Request for Quotation / 報價請求

Transcription

1 Request for Quotation / 報價請求 Subject: Two Tier Firewall and Related Network Equipment From/ 由 : Mr. Kim Wong / Patrick So / 電郵 kimwong@aims.com.mo Tel/ 電話 : / Fax/ 傳真 : Date/ 日期 : -Oct-06 Ref: Q 煩請為下列項目報價 : No. Item / Model / Description Qty. Install a pair Tier Firewalls and Separate the wireless and wired network.. Tier Firewall Hardware requirement. The proposed system shall be based on a dedicated ASIC-based standalone appliance which should include:.. Network Processor(s) that accelerates key networking functions including stateful IPv4 & IPv6 packet header inspection, VPN encryption & decryption, multicast traffic inspection, and QoS support with traffic prioritization, etc... Content Processor(s) that accelerates content scanning activities such as IPS, AV, etc.. The proposed system shall be able to have minimum support of:.. 8 x GE 0 GE SFP+ ports.. 6 x GE SFP ports

2 ..3 8 x GE RJ45 management ports..4 x RJ45 console port..5 x USB port ( for client, for server) GB local storage.3 The proposed system shall provide hot swappable dual power supply. Firewall. The proposed solution shall be in the Leaders quadrant of Gartner Magic Quadrant for Unified Threat Management in the past three years.. The proposed solution shall be recommended by NSS Labs in Next Generation Firewall Test The proposed solution shall minimally attain Internet Computer Security Association (ICSA) Firewall Certification and completed NGFW evaluation.4 The proposed firewall shall provide up to 80 Gbps firewall throughput for 58 bytes & 5 bytes and 55 Gbps for 64 bytes packets in a single device, regardless IPv4 & IPv6 packet..5 The latency of the device shall support down to 3 microseconds for 64 byte UDP packets..6 The proposed solution shall be capable of handling at least Million concurrent sessions..7 The proposed solution shall be capable of handling at least 300,000 of new sessions per second..8 The proposed solution shall support both local and remote authentication services such as LDAP, Radius and TACACS+ to identify users and apply appropriate access policies and security profiles accordingly.. The proposed solution should support agentless single sign on (SSO) integration with Microsoft AD.0 The proposed solution should support policies based on device identity to control access according to device type.. The proposed solution shall provide policy lookup and route lookup tools on GUI to reveal matching policy or route entry based on input.. The proposed solution shall support virtual wire pairs with wildcard VLAN..3 The proposed solution shall support dynamically updated Internet Service Database objects for cloud service like Amazon, Apple, Citrix, Facebook, Google, Microsoft, etc..4 The proposed solution shall support WAN load balancing with link usage monitor and multiple load balancing algorithm like volume, sessions, spillover, source and destination IP..5 The proposed solution shall support Link Aggregation with traffic shaping..6 The proposed solution must be able to support routing protocols including RIP, OSPF and BGP in both IPv4 and IPv6.

3 .7 The proposed solution should support NAT66, NAT64 & DNS64..8 The proposed solution shall provide unlimited user license for all the features provided Virtual Firewall. The proposed solution shall provide 0 virtual domains for free, expandable to 50 by license upgrade.. The virtual domain should support global resource and per-partition resource setting, which include but not limit to sessions, firewall polices, local users, IPSec VPN tunnel, etc. IPSec & SSL VPN. The proposed solution shall minimally attain Internet Computer Security Association (ICSA) IPSEC & SSL VPN Certification. The proposed solution shall provide up to 50 Gbps IPSec VPN throughput and 4 Gbps SSL VPN throughput..3 The proposed solution shall provide VPN wizard for quick IPSec VPN setup on site-to-site (to same brand and other brand) and remote access (VPN client, ios, Android, Windows & Cisco client) setup..4 The proposed solution shall support one time password (OTP) generators for two factor authentication without additional external authentication servers for access such as IPSec VPN, SSLVPN, firewall policy authentication and captive portal access..5 The SSL VPN function should cover up to 0,000 SSL VPN users, no additional user license needed. IPS & Application Control. The proposed solution shall be recommended by NSS Labs in Next Generation IPS Test 05.. The proposed solution shall minimally attain Internet Computer Security Association (ICSA) NIPS Certification..3 The proposed solution shall provide up to 5 Gbps of IPS throughput in TCP in a single device..4 The proposed solution shall have the ability to detect, log and take action against network traffic based on over,500 application signatures.5 The application signatures shall cover Hong Kong localized applications, include but not limited to TVB Video, Apple Daily Video, HKTV, etc..6 The application control shall support cloud access security inspection for over 30 common cloud application, detailed control up to login, file download and upload..7 The proposed solution shall support custom IPS and application control signatures. Anti-Virus. The proposed solution shall minimally attain Internet Computer Security Association (ICSA) AV Certification. The proposed solution shall provide up to 4.5 Gbps of NGFW throughput (Flow AV, IPS &

4 Application Control) in a single device..3 The proposed solution shall able to detect and block connections to Botnet C&C Servers..4 The proposed solution shall support DNS based filtering to intercept and drop DNS request to botnet domains..5 The proposed solution shall support optional integration with cloud-based ATP sandboxing platform to detect zero-day attack. Web Filtering. The proposed solution shall support web filtering on both explicit proxy and transparent proxy deployment.. The proposed solution shall be able to allow, block, monitor, authenticate, warning and assign quota according to the web categories..3 The web categories classification should be real-time updated with global research center to minimize the security time gap. High Availability. High Availability feature must be supported for either NAT/Route, Transparent or hybrid mode.. The proposed solution shall support stateful session maintenance in the event of a fail-over to a standby unit..3 The proposed solution shall provide high availability clustering features, enables enhanced reliability and load sharing:.3. Provides Active-Active redundancy.3. Provides Active-Passive redundancy.3.3 Provides Load sharing redundancy with virtualization features.4 The HA clustering technique shall allow clustering of up to four units for increased reliability and performance. Management & logging. The proposed solution should support real-time web widget to display multi-utm threat with timeline and drill-down capabilities.. The real-time web widget should support presentation in table view, bubble chart, country map and chord chart..3 The proposed solution should support centralized management for switch and access point..4 The proposed solution should come with on-box web based GUI management, logging and reporting function..5 A single firewall log entry should include correlated NGFW information, including AV, web filter, application control and IPS. Admin do not need to trace the information piece by piece..6 The real-time web widget, policy configuration and logging page should be

5 . inter-switchable with a single click on specific entry. Admin do not need to search in each page for configuration and monitoring..7 The proposed solution should support on demand and report generation..8 The proposed solution should provide compliance checking for PCI DSS on schedule base. Cisco One Catalyst Port Fiber Switch - SNTC-8x5xNBD C Cat Port Fiber Switch - CAT3850 Universal K Image - 350W AC Config Secondary Power Supply - Cisco Catalyst 38504xGE Network Module - United Kingdom AC Type A Power Cable - 50CM Type Stacking Cable - Catalyst 3750X and 3850 Stack Power Cable 30CM - 350W AC Config Power Supply - Cisco One Foundation Perpetual Catalyst Port Fiber - SWSS UPGRADES C FND Perpetual Cat Port Fiber - Cisco ONE PI Device License for LF & AS for Cat k, 3k - Cisco ONE Identity Services Engine 50 EndPoint Base Lic - Cisco ONE Energy Mgmt Perpetual Lic 50 DO End Points - Cisco ONE Connected Analytics Net Deployment Dev Lic Year - Tracker PID v0 Fnd Perpetual CAT38504 no delivery 4 3. Cisco 000BASE-T SFP (GLC-T) Cisco Catalyst 60-X 4 GigE, 4 x G SFP, LAN Base - SNTC-8x5xNBD C Cat 60-X 4 GigE, 4xG SFP, LAN Base - AC Power Cord (UK), C3, BS m - Power Retainer Clip For Cisco 3560-C and 60-C Compact Switch - Cisco One Foundation Perpetual Catalyst 004 Port - SWSS UPGRADES C FND Perpetual Cat 004 Port - Cisco ONE PI Device License for LF & AS for Cat k, 3k - Cisco ONE Identity Services Engine 50 EndPoint Base Lic - Cisco ONE Energy Mgmt Perpetual Lic 50 DO End Points - Cisco ONE Connected Analytics Net Deployment Dev Lic Year - Tracker PID v0 Fnd Perpetual CAT00 no delivery - Catalyst 60-X FlexStack Plus Stacking Module - Cisco FlexStack 50cm stacking cable Cisco Catalyst 60-X 4 GigE, PoE 370W, 4xG SFP, LAN Base - SNTC-8x5xNBD Cat 60-X 4 GigE, PoE 370W, 4xG SFP, LAN Base - AC Power Cord (UK), C3, BS m - Power Retainer Clip For Cisco 3560-C and 60-C Compact Switch

6 - Cisco One Foundation Perpetual Catalyst 004 Port - SWSS UPGRADES C FND Perpetual Cat 004 Port - Cisco ONE PI Device License for LF & AS for Cat k, 3k - Cisco ONE Identity Services Engine 50 EndPoint Base Lic - Cisco ONE Energy Mgmt Perpetual Lic 50 DO End Points - Cisco ONE Connected Analytics Net Deployment Dev Lic Year - Tracker PID v0 Fnd Perpetual CAT00 no delivery 6. Cisco 000BASE-LX/LH SFP Transceiver Module, MMF/SMF, 30nm, DOM (GLC-LH-SMD) Cisco 80.ac Ctrlr 0Aps 4x4:3SS w/cleanair: Int; C Reg Domain - Cisco 3700 Series IOS Wireless LAN Recovery - Celling Grid Clip for Aironet Aps Recessed Mount (Defautl) - BOM Level AP3700i Bulk PID for C reg Domain - 80.n AP Low Profile Mounting Bracket (Default) - Cisco ONE Access Wireless CHOOS ONLY QTY HERE - SWSS UPGRADES Cisco One Wireless - Cisco ONE MSE License PAK - Cisco ONE Foundation Perpetual Wireless - SWSS UPGRADES C Foundation Perpetual Wireless - Cisco ONE Wireless LAN Controller AP License (any WLC) - Cisco ONE Wireless LAN Controller AP License PAK (any WLC) - Cisco ONE PI Device License for LF & AS for WLAN - Cisco ONE Identity Services Engine 5 Endpoint Base Lic - Cisco ONE CMS Base (Location + Connect) AP License - Cisco ONE Energy Mgmt Perpetual Lic 0 DO End Points - Cisco ONE Connected Analytics Net Deployment Dev Lic YR - Tracker PID v0 Fnd Perpetual AIR no delivery

7 Cisco Hardware Warranty and License Renewal ( Year) 8 條款 :. 報價時請列明所有條款. 報價請以澳門幣結算 3. 送貨如需收費, 請於報價中列明