Solicitation NUES Next Generation Firewall RFP. Bid designation: Public

Transcription

1 Solicitation NUES Next Generation Firewall RFP Bid designation: Public Northeastern Utah 4/17/2014 2:07 PM p. 1

2 Bid Number Bid Title NUES Next Generation Firewall RFP NUES Next Generation Firewall RFP Bid Start Date Apr 17, :04:30 PM MDT Bid End Date May 7, :00:00 PM MDT Question & Answer End Date May 2, :00:00 PM MDT Bid Contact Duke Mossman ext 101 Contract Duration Contract Renewal Prices Good for One Time Purchase Not Applicable 3 months Bid Comments Please see the attached RFP document for the specifications for the RFP. Added on Apr 17, 2014: Please contact Don Remy at don@nucenter.org or x3 for questions on this RFP. Changes made on Apr 17, :06:03 PM MDT Item Response Form Item Quantity Unit Price Delivery Location Next Generation Firewall 9 each Northeastern Utah No Location Specified Morgan School District 240 E Young Street Qty 4 PO Box 530 Morgan UT Qty 1 Description Next Generation Firewall that includes the following: Required: IPv6 VPN for site to site links and mobile users IPS throughput exceeding 2 GBPS Firewall o Create IP Groups to apply firewall rules to o Throughput support should exceed 2 GBPS * Three years of support and updates Optional: Web filtering with throughput of 1.5 GBPS * Antivirus with throughput of 1.5 GBPS Daggett School District 2 North 2 West Manila UT Qty 1 North Summit School District Box 497 Coalville UT Qty 1 South Summit School District 375 East 300 South Kamas UT Qty 1 Rich School District 25 South 100 West Randolph UT Qty 1 4/17/2014 2:07 PM p. 2

3 4/17/2014 2:07 PM p. 3

4 4/17/2014 1:43:00 PM Northeastern Utah Next Generation Firewall Request for Proposal Northeastern Utah Educational Services 4/17/2014 2:07 PM p. 4

5 2 Table of Contents Northeastern Utah PROJECT OVERVIEW...3 INSTRUCTIONS FOR VENDOR RESPONSES...5 PROPOSED NFGW SOLUTION ARCHITECTURE CONFIGURATION, MGMT, AND COMPLIANCE...7 ACCESS CONTROLS AUTH AND ENCRYPTION...8 INTEGRATED NEXT-GEN FEATURES...9 OTHER CONSIDERATIONS...10 SOLUTION PRICING /17/2014 2:07 PM p. 5

6 3 I. PROJECT OVERVIEW Northeastern Utah Education Services is a rural services center in the State of Utah. We work with nine districts in the Northeastern section of the state. We have several districts in need of upgrading their current firewall solution at the district s network border. REQUESTING COMPANY INFORMATION Northeastern Utah will be facilitating the RFP process for the NGF (Next Generation Firewall). We will also be involved in implementing the chosen solution at each site. CURRENT IT ENVIRONMENT Currently the districts are using either a Linux based IPTables firewall solution at the border, or some older commercial firewalls. A NGF that can address IPS, Antivirus, and basic web filtering is needed to meet the current and future needs of the districts. SECURITY CHALLENGES The districts all have a 1 GBPS Internet connections to their facilities. With this level of throughput and with public IP addresses to the desktop, the networks are often the target of hackers. IPS is one of the key features that will be needed. The web filtering would only be used as backup to the current filtering solution the district has. CURRENT FIREWALL AND RELATED SECURITY PRODUCTS As stated most of the districts currently use a Linux IPTables firewall solution. Some of the districts are on older Juniper firewalls as well. 3. NUES 4/17/2014 2:07 PM p. 6

7 4 Northeastern Utah DESIRED NEXT GENERATION FIREWALL (NGF) FEATURES Required: IPv6 VPN for site to site links and mobile users IPS throughput exceeding 2 Gbps Firewall o o Create IP Groups to apply firewall rules to Throughput support should exceed 2 Gbps Optional: Web filtering with throughput of 1.5 Gbps Antivirus with throughput of 1.5 Gbps PROJECT PURPOSE Primary purpose of the project is to replace aging hardware that is currently deployed, and increase network security for devices on the network. The current connection speed is at 1 GBPS, but expected to reach 2 GBPS during the lifetime of the product. PROJECT SCOPE All quotes for the RFP must be valid until the end of July Some of the entities will be making their purchase before the end of the current fiscal year, with the remaining using next year s budget. Implementation is to be completed by August 31 st for each of the devices purchased. Training must also be provided on a single site unlimited seat basis. NUES /17/2014 2:07 PM p. 7

8 5 II. Instructions for Vendors Response Timeline and Evaluation: All responses are due by May 7 th. The three top vendors will be invited to give group presentations during the week of May 12 th through May 16 th. The final award will be made during the week of May 19 th through the 23 rd. All quotes must be valid until the end of July Some of the participants will be making the purchase out of the current budget year, and others out of the budget year. VENDOR QUESTIONS TO: Your contact for the RFP is: Name: Don Remy don@nucenter.org Phone: x3 5. NUES 4/17/2014 2:07 PM p. 8

9 6 Northeastern Utah SELECTION CRITERIA The below criteria will help to determine selection: Technical capabilities (IPS, Web Filter, AV throughput, VPN, IPv6, and firewall) 30% Feature sets 5% Typical deployment times 5% Implementation plan and support 10% Pricing 30% Clear overview of how their solution will help you achieve your project goals 5% Results of requested demonstrations and presentations 15% NUES /17/2014 2:07 PM p. 9

10 7 2. Proposed Next Generation Firewall Solution In this section, describe your NGF solution, including the security devices it consolidates into one solution. 2.1 ARCHITECTURAL OVERVIEW Do you propose an appliance-based or a virtual solution? Discuss the advantage of whichever one you are proposing. If this is a hardware-based solution, do you support multiple logical firewalls on the same hardware platform? 2.2 BASIC FIREWALL FEATURES Provide a concise overview of the table stakes features included in your solution, such as AV signatures, IP and port blocking, robust logging and blacklist/whitelist capabilities. Do you have any advantages in your basic feature set versus competitors? 2.3 POLICY CREATION AND ENFORCEMENT Discuss the ability administrators have to create policies, as well as how policies are enforced. 2.4 BANDWIDTH CONSIDERATIONS Current links at site are 1 GBPS, but during the lifetime of the devices we expect to see 2 GBPS brought into the districts. 7. NUES 4/17/2014 2:07 PM p. 10

11 8 2.5 TROUBLESHOOTING TOOLS AND FORENSICS Northeastern Utah Discuss troubleshooting capabilities, such as packet capture, traceroute and ping, etc. Are troubleshooting capabilities integrated? 2.6 VPN Does this solution have built-in VPN support? If so, does it support site-to-site IPSEC VPNs? Does it support client based SSL/TLS VPNs for remote users? 2.7 MAXIMUM CAPACITY What is the maximum capacity of devices behind the firewall with IPS turned on? 3. Configuration, Management How scalable is this solution and what is the maximum compliance capacity available per device or virtual machine? Discuss configuration, management and compliance variables. 3.1 DISCOVERY AND AUTO-CONFIGURATION TOOLS Which discovery and auto-configuration features do you offer? 3.2 CONFIGURATION AUDIT Any NGF under consideration must have configuration audit capabilities. Detail your product s audit features. NUES /17/2014 2:07 PM p. 11

12 9 3.3 QUALITY OF SERVICE Describe any features in the proposed solution that automatically adjust quality of service (QoS) levels. 3.4 ANALYSIS TOOLS AND REPORTS How are security incidents analyzed, and what reports are generated automatically? Can the reports be ed each day or require a manual export? 3.5 SECURITY MANAGEMENT How is your solution managed? How does it integrate with other security layers? If you have pre-built integration with specific partners or management tools, please list them. 3.6 PROACTIVE MANAGEMENT Provide an overview of your solution s real-time decision making tools. Discuss how your solution shares actionable intelligence to boost visibility into evolving risks, while also simplifying and speeding up incident reporting, trouble ticketing, remediation and management workflows. 9. NUES 4/17/2014 2:07 PM p. 12

13 10 Northeastern Utah 3.7 COMPLIANCE Explain how your solution streamlines the compliance process through any automatic reporting, enforcement and auditing capabilities. 4. Access Controls, Authentication and Encryption Access controls and authentication will be weighted heavily during the selection process. How do users authenticate into your system? How do you protect data in motion and at rest? How fine-grained are your policies for application access, roles and privileges? 4.1 ACCESS CONTROLS How granular are access controls in Web applications and legacy applications? 4.2 SEPARATION OF DUTIES To be considered, your NGF must provide tools to set up discretionary-based roles and privileges. It should also allow for the creation of separate access and control administrative privileges. 4.3 ACTIVE DIRECTORY (OR LDAP, ETC.) SUPPORT, and Two Factor Authentication List what LDAP integration options your firewall supports. Describe what two factor authentication options are available from login to management portal. 5. Other Considerations 5.1 CUSTOMER SUPPORT Explain your customer support policies. What is your normal response time? How much self-service support is built into the product? How long does the typical incident take to remediate? What is the escalation process? 5.2 PROFESSIONAL SERVICES Describe your Professional Services capability as it pertains to this project. Include services offered, locations provided, and whether in-sourced or outsourced personnel are used. 10. NUES 4/17/2014 2:07 PM p. 13

14 TRAINING Training will need to be part of your proposal. Include one-day single site training with unlimited seating at one of our facilities. Realistically the number of seats will match the number of purchased units +/ Solution Costs 6.1 PRICING SPECIFICS Please provide detailed pricing for your solution; include separate costs for hardware, software, deployment costs, training, support costs, professional services, and shipping. Describe any methods that you provide to help quantify the TCO and/or ROI of your solution. If you have any third party support for your TCO or ROI numbers, please provide it. 4/17/2014 2:07 PM p. 14

15 Question and Answers for Bid # NUES Next Generation Firewall RFP OVERALL BID QUESTIONS There are no questions associated with this bid. If you would like to submit a question, please click on the "Create New Question" button below. Question Deadline: May 2, :00:00 PM MDT 4/17/2014 2:07 PM p. 15