM, internal SSDs or HDDs, removable cards and attached media in the model’s documentation. Record which components retain configuration or other data after power loss. Flag failed or inaccessible storage for a separate sanitization decision.
Power Supplies, Rails and AccessoriesList included power supplies, fans, rails and cables. Mark parts kept for other equipment so the quoted configuration matches what ITAMG receives.
Owners, Accounts and LicensesMark owned, leased and return-required units. Record the account administrator, licensing model, subscriptions and support status. Keep passwords and private keys out of the equipment list.

Keep each loose module or optic linked to its original chassis or port. A discovery report helps build the inventory, but it may not contain every physical part or serial number.

02

ITAMG Cutover Checklist

Complete Network Cutover Before Removing Switches and Firewalls

Network decommissioning should follow a tested traffic cutover and an approved rollback decision. Configuration backups, retained logs and a working recovery path must remain available while replacement services are checked. Authorize physical removal only after the required network and application tests pass and the agreed rollback period ends.

  1. Map the Services That Must Stay Online

    List the devices, ports and paths used by applications, uplinks, storage, management and monitoring. Include VPN peers and shared credentials or certificates. Mark each service as moving, ending or staying.

  2. Save a Backup You Can Restore

    Keep the needed configuration or device-state backup off the retiring device and restrict access. Check the file and test the approved recovery procedure. Palo Alto Networks treats running configurations, candidate snapshots and device-state exports differently; its configuration-table PDF or CSV report cannot restore a firewall.

  3. Save the Required Firewall Logs

    Choose the log types and time periods to keep. For Palo Alto Networks, permissions, filters, export row limits and platform support can limit the archive. Check that the required records are complete and readable off the firewall.

  4. Set Cutover Tests and Go/No-Go Decisions

    Write the change sequence, expected test results and named approver. Set checkpoints for network tests and separate application tests. Leave enough time in the work window to restore service if a checkpoint fails.

  5. Keep the Recovery Path Available

    Record what triggers rollback, who decides, and which configuration, cables and devices it needs. A configuration rollback cannot reconnect removed cables or recover all data changed after a migration. Keep the required hardware available until its removal is approved.

  6. Test the Remaining Network

    Compare routing, security, management and connected devices with the agreed baseline. Record application acceptance separately from basic connectivity. Monitor the required services for the period set in the change plan; no single waiting period fits every retirement.

Step 07

Approve the Device and Cable Removal List

Issue a current list of approved serials, rack locations, ports and cables, with the work window and approver. Mark nearby live equipment and connections that must stay untouched.

Add the approved removal list and recovery decisions to your data center decommissioning plan. ITAMG’s physical work starts from the devices your network owners release.

Network Device Security

Remove Network Data, Credentials and Remote Access

Secure erasure of network equipment must cover the storage installed in each switch, router, firewall and control module. A factory reset may leave data behind, while locally deleting credentials does not revoke access in external systems. Use the manufacturer’s procedure for the exact model and software, then verify the result and complete the account and certificate changes.

What the Manufacturer’s Reset Actually Covers
Platform and guideDocumented limitCheck before retirement
Cisco Catalyst 9400, IOS XE 26.xReset options cover different data. The documented reset does not erase line-card memory.Follow the Catalyst 9400 factory-reset guide for each supervisor, including standby units. Check retained data and secure-reset support for the installed chassis setup.
Juniper JunosBasic zeroize removes file references; media scrubbing is a different operation. An unsupported media option can fall back to basic zeroize with a warning.Check the Junos reference for the exact platform. On most EX/QFX Virtual Chassis systems, zeroize applies to the local member; dual-routing-engine behavior differs. Keep results for every required member or engine.
Palo Alto NetworksFactory reset removes configuration and logs. Enhanced reset depends on the firewall model and PAN-OS release.Check factory reset support and installed storage. The FIPS-CC swap-memory procedure covers operating-system swap storage in FIPS-CC mode only. It reports results for each partition and overall.
Fortinet FortiGateFortinet separates configuration reset, erasing installed hard disks and formatting the boot device.Check the FortiGate media guidance against the model’s actual storage. A completed configuration reset does not show that all installed media was treated.
Brocade Fabric OS 9.1.xThe documented reset removes custom and license configuration; an option keeps management-interface settings.Check the Fabric OS 9.1.x guide and supported model. Save needed records and plan to capture completion: resetting the management address can hide the final log lines. This reset is not a universal media-purge method.

Remove Access Outside the Device

Device erasure and access removal are separate jobs. Record the result of each applicable check.

  1. Admin and service accounts Disable retired local accounts and the service or API accounts used by software. Revoke access through the systems that manage those accounts.
  2. Shared secrets and VPNs Check surviving VPN peers and services before rotating shared passwords, keys or other secrets.
  3. Device certificates Request device-certificate revocation from its issuing authority. Deleting a local certificate or private key does not revoke it there.
  4. Certificate authority If the firewall issues certificates, preserve the services that rely on that certificate authority before removing its role.
  5. Cloud management Have the account administrator release the device from remote management and save confirmation. A local reset does not remove a cloud account claim.

Check the Erasure or Destruction Result

Sanitization removes data so it cannot be recovered by the methods your security policy must protect against. Keep the method and its result tied to the device or storage serial.

  1. Method and media Choose Clear, Purge or Destroy under NIST SP 800-88 Rev. 2 for the actual medium and security need. Check coverage of remapped or spare storage areas where applicable.
  2. Verification and validation Verify that the procedure finished without errors. Then validate the result: decide whether the evidence meets the required security outcome. A command name or overwrite count is not enough.
  3. Encryption keys Cryptographic erase blocks access to encrypted data by securely removing the keys that unlock it. Check that the data was encrypted before it was stored and that the required keys and usable copies are sanitized. Changing a password does not prove this.
  4. Failed media and exclusions Keep failed or inaccessible media on hold until an approved alternative or destruction is complete. Record any component the chosen method did not cover.

ITAMG is NAID AAA certified for erasure and physical destruction and follows NIST 800-88 Rev. 2 methodology. Agree on the media, method, work location and completion records before pickup. On-site work carries a cost.

Have authorized technical staff check the current instructions for the installed model, software, media and device arrangement before running a destructive procedure.

Plan network data destruction with ITAMG

PLAN MY NETWORK RETIREMENT
04

Network Hardware Resale

Selling Network Equipment: Hardware Value, Licenses and Support

Network equipment resale value depends on the model, condition and included chassis, modules and optics. ITAMG evaluates the hardware, while the manufacturer’s rules determine whether software, subscriptions or support can transfer. Resolve those rights before promising a licensed or supported system to the next owner.

Chassis, Modules and Optics

List the exact configuration, condition and included parts for valuation. Quote loose modules or optics separately when needed. Resolve data removal before transfer and agree on recycling for hardware outside the accepted sale.

Vendor Account and License Checks

Hardware or vendorWhat to confirm before transfer
Cisco Smart AccountsMoving assets between Virtual Accounts in one Smart Account differs from a transfer between Smart Accounts. Cisco’s Asset Transfer Manager requires eligible assets, business reasons and approvals. It excludes Enterprise Agreement assets and OnPrem-connected devices, and does not transfer software contracts. Keep the actual completed, partial or failed result.
Juniper Software and SupportCheck permission to use Juniper software and whether the used hardware needs inspection or support reinstatement. The old support contract does not follow the chassis. Keep proof of ownership and component serials, then confirm current requirements before offering the device with support.
Palo Alto Networks AccountsChoose the device’s destination before the permanent support-portal decommission action. Existing licenses and subscriptions do not transfer to a secondary-market owner. Palo Alto Networks also excludes end-of-sale and decommissioned devices from recertification under its policy.
Meraki Devices and LicensesThe current administrator must resolve a device claimed by another Meraki organization. Under per-device licensing, unclaiming the device leaves its license in the original inventory. Check the actual licensing model before applying that rule.
Fortinet Transfer EligibilityFortinet’s transfer guidance lists denial conditions for secondhand, auction, unauthorized-channel or recycled hardware, and missing approvals or documents. Self-service transfer excludes account-level services; HA setups can use different serial or cluster records. Confirm eligibility before promising registration, licenses or support. A transfer token alone does not prove eligibility.

Failed, Leased or Return-Required Units

Check ownership and return terms before selling, recycling or destroying a device. Failed hardware can still hold data. Resolve any conflict between required data removal and lease or vendor-return terms before altering the parts.

Transfer and Contract Records

Keep serials, current and receiving account owners, the business reason, requested purchase evidence, vendor approval and final status. Record which rights remain, which transfer and who handles renewal or cancellation. A shutdown or submitted request does not prove a contract ended.

Use ITAMG’s network equipment buyback service to value the hardware in your proposed sale. Include known account and license restrictions so the offer does not rely on an unconfirmed transfer.

Network Equipment Collection

Prepare Retired Network Equipment for Removal and Shipping

Network equipment pickup should follow an approved device list, completed shutdown and agreed data-security arrangements. Identify complete systems, loose parts and media still awaiting erasure so each receives the right handling. Confirm site access, packing responsibilities and the pickup manifest with ITAMG before the crew arrives.

  1. Match the Approved List

    Check serials, quantities and locations against the current removal list. Resolve missing or substituted devices and mark live equipment nearby.

  2. Identify Media Awaiting Erasure or Destruction

    Identify media already accepted as sanitized, media due for agreed work after pickup, and items on hold. Keep untreated or failed media under the agreed custody controls.

  3. Mark Included and Retained Parts

    Match modules, optics, power supplies and accessories to the agreed configuration. Remove retained parts from the transfer list and record missing identifiers or damage.

  4. Agree Who Removes and Packs

    Confirm who disconnects, removes, packs and stages each equipment group after shutdown approval. Share the work window, site access rules and collection contact with ITAMG.

  5. Protect Chassis, Modules and Optics

    Choose packaging for the actual equipment. Label loose parts by parent device or destination, and link each container to the equipment list when one chassis is split across boxes.

  6. Document the Equipment Handoff

    Record devices, loose parts, quantities and containers on the pickup manifest. Add the handoff time, both parties and any differences from the approved inventory. Keep held equipment clearly separate from the collected load.

Use data center logistics services to plan collection and shipping. For equipment returning to service, use data center relocation services to plan delivery and acceptance at the new site.

Network Retirement Records

Network Decommissioning Records: Data, Custody and Final Disposition

Network equipment decommissioning records must connect each device to its data-removal result and final destination. A pickup receipt documents custody; separate evidence is needed for erasure, license transfers, sale or recycling. Agree the required records with ITAMG before collection and assign unresolved items to a named owner.

Shutdown and Removal Approval

Keep the approved serial list, service-move or retirement decision, test results and removal approval. Name the approver and record any remaining recovery or removal limits.

Device and Media Sanitization

Record each device or medium, method, tool and version, date, result and exceptions. Save the verification checks and the decision to accept or reject the result. Identify who performed, verified and validated the work. Keep the agreed destruction certificate when destruction was performed.

Access, Accounts and Licenses

Keep confirmation of account disablement, certificate revocation and remote-management release. Record retained licenses, completed, partial or denied transfers, and renewal or cancellation owners. Exclude passwords and private keys.

Pickup and Receiving Lists

Match the approved list to pickup and receiving records, including loose modules and media. Resolve missing units, changed quantities or different configurations, and keep each agreed exception.

Sale, Return or Recycling Records

Match the final outcome to the chassis and included parts. Check the financial result against the agreed equipment and services, and retain the relevant recycling or destruction certificates.

Use the storage array decommissioning checklist when arrays depend on the retiring switches. The data center hardware refresh plan helps align network removal with decisions to keep, move, sell or recycle other equipment.

07

ITAD Customer Reviews

ITAMG Customer Reviews: Equipment Buyback and Pickup

ITAMG customers describe equipment offers, collection and communication in these reviews. One account follows a warehouse equipment sale from the accepted offer through pickup. Use the project discussion to confirm how your network equipment will be valued, collected and reported. These reviews describe individual customer experiences; they are not promises about a particular project.

Gartner Peer Insights
5.0 / 5
BBB Accredited Business
A+

“The ITAMG team was friendly, efficient, and professional to deal with. They made a competitive offer to purchase the equipment we were looking to sell. Upon acceptance, they coordinated the pickup of the equipment from our warehouse promptly and efficiently”

G
Operations, IT Services,
<50M USD
Source: Gartner Peer Insights 5.0 / 5

“Working with ITAMG has been great. Very easy to work with, communication is quick when it comes to sending over inventory we are looking to get picked up or even just asking some questions.”

G
IT Services, IT Services,
<50M USD
Source: Gartner Peer Insights 5.0 / 5

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and PEER INSIGHTS is a registered trademark of Gartner, Inc. and/or its affiliates and are used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences with the vendors listed on the platform, should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

Network Retirement Answers

Network Equipment Decommissioning Questions

Network equipment decommissioning often involves failed devices, manufacturer returns or an unfinished cutover. Each can change the removal date or the evidence needed to prove data was erased. The answers below explain what to prepare for ITAMG while your technical owners manage network changes and vendor accounts.

Who approves shutdown before ITAMG removes network equipment?

Your authorized network owners approve service migration or retirement and release the exact devices for removal. ITAMG performs the agreed physical retirement work. Keep the approved device list, required service tests and rollback decision with the project records.

What if a retired switch or firewall will not start?

A switch or firewall that will not start can still hold data in nonvolatile storage. Record the fault and check for a supported sanitization method. If the required result cannot be achieved or verified, hold the media for an approved alternative or destruction. Resolve lease and manufacturer-return obligations before destroying a component.

Does a vendor return receipt prove the device was erased?

A vendor return receipt does not prove data erasure. Cisco’s return policy makes the customer responsible for data removal and does not promise a destruction certificate for every return. Agree on the evidence before handoff, and obtain approval before altering or destroying return-required parts. ITAMG can quote separately agreed erasure or destruction work.

What affects network equipment retirement cost?

Network equipment decommissioning costs depend on the inventory, site access, removal, packing, transport and required erasure or destruction. On-site data services carry a cost and should be identified in the quote. Eligible equipment may also have buyback value. Compare the service charges and hardware offer separately to understand the final project cost.

Can we plan pickup before the network change is complete?

ITAMG can discuss pickup while your network change date is still being confirmed. Share the expected removal date and any access restrictions. The equipment can leave only after your authorized owners approve removal and end the agreed rollback period.

What can we send ITAMG if the inventory is incomplete?

ITAMG can start with available models or part numbers, estimated quantities, condition and location. Include known modules, optics and storage, and flag uncertain details. Before collection, confirm the final list of devices and parts leaving, staying or on hold.

More From ITAMG

ITAMG Services for Retired Network Equipment

ITAMG provides data destruction, buyback and recycling for retired enterprise hardware. A network project may need different services for reusable switches, failed media and hardware with no resale value. Choose the service that fits each equipment group, then agree on the work location and required records.

Data Destruction

Choose erasure or physical destruction, at your site or ITAMG’s facility, with agreed completion records.

Learn more

IT Asset Disposition

Plan hardware collection, data removal, resale or recycling, and the final equipment records.

Learn more

Data Center Decommissioning

Plan equipment removal across the data center with recorded custody from handover onward.

Learn more

Sell Used IT Equipment

Ask ITAMG to value retired servers, storage and network hardware for resale.

Learn more

Computer Recycling

Use ITAMG’s R2v3-certified recycling service for hardware that will not be reused.

Learn more
Plan With ITAMG

Plan Your Network Equipment Retirement With ITAMG

ITAMG can quote network equipment removal, erasure or destruction, and resale or recycling. Share the models, quantities, included parts, location and expected removal date. Say whether erasure or destruction must happen at your site and which records you need.

PLAN MY NETWORK RETIREMENT Call ITAMG: 877.625.4872
Certified R2v3 Certified NAID AAA Certified RIOS Certified Compliant SOC 2 Compliant
Plan My Network Retirement