Objective
The objective of this procurement is to secure Inkomoko's network perimeter and internal infrastructure through the implementation of a high-performance, identity-aware Next-Generation Firewall that supports:
- Zero Trust Network Access ZTNA
- Multi-site orchestration
- Advanced threat protection
- High availability
- Secure remote connectivity
- Centralized management and reporting
Scope of Work
The successful vendor shall provide the following:
- Supply of enterprise-grade Next-Generation Firewall appliances.
- Installation and configuration at the Primary and Disaster Recovery sites.
- High Availability deployment Active-Active or Active-Passive.
- Layer 7 application inspection.
- Identity-aware access control.
- SSL/TLS inspection.
- Intrusion Prevention System IPS.
- Advanced malware protection and sandboxing.
- Web and URL filtering.
- Zero Trust Architecture implementation.
- Device posture assessment.
- Endpoint telemetry integration.
- Micro-segmentation.
- SD-WAN configuration.
- Centralized cloud management.
- Policy synchronization between sites.
- Security logging and compliance reporting.
- Migration from the existing firewall environment.
- Knowledge transfer and administrator training.
- 24/7 support and maintenance.
- Firmware and security signature updates.
Delivery shall be completed within 30 calendar days from issuance of the Purchase Order.
Deliverables
The successful vendor shall provide:
- NGFW deployment and implementation plan.
- Installed and configured firewall infrastructure.
- Successful migration from existing firewall infrastructure.
- Security policy documentation.
- SD-WAN configuration documentation.
- Administrator training.
- Knowledge transfer documentation.
- Acceptance testing report.
- Warranty documentation.
- Support and maintenance plan.
Requirements
Vendor Qualifications
Interested vendors should demonstrate:
- Experience implementing enterprise firewall solutions.
- At least three similar projects completed within the past five years.
- Authorization as a reseller or implementation partner for the proposed firewall solution.
- Certified security engineers assigned to the project.
- Availability of local or regional support.
- Financial capacity to deliver the assignment.
- Ability to provide 24/7 technical support.
Financial Proposal
The quotation should clearly distinguish:
- Hardware costs
- Software licenses
- Professional implementation services
- Training
- Support and maintenance
- Annual subscription costs
- Warranty
- CAPEX costs
- Recurrent/OPEX costs
Evaluation Criteria
The evaluation will comprise both technical and financial assessments. Proposals will be evaluated using the following criteria:
Technical Compliance 30%
- Assessment of compliance with the required Next-Generation Firewall NGFW specifications, including Zero Trust Architecture, Intrusion Prevention System IPS, VPN capabilities, SSL inspection, SD-WAN functionality, reporting features, and overall security capabilities.
Implementation Methodology 15%
- Evaluation of the proposed implementation approach, including the migration strategy, project management methodology, testing procedures, documentation, and rollout plan.
Vendor Experience 10%
- Assessment of the vendor's experience in delivering similar enterprise firewall implementation projects, supported by relevant client references and project history.
Technical Team Qualifications 10%
- Evaluation of the qualifications, certifications, and relevant experience of the proposed technical team responsible for the implementation and support of the solution.
Support and Service Levels 10%
- Assessment of the vendor's support capabilities, including availability of 24/7 support, response and resolution times, escalation procedures, maintenance services, and local or regional support presence.
Cybersecurity Standards 5%
- Evaluation of compliance with recognized cybersecurity standards and best practices, such as ISO 27001, the NIST Cybersecurity Framework, and CIS Controls.
Training and Knowledge Transfer 5%
- Assessment of the proposed training program, administrator and user documentation, knowledge transfer approach, and operational manuals.
Company Capacity and Financial Stability 5%
- Evaluation of the vendor's organizational capacity, financial stability, corporate profile, and ability to successfully deliver and support the project.
Warranty and Maintenance 5%
- Assessment of the warranty period, firmware and software updates, security signature updates, and ongoing maintenance services included in the proposal.
Financial Proposal – Total Cost of Ownership 5%
- Evaluation of the overall cost of ownership, including hardware acquisition, software licensing, implementation services, subscriptions, maintenance, support, and any other recurring or one-time costs.
Benefits
Application Details
Mandatory Requirements
Vendors shall submit:
- Certificate of Incorporation/Registration
- Valid Tax Compliance Certificate
- Company Profile
- Authorization letter from the manufacturer where applicable
- Evidence of similar assignments
- Reference letters or completion certificates
- CVs of proposed technical personnel
- Technical Proposal
- Financial Proposal
- Proposed implementation schedule
