Procurement Summary
Country: Azerbaijan
Summary: New Generation "Firewall" Hardware
Deadline: 29 Dec 2025
Posting Date: 06 Dec 2025
Other Information
Notice Type: Tender
TOT Ref.No.: 131565641
Document Ref. No.: 2025/AT/00814/V1
Financier: Self Financed
Purchaser Ownership: Public
Tender Value: AZN 39268.04
Purchaser's Detail
Name: Login to see tender_details
Address: Login to see tender_details
Email: Login to see tender_details
Login to see detailsTender Details
Firewall, Technical requirements: Purpose: AI/ML based NGFW appliance with network security, SD-WAN and ZTNA support. Key Features: • IPS, Antivirus, Application Control, Web/DNS Filter, DLP, Sandbox, Botnet, IoT/OT Security • Real-time SSL/TLS 1.3 inspection • Zero Trust Network Access (ZTNA) • Secure SD-WAN and SD-Branch integration • AI/ML based threat analysis and automatic protection Performance (minimum): • Firewall Throughput - 39 Gbps • NGFW Throughput - ≥ 3.1 Gbps • Threat Protection - ≥ 2.8 Gbps • IPS Throughput - ≥ 5.3 Gbps • SSL Inspection - ≥ 3 Gbps • IPsec VPN - ≥ 35 Gbps • 3 M session / 140 K new session ps • 500 SSL-VPN user, 10 VDOM • 1+1 daxili redundant AC PSU Portlar və İnterfeyslər: • 16 × GE RJ45, 8 × GE SFP, 4 × 10GE SFP+ • 1 × RJ45 MGMT, 1 × RJ45 HA, 1 × USB, 1 × Console • TPM module and BLE support • 480 GB SSD storage variant Physical: • 1 RU Rack, 44×432×254 mm, ≈ 5.5 kg • Power 38-47 W, Sound 50 dba, 0-40 °c compliance and certifications: • ce, fcc class a, rcm, ul/cul, vcci, ipv6/usgv6 • real-time security os support (license package): 3 years of 24×7 support and ai-powered unified threat protection bundle. comments (on sections) 1) identification and authorization - fsso / ldap integration in the existing topology - recognition of domain users by groups and debugging. - mfa - otp/token for admin and remote users - rbac - rights restricted only by role - admin access vlan - management only from separate vlan and limited ips - radius server integration - access fsso for wifi (staff, guest, other) synchronized with - privileged session monitoring - log/screen recording and debugging of privileged sessions. 2) networking and segmentation - segmentation by vlans - users, servers, guests, management - vpn region policies - per region separate groups and conditions for - zero trust approach - only explicit allow rules - east-west traffic control - internal inter-server traffic is also checked...
Number of bidders required: 3 Date and time of opening of envelopes: 29.12.2025 15:00 Last date and time for submission of proposals: 2025-12-29
Documents
Tender Notice