Minutes of Meeting of the Designated Technical Bid Evaluation Committee in regard to e-tender for Procurement of UTM at STPI Noida.

Transcription

1 SOFTWARE TECHNOLOGY PARKS OF INDIA NOIDA 29 th Sept 2015 Minutes of Meeting of the Designated Technical Bid Evaluation Committee in regard to e-tender for Procurement of UTM at STPI Noida. File Ref No: SMSG/MPU/05/005-STPIN The designated committee members have been informed vide IOC dated 18 th August 2015 to perform the Technical Bid Evaluation of the bids received in regard to the tender to procure UTM for STPI Noida. Designated Technical Bid Evaluation Committee Members: 1. Sh. Rakesh Kumar Verma, Deputy Director 2. Ms. Yashodhara Meena, Deputy Director 3. Ms. Chhaya Kandwal, SAO Deliberations: 1. The designated committee received the Bids for the technical evaluation of following bidders. a. M/s. Bharti Airtel Services Limited. b. M/s. SARA Infoway ITES India Pvt. Ltd. c. M/s. Corporate Infotech private Limited. d. M/s. RICOH India Limited. e. M/s. computerware (India) Pvt. Limited f. M/s. AKAL Informations Systems Limited. 2. The committee performed Technical bid evaluation & observed that certain level of clarity is required w.r.t. General Compliance & technical compliance parameters. Therefore, clarification was sought from all the bidders. The detail of clarification asked is attached on page no C/ Based on the responses received from all the bidders, the committee performed Technical bid evaluation and submission is as below: a. M/s. Bharti Airtel Services Limited is Technically Qualified. b. M/s. RICOH India Limited is Technically Qualified. c. M/s. Corporate Infotech private Limited is Technically Qualified. d. M/s. SARA Infoway ITES India Pvt. Ltd is Technically Dis-Qualified. e. M/s. computerware (India) Pvt. Limited is Technically Dis-Qualified. f. M/s. AKAL Informations Systems Limited is Technically Dis-Qualified.

2 The detailed assessment report is attached as annexure General compliance Evaluation & Technical Compliance Evaluation. Recommendations: In view of the deliberations, the case may be processed for further proceedings. Rakesh Kumar Verma Yashodhara Meena Chhaya Kandwal DD DD TO Sd/- Director

3 Sr. No 1 Technical Parameter M/s. RICOH M/s. Corporate Infotech Pvt. Ltd. Fortigate FG- 600C-BDL Fortianalyzer FAZ-300D (instead of FAZ 200D) Cyber Roam CR NGXP- FB M/s. Bharti Airtel Services Limited Fortigate FG-600C- BDL M/s. SARA Infoway ITES Pvt. Ltd. PROPOSED PRODUCTS Dell sonicwall Super Massive 9200 Fortianalyz er FAZ- 300D (instead of FAZ 200D) Dell Optiplex 3020 Minitower sonicwall Security 4300 Sonicwall Analyzer Reporting Software for NSA , 6600 E Class & Supermassiv e Product Technical Compliance Evaluation Technical Compliance - Tender M/s. AKAL M/s. Computer Information Ware (India) Pvt. Systems Ltd. Limited. Dell sonicwall Super Massive 9200 Dell Optiplex 3020 Minitower sonicwall Security 4300 Sonicwall Analyzer Reporting Software for NSA , 6600 E Class & Supermassive Product Dell sonicwall Super Massive 9200 Dell Optiplex 3020 Minitower sonicwall Security 4300 Sonicwall Analyzer Reporting Software for NSA , 6600 E Class & Supermassive Product Onsite Comprehensive warranty of 3 Years (24x7 Onsite Support, 4 Hours Response Time) Complied Complied Complied Complied Complied Complied

4 On Site Product support (24X7) for the solution for minimum period of three year Complied Complied Complied Complied Complied Complied Appliance should be certified with EAL/ ICSA (Latest Certification) or equivalent International Certification, corresponding to features of UTM. Complied Complied Complied Complied Complied Complied Model quoted should be new and shall carry End Of Support, End of Life cycle for more than 7 years from the date of purchase order Complied Complied Complied Complied Complied Complied Number of Network Interfaces to be mentioned exactly as supported by the device, Vendor to quote with minimum of 12 no of Gigabit interfaces (10/100/1000 TX RJ45 Type). The appliance should also have 4 Nos. of SFP/ SFP+ interfaces & at least 1 Nos. of USB Interface. Expansion should be possible for another 8 Ports with no performance degradation in UTM throughput. Complied Complied Complied Not Complied Not Complied Not Complied Should support firewall throughput of at least 15 Gbps Complied Complied Complied Complied Complied Complied Should support VPN throughput of at least 1Gbps Complied Complied Complied Complied Complied Complied Should support at least 5,00,000 concurrent sessions and at least new sessions per second Complied Complied Complied Complied Complied Complied The device should not have license restriction on number of users Complied Complied Complied Complied Complied Complied The device should able to block portevasive applications. Complied Complied Complied Complied Complied Complied

5 Should support at least 50 IPSec Site-to- Site VPN tunnels and 100 IPSec Remote access VPN tunnels.(if licensed separately should include 10 IP Sec Site to Site and 100 IP Sec Remote Access License) Complied Complied Complied Complied Complied Complied Should support at least 100 concurrent SSL VPN users (If license separately should include 50 SSL VPN License ) Complied Complied Complied Complied Complied Complied Appliance should have hot-swappable redundant power supplies Complied Complied Complied Complied Complied Complied The firewall should be able to support high availability and dynamic load balancing for data passing through the firewall (active-active) Complied Complied Complied Complied Complied Complied Should support automatic ISP failover as well as ISP load sharing and load balancing for outbound traffic. Complied Complied Complied Complied Complied Complied option to configure traffic shaping on a per policy basis for specific application/specific networks and should be able to define guaranteed bandwidth and maximum bandwidth per policy. Complied Complied Complied Complied Complied Complied The appliance Should support Link aggregation (IEEE 802.3ad) technology to group multiple physical links into a single logical link of higher bandwidth and link fail over capability. Complied Complied Complied Complied Complied Complied The appliance Should support VLAN tagging (IEEE 802.1q) and Should support VLAN on all interfaces and minimum of 64 VLAN/ Interface should be supported Complied Complied Complied Complied Complied Complied

6 The Appliance should be Rack mountable Complied Complied Complied Complied Complied Complied Appliance should support Power input AC 100~240V,50-60 Hz Complied Complied Complied Complied Complied Complied ISA should support IPSec NAT Traversal Complied Complied Complied Complied Complied Complied ISA should support IPV6 and all Policies on IPV6 Complied Complied Complied Complied Complied Complied Bandwidth Control/ Restriction per IP Address & Per policy should be available. Complied Complied Complied Complied Complied Complied Should Support NAT without degrading the performance of the firewall Complied Complied Complied Complied Complied Complied Should support authentication using Radius, Tacacs+, LDAP etc. Complied Complied Complied Complied Complied Complied Should support Routing between Vlans Complied Complied Complied Complied Complied Complied Should have Layer 2 bridge support Complied Complied Complied Complied Complied Complied Should support at least 5000 Policies Complied Complied Complied Complied Complied Complied should have at least 2.5 Gbps of IPS throughput Complied Complied Complied Complied Complied Complied IPS shall be able to detect incidents that originate from inside the network perimeter as well as from outside the network perimeter and shall be able to take action on the basis of configured policies. Complied Complied Complied Complied Complied Complied Should have option to create Userspecified signatures. Complied Complied Complied Complied Complied Complied Each IPS signature should have a configurable actions like terminate a TCP session by issuing TCP Reset packets to each end of the connection, or drop the traffic in addition to sending a Complied Complied Complied Complied Complied Complied

7 alert and logging the incident Signatures should have a severity level defined to it so that it helps the administrator to understand and decide which signatures to enable for what traffic (eg. for severity level: critical, high, medium, low) Complied Complied Complied Complied Complied Complied IPS shall be able to be configured such that attack signature and traffic analysis focus only on specified hosts, specified protocols, or specified services. Complied Complied Complied Complied Complied Complied Should be able to generate graphical reports on top attacks, source for attack etc. Complied Complied Complied Complied Complied Complied Should have the option to schedule reports for automatic generation. Complied Complied Complied Complied Complied Complied Vendor updates its attack signature database regularly and it should be configurable to update the signatures automatically without manual intervention. Complied Complied Complied Complied Complied Complied Vendor makes new attack signatures and new major software releases available for download from their Web site Complied Complied Complied Complied Complied Complied Should be a integrated solution with appliance based firewall. Complied Complied Complied Complied Complied Complied The proposed solution should have minimum 1 Gbps of AV throughput Complied Complied Complied Complied Complied Complied The solution should generate the reports for the firewall, region of origin, gateway level AV, IPS web filtering and spam functionalities requested. Complied Complied Complied Complied Complied Complied

8 The solution shall have readymade templates to generate reports like complete reports or attack reports, bandwidth report, intranet report Complied Complied Complied Complied Complied Complied The ISA should support SNMP V2C and V3 for integration with existing NMS Complied Complied Complied Complied Complied Complied The solution should help to analyze/understand Attacks over various protocols like http, ftp, SMTP, POP3 and IMAP as well as to sources and destination for these attacks. Complied Complied Complied Complied Complied Complied The solution should help to analyze/understand the security breaches hacker attacks and the sources and destination for these attacks Complied Complied Complied Complied Complied Complied The solution should help to analyze/understand the protocol and bandwidth usage by users to help in capacity planning and understand network utilization Complied Complied Complied Complied Complied Complied Should have options to generate reports in terms of which are the frequent attacks as well as top sources and destination for attacks Complied Complied Complied Complied Complied Complied Should have options to generate reports in different formats like html, pdf, ms word etc.. Complied Complied Complied Complied Complied Complied The solution should have configurable options to send the reports as a mail to the designated address or to ftp to the configured ftp location Complied Complied Complied Complied Complied Complied Should have configurable parameters to send alert s based on event type or attack type or total number of attacks Complied Complied Complied Complied Complied Complied

9 Should have configurable parameters to set alert thresholds (eg. If same event/attack occurs more than 5 times within an hrs time) Complied Complied Complied Complied Complied Complied The solution should have configurable options to schedule the report generation (eg. hourly, daily, weekly etc.) Complied Complied Complied Complied Complied Complied Should have options to create users with different access rights (eg. users who can only view reports, users who can create schedules and reports etc) Complied Complied Complied Complied Complied Complied ISA should support backup Policies and Firewall OS using TFTP or any other method Complied Complied Complied Complied Complied Complied If storage and web content filtering functionalities are not available on the box & separate server/appliance is required for the logging & reporting and content filtering, the BOM should be included in the annexure I & the cost need to be included in the Annexure III. The storage for logging should be capable of storing logs at least up to 1 Year or higher with minimum internal storage of 60 GB. Complied Complied Complied Complied Complied Complied Sd/- Rakesh Kumar Verma Yashodhara Meena Chhaya Kandwal DD DD TO