IDBI Bank Ltd. value which should be sized on this appliance second for 2048 Bit SSL encryption." appliance/hardware and should be upgrade to 15 Gbps

Transcription

1 Point 1-Hardware Specifications Setup A: Point C 1-Hardware Specifications Setup A: Point E 2-Hardware Specifications Setup B: point B 2-Hardware Specifications Setup B: point E The Solution should support We request to change this clause as "The Solution minimum 8 Gbps throughput per appliance/hardware. (L7 should support minimum 8 Gbps throughput per throughput) The solution should support minimum 10,000 SSL Transactions per second for 2048 Bit SSL encryption. The Solution should support minimum 5Gbps throughput per appliance/hardware. (L7 throughput) Should support minimum 10,000 SSL Transactions per second for 2048 Bit SSL encryption. keeping scalability and longevity of solution in appliance/hardware and should be upgrade to 20 Gbps consideration for next five years, scalable solution at All of the devices asked for procurement need to Not Required, support 5 years of longevity, we recommend to change this clause and add scalability on device in future with license upgrade (L7 throughput)" least up to 20 Gbps is must. We request to change this clause as "The solution All of the applications are mandated as per RBI Not Required, Policies and compliance to run on HTTPS with default key size of 2048 bit. With respect to planned should support minimum 40,000 SSL Transactions per throughput of 8 Gbps, 40 K SSL TPS is minimum value which should be sized on this appliance second for 2048 Bit SSL encryption." provided applications has to run on HTTPS. We request to change this clause as "The Solution All of the devices asked for procurement need to Not Required, support 5 years of longevity, we recommend to should support minimum 5 Gbps throughput per change this clause and add scalability on device keeping scalability and longevity of solution in appliance/hardware and should be upgrade to 15 Gbps consideration for next five years, scalable solution at in future with license upgrade (L7 throughput)" least up to 20 Gbps is must. We request to change this clause as "The solution All of the applications are mandated as per RBI Not Required, default key size of 2048 bit. With respect to planned should support minimum 30,000 SSL Transactions per throughput of 5 Gbps, 40 K SSL TPS is minimum second for 2048 Bit SSL encryption." Policies and compliance to run on HTTPS with value which should be sized on this appliance provided applications has to run on HTTPS. Page 1 of 11

2 5 6 Point The solution should support We request to remove this point and have SSL VPN as ADC solution is having altogher different The solution should support the the functionality of SSL VPN as functionality than SSL VPN appliance. ADC solution functionality of SSL VPN as an integrated Secure an integrated/inbuilt are more focused on application delivery component/module or as a separate Sockets Layer virtual component/module for Setup- appliance but from the same OEM, for optimization, acceleration, enhancing QoE for end private network (SSL A DR. SSL VPN is not required Setup-A DR. SSL VPN is not required for VPN) Only for One for Setup-B and Setup A in DC user, High Availability where as SSL VPN solution are Setup-B and Setup A in DC set in DR Under more focused on providing secure access to infra SETUP A. with AAA functionality. Enabling SSL VPN functionality on purpose build appliance will degrade Additional Point to be separate appliance. functionality on ADC We recommend to increase "Virtualized load balancer As per the standard setup at least two virtual business growth of Bank, 10 virtual instances are should support minimum 2 load balancer virtual proposed. Also we would like to bring notice that instances scalable up to 10 virtual instances." instances of load balancers are required to cater Web Tier and Application Tier hosted in multiple Zones along with load balancing of database server. Keeping the future scalability in consideration as per virtualization is default standard on Load Balancing Layer, as virtualization is on server, network switches, Firewalls have become standard. All of the BFSI bodies have virtualization on Load Balancing layer as SBI, ICICI, RBI, BSE, etc. Page 2 of 11

3 Point Additional Point to be IDBI Bank Ltd "Virtualized load balancer should have complete virtual infrastructure to support: - Fault isolation between each virtual load balancer instances - Resource reservation between each virtual load balancer instances - Upgrade of OS on any virtual load balancer should not affect other virtual load balancer - Provision for different version of OS for each virtual load balancer - Separate user login and database per virtual load balancer - Separate configuration file per virtual load balancer" Proposed solution should have its own purpose build hypervisor, to provide complete abstraction between different VADC's. It should have complete fault isolation and resource reservation for different virtual instances. Asked feature is must on ADC solution for Virtual instances of load balancers. Specialized Load Balancer hypervisor runs fully functional virtual Load Balancer instances that each one of the instances delivers Load Balancing functionality just like a dedicated physical Load Balancer device. Each virtual Load Balancer instance contains a complete and separated environment of resources, configurations and management. Additional Point to be Solution supports for collecting Network side latency Monitor and reports SLA's deviation per application / application transaction / user location is required to Additional Point to be drill down latency and issue causing points. Additional Point to be Solution supports for collecting client side latency ADC solution should enables fast accurate troubleshooting and rapid Root Cause Analysis of Additional Point to be Solution supports for collecting Datacenter side latency cases with high latency that may result in poor user Additional Point to be System supports providing SLA performance metrics experience. This is achieved by means of a detailed for Applications / Transaction / User Location transaction measurement breakdown across the Additional Point to be Solution supports JS/CSS Minification and following three-stage application-delivery chain: Consolidation Additional Point to be Solution supports Device/Browser based optimization Datacenter latency, network latency and rendering latency. Additional Point to be Solution supports super cache (HTML5 local storage) for mobile devices Additional Point to be System supports Touch event conversion for mobile Advance feature of Web performance optimization is devices Page 3 of 11 required as integrated solution on ADC solution for better QoE, faster page load is required on the same ADC solution apart from standard optimization feature sets of caching, compression, TCP multiplexing.

4 Point IDBI Bank Ltd Datacenter latency, network latency and rendering Ref no.: IDBI/ PCELL /RFP/ /014 Dt.: latency. 29th Sept 2015 Advance feature of Web performance optimization is required as integrated solution on ADC solution for Additional Point to be Solution supports Object reordering (CSS/JS) better QoE, faster page load is required on the same Additional Point to be System supports Progressive Image Rendering & ADC solution apart from standard optimization Absolute image sizing and consolidation. feature sets of caching, compression, TCP Additional Point to be System supports Predictive Browser Caching - multiplexing. automated through heuristics 1F Solution should support SSL throughput of minimum 6 Need throughput calculation details. Gbps throughput per appliance/hardware. 2F Solution should support SSL throughput of minimum 5 Need throughput calculation details. Gbps per appliance/hardware. 5B The Solution should support HTTP Compression Need throughput calculation details. 9D throughput of 6 Gbps for Setup-A and HTTP Compression throughput of 5 Gbps for Setup-B The proposed solution should have the capability of Need Clarity on Rate Shaping Rate shaping, QOS Support, Rate Limiting and TCP Surge Protection. 9E The proposed solution should feature in the latest Will request Bank to consider Leader Quadrant Gartner s Magic Quadrants Report for Application Delivery Controllers (ADC) under Leaders/Challengers Quadrants. 11B The proposed solution should have an overall Need clarity said throughput expected when device Minimum throughput of 4 Gbps for Setup-A with WAF enabled. deployed in basic mode or advanced mode 11E The Vendor/Bidder should provide Global Threat please elaborate on the same For WAF Intelligence service. ADC solution should enables fast accurate troubleshooting and rapid Root Cause Analysis of cases with high latency that may result in poor user experience. This is achieved by means of a detailed transaction measurement breakdown across the following three-stage application-delivery chain: Page 4 of 11

5 Point Point No 7 Section Eligibility criteria for bidders Point No 11 Section Eligibility criteria for bidders Hardware Specifications Setup B E F HTTP Compression & Caching b The vendor/bidder must have implemented the Will request Bank to ammend the clause as :"The proposed solution of the OEM product should be proposed OEM product in a Banking / E- commerce implemented in a Banking / E- commerce environment in India wherein at-least two environment in India wherein at-least two deployments should cover an Internet-Banking/E- deployments should cover an Internet-Banking/Ecommerce product for a bank having 1000 branches or has more than 5,000 TPS or more."or the Bidder commerce product for a bank having 1000 branches or should have deployed ADC solution in two banks in The vendor/bidder must have implemented atleast 2 ADC solutions/projects out of which 1)atleast one should be from the proposed OEM product in a BFSI / E- commerce/psu environment in India. 2)at-least one deployment should cover an Internet-Banking/Mobile-Banking for a bank in India having 1000 branches or E- commerce product which has 5,000 TPS or more. has more than 5,000 TPS or more. India" The bidder should have minimum 5 skilled OEM The bidder should have minimum 5 skilled/certified Please refer corrigendum certified staff for the product proposed. Should Support Transactions per second for 2048 Bit SSL encryption Solution should support SSL throughput of 5 Gbps per appliance/hardware staff for the ADC Solution As discissed if the primary site having SSL TPS, the second site does not require this much throughput. Please suggest 2000 SSL TPS with 2048 Bit SSL Encryption As discussed the SSL throughput should be 50 % of the mentioned device throughput and hence this has to be revised accordingly. The solution should support HTTP compression HTTP compression is not required in the capacity. For site A where the throughput is 8 Gbps, HTTP throughput of 6 Gbps for Setup A HTTP compression compression required should be half i.e. 4 Gbps & throughput of 5 Gbps for setup B for Site A, it should be 2.5 Gbps Page 5 of 11

6 32 Point Eligibility Criteria for Bidders 7 E The vendor / bidder must have implemented the proposed OEM solution in a Banking / E commerce environment in India wherein at least two deployment should cover an internet banking / E commerce product for a bank having 1000 branches or has more Transactions per second for 2048 Bit SSL encryption. Bit SSL Encryption F Solution should support SSL throughput of minimum 6 Request you to kindly amend this clause with one deployment for banking / E commerce environment. throughput. Please suggest 2000 SSL TPS with 2048 than 5000 TPS or more The solution should support minimum 10,000 SSL As discussed if the Primary Site is having 10,000 SSL TPS, the second site does not require this much Equal Capacity for both sites. As discussed the SSL throughput should be 50% of the mentioned device throughput, and hence this Gbps throughput per appliance/hardware. has to be revised accordingly. B The Solution should support HTTP Compression HTTP Compression is not required in this capacity. For Site A, where the throughput is 8 Gbps, HTTP throughput of 6 Gbps for Setup-A and HTTP Compression required should be half i.e 4 Gbps and Compression throughput of 5 Gbps for Setup-B for Site A, it should be 2.5 Gbps. 7 The vendor/bidder must have implemented the Do you need the customer references of the Banking proposed OEM product in a Banking / E-commerce industry only. Can we provide references from any environment in India wherein at-least two other industry. Do we need to have the cstomer deployments should cover an Internet-Banking/Ecommerce product for a bank having 1000 branches or references of the OEM that we are quoteing or an has more than 5,000 TPS or more OEM of similar products will do Hardware and Licenses - 50% on delivery, installation, Cant be it in a ratio of 80 & 20% balance 50% on commissioning and user acceptance and submission of the Contract, PBG, Deed of Indemnity, NDA and SLA. 1F Solution should support SSL throughput of minimum 6 Need throughput calculation details. Gbps throughput per appliance/hardware. SSL throughput is manadatory It should be a banking or e-commerce site. Further this is SI experience for the OEM product implemented Page 6 of 11

7 Point F Solution should support SSL throughput of minimum 5 Need throughput calculation details. Gbps per appliance/hardware. 5B The Solution should support HTTP Compression Need throughput calculation details. throughput of 6 Gbps for Setup-A and HTTP Compression throughput of 5 Gbps for Setup-B 9D The proposed solution should have the capability of Need Clarity on Rate Shaping Rate shaping, QOS Support, Rate Limiting and TCP Surge Protection. 9E The proposed solution should feature in the latest WHY Challengers Gartner s Magic Quadrants Report for Application Delivery Controllers (ADC) under Leaders/Challengers Quadrants. 11B The proposed solution should have an overall Minimum throughput of 4 Gbps for Setup-A with WAF enabled. Need clarity said throughput expected when device deployed in basic mode or advanced mode The minimum throughput of 4 Gbps for Setup-A is required with WAF enabled. 11E The Vendor/Bidder should provide Global Threat What is the expectation For WAF Intelligence service. 2.3 b in Training services User Training * not required for end users Training for technical team * As such ADCs are devices generally transparent to end users.need to understand the purpose for training end users 2.3 c in Training services Training shall be for a minimum of 3 days per batch * reduce to one day We need training on ADC, WAF and SSL * Generally one day is enough to cover the type of VPN trainings required by IDBI 7.4 SERVICE LEVEL EXPECTATIONS 12. DELIVERY PERIOD AND LOCATION Issue resolution / Onsite Visits within 30 minutes. for level 0 issues AND Issue resolution / Onsite Visits within 1 hrs. for level 1 issues Is 12.3 point is missing or it s a typo error to Time duration is limited.does the BANK require 1) No, Onsite resource dedicated at Site 24x7? 2.Secondly,would the Bank allow remote access to remote troubleshooting does not help resolve the issue? 2) Yes but onsite is preferred and in case then onsite would be required Yes Page 7 of 11

8 Point poiint 11 The bidder should have minimum 5 skilled OEM certified staff for the product proposed. One of the resources have certified on ADC Please refer corrigendum technology in year 2006 while Citrix was taking over NetScaler technogy. The original NetScaler mark sheet is available with us. We request IDBI to accept the same as certified resource. The resource has been providing support and is involved in desgining of solution based on NetScaler. 9 point 1 The Bidder must along with the equipment, supply all Manuals will be available in electronic format relevant manuals for the systems delivered / installed. The manuals shall be in English. 2-Hardware Specifications Should support 10,000 SSL Transactions per second for Setup B. Point E 2048 Bit SSL encryption. 2-Hardware Specifications Setup B. Point F 5 -HTTP Compression and Caching. Point b Solution should support SSL throughput of 5 Gbps per appliance/hardware. The Solution should support HTTP Compression throughput of 6 Gbps for Setup-A and HTTP Compression throughput of 5 Gbps for Setup-B If the Primary Site is having 10,000 SSL TPS, the Secondary site requires equal throughput second site does not require this much throughput. Hence request 2000 SSL TPS with 2048 Bit SSL Encryption The SSL throughput should be 50% of the mentioned device throughput. Please revise the clause accordingly. HTTP Compression is not required in this capacity. For Site A, where the throughput is 8 Gbps, HTTP Compression required should be half i.e 4 Gbps and for Site A, it should be 2.5 Gbps. OK SSL throughput is mandatory Page 8 of 11

9 Point ELIGIBILITY CRITERIA IDBI Bank Ltd ELIGIBILITY CRITERIA Request IDBI to modify the clause as: The vendor/bidder must have implemented the proposed OEM product in a Banking / E-commerce environment in India wherein at-least two deployments should cover an Internet-Banking/Ecommerce product for a bank having 1000 branches or has more than 5,000 TPS or more. The vendor/bidder must have implemented the proposed similar OEM product in a BFSI / PSU / E- commerce environment in India wherein at-least one deployments should cover an Internet- Banking/E-commerce product for the organizsation having 200 branches or has more than 2,000 TPS or more. We need banking/e-commerce experience OR Put a revised clause as "The Bidder should have successfully commissioned atleast 4 projects of the prooposed solution of similar OEM in India in the last 4-years." PAYMENT TERMS Hardware and Licenses - 50% on delivery, Request IDBI to modify the clause as: installation, balance 50% on commissioning and user Hardware and Licenses - 60% on delivery, 30% acceptance and submission of the Contract, PBG, Deed of Indemnity, NDA and SLA. installation, balance 10% on commissioning and user acceptance and submission of the Contract, PBG, PAYMENT TERMS Deed of Indemnity, NDA and SLA OEM Support - For the first year OEM support, Request IDBI to modify the clause as: OEM Support - For the first year OEM support, payment will be 50% on receipt and installation of payment will be 90% on receipt and installation of Hardware and the required licenses and the remaining Hardware and the required licenses and the remaining 10% on signing of the following 50% on signing of the following documents Contract documents Contract Form, PBG, Deed of Form, PBG, Deed of Indemnity, NDA and SLA. Indemnity, NDA and SLA. Page 9 of 11

10 Point DELIVERY PERIOD AND LOCATION DELIVERY PERIOD AND LOCATION SLA Delivery will be at IDBI Bank locations Pan India Request IDBI to modify the clause as: Delivery will be at IDBI Bank locations Pan within 6 (Six) weeks from the date of placement of India within 8 (Eight) weeks from the date of placement of order / order list provided by the order / order list provided by the dealing group. dealing group Delivery, installation and commissioning the This clause is asks for Delivery & Installation in 6 Please refer corrigendum Application Delivery Controller & Web Application weeks and is contradictory to clause 12.1 which says firewall to be completed within 6 weeks of the issue of Delivery in 6 weeks. Purchase order/ order list provided to successful Please provide a separate timeline for installation of bidder during rate contract. 6 weeks after delivery. If the bidder fails to maintain guaranteed uptime of Request the bank to modify the slabs as 99.99% on quarterly basis, Bank shall impose penalty Above 99.5% - No penalty as mentioned below on slab basis. From 98% to 99.5% - Rs 20,000 From 95% to 97.99% - Rs 40,000 Less than 95% - Rs 70, N/A Limitation of liability As there is no Limitation of liability clause the liability of bidder is not capped. Request IDBI to include a section of Limitation of Liability. Also put a cap on maximum penalty amount to 5% on quarterly AMC value As there is no limitation of liability clause in the RFP we request IDBI to include following limitation of liability clause in the agreement. Neither Party shall, in any event, regardless of the form of claim, be liable for any indirect, special, punitive, exemplary, speculative or consequential loss or damages. Subject to the above and notwithstanding anything to the contrary elsewhere contained herein, the maximum liability of Vendor under this Agreement for any claim under any P.O regardless of the form of claim, damage and legal theory shall be restricted to 30% of the value of the relevant P.O value. Clause already exists on page 82. However, the liability of the Obligor shall not exceed the contract price / bid price as stated in the aforesaid Agreement /Contract during the contract period. Page 10 of 11

11 Point Date : Place : 2.2 Migration of policies from existing ADC Request Bank to kindly share the make and model of Citrix the existing ACD 2.3 Training 3 days training will be a long period, request bank to It will be in Belapur DC Only but we need make it a one day training. Also pls suggest if the complete hands on training on Load Balancer, WAF and SSL VPN. location will be Belapur DC only with all machine E F b 2-Hardware Specifications Setup B requirements to be provided by the Bank. Pls suggest do we have to quote with WAF licenses WAF is not required in Section B. inclusive? Will the TCO include WAF license for this section? Hardware Specifications Setup B If the Primary Site is having 10,000 SSL TPS, the Secondary site requires equal throughput Should support 10,000 SSL Transactions per second for second site does not require this much throughput Bit SSL encryption. Please suggest 2000 SSL TPS with 2048 Bit SSL Encryption as per the Throughput requirements & sizing Solution should support SSL throughput of 5 Gbps per The SSL throughput should be 50% of the mentioned. SSL throughput appliance/hardware. device throughput, and request Bank to change it to is manadatory lower value. As the sizing of the appliance will be affected. HTTP Compression and Caching HTTP Compression is not required in this capacity. The Solution should support HTTP Compression For Site A, where the throughput is 8 Gbps, HTTP throughput of 6 Gbps for Setup-A and HTTP Compression throughput of 5 Gbps for Setup-B Compression required should be half i.e 4 Gbps and for Site A, it compression should be 2.5 Gbps. 10 Payment Terms Request Bank to kindly considered the below Payment terms: 70% on delivery,balance 30% on installation, commissioning and user acceptance and submission of the Contract, PBG, Deed of Indemnity, NDA and 13-Oct-15 Mumbai SLA. Page 11 of 11