Contract notice: Network infrastructure Tender - 26475787

Object of the contract
Network infrastructure
Description: Contract notice: Network infrastructure
Authority Type: Ministry or any other national or federal authority
Contact Nature: Services
Procedure: Open procedure
Document: Contract notice
Regulation: European Union, with participation by GPA countries
Award criteria: The most economic tender
CPV code: 32424000, 32424000, 48214000, 75131000, 72315000, 32424000, 48214000, 75131000, 72315000
CPV Description: Network Infrastructure
Network operating system software package
Government services
Data network management and support services
Firewall
The subject of the public procurement is the supply of equipment for securing the network of the client, Next-Gen Firewall gates (just FW) that will protect the perimeter and the intranet of the grantor. Stable solutions ensuring the perimeter security of the site of the client-does not meet current security standards and does not have advanced security features to ensure the full security of the site of the sponsor.
Main Site: Prague
The sponsor passed the NBU's analysis in 2017, which was carried out on the basis of the Government Resolution No. 104/2017 Coll. Report on the Cybernetic Safety Analysis Report dated March 23, 2017 (Ref 2173/2017-NBU / 41)that the contractor used the technology to protect the perimeter, requiring modernization and adaptation to current cyber threats.
The subject of the public procurement is the supply of equipment for securing the site of the contracting authority, Next-Gen Firewall gates (just FW) that will protect the perimeter and the intranet of the grantor. The current solution ensuring the safety of the perimeter of the site of the contracting entity will not be fulfilledis the current security standards and does not have advanced security features to ensure full security of the grantor's site.
The parts of the supply are extended by the Cisco ISE 5-Yr 1500 Endpoint Plus license to the existing device, which is an indispensable part of protecting the client's security perimeter. Firewall technology is not restricted to the product and its requirements are part of itincluding this documentation. The integration of the firewall with the Cisco ISE solution is a mandatory requirement, and Cisco ISE licenses need to be extended to the full number of subscribers. Without the integration of the firewall and Cisco ISE, it is not possible to apply security policies to end-user devices. It is not possible to place dangerous devices in the karanten and in a significant way bthe identification and analysis of security incidents has been limited. Therefore, these licenses are precisely specified and have to be completed at the present time.
In the scope of the subject, the implementation of the firewall into the existing infrastructure of the client will be carried out in the framework of which the migration of the existing Kernun firewall will be carried out and the end of the existing site-to-site IPsec VPN tonew firewall. The firewall will be deployed in "High-Availability" mode and its implementation will not limit the operation of the existing solution until it decides to upgrade to the new firewall.
The basic description of the state-of-the-art technology is as follows:
1. DMZ firewall: Kernun UTM (most of the LAN and DMZ servers are virtual VMware vSphere),
2. Site-to-site IPsec VPN: O2 Internet Business VPN (4 locations) ended at Kernun UTM.
3. Cisco ISE Central Authentication Server
The subject of the public offer is:
A. Supply of network equipment for the protection of the external firewall
B. SW according to the specification contained in this ZD
C. Delivering the Cisco ISE 5-Yr 1500 Endpoint Plus
D license. The first phases of the firewall implementation include the fulfillment of the technical specifications under this ZD
E. The second phase of the firewall implementation involves filling the technical specifications of this ZD
F. Providing technical and service support to the manufacturer for 5 years
G. Providing technical and service support to the contractor for 5 years
H. to provide additional services related to the supply, implementation and development of the offered solution (hereinafter referred to as "Solving"), including: a.and adjusting the Resolution
b. design and implementation of internal processes supported by Solving
c. The contractor proves according to the provisions of Section 77 (2) of the Act by submitting a proof of the entrepreneurial right in the scope corresponding to the subject of this public procurement - that is to say, the documen- tation of the work of the Client in connection with the operation of the Works.according to the Trades Licensing Act:
- Providing software, consultancy in the field of information technology, data processing, hosting and related services and web portals
- Wholesale and retail
The contracting authority does not require proof of economic qualification.
Internet address (URL): https://www.psp.cz/sqw/hp.sqw?akk=7