Supply, Delivery and Installation of Enterprise Tender - 28265504

Procurement Summary

Country: Philippines

Summary: Supply, Delivery and Installation of Enterprise Network and Server Monitoring Software for the Commission on Human Rights,

Deadline: 16 Nov 2018

Posting Date: 12 Nov 2018

Other Information

Notice Type: Tender

TOT Ref.No.: 28265504

Document Ref. No.: 2018-10-

Competition: ICB

Financier: Self Financed

Purchaser Ownership: -

Tender Value: Refer Document

Purchaser's Detail

Name: Login to see tender_details

Address: Login to see tender_details

Email: Login to see tender_details

Login to see details

Tender Details

Supply, Delivery and Installation of Enterprise Network and Server Monitoring Software for the Commission on Human Rights,
DESCRIPTION AND SCOPE OF SERVICES
Requirements (Supply, delivery and installation):
-c 1 Enterprise network and servers management software
Enterprise Network and Server Management Software
General:
For effective operations and management of IT Operations, there is a need for an industry-standard Enterprise Network and Server Management System (ENSMS). Given the expanse and scope of the project, EMS becomes very critical for IT Operations and SLA Measurement. Some of the critical aspects that need to be considered for operations of IT setup of are:
a) Network Fault Management
b) Network Performance Management
c) Network Flow Traffic Monitoring
d) Application Performance Management
e) Server Performance Monitoring
f) Centralized Log Management
g) Centralized and Unified Dashboard
h) Centralized and Customizable Service Level Reporting
I) Help Desk for Incident Management
The Monitoring Solution should provide Unified Architectural design offering seamless common functions including but not limited to:
-c Event and Alarm management,
-c Auto-discovery of the IT environment,
-c Performance and availability management
-c Correlation and root cause analysis
-c Service Level Management, notifications
-c Reporting and analytics
-c Automation and Customization
There should be a tight integration between infrastructure metrics and logs to have the single consolidated console of Infrastructure & security events.
Consolidate IT event management activities into a single operations bridge that allows operator quickly identify the cause of the IT incident, reduces duplication of effort and decreases the time it takes to rectify IT issues.
The Operator should be able to pull up security events related to a given Configuration Item, from a single console which also has NOC events, and use the security events to triage the problem. This way the Operator gets consolidated system/network event details and security events (current and historical) from the same console and save time in troubleshooting / isolating the issue.
The operator should be able to build correlation rules in a simple GUI based environment where the Operator should be able to correlate cross domain events
Scalability - The system should be capable of supporting at least 15 thousand network flow per second on single server with capability to capture each unique traffic conversations
The solution shall provide future scalability of the whole system without major architectural changes.
The Solution shall be distributed, scalable, and multi-platform and open to third party integration such as Cloud, Virtualization, Database, Web Server, Application Server platforms etc.
All the required modules should be from same OEM and should be tightly integrated for single pane of glass view of enterprise monitoring
The solution must provide single integrated dashboard to provide line of business views and drill down capabilities to navigate technical operators right from services to last infrastructure components
Consolidated dashboard of the proposed EMS solution must be able to do dynamic service modelling of all business critical production services & use near-real time Service Model for efficient cross domain event correlation.
The proposed solution must provide SDK/Rest API for North bound and South Bound Integrations e.g. Forwarding specific metric data to third party database, Notifications to third party systems such as Jira, AutoDesk, Slack
DETAILED SPECIFICATIONS: ENSMS
Consolidated Dashboard
The platform must provide complete cross-domain visibility of IT infrastructure issues
The platform must consolidate monitoring events from across layers such as Network, Server, Application, Database etc.
The solution should support single console for automated discovery of enterprise network components e.g. network device, servers, virtualization, cloud, application and databases
The solution must support custom dashboards for different role users such as Management, admin and report users
The solution must allow creating custom data widget to visualize data with user preferences eg. Refresh time, time span, background colour, unit conversion
The solution must support multiple visualization methods such as gauge, grid, charts, Top N etc.
The solution should provide superior view of infrastructure health across system, networks, application and other IT Infrastructure components into a consolidated, central console
There should be only one dashboard/interface to collected network/server/application/log data after correlation and consolidation across the IT landscape to reduce/correlate number of metrics/alarms
Network Performance Management:
The proposed solution platform shall provide a single integrated solution for comprehensive management of the wired/wireless access, and rich visibility into connectivity and performance assurance issues.
The design functionality shall facilitate creation of templates used for monitoring key network resources, devices, and attributes. Default templates and best practice designs are provided for quick out-of-the- box implementation automating the work required to use OEM validated designs and best practices.
The proposed solution must provide comprehensive and integrated management of IT infrastructure components to maximize the availability of IT services and SLA performance.
The proposed solution must provide the complete view of the Topology and network elements. The NMS shall have the ability to include the network elements and the links in the visual/graphical map of the department. The visual maps shall display the elements in different colour depending upon the status of the element. It is preferable that green color for healthy and amber/yellow color for degraded condition and red for unhealthy condition is used.
The proposed solution must have suitable system level backup mechanism for taking backup of NMS data manually as well as automatically
The proposed solution must keep historical data at raw level without averaging for minimum of six month
The proposed solution must provide the visual presentation of the Network Element's status and the alarms. It shall also present the complete map of the network domain with suitable icons and in suitable color like green for healthy, red for non-operational, yellow for degraded mode of operation etc.
The proposed solution must provide Health Monitoring reports of the network with settable periodicity -@24 Hrs, 1 week, 1 month.
The proposed solution must provide the graphical layout of the network element with modules drawn using different colors to indicate their status
The proposed solution must provide calendar view which allows the operator all the schedule activities such as Reports, Inventory scans etc. It shall also allow to define scheduled report for uptime, link status etc.
The proposed solution should have multiple alerting feature to get the notification via email, sms and third party systems
The proposed solution must support listening to traps and syslog events from the network devices with retention period upto 6 months.
The proposed solution must support defining the data retention period to control storage
The solution must support custom device template to support Generic SNMP devices
The solution must provide discovery & inventory of heterogeneous physical network devices like Layer-2 & Layer-3 switches, Routers and other IP devices and do mapping of LAN & WAN connectivity with granular visibility up to individual ports level.
It shall provide Real time network monitoring and Measurement offend-to-end Network performance & availability to define service levels and further improve upon them.
System & Application Performance Monitoring:
The solution should offer service driven operations management of the IT environment to manage distributed, heterogeneous systems - Windows, UNIX & LINUX from a single management station.
The solution should carry out automated probable cause analysis by picking up feeds from every infrastructure component being monitored and automating the correlation of these alarms Or events to point out the probable cause using remedy actions - E.g. pull the top 5 processes consuming most of the CPU when CPU alarm triggers
The solution should provide a centralized point of control with out-of-the-box policy-based management intelligence for easy deployment for the servers, operating systems, applications and services for correlating and managing all the IT infrastructure components of a business service
The solution shall be able to monitor Hypervisor host hardware status e.g. fans, disk, memory, CPU etc..
The solution must support SNMP v1-3, PowerShell, SSH, JDBC, HTTP, JMX, collectd agents, Rest API based monitoring interface for monitoring various type of devices, systems and applications
It should also be able to monitor various operating system parameters depending on the operating system being monitored.
The Proposed Performance Management must provide charts for all kinds of essential Health Reports.
The Systems and Distributed Monitoring (Operating Systems) of EMS should be able to monitor:
Processors: Each processor in the system should be monitored for CPU utilization. Current utilization should be compared against user-specified warning and critical thresholds.
File Systems: Each file system should be monitored for the amount of file system space used, which is compared to user-defined warning and critical thresholds.
Log Files: Logs should be monitored to detect faults in the operating system, the communication subsystem, and in applications. The function should also analyze the files residing on the host for specified string patterns.
System Processes: The System Management function should provide real-time collection of data from all system processes. This should identify whether or not an important process has stopped unexpectedly. Memory: The System Management function should monitor memory utilization and available swap space.
Event Log: User-defined events in the security, system, and application event logs must be monitored.
Support for monitoring & reporting on Service Response monitoring test for common application like http, https, dns, dhcp within Datacenter
The solution should support Virtual platforms - VMware and Microsoft Hyper-V, Citrix Xen, AWS, Azure and provide capability to monitor both Microsoft .NET and J2EE applications from the same platform
The solution should provide support for maintenance window and scheduled downtimes
Fault Management:
The proposed solution must should provide out of the box root cause analysis with multiple root cause algorithms inbuilt for root cause analysis. It should also have a strong event correlation engine which can correlate the events on the basis of event pairing, event sequencing etc.
The Platform must include an event correlation automatically fed with events originating from managed elements, monitoring tools or data sources external to the platform. This correlation must perform:
-c Event filtering
-c Event suppression
-c Event aggregation
-c Event annotation
The proposed solution must support creating and monitoring of rising or falling thresholds with respect to basic key performance indicators for network, system and application infrastructures.
The solution should have predictive analytics and intelligence in-built into it so as to detect any anomaly before it could potentially hit the threshold thereby giving enough lead time to users to resolve the issues before the threshold is breached.
The proposed solution should provide out of the box root cause analysis with multiple root cause algorithms inbuilt for root cause analysis. It should also have a strong event correlation engine which can correlate the events on the basis of event pairing, event sequencing etc.
Powerful correlation capabilities to reduce number of actionable events. Topology based and event stream based correlation should be made available.
The solution must offer relevant remedy tools, graphs in context of a selected fault alarm/event
The proposed monitoring solution should have capability to configure actions based rules for set of pre-defined alarms/alerts enabling automation of set tasks.
The Platform must support Event or Alarm Correlation integrations with service desk to trigger automated creation of incidents, problems management
The solution should classify events based on business impact and also allow defining custom severity levels and priority metrics such as Ok, Critical, Major, Down, Info etc with color codes
The solution should allow creation of correlation or analytics rules for administrators
The proposed solution must provide default event dashboard to identify, accept and assign generated alarms
Log Management:
The proposed solution must provide a common classification of event irrespective of the log format
The proposed solution must provide the ability to store/ retain both
normalized and the original raw format of the event log as for forensic purposes for the period of 3 months and allow to extend it to further with additional hardware without any disruption to the ongoing data collection
The proposed solution should provide a minimum log compression of 8:1 for ensuring log compression to reduce overall log index storage space for the raw log format
The log data generated should be stored in a centralized server. The period upto which the data must be available should be customizable.
The proposed solution must support logs collected from commercial and proprietary applications . For assets not natively supported, the solution should provide the collection of events through customization of connectors or similar integration
The proposed solution must support log collection for Directories (i.e. AD, LDAP), hosted applications such as database, web server, file integrity logs etc. using agents
The Log receiver or log collection component must store the data locally if communication with centralized collector/receiver is unavailable.
The proposed solution must support log collection from Network infrastructure (i.e. switches, routers, etc.). Please describe the level of support for this type of product.
The system shall support the following log formats for log collection :
o Windows Event Log
o Syslog
o Access Log Data
o Application Log data
o Any Custom Log data
o Text Log (flat file)
o JSON Data
The solution should be able to collect raw logs in real-time to a Central
log database from any IP device including:
-c Networking devices(router/switches/voice gateways)
-c Security devices (IDS/IPS, AV, Patch Mgmt., Firewall/DB Security
solutions)
-c Operating systems(Windows 2003/2008, Unix, linux, AIX)
-c Virtualization Platforms(Microsoft HyperV, VMware Vcenter/VSphere
4.X, vDirector, Citrix)
-c Databases(Oracle/SQL/MYSQL/DB2)
The collection devices should support collection of logs through Syslog,
syslogNG and also provide native Windows Agents as well as Agentless(PowerShell) connectors
The proposed solution must provide alerting based upon established policy
The proposed solution must provide SDK and Rest API to write custom connectors and collectors to pull log and monitoring data from third party system
The proposed solution must provide UI based wizard and capabilities to minimize false positives and deliver accurate results.
The proposed solution must collect, index the log messages and support full-text searching for forensic investigation
The proposed solution must support the ability to take action upon receiving an alert. For example, the solution should support the ability to initiate a script or send an email message.
The solution must provide pre-defined log correlation rules to detect suspicious behavior
The solution must support real-time and scheduled alerting time-line while creating a log policy to catch specific log pattern
The solution should support applying regex pattern in real-time to extract vendor specific log data for reporting and alerting purpose
The system shall have the capability to drag and drop building of custom search queries & reports
The system shall be capable of operating at a sustained 5000 EPS per collection instance. The system shall provide the ability to scale to higher event rates by adding multiple collection instance
Network Flow-based Traffic Analysis:
The proposed traffic monitoring system must be able to track all network flow (including netflow v1-v9, Jflow, Sflow and IPFix) of traffic on the network and identify malicious behavior with all IP conversations.
The proposed system must provide details of applications, hosts, and conversations consuming WAN bandwidth to isolate and resolve problems.
The proposed system must provide eight-hour, daily, weekly, monthly, yearly, or customizable reporting time periods.
The proposed solution must be able to monitor and report on a variety of unique protocols (used in the overall deployed solutions) per day and display utilization data for each protocol individually. This capability must be available for each monitored interface uniquely.
The proposed solution must keep historical rate and ip to ip, ip to protocol, protocol to protocol conversation data for a minimum of 12 months (most recent) in its current long term operating database. All data in that database must have a maximum 15 minute window granularity.
The proposed solution must keep historical rate and protocol data for a minimum of 60 days (most recent) in its short term operating database. All data in that database must have a maximum 1 minute window granularity with option change retention period
The system must support the ability to create reports that allow the user to search all IP traffic over a specified historical period, for a variety of conditions.
o Search for any traffic using a specific configurable destination port, or port range.
o Search for any protocol in use by a specific host, interface or list of hosts or interfaces.
Service Level Reporting:
The solution should provide reports that can prove IT service quality levels, such as application response times and server resource consumption
The system reports should be accessible via web browser and Reports can be published in PDF and csv format
The solution most have an integrated dashboard, view of Contract Parties & current SLA delivery levels and view of Services & current SLA performance
The solution must provide Reports that can be scheduled to publish automatically or they can be produced on demand
The solution should be able to report in the context of the business services that the infrastructure elements support-”clearly showing how the infrastructure impacts business service levels
The solution should provide Business Service Management functionality to track Service quality by logically grouping Network, Server and Application components. The solution should provide correlation between Network, Server and Application to identify the business impact from the specific event or alarm
The solution must provide way to define key performance indicators (KPIs) within the Service Quality report.
The solution must provide SLA measurement to track service quality from both Availability and Performance perspective.
Role-Based access control:
The solution should have inbuilt role-based access module to enable multiple users with different groups to create dashboards specific to their department
The Solution should have way to control and define permission such as read/write for set of devices rather than all the devices for the ease of use.
ENMS Other Key Requirements:
The Solution should provide all the modules as a single monitoring engine to correlate events in real-time from Networks, Servers and Applications
The solution should be virtual appliance and deployable on Linux operating systems to reduce the overall TCO
The solution should run without any propriety database license for datastore - Datastore must be bundled within EMS (E.g. popular time-series, no-sql, hbase based monitoring systems) to reduce the TCO
The solution must provide capabilities to monitor 2000 network/server/application components and should scale to 5000 device without any additional cost
The solution should provide High Availability (HA) at datacenter site
IP Address Management:
The IP Address Manager tool should periodically scans a subnet and provides the availability status of IP addresses in that subnet.
The tool should accept multiple subnet inputs, which helps in scanning the entire network to get the status of the IP addresses.
Adding subnets to the IP address management software can be both manual and auto-discovered.
In IP address manager software, the reports of available and used IP Addresses in the network can be obtained.
IP address management solutions should also export the report to PDF/CSV format and is a very convenient software.
IP manager software, based on the IP Address Manager (IPAM) scan results and should provide the IP Availability Report of the network.
It maintains a policy to declare non-responding IP Addresses as available IPs. IP Addresses that do not respond for 10 days continuously are shown as available IP.
The IP Address should send email notification for any change in state of IP Address.
The IP Address management tool should support Multi-vendor DHCP and DNS support.
Network Configuration Manager:
The solution should take backup of all network devices on scheduled time.
The solution should maintain versioning of all backups.
The solution should have an inbuilt module to identify Configuration change and generate an alert on the base of that.
The Solution should have a way to rollback Configuration from backups.
The solution should have the capability to compare configuration side by side and highlight all of the changes automatically.
The solution should show backup Audit reports.
Others:
At least one year license
Training for MISD IT Personnels on the usage and administration of ENSMS
At least one (1) year warranty and support
Compatible with Linux Platforms
APPROVED BUDGET FOR THE CONTRACT
The Approved Budget for the Contract (ABC) for this procurement project is as follows:
LOT A
Items: Qty Price
Enterprise network and servers management software 1 541, 000.00 VAT Inc.
MODE OF PROCUREMENT
The mode shall be via Small Value Procurement based on the Revised Implementing Rules and Regulations (IRR) of Republic Act 9184.
DELIVERY AND INSPECTION
Delivery of the software requirement shall be 45 days or earlier upon issuance of notice of award.
The CHR shall have the right to inspect and/or test the service provided to confirm conformity with the requirements.
Inspection and Acceptance Report from the CHR shall form part of the payment process as proof of compliance of the supplier on the requirements herein.
MAINTENANCE/TECHNICAL SUPPORT
-c On-site support must have a response time of not more than 24 hours from the time of the call in cases when the phone support could not solve the problem, winning bidder must provide expert personnel in site on such cases.
-c The winning bidder must shoulder all expenses of the technical person(s) who will be providing the technical services on-site.
Prepared by:
REYNALDO E. GASPAR, JR
Computer Programmer III, PMO-MISD
Reviewed by:
(On Official Business)
JONATHAN A. JUAN DENNIS DOMINGO P. CANTOS
Information Technology Officer I, PMO-MISD Information Technology Officer II, PMO-MISD
Recommended by:
IRMA JULIET F. SILUBRICO
Chief, PMO-MISD
Approved by:
GRETA B. BELTRAN TARUN
Officer-In-Charge, Planning and Management Office
Closing Date : 2018-11-16

Documents

 Tender Notice