Annexure - " SERVICE REQUIREMENTS"

Transcription

1 General - Compliance Sl. No. Description of the Requirements Compliance (Yes/No) Comment 1 RBAC for all Servers & Networking Equipments for Operator, System Administrator & System Manager or Super Users 2 PoP-Before-SMTP for Roaming Users Aliases restriction for outsiders on deliveries 4 Solaris for both Sparc & x86 Servers as OS plus Hardening Annexure - " SERVICE REQUIREMENTS" 5 Gateway Level Anti-Virus has to be implemented for both incoming & out-going 6 Centralized SysLOG for all the Servers and Networking Equipments access with suitable log retention policy Open Source & Freeware Application Software for DNS, Web & Services including for Anti-Virus, Anti-Spam with content filtering, RBL database checks, SysLOG etc. 8 Password Policy Enforcement for users and suitable notification method 9 RPO (Recovery Point Objective) time to be specified 11 IPv6 Compatibility of Hardware & Software Support for SSL(TLS), DNSSEC, VPN, SSH, Telnet, FTP, SMTP, HTTP, HTTPS, POP, IMAP, SNMP, TFPT, LDAP, etc. Primary Site and DR Centre should run identical services with same OS & other Application Software. DC shall have HA for 12 all the services and at DR there is no HA and BCP shall be a manual switchover with service availability within 2 hours of total failure at DC. 1 Archiving of 14 Quota system for users 15 Chatting & Forum Page 1 of 6

2 DNS Server - Compliance Sl. No. Description of the Requirements 1 Support for IPv6 (in Totality) 2 Hardened Operating System Compliance (Yes/No) Comment Solution must support reverse delegation on classless subnets 4 Solution must support sub domain delegation Solution to have separate authoritative and caching infrastructure Solution must support Caching query packet loss must not exceed 1% Solution should support all DNS services & functions ( Managing Zones, Sub Zones, Forwarding & Standard Solution to support SNMPV1/V2/V and RMON standards 9 Solution should support MULTIVENDOR support Solution should support packet level Debugging capability 11 Solution must be capable of generating reports for QPS 12 Server must remain ON and available during configuration changes including individual zone flushes. Vendor to ensure the upkeep of existing DNS system 1 and also incorporate necessary changes for new patches & upgrades. 14 Vendor to re-install the complete system in the event of system crash/failures Solution should have the capability to eliminate 15 unnecessary risk and filter out all but DNS traffic to dedicated name servers 16 Security features like advanced algorithms to defend against cache poisoning attacks Solution to comply for UDP SPR protocol UDP source 1 port randomization capable of operating across 2048 ports 18 Solution should be capable of preventing Cache Poisoning 19 Solution should be capable of providing DNSSEC support 20 Solution should provide TSIG support 21 Solution should support disable/enable zone transfer 22 Solution should support DDNS for secure connection 2 Solution should support Resolver & Forwarder 24 Solution should be capable to restore the above in case the need arises from the backup 25 Solution should support NTP The DNS services should be cluster-ready for high 26 availability and load balancing capabilities intended for vertical/horizontal scalability of the system Page 2 of 6

3 Sl. No. Description of the Requirements Compliance (Yes/No) Comment 1 Support for IPv 6 (in Totality) 2 Hardened Operating System Should support IP based virtual hosting 4 Should support name based virtual hosting 5 Should support dynamic modules loading 6 Web services should be multithreaded Web Server - Compliance The source code for all the solution components to be used/integrated for the proposed deployment must be freely available under an open source license Automated backup and disaster recovery should be a part of the solution set The web services should be cluster-ready for high availability and load balancing capabilities intended for vertical/horizontal scalability of the system There maybe no restrictions on the number of users who can access the web services (subject to physical hardware present) Must satisfy the software dependencies required to support and host database backed applications, Language frameworks and CMS like Zope / Django / Turbogears / Joomla / Drupal / Mediawiki / Twiki / Moodle / Dokeos / SugarCRM FTP Services to be provided for uploading web pages. This should be integrated with LDAP for authentication. Solution should support SSH for remote access for managiblity or updates All logs should be exported to the centralised Syslog server automatically Messaging Solution - Compliance Sl. No. Description of the Requirements Compliance (Yes/No) Comment 1 Virus filtering for both incoming and outgoing mails 2 Anti-Spam with content filtering Administrator should be able to set quota limit for individual users' mailboxes 4 Mailbox sharing and access control 5 Ability to have public bulletin boards integrated with the mail solution 6 Spam mail to be delivered to separate mailbox/folder based on the treshold level set User management of spam mails tag messages as spam or non-spam 8 Messenger service (chat) to be integrated with mail 9 Groupware features to be integrated including calendars, address book etc. Web access to mail, calendar and other standard features to be provided Users should be able to access the service from 11 any client software that uses secure IMAP and/or secure POP protocols. 12 There should also be a web interface to the system. The web interface should work equally well from all versions of Internet Explorer 6,, 8, Firefox 2 & 1 Personal and enterprise wide address books 14 Mail auto respond, auto forward and other rules Page of 6

4 Sl. No. Description of the Requirements Compliance (Yes/No) Comment 15 Log reports and statistics to be provided 16 Data backup solution to be provided 1 Disaster recovery for mail server 18 Long term Mail storage on SAN 19 Shared mail boxes for function wise. 20 User should authenticate to use service. 21 Password Policy to be enforced 22 PoP-Before-SMTP functionality to be incorporated for roaming users 2 Solution should support SSH for remote access for managiblity or updates 24 All logs should be exported to the centralised Syslog server automatically Note: Successful bidder should configure or enable other standard features as required by STPI during implementation of the DNS, and Web Services Page 4 of 6

5 Annexure - Hardware AMC and Software AMC Annexure- Hardware AMC & Software AMC Servers / Workstation Sl No Description of the Eqpt Make Sl No Item Code Qty 1 Sun Fire V20Z Server Sun XG A55-NGB GRA5M 1 2 Sun Fire V20Z Server Sun XG A55-NGB GRA5M 1 Sun Fire V20Z Server Sun XG A55-NGB GRA5M 1 4 Sun Fire V20Z Server Sun XG A55-NGB GRA5M 1 5 Sun Fire V240 Server Sun FN N2-XKB2C1204HB 1 6 Sun Fire V240 Server Sun FN55 N2-XKB2C1204HB 1 Sun Fire V240 Server Sun FN552 N2-XKB2C1204HB 1 8 Sun Fire V240 Server Sun FN5524 N2-XKB2C1204HB 1 9 Sun Fire V240 Server Sun FN552 N2-XKB2C1204HB 1 Sun Fire V440 Server Sun 0550BD008 A42-XHB4C2-08HD 1 11 Sun Fire V440 Server Sun 0552BD01C0 A42-XHB4C2-08HD 1 12 Sun Fire V440 Server Sun 0552BD0129 A42-XHB4C2-08HD 1 1 Sun Fire V440 Server Sun 0552BD0152 A42-XHB4C2-08HD 1 14 Sun Blade 150 Work Station Sun FT Network Equipment Sl No Description of the Eqpt Make Sl No Item Code Qty 1 Catalyst 50 Cisco CAT080Z1L0 50 G 1 2 Catalyst 50 Cisco CAT080Z1L6 50 G 1 StorEdge SAN TB Capacity Sun TACSM1R01A0-FC 1 4 L25 Tape Loder Sun SG-XLIBL25LLV-BASE 1 5 SAN Switch 40 Brocade SG-XSWBR040-16P N/A 1 6 SAN Switch 40 Brocade SG-XSWBR040-16P N/A 1 Load Balancer Alteon SSCPL202JX SCP Load Balancer Alteon SSCPL202JQ SCP Firewall Switch Alteon SSCPCA00R6 SCP Firewall Switch Alteon SSCPCA00SK SCP Firewall Appliance Box Nortel SNNGNQ B Firewall Appliance Box Nortel SNNGNQ B KVM Switch Aten Master View Plus Z858005LQR014 ZL X 1 Page 5 of 6

6 Proprietary Software Sl No Description of the Eqpt Make Sl No Item Code Qty 1 Check Point 1 2 Veritas NetBackup 1 Note: The specification of the above Hardware/Software can be referred from Annexure " Bill of Materials" Page 6 of 6