Objective

The objective of this procurement is to secure Inkomoko’s network perimeter and internal infrastructure through the implementation of a high-performance, identity-aware Next-Generation Firewall that supports:

• Zero Trust Network Access (ZTNA)
• Multi-site orchestration
• Advanced threat protection
• High availability
• Secure remote connectivity
• Centralized management and reporting

Scope of Work

The successful vendor shall provide the following:

• Supply of enterprise-grade Next-Generation Firewall appliances.
• Installation and configuration at the Primary and Disaster Recovery sites.
• High Availability deployment (Active-Active or Active-Passive).
• Layer 7 application inspection.
• Identity-aware access control.
• SSL/TLS inspection.
• Intrusion Prevention System (IPS).
• Advanced malware protection and sandboxing.
• Web and URL filtering.
• Zero Trust Architecture implementation.
• Device posture assessment.
• Endpoint telemetry integration.
• Micro-segmentation.
• SD-WAN configuration.
• Centralized cloud management.
• Policy synchronization between sites.
• Security logging and compliance reporting.
• Migration from the existing firewall environment.
• Knowledge transfer and administrator training.
• 24/7 support and maintenance.
• Firmware and security signature updates.

Delivery shall be completed within 30 calendar days from issuance of the Purchase Order.

Deliverables

The successful vendor shall provide:

• NGFW deployment and implementation plan.
• Installed and configured firewall infrastructure.
• Successful migration from existing firewall infrastructure.
• Security policy documentation.
• SD-WAN configuration documentation.
• Administrator training.
• Knowledge transfer documentation.
• Acceptance testing report.
• Warranty documentation.
• Support and maintenance plan.

Requirements

Vendor Qualifications

Interested vendors should demonstrate:

• Experience implementing enterprise firewall solutions.
• At least three similar projects completed within the past five years.
• Authorization as a reseller or implementation partner for the proposed firewall solution.
• Certified security engineers assigned to the project.
• Availability of local or regional support.
• Financial capacity to deliver the assignment.
• Ability to provide 24/7 technical support.

Financial Proposal

The quotation should clearly distinguish:

• Hardware costs
• Software licenses
• Professional implementation services
• Training
• Support and maintenance
• Annual subscription costs
• Warranty
• CAPEX costs
• Recurrent/OPEX costs

Evaluation Criteria

The evaluation will comprise both technical and financial assessments. Proposals will be evaluated using the following criteria:

Technical Compliance (30%)

• Assessment of compliance with the required Next-Generation Firewall (NGFW) specifications, including Zero Trust Architecture, Intrusion Prevention System (IPS), VPN capabilities, SSL inspection, SD-WAN functionality, reporting features, and overall security capabilities.

Implementation Methodology (15%)

• Evaluation of the proposed implementation approach, including the migration strategy, project management methodology, testing procedures, documentation, and rollout plan.

Vendor Experience (10%)

• Assessment of the vendor’s experience in delivering similar enterprise firewall implementation projects, supported by relevant client references and project history.

Technical Team Qualifications (10%)

• Evaluation of the qualifications, certifications, and relevant experience of the proposed technical team responsible for the implementation and support of the solution.

Support and Service Levels (10%)

• Assessment of the vendor’s support capabilities, including availability of 24/7 support, response and resolution times, escalation procedures, maintenance services, and local or regional support presence.

Cybersecurity Standards (5%)

• Evaluation of compliance with recognized cybersecurity standards and best practices, such as ISO 27001, the NIST Cybersecurity Framework, and CIS Controls.

Training and Knowledge Transfer (5%)

• Assessment of the proposed training program, administrator and user documentation, knowledge transfer approach, and operational manuals.

Company Capacity and Financial Stability (5%)

• Evaluation of the vendor’s organizational capacity, financial stability, corporate profile, and ability to successfully deliver and support the project.

Warranty and Maintenance (5%)

• Assessment of the warranty period, firmware and software updates, security signature updates, and ongoing maintenance services included in the proposal.

Financial Proposal – Total Cost of Ownership (5%)

• Evaluation of the overall cost of ownership, including hardware acquisition, software licensing, implementation services, subscriptions, maintenance, support, and any other recurring or one-time costs.

Benefits

Application Details

Mandatory Requirements

Vendors shall submit:

• Certificate of Incorporation/Registration
• Valid Tax Compliance Certificate
• Company Profile
• Authorization letter from the manufacturer (where applicable)
• Evidence of similar assignments
• Reference letters or completion certificates
• CVs of proposed technical personnel
• Technical Proposal
• Financial Proposal
• Proposed implementation schedule