Network Equipment Sanitization

Revoke

Certified Network Equipment Sanitization

Switches, routers, firewalls, and access points hold sensitive configuration data — VLANs, credentials, SNMP strings, routing tables, ACLs. A manual factory reset isn't documentation. Revoke automates the entire process: identify the device, capture a full inventory, execute the reset, verify it booted clean, and document everything.

/dev/ttyUSB0 — revoke

$ revoke --port /dev/ttyUSB0

[*] Detecting device...

[+] Vendor: Cisco

[+] Platform: IOS 15.2(4)M7

[+] Model: WS-C3750X-48P

[+] Serial: FDO1821V00P

[*] Capturing inventory...

[+] Ports: 48x GigE, 4x 10GE

[+] Licenses: IP Services (perpetual)

[*] Executing factory reset...

[*] Waiting for reboot...

[+] Verified: clean boot to factory defaults

[+] Session complete — reported to ExpungeData

The Gap

Network Equipment Is the Blind Spot in Data Sanitization

Most ITAD providers treat network equipment as an afterthought. They'll give you a detailed certificate for every hard drive they wipe, but when it comes to your switches and routers? "Factory reset — done." No inventory. No verification. No documentation that it actually happened.

That's a problem. Network devices store configuration data that can expose your internal network topology, credentials, VLAN structures, access control lists, and routing policies. A misconfigured or incomplete reset can leave residual data intact. And without documentation, you can't prove to an auditor — or yourself — that the device was properly sanitized.

The industry has mature tools and standards for storage sanitization. Network equipment has been left behind. Until now.

Typical ITAD Documentation

Hard Drives — Certified wipe report
SSDs — Certified wipe report
NVMe — Certified wipe report
Switches — "Factory reset"
Routers — "Factory reset"
Firewalls — "Factory reset"
Capabilities

Automated Sanitization for Network Equipment

Revoke connects to network devices via serial console, identifies the hardware, captures a complete inventory, performs a vendor-specific factory reset, and verifies the device boots to a clean state. Every step is logged and reported.

Auto-Detection

Revoke identifies the device vendor, operating system, and firmware version automatically through the serial console. No manual input required — plug in the console cable and Revoke figures out what it's talking to.

Inventory Capture

Before any reset occurs, Revoke captures a full device inventory: serial number, model, firmware version, installed licenses, and port health. Valuable perpetual licenses are flagged — they survive factory reset and have resale value.

Verified Factory Reset

Revoke executes the correct vendor-specific reset sequence and then waits for the device to reboot. It reads the post-reset output to confirm the device came back in a factory-default state. Not "we ran the command" — verified clean boot.

Documented Results

Every session produces a complete record: what device was connected, what was found during inventory, what sanitization steps were taken, and whether verification passed. Results are reported to the ExpungeData platform for certificate generation.

Process

From Console Cable to Certificate

01

Connect

Plug a console cable into the network device. Revoke supports RJ-45 rollover, mini-USB, micro-USB, and USB-C serial connections. Select the port and Revoke handles baud rate detection automatically.

02

Identify & Inventory

Revoke sends commands to the device and reads the response to determine the vendor, OS, and hardware details. It captures the full inventory — serial number, model, firmware, licenses, and port diagnostics — before anything is changed.

03

Sanitize & Verify

The correct factory reset sequence is executed for the detected platform. Revoke waits for the device to complete its reboot cycle and reads the startup output to verify it returned to a clean, out-of-box configuration.

04

Document & Report

The session record — inventory, sanitization actions, verification result — is signed and reported to the ExpungeData platform. A sanitization certificate is generated and accessible through the client portal, just like storage sanitization records.

Compatibility

Multi-Vendor Support

Revoke supports the network vendors and operating systems that dominate enterprise environments. Coverage spans the platforms you'll actually encounter when processing decommissioned equipment.

Cisco

IOSNX-OS

Dell

FTOS (Force10)

Juniper

Junos

Arista

EOS

HPE

ArubaProCurve

Additional vendor support is added based on the equipment we process. If you have devices from a vendor not listed here, contact us.

Difference

Why This Matters

The old way

Manual Process

A technician SSHes into the device, types the reset command, hits reload, and checks a box on a spreadsheet.

With Revoke

Automated

The entire process is automated — detection, inventory, reset, verification, and reporting. The technician connects the cable. Revoke does the rest.

The old way

Trust

"We factory reset all network devices." No inventory. No verification log. No way to confirm it happened.

With Revoke

Proof

Every session is documented with device-level detail — what was found, what was done, and whether verification passed. The record is signed and stored for 7 years.

The old way

Drives Only

Your ITAD provider gives you a NIST 800-88 certificate for every drive, but network equipment gets a line item that says "reset to factory defaults."

With Revoke

Everything

Network equipment gets the same level of documentation as storage devices — device-specific inventory, sanitization method, verification result, and a certificate you can hand to an auditor.

Platform

One Platform. One Certificate.

Revoke feeds into the same ExpungeData platform as our storage sanitization tool. Your network equipment sanitization records appear alongside your drive sanitization records in the client portal — same job number, same tamper-evident QR verification, same 7-year document retention.

Whether you're decommissioning a rack full of servers or a stack of switches, every device gets documented to the same standard.

Network Equipment
Revoke
Servers & Storage
Expunge
Certificate + Client Portal + 7-Year Retention
Ready?

Get Started

Have network equipment that needs to be sanitized and documented? Whether it's a handful of switches or a full data center decommission, we can help.