QUOTATION FOR UTM 4/26(1)/2009/EDP-HO 06/08/2015

Transcription

1 MARINE PRODUCTS EXPORT DEVELOPMENT AUTHORITY (Ministry of Commerce and Industry, Govt. of India) Panampilly Avenue, Cochin (Ph: , QUOTATION FOR UTM 4/26(1)/2009/EDP-HO 06/08/2015 Sealed quotations (technical bid and Financial bid) are invited for supply and installation of Unified Threat Management Appliance (UTM) with total security, 3 years of warranty & services and 24 X 7 support for the Marine Products Export Development Authority (MPEDA) at Panampilly Nagar, Kochi. The quotes must be submitted to Secretary, The Marine Products Export Development Authority (Ministry of Commerce and Industry, Govt. of India), P.B.No.4272, Panampilly Avenue, Cochin along with EMD of Rs.7,500/- super-scribing Quotation for the supply of UTM on or before 03/09/2015 at 2 pm as per the schedule of requirements indicated in the tender document, which will be available on the web site The technical bids will be opened on 04/09/2015. SECRETARY

2 A. Schedule of requirements: S. No. Description Quantity 1 Unified Threat Management appliance with 3 year 1 deployment licenses 2 AMC cost after warranty period B. Scope of Work a. Supply and installation of UTM complying with the technical specifications given in the document. b. Configuration and integration of UTM with MPEDA s existing LAN having around 120 desktops, CCTVs, Video Conferencing equipments, IP Phones, Leased line Internet connections etc. c. To configure the ISP lines / routers so that they may all operate in load-balance mode d. To impart training to MPEDA Computer personnel to configure and administer all the features of the UTM appliance, software, license update, signature updates, backup/restore policy, log viewing, report generation, etc. along with documented manual. The training is to be given at MPEDA premises. C. Eligibility criteria: a) Bidder should attach the Balance Sheet showing at least Rs. 2 crores annual turnover in each financial year for the last three financial years. b) Bidder should be Original Equipment Manufacturer (OEM) / Authorized Partner of OEM. In case of authorized partner of OEM, the bidder should submit a letter of Authorization from OEM, specific to the quotation should be enclosed. c) The Bidder should be an ISO certified company. (Proof of the same to be attached) d) The Bidder should be in the business of supply, installation, configuration, maintenance and support of UTM/Firewall and other security appliances for at least three years as on date. e) The Bidder must enclose a certification of having successfully installed and maintained UTMs in the last 3 financial years for any Educational Institute/University/Govt. entity/psu/banks. (Preference to Central / State Govt. entities). f) The Bidder should have all necessary licenses, permissions, consents, no objections, approvals as required under law for carrying out its business. An undertaking (on their letter head) that they have all necessary licenses, permissions, consents, no objections, approvals as required under law for carrying out its business, as on date of submission of the Bid. g) Latest Income Tax Certificate should be enclosed. h) The firm should not be blacklisted / barred by Government of India or any regular body in Indi. (Self-declaration) i) The Bidder has to submit an EMD of Rs.7,500/- in the form of Demand Draft in favour of Secretary, Marine Products Export Development Authority, payable at Kochi. j) The prices quoted should be inclusive of applicable taxes. k) The bidders should fill the columns specified in the features and specifications, duly signed and submit along with the bid

3 D. Terms and Conditions: a) The successful Bidders shall warrant the software, equipment and its components to be free from any sort of defects in material and workmanship for a minimum period of 3 year from the date of successful installation and shall repair or replace on a timely basis any defective component, assembly or portion free of cost. b) The cost of AMC beyond the warranty period for 2 years for the UTM and services shall be provided. Proposal without mention of AMC charges will be treated as incomplete and will be rejected c) Maintenance service shall be made available to the supplier on all working days of MPEDA during working hours between Hrs to hours. d) The journey period for the supplier Engineer from Office or residence to site of fault shall not exceed 2 hours reckoned from the time of intimation of fault. e) The offer must cover a minimum Licensing/subscription period of three year from the date of installation including all upgrades and updates from the date. f) Free Support: Free support shall be available for the license period from supplier. g) Free Telephone support: Free telephone support shall be available 24 hrs. h) Free remote support: Free remote support shall be available during office time i) In case of problem is not solved with telephonic/ / remote support, vender will depute the person for resolving the issue. j) Ordinarily, complaints received from EDP Cell, MPEDA during working hours should be rectified within 24 Hours during the course of the day of complaint and if complaint is not rectified with 24 hrs. a penalty of Rs. 200/- per day shall be levied. k) System Downtime should not exceed four hours. If system is not restored within 4 hrs. Rs. 200/- per hour shall be imposed. l) The penalty charges will be recovered from security deposit. m) Payment terms: 100% cost of license shall be paid on successful installation of UTM and training. n) The support shall be carried out by the vendor without sub-letting it to a franchisee subcontractor. o) The successful bidder has to execute an agreement (contract) with MPEDA on non judicial stamp paper accepting all the terms and conditions of MPEDA for the support. p) 10% of the cost to be remitted as security deposit by successful bidder and the same will be adjusted with EMD. Security deposit will be released after the warranty period. q) EMD amount of successful bidder will be retained as security deposit and will be adjusted during the final settlement r) MPEDA reserves the right to accept or reject any quotations without assigning any reason.

4 E. Features and Specifications Sr No Features Compliance Remarks 1 The Firewall must be appliance based, rack mountable and it should support internal or external redundant Power Supply 2 Licensing: should be per device license for unlimited users for Firewall / VPN (IPSec & SSL) and other features. There should not be any user/ip/host based licenses Please specify if the product does not follow the required licensing policy. 3 The device should be having security functions like Firewall, VPN (IPSec &SSL), Application firewall, Gateway level antivirus, Anti spam, Category based web filtering, Intrusion prevention system, Traffic shaping, etc.. 4 The platform must be capable of supporting a minimum of 15 interfaces with auto sensing 10/100/1000 capability and Two Gigabit SFP ports 5 The Firewall must support at least 2,000,000 concurrent connections and 20,000 new sessions per second 6 The Firewall should be having minimum 2.4 Gbps throughput 7 Should support 400 Mbps IPSec VPN throughput and 1500 Tunnels 8 The firewall should support a minimum of 800 Mbps of IPS & 600 Mbps Gateway Antivirus throughput 9 Should support more than one ISP link with automatic ISP link failover as well as ISP link load sharing for outbound traffic. The device should send alert to admin on change of gateway status 10 Should Support IPv6 functions such as Management over IPv6, IPv6 routing protocols, IPv6 tunnelling, firewall and UTM for IPv6 traffic, NAT46, NAT64, IPv6 IPSEC VPN 11 Should support IPv4 and IPv6 Rate based DOS protection with threshold settings against TCP Syn flood, TCP/UDP/ port scan, ICMP sweep, TCP/UDP/ SCTP/ICMP session flooding (source/destination) 12 Device should support Static routing, RIP, OSPF,BGP, IS-IS, RIPng, OSPFv3 and BGP4+ 13 Support for authentication for Users and Firewall Administrators (Local and Remote RADIUS, LDAP & TACACS+) 14 Support for Native Windows Active Directory and Novell edirectory Integration 15 The device should have IPS protection for signatures 16 Should Identify and control over applications (ie Application control feature) Gateway Anti virus 17 Gateway AV should be supported for real-time detection of viruses and malicious code for HTTP,HTTPS, FTP, SMTP, SMTPS, POP3, POP3S, IMAP, IMAPS, IM and SMB

5 18 Should support Gateway Data Loss Prevention (DLP) feature for popular protocols like HTTP, HTTPS, FTP, POP3, IMAP, SMTP, POP3S, IMAPS, SMTPS with Document Fingerprinting. The basic virus signature database should comprise complete wild list signatures and variants as well as malware like phishing, spyware 19 OEM should be having the following certifications/ratings a. FIPS for Client VPN software b. OS should be IPv6 Phase II Ready certified c. Firewall module should be ICSA Labs and EAL 4 certified d. VPN should be ICSA Labs certified for both IPSec and SSL-TLS e. Network Intrusion Prevention System (NIPS) and should be ICSA Labs certified. f. Antivirus should ICSA Labs and VB100 certified g. OEM should be having "Recommended" rating in NSS Labs Next Generation network intrusion prevention testing, Firewall testing and Next Generation Firewall testing. h. OEM should be rated as Leader or Challenger in the Gartner magic quadrant for Enterprise Firewall and UTM 20 The Firewall should be having 30 Gb on box storage for logging and reporting Web Content Filtering 21 The proposed systems should have layer-7 & Layer-8 production and filtering, and inbuilt application category database It should support creation of internet access time policy for individual users or on group basis 22 It must support filter based selection and schedule based access controlshall include web URL block and web exempt list 23 It must have visibility and controls for HTTPS based micro-apps like Face book, YouTube, video uploading and downloading