Request For Online Proposal (e-rfp) for Procurement of Internet Proxy Solution

e-rfp Reference No : OBC/HO/DIT/RFP-IP/42/ 2014 Request For Online Proposal (e-rfp) for Procurement of Internet Proxy Solution Oriental Bank of Commerce Department of Information Technology Corporate Office Gurgaon 1

General Detail Tender Id : Tender No : Department Name : OBC/HO/DIT/RFP-IP/42/2014-15 Oriental Bank of Commerce Scope of Work : SUPPLY, INSTALLATION & MAINTENANCE OF INTERNET PROXY SOLUTION Tender Details : REQUEST FOR ONLINE PROPOSAL (e-rfp) FOR PROCUREMENT OF INTERNET PROXY SOLUTION Mode of Tender Submission Tender Type : Type of Contract: Bidding Type : Consortium : Download Tender Documents : Purchaser Location : Online Open Service Indigenous NOT ALLOWED After meeting the Pre- Qualification criteria GURGAON Key Dates Document Download Start Date & Time : Document Download End Date & Time : Last Date & Time of Online and Offline Bid Submission: Date & Time of Online Bid Opening : Bid Validity Period (Days): Project Duration : Documents to be submitted Physically : 30-05-2014 20.06.2014 17:00 hrs 20.06.2014 17:00 hrs 21.06.2014 11:00 hrs onwards As per tender document As per tender document i. Participation Fee DD, ii. B.G. or DD for EMD iii. Other documents supporting eligibility criteria etc. as per tender document. Tender Activity Configuration On 08-06-2014 at 3:00 P.M. Pre-bid-Meeting : Mode of PO : Oriental Bank of Commerce DIT, Head Office, 1 st Floor, Sector-32, Institutional Area, Gurgaon 122 001 Offline 2

Mode of Document Fees Payment : Mode of EMD payment : Mode of Security Fees Payment : Offline Offline NA Payment Details:- Participation Fees(`): EMD Amount : `10000/- (Not refundable) `6,00,000/- Estimated Cost : --- Details Eligibility Criteria : General Terms and condition : As per Tender Document As per Tender Document 1. The bidders must fulfil the Pre-Qualification criteria for being eligible to bid. 2. The EMD and Bank Draft of `10,000/- on account of participation fees along with physical copies of all the documents mentioned in the Tender document in support of eligibility criteria etc. must be received at the following address before the date and time of submission of bid. Other Details : 3. The prospective bidders may mail their queries and suggestions for any changes required to be made in the bid document through e-mail on dit@obc.co.in before 07.06.2014 having subject line as Pre-Bid Queries for RFP for Procurement of Internet Proxy Solution. The suggestions and queries shall be responded in the pre-bid meeting on 08.06.2014 and subsequent changes made based on the suggestions and clarifications as above shall be deemed to be part of the RFP document. 4. No suggestions or queries shall be entertained after pre-bid meeting. 5. Contact details of the Bank: The Assistant General Manager (IT) Oriental Bank of Commerce, Head Office, Plot No-5, 1 st Floor, Sector-32, Institutional Area, Gurgaon 122 001 Phone: 0124-4126216,4126214 Fax: 0124-4126230 E-mail: dit@obc.co.in 3

1. Introduction Oriental Bank of Commerce is one of the leading Public Sector Bank, invites technically complete and commercially competitive proposals from OEMs or their Channel Partners/ Distributors/Resellers for the supply, installation, and maintenance of Internet Proxy Solution of reputed make in India. The Bank will procure Internet Proxy Solution for 5000 users with scalability to 7000 users for providing internet access to its users at Administrative offices and branches across the Bank. Minimum technical specifications of required Internet Proxy Solution software is provided in Annexure II of this RFP. 2. Bidders Eligibility Criteria The following is the bidders proposed eligibility criteria:- 1. The bidder should be a profitable company with minimum annual turnover of 8 cores or above in last financial year from software business in India. 2. The bidder should be a reputed company engaged in supply and maintenance of Internet Proxy Solution in India. 3. The bidder should be either the manufacturer or authorized Indian supplier of the offered solution. Authorization letters from the Original Equipment Manufacturer (OEM) to this effect should be furnished. 4. Offered solution should have been in operation at any of the Scheduled Commercial Bank in India. 5. The bidders should have all India presence with good reputation in the market; Bidder should have complaint monitoring system in place with toll free number for call logging. 6. The bidder/oem should have service/support infrastructures at Mumbai and Delhi for maintenance of Internet Proxy Solution and be able to provide efficient and effective support. Bidder will ensure back to back availability of support from OEM. A letter from OEM in this regard shall be submitted as part of bid. A list of service/support center be submitted as a part of tender document. 7. The offered solution should be Server Based Model and will be able to take load of more than 7000 users. 8. Any bidder who has been banned by any Bank/PSU/ Government Deptt for such supplies for any reason viz. delay in supply of hardware, delay in providing in-time after-sales support at the site, or frequent breakdown of supplied hardware, etc. is not eligible to bid. 4

3. Scope of Work 1. The bidder should be a profitable company with minimum annual turnover of 8 cores or above in last financial year from software business in India. 2. The accessories required for proper functioning of the Internet Proxy Solution will also be provided. 3. The software should be covered under Comprehensive one warranty and thereafter software subscription shall be renewed y-o-y basis. 4. Offered Solution should be Server based and will be maintained for minimum period of Five years. 5. The vendor has to provide required minimum hardware sizing for smooth operation of the offered solution as the part of technical bid. The bidder has to submit an undertaking/certificate (format enclosed in the annexure VI) signed by the official not lower than the Company Secretary of the OEM, certifying that the software used is licensed product and no pirated software product is supplied to the Bank. 4. Bidding Process: 4.1 e-tendering: This Tender will follow e-tendering process [e-bids] as under which will be conducted by Bank s authorized e-tendering Service Provider M/s. e-procurement Technologies Ltd. [abcprocure] through Website https://obc.abcprocure.com. Following activities will be conducted online through above website: a. Submission of Technical Bid & Commercial Bid by the Vendor b. Opening of Technical Bid & Commercial Bid by the Bank c. Clarification, if any, sought by the Bank. d. On-line evaluation by the Bank. Representatives of Vendors will be given training for e-tendering by the Service Provider, M/s. e- Procurement Technologies Ltd [abcprocure]. Bidders who wish to participate in online tenders will have to register with the website (https://obc.abcprocure.com) through the "New user Registration" link provided on the home page. Bidder will create login id & password on their own in registration process. Following facilities shall be provided to registered bidders/ vendors by the service provider M/S e-procurement Technologies Ltd: a) Training to the Vendor/Contractor for participating in the bids through e- tendering Website. 5

b) 24x7, 365 days call center support/ email/ phone/ fax/ chat / mobile etc. in all possible medium. c) Registration with the e-tendering website. d) User Manual/ Training Kit to the Vendor/ Contractor. e) Any no. of users of Vendor/ Contractor organization can take training on the e- tendering system. f) Bidder who wish to participate in this tender need to procure Digital Signature Certificate (for Encryption) as per Information Technology Act-2000 using that they can digitally sign their electronic bids. Bidders can procure the same from any of the CCA approved certifying agencies, or they may contact e- Procurment Technologies Ltd. at below mentioned address and they will assist them in procuring the same. Bidders who already have a valid Digital Signature Certificate need not to procure the same. In case bidders need any clarification regarding online participation, they can contact, e-procurement Technologies Ltd. Corporate Office : B-705 Wall Street-2, Opp-Orient Club, Nr.Gujarat College, Ellis Bridge, Ahmedabad Tel : +91-079-40016802-882 Fax : +91-079-40016816/876 Cell : +91-9374519754 Cell : +91-9377988119 Email : support@abcprocure.com, vaishali@abcprocure.com Website : http://www.abcprocure.com Bidders who wish to participate in e-tender need to fill data in predefined forms of RFP, Technical, Price bid available in respective tender only. Bidder should upload scanned copies of reference documents in support of their eligibility of the bid and as per the instructions given in tender documents After filling data in predefined forms bidders need to click on final submission link to submit their encrypted bid. 4.2 RFP Document and Submission of Bid The interested eligible vendor may download the RFP document from the Bank s website, i.e., www.obcindia.co.in, https://obc.abcprocure.com or http://tenders.gov.in 4.3 Submission of Bid Bidders need to submit their quotation through online mode only at Bank s e -Tendering portal https://obc.abcprocure.com. 4.4 Two Stage Bidding Process The bidder will submit bid in two parts separately The Technical Bid and The Commercial Bid. The technical and commercial bids shall be submitted online but the supporting documents referred to in this RFP are required to be submitted to the Bank in physical form as mentioned in the following paragraphs. Technical Bid will contain the details as required in the Eligibility criteria, along with the documentary evidence, and other documents related to the bid, whereas the Commercial Bid will contain the 6

pricing information. In the first stage, only the Technical Bids will be opened online and evaluated as per the criterion determined by the Bank. Bank may at its discretion invite the bidders for presentation before the selection committee of the Bank. Those bidders satisfying the technical requirements as determined by the Bank and have submitted EMD and Bid participation fee as mentioned in RFP, shall be short-listed for opening their Commercial Bid. The L-1 vendor shall be decided on the basis of the Lowest Commercial of Technically qualified bidders. Bidders have to submit the all the document as mentioned in technical BID with participation fee and EMD in a sealed envelope to the Department of Information Technology before closing date and time of the BID, failing which the online bid may not be considered. 4.5 Technical/Commercial Bid Essentials 4.5.1 The Technical Bid must contain the following. ONLINE: a) Product Brochures containing detailed description of essential technical and performance characteristics of offered Solution; b) Details of service/support network (addresses, names of contact persons, phone numbers etc.) c) Bidder s General Information (Annexure-I) d) Bidder s Compliance to Eligibility Criteria, Terms & Conditions (Annexure-VII) e) Compliance with Technical specifications and point wise Compliance with the Scope of Work (Annexure-II) Physical Documents: f) Letter authorizing representing executive(s); g) Documents in support of meeting Bidder s Eligibility Criteria; h) Demand Draft towards participation fee. i) Demand Draft / Bank Guarantee on a/c of EMD. j) Authorization Letter(s) from OEM; k) Letter of acceptance of all Terms & Conditions as mentioned in the RFP. l) Details of Service/Support Infrastructure; m) Product Brochures containing detailed description of essential technical and performance characteristics of offered Solution. n) Audited Balance Sheet and Profit & Loss Account documents for the last 3 years; o) Undertaking to provide Support for Internet Proxy Solution for the minimum period of three years from the date of installation and commissioning of the software. 4.5.2 COMMERCIAL BID The following documents should be submitted online: 7

a) L-1 Determination Sheet with Pricing Information (Annexure III). 4.6 Cost of Bidding The bidder shall bear all costs associated with the preparation and submission of its bid and the Bank will, in no case, be responsible or liable for these costs, regardless of the conduct or outcome of the bidding process. 4.7 Late Bids Since bidding will be online the bidder will not be able to upload/ submit their bids after the specified time on last date of bid submission. 4.8 Clarifications of RFP A prospective bidder requiring clarification on any point mentioned in the RFP may notify the Bank in writing or by fax/e-mail at the address indicated below: Asstt. General Manager (IT) Oriental Bank of Commerce, Head Office, 1 st Floor, Sector-32, Institutional Area, Gurgaon 122 001 Phone: 0124-4126216,4126214 Fax: 0124-4126230 E-mail: dit@obc.co.in 4.9 Amendment to RFP Contents At any time prior to the last date for bid-submission, the Bank may, for any reason, whether at its own initiative or in response to clarification(s) requested by a prospective bidder, modify the RFP contents by amendment. Amendment will be published on Bank s website as well as e-tendering website, and will be binding on bidders. The Bank shall not be liable for any communication gap. In order to provide prospective bidders, reasonable time to take the amendment into account for preparation of their bid, the Bank may, at its discretion, extend the last date for bid-submission. Further, the Bank reserves the right to scrap the RFP or drop the tendering process at any stage without assigning any reason. 4.10 Pre-bid Queries The prospective bidders may mail their queries through e-mail on dit@obc.co.in on or before 07.06.2014. The Bank expects the bidder to carefully examine all instructions, forms, terms & conditions, technical specifications etc., mentioned in this RFP. Failure to furnish all information required for submission of a bid not substantially responsive to the RFP in every respect will be at the bidder s risk and may result in the rejection of its bid without any further reference to bidder. The Bank shall not consider any request for date-extension for bid-submission on account of late receiving/downloading of RFP by any prospective bidder. The bids not accompanied by the Demand 8

Draft / Pay Order of requisite amount shall be out rightly rejected. 5. Proposal Features 5.1. Language of the Proposal All bids and supporting documentation must be in English or Hindi only. 5.2 Validity Period The rates quoted shall be valid for a period of 12 months from the date of Empanelment letter. A proposal valid for a shorter period shall be rejected by the Bank as nonresponsive. If desired, the Bank may extend validity for further period three months on mutual consent with the bidder. 5.3 Proposal Currency & Price Structure Prices shall be expressed in the Indian Rupees only. The bidder must quote total price exclusive of all taxes like Value Added Tax, Sales Tax, local taxes. However, duties and charges related to freight, insurance, forwarding, packing, dispatch, installation etc. shall be borne by the vendor. The cost will not depend on any variation in USD/ / exchange rate. 6. Bid Evaluation The purpose of bid evaluation is to determine the lowest evaluated responsive bid from amongst the substantially responsive bids received by the Bank. In order to determine the lowest evaluated responsive bid, the Bank shall adopt a systematic evaluation process comprising of following logical steps. 6.1 General Evaluation The Bank will examine the bids against Bidder s Eligibility Criteria mentioned in the RFP. Bidders who do not qualify all the criteria in this section shall be summarily rejected from further evaluation. The Bank will examine the bids to determine whether they are complete, whether any computational errors have been made, whether required sureties have been furnished, whether the documents have been properly signed, and whether the bids are generally in order. The Bank may waive any minor informality, nonconformity, or irregularity in a bid which does not constitute a material deviation, provided such waiver does not prejudice or affect the relative ranking of any bidder. The decision of the Bank in this regard shall be final and binding. Prior to the detailed evaluation, the Bank will determine the substantial responsiveness of each bid against this RFP. For purposes of these clauses, a substantially responsive bid is one which conforms to all the terms and conditions of the RFP without material deviations. 9

During evaluation of the bids, the Bank may, at its discretion, ask the bidder for providing clarification on any point mentioned in its bid. The request for clarification and the response shall be in writing. 6.2 Technical Evaluation Bidders qualifying in General Evaluation will be technically evaluated on the parameters as Defined in Annexure-II i.e. Technical Specification of Internet Proxy Software. 6.3 Commercial Evaluation Commercial bids submitted by only those bidders, who have qualified the General and Technical evaluation will be eligible for further participation, their price shall be compared and the lowest quoting bidder as mentioned above will be declared as L-1 based on the total cost of ownership of 5 years of all items listed in L-1 determination sheet and Bill of Material. Arithmetical errors will be rectified on the following basis. If there is a discrepancy between the unit price and the total price that is obtained by multiplying the unit price and quantity, the unit price shall prevail and the total price shall be corrected. If there is a discrepancy between words and figures, the amount in words will prevail. If the bidder does not accept the error-correction, its bid will be rejected, and its bid security i.e. Earnest Money Deposit (EMD) may be forfeited. 7. Award Notification The Bank shall declare L-1 bidder for Internet Proxy Solution. The acceptance of a bid, subject to contract, commercial considerations & compliance with all terms and conditions will be communicated in writing by means of placing order at the address supplied by the bidder in its bid. Any change of bidder s address, should therefore be promptly notified to: 8. Other Terms & Conditions Asstt. General Manager (IT) Oriental Bank of Commerce, Head Office, Plot No-5 1 st Floor, Sector-32, Institutional Area, Gurgaon 122 001 Phone: 0124-4126216, 4126214 Fax: 0124-4126230 E-mail: dit@obc.co.in 8.1 Delivery The vendor shall be responsible for delivery of the ordered software at the Bank s sites within 4 weeks of the date of purchase order. In case of serious discrepancy in supplied software its accessories, the Bank may cancel the purchase order and return the software and accessories back to the vendor at vendor s costs and risks. 8.2 Performance Bank Guarantee The vendor has to submit a Performance Bank Guarantee (PBG) of 10% of the rate contract value to the Bank within 30 days from the date of first order. This Bank Guarantee should be valid for 3 years from the date of issue of the purchase order. The performa for Performance Bank Guarantee is attached as Annexure V. 10

8.3 Payment Terms The Bank will make on-line payment to the vendor only electronically through Head Office as per following terms: 70% On complete delivery Software 30% 30 days after complete delivery, installation and implementation of the Internet Proxy Solution A copy of Invoice mentioning IFSC Code, Bank and Branch Name and Account Number of the Vendor will also be submitted to the location as specified in purchase order separately for remitting the payment online in their accounts and also for accounting purposes. 8.4 Earnest Money Deposit The bidder shall have to deposit earnest money in the form of Financial Bank Guarantee of `6 Lac as per enclosed format (Annexure IV) valid for six months from the last date for proposalsubmission. The period of the Bank Guarantee can be further extended as per the Bank s requirements. The offer without Earnest Money Deposit would be considered as non-responsive, incomplete and shall be out rightly rejected. The BGs relating to EMD shall be released/ returned to all the bidders except successful bidders after finalization of tendering process. In case of successful bidders the BG shall be released after receipt of requisite PBG. The BG submitted to the Bank may be invoked and EMD amount forfeited in case the bidder backs out from the offers made by it under tendering process after being declared as successful vendor. 8.5 Order Cancellation The Bank reserves the right to cancel the purchase order in the event of one or more of the following situations: 1. Delay in delivery of offered solution and its accessories, beyond the specified period for the same as mentioned in the order. 2. Serious discrepancy in supplied software and their accessories. In the event of order cancellation the vendor shall be responsible to take back the software and their accessories at its cost & expenses. 8.6 Warranty The offer must include comprehensive on-site warranty and support charges for period of three years period starting from the date of installation and acceptance of the Internet Proxy Solution at the Bank s sites. Vendor shall be fully responsible for the manufacturer s warranty in respect of proper design, quality and workmanship of Software, accessories etc., covered by the RFP. 8.7 Software Subscription Renewal After expiry of the three years subscription period, the Bank may renew software subscription for the licenses required by the Bank. The vendor must undertake to provide support for the same over the period of software subscription renewal The Bank reserves the right to terminate the software license renewal by issuing one month s notice to the concerned vendor(s), if the services rendered by the vendor(s) are found 11

dissatisfactory. In that case, the vendor(s) will refund the proportionate amount of license fee for the rest of the period, if any. Not following all that is mentioned above, the Bank reserves the right to outsource the work to a third party. Whatever the case may be the vendor(s) shall provide requisite training, technical know-how, and expert assistance to the persons and/or agencies, duly authorized by the Bank for this purpose. 8.8 Support The vendor is required to provide sound after-sales service/support by arranging timely attending of calls (maximum 4 hours) received from the sites where the Internet Proxy Solution have been supplied and installed; and problem rectification through competent service engineers. The desired support time should be uniformly maintained. The vendor must supply the details of its service/support infrastructure meant for registering the complaints along with the contact numbers like mobile nos., phone nos., electronic mail addresses and names etc. of its service engineers. 8.9 Liquidated Damages The Bank expects delivery within 4 weeks. However, if the vendor commits delay in the delivery of the Internet Proxy Solution beyond that period, the vendor will be liable to pay a sum of 1% (one percent) of the undelivered portion of the order value per site for each week of delay beyond the scheduled delivery date by way of liquidated damages. The maximum cap on liquidated damages shall be 10% of the undelivered portion. 8.10 Obtaining Requisite Forms Like Form 32 etc. Requisite form, like Form-32/Road Permit/Entry Tax etc, will be the sole responsibility of the vendor. However, Bank will sign the requisite forms as per requirement. 8.11 Release of Earnest Money Deposit: In case of unsuccessful bids, the Earnest Money will be returned to the unsuccessful bidder after completion of the process. The Earnest Money Deposit of the successful bidders will be returned on his submission of Performance Bank Guarantee (PBG) valid for 3 years from the date of issue of the purchase order. 8.12 Signing of Contract The successful bidder(s) shall be required to enter into a agreement with the Bank, within 7 days of the award of the tender or within such extended period as may be specified by the Purchaser on the basis of the Tender document, the tender of the successful bidder, the letter of acceptance and such other terms and conditions as may be determined by the Bank to be necessary for the due performance of the work in accordance with the Bid and the acceptance thereof. 8.13 Use of Contract Document and Information 12

The Bidder shall not, without the purchaser's prior written consent, make use of any document or information provided by the Purchaser in Bid document or otherwise except for purpose of performing contract. 8.14 Uptime & Penalty The uptime of the offered solution by the vendor is expected to be 98% on monthly basis. In case uptime is not maintained per machine the monthly penalty of 1% of the order value (if the subject item is under warranty) or ATS value (if the subject item is under ATS). Maximum cap on the penalty shall be `50,000/- per month. 8.15 Disqualification of the Bidder Any bidder not complying with the bidding process is liable for disqualification at any stage. Decision of the Bank in this regard shall be final, conclusive and binding on the bidder. Further, any empanelled vendor not conforming to the terms & conditions of the empanelment or RFP shall be liable for cancellation of empanelment. If any vendor fails on more than three occasions to deliver the ordered goods in time or fails in providing required after sale service timely, the Bank may decide without any notice not to place further purchase orders to such vendor. 13

Bidder s General Information Annexure-I Sr. Information required Information to be filled by the bidder 1. Name of the bidder 2. Year of starting operations 3. Constitution of the bidder, i.e., Limited Company, Private Limited Company, Partnership, Sole Proprietorship, or any other type 4. Bidder s registered address 5. Bidder s corporate address 6. Name(s) of partner(s)/director(s), if applicable 7. Address(es) of partner(s)/ Director(s), if applicable 8. Name(s) of the authorized executive(s) 9. E-mail address(es) of authorized representative(s) 10. Phone nos. of authorized representative(s) 11. Fax nos. of authorized representative(s) During FY 2010-11 During FY 2011-12 During FY 2012-13 12. Operating Profit (` In crore) 13. Total Turnover (` In crore) 14. Revenue earned from sale of software (` In crore) 15. No. of support centers 16. Name of Bank(s) where Internet Proxy Solution have been supplied 17. Proxy Software proposed to be supplied Signature Seal of the bidder 14

Annexure II Required Minimum Technical Features of Internet Proxy Solution Sr. No. Required Featured by the Bank Yes/No 1 The solution must run on physical servers and support minimum of 7000 users from the day one. 2 Product must not be End of Life and Support for next 5 years. 3 The solution should be a on-premise Secure Web Gateway solution having Proxy, URL filter Caching, SSL Inspection, Anti-Virus, Antimalware and realtime protection against zero day threats all in one hardware. 4 The solution will be deployed on physical servers (not Virtual systems) and should be manageable through single unified management console. 5 The solution should support different deployment modes 6 The supplied solution can be deployed in HIGH AVAILABILITY mode 7 The solution must identify and block webpages with: a. Malicious JavaScript / VB Script b. Malicious (or unauthorized) ActiveX applications c. Block Potentially Unwanted Programs (PUPs) d. Malicious Windows executable 8 The solution should provide proxy, caching, on box malware inspection, content filtering, SSL inspection, protocol filtering on the same server. Malware scanning can be through third party however all inspection needs to be local and on-premise. 9 The solution should have IP spoofing to provide accurate representation of the IP addresses as it exits the proxy. 10 The solution must identify and block configurable search strings like: porn, adult, hacking, download, shareware, etc 11 The solution must have in built URL database, for blacklists like Phishing, Malicious, etc on URL categories. Solution must have real time update. 12 The solution should have gateway level Antivirus and malware protection. 13 The solution must have flexibility to protect from objectionable, offensive content such as (not limited to) - Religious bias sites - Gambling sites - Hacking sites etc. 14 The solution must provide file filtering for upload/download. 15 The solution must support different types of compression algorithms and scan nested compressed files. 16 The solution must have flexibility to monitor and block instant messaging (IM) based file transfer and other granular controls in applications 17 The solution must provide Web reputation as well as content based blocking/filtering 15

Sr. No. Required Featured by the Bank Yes/No 18 The solution must be updated automatically with the new signatures from the web at customized user defined interval. A) Virus, B) White list/blacklist URLs database C) System patches must be made available as and when new stable release is available D) Botnets E) Rootkits F) Malware 19 The solution must have stringent security to safeguard itself against any attacks from Internet or Intranet.(like Multiple TCP Connections etc.) 20 The solution must immediately block and alert the user if the content being downloaded/uploaded/accessed is found to contain virus/other malware over HTTP and HTTPS connections 21 The solution must support, control and recognize all Web 2.0 application traffic and protect against Web 2.0 based attacks. 22 The solution must be capable of dynamically blocking a legitimate website which has become infected and unblock the site when the threat has been removed. 23 The solution should perform dynamic content inspection of web-based content being accessed from otherwise unblocked websites. 24 The solution should detect and blocks outbound Botnet and Trojan malware communications. It should log and provide detailed information on the originating system sufficient to enable identification of infected units for mitigation. 25 The solution should provide real-time classification of uncategorized websites 26 The solution should have real-time content scanning ability to understand malicious content besides on-box AV and anti-malware 27 The solution should have ability to detect and block proxy anonymizer services. 28 The solution should allow for delegable system administration (such as allowing for a user to configure filtering and logging for only their Active Directory or customized group without affecting the remainder of the users). 29 The solution should provide creation of custom policies to be applied for specific user/s, IP's and group/s 30 The solution should provide functionality to schedule access to URL categories for specific user / users / group/groups/client /clients to access internet on specific Time/Day / Date / Weekly /Monthly etc. 31 The system should control incident access based on role and policy violated. The system should also allow a role creation for not having rights to view the identity of the user and the forensics of the incident 16

Sr. No. Required Featured by the Bank Yes/No 32 The system should create separate roles for technical administration of servers, user administration, policy creation and editing 33 The system should have options to create a role to see summary reports, trend reports and high-level metrics without the ability to see individual incidents 34 The system should allow incident managers and administrators to use their Active directory credentials to login into the console 35 The solution should have support two factor Authentication for Management Server. 36 The solution should provide multiple administrator roles for configurable administrative functions 37 The solution should provide Command-Line access for administrative purposes. 38 The solution must have basic system health alerts to ensure availability and the capability for advanced policy alerts to enable real-time management. 39 The solution should have Multi-Domain authentication to allow the admin to create rules that authenticate against multiple domain controllers in a sequence 40 The Solution should be able to poll the Domain controllers to identify users logon information to transparently identify users. 41 The solution should provide visibility into web activities as they happen, enabling proactive security. It should have capabilities to detect malware, spyware, BOT's, malicious codes real time and all inspection and scanning. 42 The solution should support real time graphical and chart based dashboard for the summary of activities over Web 43 The solution must provide logging of the following items at a minimum: IP address of client workstation, site denied access, reason of denial, time and date of denial. 44 The Solution should have capability to provide detailed investigation reports like Risk classes - Security risk, Legal Liability risk, Bandwidth loss, productivity loss & business loss. 45 The solution should create custom reports on a granular and/or enterprise level such as (but not limited to): Usage Report of Specific User/IP/Group based on Time/Date Report for all users who have been accessed the specific URL Usages report based on Time & Date Top service user Most requested service 46 The solution must provide a clear and detailed reporting mechanism that users can leverage for investigations and usage reports. The reports templates should be customizable and must be flexible in filtering by various data types (IP range, subnet, users). 17

Sr. No. Required Featured by the Bank Yes/No 47 The solution should be able to generate & export or email reports automatically to assigned users in various formats: - PDF, - HTML - Excel/CSV 48 The solution must support granular access control and authorization to facilitate gathering log information of users. 49 All usage reports must be able to be run daily, weekly, monthly, quarterly, semi-annually, and annually, or a configurable time span. 50 All usage reports must be capable of running automatically and delivered to designated personnel via electronic means 51 The solution should provide read only accounts to view logs and reports. 52 The solution must provide reports to track the performance of this system including an event log showing any system down time or system exceptions or other problems. 53 The system should allow reports to be mailed directly from the UI and should allow automatic schedule of reports to identified recipients 54 The reports should be exported to at least CSV, PDF, HTML formats 55 The system should provide options to save specific reports as favorites for reuse 56 The system should have lots of pre-defined reports which administrators can leverage 57 The solution should have capabilities to detect custom encrypted payloads, password files and other identified sensitive information getting stolen through modern malware. 58 The solution should have dual anti-malware engines(signature and Heuristics based) and should also have capabilities to inspect malware embedded in PDF files. 59 The solution should support future addition of Malware Sandbox functionality to evaluate the malicious code and provide detailed report on analysis. 60 The solution should be able to detect data theft even if the malware sends the data through image files. 61 The solution should provide geo destination awareness so the location where the malware is trying to establish connection can be tracked. 62 The solution should have the ability to detect sensitive content embedded in image files over Web channel 63 The solution should be able to detect encrypted and password protected files. 64 The solution should be able to recursively inspect the content of compressed archives 65 The solution should be able to fingerprint only specific fields or columns within a database and should be able to identify information from databases by correlating information residing in different columns in a database 66 The solution should be able to identify malicious traffic pattern generated by Malware infected PC in order to prevent future data leakage by the malware 18

Sr. No. Required Featured by the Bank Yes/No 67 The solution should be capable of detecting data-thefts by any malicious activity in the network by a malware or other security threat. 68 The solution should be able to enforce policies by URL's, domains or URL categories natively For example only HR is allowed to post Resume to Job Search sites. No sensitive content can go to malicious websites, social networking sites etc. 69 The solution should report incident with URL category information along with user. Content violating the policy etc. to be displayed in the incident, for instance which URL category did the information should appear in the incident 70 The OEM should provide 24x7 technical support through phone and Web, Product Upgrades, Updates, Patches and access to Technical Library and Product Documentation 71 The OEM should have its technical support center in India. 72 Appliance should also have on remote support capability 19

L-1 Determination Sheet Annexure III Item Internet Proxy Software 3 Years Subscription Cost Internet Proxy Software 2 nd and 3 rd Year Subscription Cost for additional licenses, if required by the Bank Support Charges year 1 Support Charges year 2 Support Charges year 3 Total Cost Basic Unit price Per year Qty. 4500 700 Amount in Total Price The bidder must quote the basic price exclusive of taxes like Value Added Tax, Sales Tax, Service Tax, Octroi and local taxes etc. However, duties and charges related to freight, insurance, forwarding, packing, dispatch and installation shall be borne by the vendor. Bank may order for the numbers of Internet Proxy Licenses as mentioned against quantity column as per the requirement. The figures mentioned in quantity column may increase or decrease. The order for the required numbers of licenses shall be placed on the basis of Basic Unit Price quoted by the bidder. Prices shall be expressed in the Indian Rupees only. The bidder must quote price exclusive of taxes like Value Added Tax, Sales Tax, Service Tax, Octroi and local taxes etc.. However, duties and charges related to freight, insurance, forwarding, packing, dispatch and installation shall be borne by the vendor. The cost will not depend on any variation in USD/ / exchange rate. 20

Performa for the Bank Guarantee for Earnest Money Deposit (To be stamped in accordance with stamp act) Annexure IV Ref: Bank Guarantee # Date Oriental Bank of Commerce Head Office 1 st Floor, Plot No-5, Institutional Area, Sector-32, Gurgaon 122 001. Dear Sir, In accordance with your proposal reference no. OBC/HO/DIT/RFP-IP/42/2014 dated M/s having its registered office at herein after called bidder ) wish to participate in the said proposal for supply, installation, and maintenance of Internet Proxy Solution at Oriental Bank of Commerce having its Head Office at Plot No-5, Sector-32, Institutional Office, Gurgaon - 122001. An irrevocable Financial Bank Guarantee (issued by a nationalized / scheduled commercial Bank) against Earnest Money Deposit amounting to Rupees (in words) valid up to is required to be submitted by the bidder, as a condition for participation in the said bid, which amount is liable to be forfeited on happening of any contingencies mentioned in the proposal document. M/s having its registered office at has undertaken in pursuance of their offer to Oriental Bank of Commerce (hereinafter called as the beneficiary) dated has expressed its intention to participate in the said proposal and in terms thereof has approached us and requested us Bank to issue an irrevocable financial Bank Guarantee against Earnest Money Deposit amounting to valid up to. We, the Bank at having our Head office at therefore Guarantee and undertake to pay immediately on first written demand by Oriental Bank of Commerce, the amount. Rupees without any reservation, protest, demur and recourse in case the bidder fails to comply with any condition of the proposal or any default in violation against the terms of the bid, without the beneficiary needing to prove or demonstrate reasons for its such demand. Any such demand made by said beneficiary shall be conclusive and binding on us irrespective of any dispute or difference raised by the bidder. 21

This guarantee shall be irrevocable and shall remain valid upto. If any further extension of this Guarantee is required, the same shall be extended to such required period (not exceeding one year) on receiving instructions in writing, from ( ) on whose behalf guarantee is issued. In witness whereof the Bank, through its authorized officer has set its hand stamped on this Day of 2014 at Designation Bank Seal Attorney as per Power of Attorney 22

Annexure V Performa for Performance Bank Guarantee Oriental Bank of Commerce Head Office 1 st Floor, Plot No-5, Institutional Area, Sector-32, Gurgaon 122 001. In consideration of Oriental Bank of Commerce (hereinafter called the said Purchaser ) having its office at the aforesaid address, having agreed to purchase/engage from having its office at (hereinafter called the said Supplier/Vendor/Contractor) under the terms and conditions of an Agreement dated (hereinafter called the said Agreement ). Towards the security for the due fulfillment of the terms and conditions contained in the said Agreement, it has been agreed by the said Supplier/Vendor/Contractor shall provide a bank Guarantee for Rs. (Rupees only). We (indicate the name of the bank) (hereinafter referred to as the Bank ) at the request of (Supplier/Vendor/Contractor) do hereby undertake and guarantee to pay to the Purchaser an amount not exceeding Rs. (either in lump sum or in parts) against any loss or damage caused to or suffered or would be caused to or suffered by the Purchaser by reason of any breach by the said Supplier/Vendor/Contractor(s) of any of the terms or conditions contained in the said Agreement. Unless repugnant to the context or meaning thereof, expressions, Purchaser, Supplier/Vendor/Contractor, Bank shall mean and include their heirs, representatives, successors, executors, administrators, assigns, etc., as may be applicable, 1. The Bank does hereby undertakes to pay the amount(s) due and payable under the guarantee without any demur, merely on a demand from the Purchaser stating that the amount(s) claimed is/are due by way of loss or damage caused to or would be caused to or suffered by the Purchaser by reason of breach by the said Supplier/Vendor/Contractor(s) of any of the terms or conditions contained in the said Agreement or by reason of the Supplier/Vendor/Contractor(s) failure to perform its obligations under the said Agreement. Any such demand made by the Purchaser on the Bank shall be conclusive as regards the amount(s) due and payable by the Bank under this guarantee, whether made in one go or in parts. However, Bank s liability under this guarantee shall in totality be restricted to an amount not exceeding., whether or not invoked or if invoked, in part or otherwise. 2. The Bank undertakes to pay the Purchaser any money so demanded notwithstanding any dispute or disputes raised by the Supplier/Vendor/Contractor(s) or any suit or proceedings pending before any Court or Tribunal relating thereto. Thereby meaning that Bank s liability under the present guarantee shall be absolute and unequivocal in any circumstances what so ever, if called upon to pay by the Purchaser. However our liability shall not exceed in. (in words) 23

3. The Bank further agrees that the guarantee herein contained shall remain in full force and effect during the period that would be taken for the performance of the said Agreement and that it shall continue to be enforceable till all the dues and or advances made by the Purchaser under or by virtue of the said Agreement have been fully paid and its claims satisfied or discharged or till, the Purchaser certifies in writing that the terms and conditions of the said Agreement have been fully and properly carried out by the said Supplier/Vendor/Contractor(s) and accordingly the Purchaser discharges this guarantee, either in writing or by returning the Original Guarantee Bond or till its expiry whichever is earlier to the Bank. 4. The Bank before the release of the Bank Guarantee Bond in original by the purchaser and before the expiry of this guarantee, as per clause 3 of this Guarantee Bond, may renew this guarantee for the same period as was initially requested upon for this guarantee or for any shorter period, at the option of the purchaser, under intimation to the vendor. 5. The Bank further agrees with the Purchaser that the Purchaser shall have the fullest liberty without Bank s or Supplier/Vendor/Contractor(s) consent and without affecting in any manner Bank s obligations hereunder to vary any of the terms and conditions of the said Agreement or to extend time of performance by the said Supplier/Vendor/Contractor(s) from time to time or to postpone for any time or from time to time any of the powers exercisable by the Purchaser against the said Supplier/Vendor/Contractor(s) and to forbear or enforce any of the terms and conditions relating to the said agreement and the Bank shall not be relieved from it s liability by reason of any such variation, or extension being granted to the said Supplier/Vendor/Contractor(s) or for any forbearance, act or omission on the part of the Purchaser or any indulgence by the Purchaser to the said Supplier/Vendor/Contractor(s) or by any such matter or thing whatsoever which under the law relating to sureties would, but for this provision, have effect of so relieving the Bank, in any manner what so ever. 6. This guarantee will not be discharged during its currency due to the change in the constitution of either the Bank or the Purchaser or the Supplier/Vendor/Contractor(s), in any manner what so ever. 7. The Bank lastly undertakes not to revoke this guarantee during its currency or extensions thereof, except with the previous consent of the Purchaser, in writing or otherwise than as is provided in this Guarantee. 8. The Bank also agrees that the Purchaser at its option shall be entitled to enforce this Guarantee against the Bank as its principal debtor in first instance without proceeding against the said Supplier/Vendor/Contractor(s), and notwithstanding any security or other guarantees that the Purchaser may have in relation to or in relation to the Supplier/Vendor/Contractor(s) liabilities from time to time, as this guarantee constitutes a separate, distinct and independent contract between the Bank and the Purchaser. 9. Any officer of the Purchaser of the rank of Senior Manager or above, duly authorized in this regard, shall be competent to issue demand/notice or to issue any appropriate instructions, as the circumstances may warrant, to the Bank under this Guarantee, which the Bank shall have to comply immediately and forthwith, without raising any dispute or question/s in regard there to, in any manner what so ever. Notwithstanding anything contained here in above: a) The liability of the Bank under the guarantee shall not exceed. (in words). 24

b) This Bank Guarantee shall be valid till either till or till the issue of a fresh Bank Guarantee to the Purchaser with a extended period in lieu thereof or till the Purchaser certifies in writing that the terms and conditions of the said Agreement have been fully and properly carried out by the said Supplier/Vendor/Contractor(s) and accordingly the Purchaser discharges this guarantee, in writing and by returning the Original Guarantee Bond to the Bank. c) The bank before the release of the Guarantee Bond in Original by the purchaser and before the expiry of this guarantee may at its option renew this guarantee for the same period as was initially agreed upon for this guarantee or any shorter period, at the option of the purchaser, under intimation to the vendor. d) The Bank is liable to consider any notice for invocation of Bank Guarantee as a default by the Supplier/Vendor/Contractor(s) and shall be under an obligation to pay to the Purchaser the entire amount of Guarantee or any part thereof under this Bank Guarantee only and only if the Purchaser serves upon the Bank a written claim or demand before the expiry of either the Bank Guarantee or any extended period/s under this Bank Guarantee, as the case may be. Notwithstanding anything contained herein our liability under this Bank guarantee shall not exceed Rupees.../- (Rupees... Only) This Bank guarantee shall be valid upto... and we are liable to pay the guaranteed amount or any part thereof under this Bank Guarantee only and only if you serve upon us a written claim or demand on or before... This guarantee will be returned to us as soon as the purpose for which it is issued is fulfilled. Dated the day of Signature Name: Designation with Bank stamp 25

Undertaking of Authenticity for Internet Proxy Solution Supplies Annexure VI Sub: Supply of Internet Proxy Solution Software Ref: 1. Your Purchase Order No----------------dated ------------- 2. Our invoice no/ Quotation no. ---------dated ------------ With reference to the Internet Proxy Solution being supplied /quoted to you vide our invoice no/ quotation no/order no cited above------. We hereby undertake that the software supplies include the licensed product and it is not being pirated in any case. Should you require, we hereby undertake to produce the certificate from our OEM supplier in support of above undertaking at the time of delivery/installation. It will be our responsibility to produce such letters from our OEM Supplier s at the time of delivery or within a reasonable time. In case of default and we are unable to comply with above at the time of delivery or during installation, for the Software already billed, we agree to take back the Internet Proxy Solution without demur, if already supplied and return the money if any paid to us by you in this regard. We (system OEM name) also take full responsibility of both Parts & Service SLA as per the content even if there is any defect by our authorized Service Centre/ Reseller/ SI etc. Authorized signatory Name: Designation: Place: Date: 26

Annexure VII Confirmation of compliance Sr. No Eligibility Criteria Compliance Yes/No 1 Compliance to Eligibility Criteria 2 Compliance to Scope of Work 3 Compliance to Terms & Conditions 4 Compliance to Technical Specifications 5. In case Bidder(s) supplies such items at a lower rate to any other organization during the validity period of rate contract with the Bank, vendor will be required to pass on such price benefit voluntarily to the Bank. Bidder(s) will be required to submit an undertaking to this effect. 27