SBI Capital Markets Limited Page - 1 -

Transcription

1 SBI CAPITAL MARKETS LIMITED CORPORATE OFFICE 202, Maker Towers E, Cuffe Parade, Mumbai INVITATION FOR PROPOSAL FOR WIRELESS ACCESS POINTS AT OUR COPRORATE OFFICE SBI Capital Markets Limited Page - 1 -

2 Item Description Method of Selection Lowest Bidder Date of issuance Last date for Submission Price validity Proposals must remain valid up to 180 (One Hundred & Eighty) days from the actual date of submission of the proposal. Name and Address for Proposal P Karthikeyan, SBI Capital Markets, 202, Maker Tower E, Cuffe Parade, Mumbai Technical Contact Name: Sagar Vichare, sagar.vichare@sbicaps.com Phone (Direct) Mobile: QUALIFYING CRITERIA - The bidder should be registered company incorporated in India, registered under Company Act The bidder should at least have three years of experience in the supply, installation, configuration, maintenance and support of Wireless Appliances The OEM for the proposed solution should have 8 x 5 x NBD support centre in India A vendor who has been black listed by any Government Organisation need not participate in bidding. If the vendor hides this information and found at a later date, his contract will be terminated and the vendor will be required forfeit his performance bank guarantee. The manufacturer of the proposed WLAN solution should feature in the leader quadrant of Gartner s Magic Quadrant for Wired and Wireless Networks for last two years. SCOPE OF WORK The bidders are required to Supply wireless appliance as per the features and specifications mentioned in Annexure-I. Configuration of all the policies such as bandwidth policies, security policies, internet access policies as per SBICAP requirement. The bidder is required to do the analysis of SBICAP offices for the secure wireless network requirement and proposed for the required of Wireless access devices in CO & respective RO s. The bidder is required to configure the following access types with proposed AP s i) SBICAP Employee (LAPTOP/iPad) - have access to LAN/Intranet sites and for restricted Internet as per existing predefined policies in the firewall/windows as per the individuals profile. ii) SBICAP Employee (Mobile) have restricted access only to internet as per policies defined in the firewall. Access to intranet should be restricted. iii) SBICAP Guest (Any device) have restricted access only to internet as per policies defined in the firewall. Access to intranet should be restricted. iv) The authentication should be synch with existing Active Directory. SBI Capital Markets Limited Page - 2 -

3 BID SUBMISSION:- Technical BID comprises of Compliance for Annexure I, Acceptance to Annexure II Commercial BID will be comprises of only a Price BID. TERMS & CONDITIONS WARRANTY & SUPPORT The comprehensive three years warranty for hardware and unlimited telephonic support should be provided by vendor for the period of three years. The Vendor should also provide the unlimited onsite support for the period of three years which includes troubleshooting for the issues reported by SBICAP, firmware upgrades on regular basis, Vulnerabilities fixing for the finding during periodic audits conducted by SBICAP. SBICAP should be provided unlimited partner driven support as well as OEM support for the period of three years. PAYMENT TERMS 90% payment against the invoice will be done within 15 days after successful implementation and acceptance test of the supplied solution. 10% will be released after three years or against the BG. ACCEPTANCE CRITERIA The selected lowest vendor is required to do the POC and demonstrate the proposed solution onsite for the period of at least 1 week. Post our acceptance of the POC formal Purchase order will be provided for supply & installation of the entire project. DELIVERY & INSTALLATION The bidder should deliver the goods within 6 weeks from the date of the purchase order. The bidder shall install the goods as per the scope of work mentioned in this document within 15 days from the date of delivery of the equipment s at respective locations. On completion of the installation of the Wireless appliance, the Vendor should obtain the sign-off. SBICAP will conduct the acceptance test as per the plan. CONFIDENTIALITY The vendors and its agent / employees would maintain complete confidentiality and secrecy of any information / materials etc. coming to their possession while performing their duties/obligations under the agreement. The vendor shall not encourage in any form of software piracy during the contract period. The vendor shall not open to any person including other divisions, subsidiaries of the vendor or to SBI Capital Markets Limited Page - 3 -

4 any other third person, any information about network setup and other confidential information obtained by it in contract period and all the information gathered by the vendor shall be treated as confidential. TERMINATION If delivery is delayed by 6 WEEKS post the allowed delivery timeline, SBICAP will reserve the right to cancel the order without giving any compensation to Bidder. If the solution has not been implemented and accepted by SBICAP as per the acceptance criteria within 15 days (post-delivery), the work order will be cancelled without giving any compensation to Bidder. SBICAP shall be under no obligation to accept the lowest bid or any other offer received in response to this tender notice and shall be entitled to reject any or all offers, including those received late, or incomplete offers, without assigning any reason whatsoever, SBICAP reserves the right to make any changes in terms & conditions for proposed scope of work, technical requirements or cancel the entire RFP process and reissue a fresh RFP. SBICAP will not be obliged to meet and have discussions with any bidder and/or to hear their representations. SERVICE LEVEL AGREEMENT RESPONSE TIME All calls related to proposed solution classified into three categories viz. Critical, High, Medium, and Low. The response time are described in below table:- SEVERITY LEVEL RESPONSE TIME (Corporate Office) RESOLUTION TIME Critical 4 hours 24 hours High 8 hours 48 hours Medium 24 hours 72 hours Low 24 hours 4 Business Days Critical: - Hardware breakdown (single point of failure), network access problems, security breach/issues, Internet access problems arises due to firewall etc. High: - Problem related to Firewall Performance, Configuration, routing, traffic bottlenecks etc. Medium: - Problems related to, policies, Change Requests. Low: - New configurations (any) add / modify, hot fixes, and firmware/software upgrades etc. SBI Capital Markets Limited Page - 4 -

5 Problem which has not been categorised above will be considered as Critical/High/Medium/Low on the basis of the number of users affected and will be at the discretion of SBICAP. The OEM is required to provide 8 x 5 x NBD support to all our location from their support Data Centre. The amount of penalty will be claimed/adjusted while releasing the performance bank guarantee or warranty of the hardware will be extended accordingly. If the equipment is taken away for repairs, the Vendor shall provide the similar or higher configuration equipment for standby purpose in case the same is breaching SLA for replacement. In case some of the equipment or its component is beyond repairs, the Vendor shall provide the replacement hardware of the same configuration or higher configuration from the same OEM prior to acceptance of the SBICAP. Defective hardware shall be replaced by the vendor at his own cost, including the cost of transfer. PENALTY Breaching SLA will attract penalty of 500/- per day maximum 1 % of Contract value per year. SBI Capital Markets Limited Page - 5 -

6 Annexure-I Major Feature Technical Specification of the WLAN Solution Description Architecture Scalability WLAN Controller should be hardware/appliance-based controller. The hardware controller should be capable of supporting minimum of 50 AP s from day one for future scalability. Centralized Management High Availability WLAN solution should support centralized management for distribution of patches, security rules etc. In case of SW base controller, the same AP should support hardware WLC in future without change is the AP hardware High availability should be provided for controllers (N+1). In the event of a failure of the hardware a standby controller shall automatically take over the master role. The centralised controller should also support the AP s installed at Wide Area Network locations in future Should support Band Steering feature that forces the dual-band capable clients to the 5 GHz band on dual-band access points. WLAN Features Should balance wireless clients across APs on different channels, based upon the client load on the APs. The Controller must support interference detection and avoidance Wi Fi devices. Quoted Access point must support necessary spectrum analysis functionality to achieve this. Should support internal or external DHCP server for providing IPs to both internal and guest users. IP should be provided by WLAN solution. The solution should support captive portal authentication for guest users. It must also be able to place guest access clients on a separate virtual LAN (VLAN) with additional controls that limit bandwidth and available content. WLAN Solution should support IEEE r roaming standard and shall support L3 mobility that allows a client to roam between APs on the same network but different client subnets, while preserving its IP address and existing data sessions. Controller should provide air-time fairness between these different speed clients slower clients should not be starved by the faster clients and faster clients should not adversely affected by slower clients. The solution should be ready for a dashboard of spectrum quality in terms of the performance and impact of interference on the wireless network identifying the problem areas, channel utilization. SBI Capital Markets Limited Page - 6 -

7 Sticky Client detection and Mitigation Identify and enable sticky devices to roam seamlessly Airtime Fairness The system should ensure equal airtime for all associated clients WLAN Solution should support automatic reduction of output signal power in case of two APs situated close to each other causing interference. Network Policy features Spectrum scanning WLAN solution should be able to create access policies in order to allow or block packets for inbound traffic/outbound traffic. WLAN solution (either integrated or through external firewall) shall have a capacity to inspect all traffic from each user session, user group and allow or deny any traffic that does not satisfy specified policies. WLAN solution (either integrated or through external firewall) shall provide identity-based controls to enforce applicationlayer security and prioritization. E.g. You tube to be given defined bandwidth like 1 Mbps and some apps like Facebook to be denied or given defined bandwidth. WLAN solution shall be capable of controlling bandwidth per user. WLAN solution shall be capable enough to scan the 2.4 or 5GHz radio bands to identify sources of Wi-Fi and NON WI-FI interference sources, and make the results available locally and to a remote management solution. An integrated or External wireless intrusion prevention system shall be proposed with following features: 1. Should prevent guest/users connecting to rogue AP and also prevent an outside user trying to connect to internal WLAN. Ability to offer WI-FI to guest in a secure environment WLAN Security 2. Should prevent Ad-hoc connections (i.e. clients forming a network amongst themselves without an AP) 3. At a minimum, providing device authentication for Windows, Android and ios devices via Wi-Fi Protected Access 2 (WPA2) with ability to detect wired and wireless intrusion. 4. The system should detect an invalid AP broadcasting valid SSID and should prevent valid clients getting connected from these AP s. 5. For advance forensic WIPS solution should perform spectrum analysis to detect and classify sources of SBI Capital Markets Limited Page - 7 -

8 interferences. System should provide chart displays and spectrograms for real-time troubleshooting and visualization. Number of Concurrent devices 6. Should prevent windows bridge (i.e. client that is associated to AP is also connected to wired network and enabled bridging between two interfaces) The proposed AP (single device) should able to server minimum 40 devices without any performance issue. Access point should support IEEE a/b/g/n/ac standards. Should have dual radios, dual band capable of supporting 2.4 GHz & 5 GHz simultaneously. Must support Power over Ethernet/local power/power injectors AP features Wide Area Network Product Support AP should support minimum 3x3 MIMO with 3 spatial streams AP should support minimum users on both BANDs without any performance issue. The Wireless AP should support 10/100/1000 Base-T PoE port. The Wireless AP should support multiple SSID s (minimum 10). The Wireless AP should support integration with SBICAP Active Directory to ensure the restricted access to internet/intranet as per the predefined access policies in Windows & firewall gateway. Selected SI would be required to implement any additional software s such as RADIUS server if required for this integration. Virtual infra and licensing will be provided by SBI Cap. Ability to detect client device types (Mobile, Laptop, ipad etc.) Support for existing voice and video applications Active Passive Failover on Controller SBICAP will extend the same solution to its Regional offices connected on Airtel MPLS network. The proposed solution should seamlessly support/communicate the centralised controller placed at Corporate Office. The proposed solution should available for support from OEM at least for the period of 5 years. Indoor Access Points QUANTITY:15 with Mounting kit & external power injector SBI Capital Markets Limited Page - 8 -

9 Annexure-II Technical -BID S/N Particulars Yes/No Remarks 1 Qualifying Criteria 2 Full conformity to scope of work accepted 3 Terms and conditions 4 Technical specification (Annexure I) Seal of the Company: Name of the Authorized Signatory: Designation: SBI Capital Markets Limited Page - 9 -