Date: 29 th January, 2015 Invitation for bids The Bank of South Sudan would like to invite sealed/electronic bids from qualified companies to submit it Financial and Technical proposals to the bank on the projects mentioned below: s/n item Requirements 1 Upgrading of Network Core Switches and Microsoft Servers Virtualization 2 Monitoring network system for CSD and RTGS system 3 Microsoft Infrastructure Maintenance Services Supplying, Configuring and installation core switches (WS- C4507RE+96V+ & WS-C4507R+E) and server virtualization HP server DL380p Gen8 (bill of materials and specifications will be obtain from the bank). Supplying, Configuring and installation application monitoring system (Dell Software Foglight) with it equipments) bill of materials and specification will be obtain from the bank. Virtual Design, Data migration and maintenance for (Windows 2012 R2 Active Directory and Microsoft Exchange 2013). Requirements and details will be obtained from the bank. 4 HP Equipments 1. HP Proliant DL380p-G8 Intel Xeon E5-2609 (2.4GHz/4-core / 10MB/80W), 8GB (1 X 8GB). 2. 10Gbe network interface cards-662524-001. Requirements and details will be obtained from the bank. 5 Cisco Equipments Supplying, Configuring and installation (Firewalls, Routers, Web security/proxy and IPS). Requirements and details will be obtained from the bank. 6 Network Audit and Risk Assessment - Network & servers penetration testing. - Web application penetration testing Network & servers Vulnerabilities assessment. - Web application vulnerabilities assessment. - Enterprise security Assessment. - Host Based Configuration Assessment. - Database Security & Configuration Assessment. 1
Conditions Interested companies should go through the following instructions: 1. Bidding will be conducted through the international competitive procedures. 2. All bids must be accompanied by (Company profile, technical proposal and financial quotation/proposal). 3. Implementation Period should be affirmed by supplier in proposals. 4. Sealed bids must be delivered to the office of deputy director for IT at the bank s premises during working hours. 5. Electronic bids can be sent to the following email: david.jal@bosshq.org, davidjal683@gmail.com. 6. Receiving of proposals will start on 06 th February, 2015 and close on 27 th February, 2015. 7. Interested bidders may obtain further information, bill of materials and technical specifications from the office of deputy director for IT at the bank s premises during working houses. 8. Visit bank of South Sudan web site (http://bosshq.net) for further information s. 2
IT projects Requirements and Details 1. Network Core switches upgrading and MS Virtualization specifications. - Supplying, Configuring and Installation cost. - Core Switch Migration and Data Center Re-Organization Deployment Cost. - Hyper-V Deployment and Migration of Hardware Servers Deployment Cost. 1. Core Switch for HQ. Core Switch HQ JUBA Item Name Description Quantity WS-C4507RE+96V+ WS-C4507R+E Chassis two WS-X4648-RJ45V+E Sup7L-E LAN Base 1 S45EUK9-S7-36E CAT4500e SUP7-E/SUP7L-E Universal Crypto Image 1 WS-X45-SUP7L-E/2 Catalyst 4500 E-Series Supervisor LE 520Gbps red 1 WS-X45-SUP7L-E Catalyst 4500 E-Series Supervisor LE 520Gbps 1 C4500E-IPB Paper IP Base License 1 C4500E-S7-4748RJV 2x WS-4748-RJ45V+E upgrade for 7-slot bundle 1 WS-X4748-RJ45V+E Catalyst 4500E 48-Port PoE 802.3at 10/100/1000(RJ45) 2 WS-X4748-RJ45-E Catalyst 4500 E-Series 48-Port 10/100/1000 Non-Blocking 1 WS-X4712-SFP+E Catalyst 4500 E-Series 12-Port 10GbE (SFP+) 2 PWR-C45-2800ACV Catalyst 4500 2800W AC Power Supply (Data and PoE) 2 SFP-10G-SR= 10GBASE-SR SFP Module 24 2. Core Switch for DRC. Core Switch DRC (Training Center) Item Name Description Quantity WS-C4507R+E Catalyst4500E 7 slot chassis for 48Gbps/slot fan no ps 1 S45EUK9-S7-36E CAT4500e SUP7-E/SUP7L-E Universal Crypto Image 1 WS-X45-SUP7L-E Catalyst 4500 E-Series Supervisor LE 520Gbps 1 C4500E-IPB Paper IP Base License 1 WS-X4748-RJ45-E Catalyst 4500 E-Series 48-Port 10/100/1000 Non-Blocking 1 WS-X4712-SFP+E Catalyst 4500 E-Series 12-Port 10GbE (SFP+) 2 PWR-C45-2800ACV Catalyst 4500 2800W AC Power Supply (Data and PoE) 2 SFP-10G-SR 10GBASE-SR SFP Module 24 3
3. Virtualization(Server and Storage)(HQ-DRC) Virtualization Server and Storage HQ JUBA Item Name Description Quantity HP DL380p HP DL380p Gen8 /2xCPU/256 GB RAM 2 653200-B21 HP DL380p Gen8 8-SFF CTO Server 2 715218-L21 HP DL380p Gen8 E5-2650v2 FIO Kit 2 715218-B21 HP DL380p Gen8 E5-2650v2 Kit 2 672631-B21 HP 16GB 2Rx4 PC3-12800R-11 Kit 32 652564-B21 HP 300GB 6G SAS 10K 2.5in SC ENT HDD 4 653208-B21 HP DL380p/560 G8 2Slot 2x16 PCIe Rsr Kit 2 684208-B21 HP Ethernet 1GbE 4P 331FLR FIO Adptr 2 631679-B21 HP 1GB FBWC for P-Series Smart Array 2 665249-B21 HP Ethernet 10Gb 2P 560SFP+ Adptr 4 666988-B21 HP 2U Security Bezel Kit 2 733668-B21 HP 2U SFF Easy Install Rail Kit with CMA 2 739252-B21 HP 460W CS Plat Ht Plg Pwr Supply Kit 4 C6N36AAE HP Insight Control ML/DL/BL Bundle E-LTU 2 HP MSA 2040 MSA 2040 STORAGE - ISCSI 10 GB - 13X900GB Disk C8R10A HP MSA 2040 SFF Chassis 1 C8R09A HP MSA 2040 SAN Controller 2 C8S59A HP MSA 900GB 6G SAS 10K 2.5in DP ENT HDD 13 C8R25A HP MSA 2040 10Gb SW iscsi SFP 4 Pk 2 QK733A HP Premier Flex LC/LC OM4 2f 2m Cbl 4 455883-B21 HP BLc 10G SFP+ SR Transceiver 8 2. Money Market Monitoring System. Supplying application monitoring system (Dell Software Foglight) with it equipments. - Supplying, Configuring and Installation cost. - Licensing period and annual cost. s/n Item/s Code Quantity 1 Foglight Management Server FFA-FOG-PB 2 2 Foglight Failover Management Server FZA-FOG-PB 1 3 Foglight for Active Directory FZB-FOG-PB 4 4 Foglight for Microsoft Exchange FHC-FOG-PB 4 5 Foglight for Infrastructure FHC-FOG-PB 80 6 Foglight for Operating Systems FZA-FOG-PB 80 7 Foglight for Oracle Server NAA-FOG-PB 2 8 Foglight for Storage VSM-FOG-PB 6 9 Foglight for VMWare VOE-FOG-PB 16 10 Foglight Websphere MQ GAJ-FOG-PB 4 11 Foglight for Java EE CAE-FOG-PB 4 4
3. Microsoft Infrastructure Maintenance Services. The financial proposal required:- - Design/migrate/configure a Microsoft Hyper-V virtualized infrastructure. - Migrate/configure the Microsoft infrastructure to the virtual environment. - Testing and Commissioning the solution. - Generate project reports and deliverables. Scope of Work A- The proposed maintenance services shall include the following deliverables:- 2. Service Pack and hotfix updates on all the relevant servers. 3. Review of current server configurations and if required, updating the configurations to address the current service requirements. 4. Review Group Policy configuration on Active Directory and update the configuration if required. 5. Run the Microsoft Best Practice Analyzer on all the relevant servers. 6. Check Event Logs. 7. Check server health. 8. Perform performance analysis to verify that resource utilization the servers falls within the accepted thresholds. 9. Check Microsoft Exchange queues. 10. Check and verify incoming and outgoing messaging paths and mail flow. 11. Update anti-spam rules and definitions. 12. Comprehensive reports detailing all the above processes B- The proposal to migrate the domain and email infrastructure to a Microsoft Hyper-V virtualized environment: (a) Planning 1. Verify current environment and email architecture and design the migration framework. 2. Design the Active Directory physical to virtual migration plan. 3. Design the Microsoft Exchange 2013 physical to virtual migration plan. 4. Test connectivity to migrated mailboxes. 5. Decommission the existing Exchange servers once completed. 6. Build a test lab based on the current architecture and perform a complete migration to the new architecture. 7. Document all the steps and procedures and create the high-level and lowlevel deployment documentation (b) Windows 2012 R2 Active Directory Domain Services migration 1. Create 2 virtual machines on separate physical boxes and configure as additional domain controllers in the JUBA-HQ site and verify replication 5
functionality. Both domain controllers will also host Active Directory Integrated DNS zones for the domain. 2. Create 1 virtual machine on a physical box and configure as additional domain controller in the DRC site and verify replication functionality. Domain controller will also host Active Directory Integrated DNS zone for the domain. 3. Ensure that all Active Directory objects have been replicated to the new servers. 4. Migrate FSMO roles to the new virtual domain controller in the JUBA-HQ site. 5. Decommission the existing domain controllers once completed (c) Microsoft Exchange 2013 migration in the JUBA-HQ site 1. Create 2 virtual machines on each physical boxes for a total of 4 virtual machines. 2. Install & configure the virtual machines with Microsoft Windows Server 2012 R2 with the latest service pack & critical patches; join the domain as member server. 3. Install & configure Microsoft Exchange 2013 on the servers, 1 on each physical host with the Mailbox Server Role & 1 on each physical host with the Client Access Server Role. 4. Configure OWA(web access), Outlook Anywhere(RPC/HTTPS) and ActiveSync(mobile access) services. 5. Configure the Mailbox servers as part of a Database Availability Group (DAG). 6. Configure the Client Access servers as part of an NLB cluster. 7. Migrate mailboxes from current server to new server. (d) Microsoft Exchange 2013 migration in the DRC site 1. Create 1 virtual machine on a physical box. 2. Install & configure the server with Microsoft Windows Server 2012 R2 with the latest service pack & critical patches; join the domain as a member server. 3. Install & configure Microsoft Exchange 2013 with the Mailbox Server Role & Client Access Server Role ; to configure OWA(web access), Outlook Anywhere(RPC/HTTPS) and ActiveSync(mobile access) services. 4. Configure the server as part of the Database Availability Group (DAG) created in the JUBA-HQ site (e) Post Installation: Test the database replication and redundancy of the server 1. Test incoming emails in the JUBA-HQ site. 2. Test outgoing emails in the JUBA-HQ site. 3. Perform Post Installation Server Patch Updates. 4. Verify Server Roles. 5. Perform Microsoft Exchange Best Practices Analyzer. 6. Review Event Logs. 7. Perform the relevant preventive maintenance tasks on all the servers. 6
8. Project Documentation & Project Briefing for BOSS IT Team. 9. Create and commission the Standard Operating Procedure (SOP) documents for server and client management. 10. Decommission old servers 4. HP Equipments - Supplying cost ONLY. s/n Item/s Quantity 1 HP Proliant DL380p-G8 Intel Xeon E5-2609 4 (2.4GHz/4-core / 10MB/80W), 8GB (1 X 8GB). 2 10Gbe network interface cards - 662524-001 10 5. Cisco Equipments - Supplying, Configuring and installation cost. A. Firewall s/n Item QUANTITY LOCATION 1 ASA5512-FPWR-K9 2 JUBA HQ 2 ASA5512-FPWR-K9 2 JUBA DRC 3 ASA5512-FPWR-K9 2 MALAKAL 4 ASA5512-FPWR-K9 2 WAU 5 ASA5512-FPWR-K9 2 YEI 6 ASA5525-FPWR-K9 2 JUBA HQ 7 ASA5525-FPWR-K9 2 DRC B. Routers s/n Item QUANTITY LOCATION 1 CISCO1921 2 JUBA HQ 2 CISCO1921 2 JUBA DRC 3 CISCO1921 2 MALAKAL 4 CISCO1921 2 WAU 5 CISCO1921 2 YEI C. Proxy/Web Security (Bluecoat) s/n Item QUANTITY LOCATION 1 WSA-S170-K9 2 JUBA HQ D. IPS s/n Item QUANTITY LOCATION 1 SourceFire(L-ASA5525-TAMC=) 2 JUBA HQ 7
6. Network Audit and Risk Assessment Required Implementation cost 1. Network & Servers Penetration Testing. 2. Web Application Penetration Testing. 3. Network & Servers Vulnerabilities Assessment. 4. Web Application Vulnerabilities Assessment 5. Enterprise Security Assessment. 6. Host Based Configuration Assessment. 7. Database Security & Configuration Assessment. 8. Technical and Business Risk Assessment. 9. Computer Crime Response Assistance & Investigation. 8