Tender FOR. Supply of Firewall Appliance

Transcription

1 Tender FOR Supply of Firewall Appliance Karnataka State Electronics Development Corporation Ltd. (A Govt. of Karnataka Enterprise) 2 nd Floor, TTMC, A Block, BMTC, Shanthinagar, KH Road, BANGALORE Tel: Fax: website;

2 KARNATAKA STATE ELECTRONICS DEVELOPMENT CORPORATION LTD 2 nd Floor, TTMC 'A' Block, BMTC, K.H.Road, Shanthinagar, Bangalore Telephone: Fax: No. KSEDC/EDP- MF/Tender/07/ Date: TENDER SHEDULE KEONICS invites Tender for supply of Firewall Appliance. The detailed specifications for the above provided in the TENDER DOCUMENT. Last Date for issue of Tender Document Last date for submission of completed Tender Document Date of opening of TENDER Bid : (12:00 PM) : (01:00 PM) : (03:00 PM)

3 VENDOR DETAILS Details of the Bidder (Company) 1. Name of the bidder 2. Address of the Bidder ` 3. Status of the Company Public Ltd / Pvt. Ltd / Others 4. Details of Incorporation of the Company [Attach copy of Incorporation certificate] Date: Ref. # 5. Details of Commencement of Business Date: 6. Valid Sales tax registration no. [Attach certificate] 7. Valid Service tax registration no. [Attach certificate] 8. Permanent Account Number (PAN) [Attach certificate] 9. Name & Designation of the contact person to whom all references shall be made Telephone No. (with STD Code) Mobile No of the contact person: 12. Fax No. (with STD Code) Ref. # 13. Manpower details Technical Others

4 Introduction: Karnataka State Electronics Development Corporation Limited (KEONICS), an ISO 9001:2008 certified organization, is in existence since 1976 with the sole objective of promoting electronics industries in Karnataka. To ensure that Karnataka is always in the forefront of electronics and IT, we have been providing high quality infrastructure for IT industries, spreading IT education to the masses and providing state-of-the products and service for e-governance. KEONICS focuses on setting up world-class infrastructure for the electronics and IT related industries in the state. Aimed at providing a platform for these industries to operate from, we work with Software Technology Parks of India to develop the estates, provide connectivity and administer export-oriented schemes. We have diversified into IT related activities in KEONICS' IT solutions span the areas of ERP solutions, web portals, software development, IT consultancy, IT training and networking. And so also, our popular web based e-procurement solution is being used by many department of Kerala, Maharashtra etc., and Central Public Sectors like HLL, HSCC ltd, Hindustan Shipyard etc., to name a few. KEONICS is engaged in the domains like IT infrastructure, IT training, IT services and HR services etc. In order to address the need for high-end, industry focused training, a current generation IBM Mainframe is acquired. Services like machine access to corporates & universities, training and hosting are being delivered. Mainframe system provides a highly secure, reliable platform so that a variety of applications can be hosted.

5 KEONICS invites TENDER from eligible vendors/ OEM dealing with Supply of Firewall Appliance Scope of work: The vendors shall: o Supply Firewall Appliance EMD: The vendors shall pay EMD: Rs 10,000/- in the e-procurement portal. Location of supply : o Keonics, 2 nd Floor, TTMC A Block, BMTC, Shanthinagar, Bangalore

6 Pre-qualification & Eligibility Criteria Sl. Eligibility Criteria No. 1 The bidder should be registered under the Companies Act, 1956, or Partnership Act 1932 or registered under LLP Act 2008 should be in existence in India for at least 5 years (as on 31st March 2015). The bidder should have been in the Business for the past 3 years. 3 The bidder shall not be under a Declaration of Ineligibility for corrupt or fraudulent practices or blacklisted by any State or Central Government or any State or Central PSU in India. 4 The bidder must have valid Service Tax Registration, VAT Registration and PAN with the government. 5 The bidder should have no case pending/ registered with B.I.F.R. & undertaking by company secretary to this effect should be enclosed 6 A power of attorney / Board resolution in the name of the person signing the bid. 7 Bidder should have made a payment of Rs (Rupees Five hundred only) towards the Tender document. 8 The bidder should have a local presence in Bengaluru and should be offering local support services in Bengaluru. 9 The Bidder should have for the each of the last three consecutive financial years i.e. FY: , FY: FY: Documents Required Certificate of Incorporation of the company registered in India and Memorandum of Article and Association should be enclosed. In case of Proprietor or Partnership firms, attach Sales tax Registration Certificate in Karnataka. Supporting document to be enclosed. Self-Declaration / Undertaking in this regard by the authorized signatory of the bidder as per the given format. Provide the copy of the certificates and mention the number in the form. Self Declaration / Undertaking in this regard by the authorized signatory of the bidder as per the given format Power of attorney/ Board resolution copy. Proof of payment. a) Rent Agreement in the name of the Company b) Resource deployment details with Client contact information. Audited balance sheet. Certification from Auditors regarding the source of revenue. A minimum total turnover over INR 1 crore each for the last 3 years ending 31st March of previous financial year. 10 The bidder should provide the Tender specific authorization certificate from OEM (MAF) MAF to be enclosed

7 Technical Specifications: SL NO SPECIFICATIONS GENERAL REQUIREMENTS The proposed system must be appliance based and rack 1 mountable. All UTM features like Firewall, Anti Virus, Anti Spam, Web 2 & Application filtering, IPS& Web Application Firewallshould be available for UTM requirement. 3 Licensing should be per device and not user/ip based. The proposed solution should support Load Balancing and 4 Failover among more than 2 ISP Links (with USB port 3G/4G and Wimax Support). The proposed solution should support integration with Windows NTLM, Active Directory, LDAP, Radius, RSA 5 SecurID, Novell e-directory or Local Database for user authentication and Guest User authentication via SMS The proposed solution must be able to be capable of 6 deploying in Route (Layer 3) and Transparent mode (Layer 2), individually and simultaneously. The proposed solution should support dynamic routing like 7 RIP1, RIP2, OSPF, BGP4. 8 The proposed solution must support Automatic Transparent Single Sign On for user authentication 9 The proposed solution should support DNS,DDNS, NTP, SNMP, DHCP (Server/Relay), VLANs etc. The proposed solution should support user,ip and mac 10 binding that can map username with corresponding IP and MAC addresses for security reason. 11 The proposed solution must support User based policy configuration for security and Internet management. The proposed solution should be in High Availability mode (2 devices) with Active/Passive and Active/Active options. 12 All Feature licences should be available in both devices from Day 1. HARDWARE REQUIREMENTS COMPLIANCE (YES/NO) The proposed solution must be based on ASIC or Multicore Parallel Processing Architecture The proposed solution should be equipped with sufficient Memory & Flash to handle the load (Minimum 6GB RAM & 4GB Flash). Proposed solution should support inbuilt HDD 250GB for storage or external device for Logs and Reports. The proposed solution should have minimum 8 x Copper GbE ports & Expandable to 40 x Copper GbE ports for Future Expansion &Seggregationof Zones.

8 There should be provision to load Fibre modules (1G & 10G) 5 for future Enhancements 6 The proposed solution should have minimum 2 USB ports. 7 OperatingTemperature : 0 to 40 Degree Celsius & Relative Humidity : 10 to 90% PERMORMANCE REQUIREMENTS The Proposed Solution should meet the following performance criteria & should mandatorily produce valid references for the same at the time of bidding: a. Firewall Throughput of 100,000 Mbps or Above b. Concurrent sessions : 10 Million or Above c. New sessions/second : 200k or Above 1 d. IPSec VPN throughput : 5,000 Mbps or Above e. SSL VPN throughput : 800 Mbps or Above f. Antivirus throughput : 8,000 Mbps or Above g. IPS throughput : 12,000 Mbps or Above h. UTM Throughput or lowest of Firewall/IPS/Anti-Virus : 5,000 Mbps or Above UTM FEATURES REQUIREMENTS The proposed solution should facilitate the application of UTM policies like AV/AS, IPS, Content filtering, Bandwidth 1 policy and policy-based routing decision on the firewall rule itself. Also UTM controls should be able to be applied on inter zone traffic. The proposed system must provide Mac Address (Physical 2 Address) based firewall rule configuration to provide OSI Layer 2 to Layer 7 security The proposed solution must support Application/Web Category-based Bandwidth Management which allows 3 administrator to create application/web category-based bandwidth policies. 4 The proposed solution should have minimum 4000 signatures in its database & provision for Custom IPS Policies. The proposed solution should support Anti-Virus scanning 5 for SMTP,SMTPS, POP3, IMAP, FTP, HTTP, HTTPS, FTP over HTTP protocols. For POP3 and IMAP traffic, the proposed solution should 6 strip the virus infected attachment and then notify the recipient and administrator. The proposed solution should support spam scanning for 7 SMTP,SMTPS, POP3, IMAP. 8 The proposed solution must support on-appliance quarantine facility and also a personalized user-based quarantine area which allows you to release legitimate s.

9 The proposed solution should support real time spam detection and proactive virus detection technology which detects and blocks new outbreaks immediately and accurately. The proposed solution should have specific Web categories that broadly classify websites. For instance, websites that reduce employee productivity, bandwidth choking sites or malicious websites. The proposed solution should support creation of cyclic policies on Daily/Weekly/Monthly/Yearly basis for Internet access on individual users/group of users. The proposed solution should provide option to define 12 different bandwidth for different schedule in a single policy and bandwidth should change as per schedule on the fly. 13 The proposed solution must be capable of identifying hidden applications running over standard ports (80, 443, 22 etc) The proposed solution must be capable of blocking the 14 following type of applications: P2P, VOIP, Games, Remote Control, Chats etc Web Application Firewall solution should support the below features : a) Protection against attacks like SQL injection, cross-site scripting (XSS), URL parameter tampering,and more, including the OWASP Top 10 Web application 15 vulnerabilities b) Reverse proxy for incoming HTTP/HTTPS traffic c) HTTPS (SSL) encryption Offloading d) Block/alert known bad IP addresses e) Customizable user messages for blocked requests VPN REQUIREMENTS The proposed solution should support IPSec, L2TP, PPTP 1 and SSL VPN connection. 2 The proposed solution should support DES, 3DES, AES, Twofish, Blowfish, Serpent encryption algorithms. The proposed solution must support automatic failover of 3 Point to Point link (MPLS ) with VPN for redundancy purpose. The proposed solution must support Apple ios and Android 4 VPN clients LOGGING & REPORTING REQUIREMENTS The proposed solution should have On-Appliance, integrated 1 reporting solution or External Device The proposed solution should allow exporting of reports in 2 PDF and Excel format. The proposed solution should support logging of Antivirus, Antispam, Content Filtering, Traffic discovery, IPS, Firewall 3 activity on syslog server. 4 The proposed solution should provide connection-wise reports for user, source IP, destination IP, source port,

10 destination port or protocol. The proposed solution should provide compliance reports for 5 SOX, HIPPA, PCI, FISMA and GLBA compliance. The proposed solution should support multiple syslog servers 6 for remote logging. The proposed solution should have customizable 7 alerts/automated Report scheduling. ELIGIBILITY, WARRANTY, SUPPORT & CERTIFICATION REQUIREMENTS 1 The Above complying product OEM MAF (Manufacturers Authorization Form) should be submitted with the bid. 2 Warranty & UTM Features Subscription: 36 months 3 OEM Web/Phone/Chat Support : 24x7 (36 Months) The Proposed Solution should meet the following Certification Criteria: a. CommonCriteria - EAL4+ 4 b. IPv6 Ready Gold Logo c. ICSA Firewall or Equivalent OEM Support Centre should be ISO Certified or Equivalent TERMS and CONDITIONS: 1. Firm/Organization should have unblemished past record and was not declared ineligible for corrupt and fraudulent practices either indefinitely or for a particular period of time 2. Bid will not be accepted after the date and time fixed for receipt as is set in notification or subsequent extensions if any. 3. Relevant documents in proof have to be enclosed wherever required. 4. Firm should have Sales Tax, Service Tax & Income Tax registrations, PAN (furnish proof). 5. Firm should submit copies of sales Tax returns, Service Tax returns & Income returns submitted for Last three years. 6. Firm should submit copies of Sales Tax Clearance Certificate & Service Tax Clearance Certificate from the Authorities. 7. KEONICS has sole right to accept or reject any bids. If required KEONICS may reject all bids received without assigning any reason. 8. The detailed bid must be submitted online at 9. Vendors shall take necessary precautions to get registered in e-procurement platform in a timely manner and also submit their proposals before bid submission time-lines specified in e-procurement platform. 10. The bid inviting authority may, at its discretion, extend the last date for submission of bid, in which case, all rights and obligations of the Tendering authority and the vendors, subjected to the previous last date, will thereafter be subject to such extended last date. 11. Any bid received by the bid inviting authority through any means /channel other than e- Procurement platform will be rejected. 12. The date and time for opening bids will be as per the time-lines specified in e-procurement platform. Vendor shall watch the e-procurement site to learn about the addenda and corrigenda issued to this Tender. 13. The bids with incomplete information, subjective and conditional offers as well as partial

11 offers will be liable for rejection. 14. The bids submitted without the enclosures/attachments to prove about the vendor s specific experience, etc., non-compliance of any of the clauses of this Tender, will be liable for rejection. 15. The company, which is pre-qualified and receives an enquiry but does not respond to the enquiry, will be blacklisted as non-responsive. However, if the company cannot supply the items/provide services as per the enquiry, it shall submit a regret letter with reasons failing which, it will be blacklisted.

12 Commercial Bid: Sl.No. Description Amount (in Lakhs ) 1 Firewall Appliance (One year warranty) 2 Firewall Appliance (Three year warranty) Other terms and conditions: Vendor should indicate the concurrence for the below o o o The successful Bidder needs to sign an agreement with KEONICS Both the Technical and Financial bids must be submitted on-line. KEONICS reserves right to reject any bid and cancel the Tenders without assigning any reasons. The bidder will not be entitled to claim any damages in such eventualities.

13 SUBMISSION, RECEIPT, AND OPENING OF PROPOSALS The original bid shall be prepared and submitted in e-procurement platform. Copy of Bids should be submitted to The Director Technical, KEONICS before the due date & Time in a closed envelop in above mentioned address. However the Bid submitted in e-procurement platform will be considered for evaluation. The bidder shall digitally sign and submit the proposal electronically through the unified e- Procurement platform: The completed bid must be submitted electronically in the e-procurement platform on or before the due date for bid submission specified in the e-procurement platform. The Centre for e-governance will not be responsible for technical glitches in the desktop and internet connectivity services used by the bidder. Bid Processing Fee: Each bidder shall pay bid processing fee through any of the for e-payment options only: 1. Credit Card 2. Direct Debit 3. NET Banking 4. National Electronic Funds Transfer (NEFT) 5. Over the Counter (OTC) designated Axis Bank branches located across the country Please note that payments submitted through cheque or demand draft shall not be accepted. Further details regarding e-payment; please refer to e-procurement website

14 Format for uploading Turnover information (Total turnover of the bidder during the preceding 3 years) Financial year Turnover (Rs. in Lakhs) Name of the Firm: Seal & Signature: Appendix - I Affidavit [Use Rs Stamp Paper] This is to certify that << COMPANY NAME >> is not blacklisted by the Government of Karnataka or any of its agencies/central/any other State/UT Governments or their agencies for indulging in corrupt or fraudulent practices or for indulging in unfair trade practices or for any reasons whatsoever as on the 1 st of July2014. Company Secretary / Authorized Signatory Name of Signatory: Bidder Name: Date: Place:

15 Signature and seal of Notary Appendix - II Manufacturer Authorization Letter Ref Number: Date: Dear Sir/Madam SUB: Authorization of partners for enrollment in KEONICS We <Name of OEM Company> who are established and reputed manufactures of.and...,having factories at <Place of factory> do hereby authorize the following Partners for Empanelment. <Partner details> We hereby extend our full guarantee and warranty as per terms and conditions of the Tenderand or the contract for the equipment and services offered against this invitation for any Tender offer by the M/s << Partner name >>. We hereby commit to the Tender terms and conditions and will not withdraw our commitments during the process and or the period of contract. Yours Faithfully, for Company Name Name of the person Designation Authorized signatory