Tender Summary: Procurement of Network Access Control Appliance

Objectives

To enable a Zero Trust security architecture by providing comprehensive visibility, authentication, authorization, and policy enforcement across wired, wireless, and virtual private network (VPN) connections.

Scope of Work

The successful bidder will supply, install, configure, and commission a network access control appliance within a single-site government environment supporting approximately 65 users and 100 devices. The scope includes:

• Provision of a minimum three-year professional support and maintenance package.
• Seamless integration with the client’s existing firewall infrastructure.
• Implementation of guest access and role-based access policies.
• Cloud-based deployment preference.
• Structured knowledge transfer and skills handover to the client’s ICT team during installation.

Technical Requirements

• Infrastructure Compatibility: Must operate within the existing Cisco ecosystem, including ISR4331/K9 routers, 3650-series core and access switches, and Cisco access points.
• Network Configuration: Full support for configured VLANs.
• Security & Compliance: Advanced device profiling, endpoint compliance monitoring, and robust identity management.
• Authentication Protocols: Native integration with Active Directory, Single Sign-On (SSO), and mandatory Multi-Factor Authentication (MFA).
• Costing: All-inclusive pricing covering professional fees, VAT, travel, and incidental expenses. Detailed rate breakdowns may be requested.

Skills Requirements

• The service provider must be a certified Original Equipment Manufacturer (OEM) partner or authorized installer for the proposed appliance.
• Key technical personnel must hold recognized industry certifications, specifically Cisco Certified Network Associate (CCNA) or Cisco Internetwork Expert (CCIE).
• Proven capability to deliver hands-on training and systematic skills transfer to internal staff throughout the deployment lifecycle.

Key Terminology Explanation

• Zero Trust Architecture: A cybersecurity framework based on the principle of “never trust, always verify.” It removes implicit trust from users and devices regardless of network location, requiring continuous authentication and authorization for every access request.
• OEM Partner: An officially authorized vendor or systems integrator endorsed by the hardware/software manufacturer to deploy, support, and maintain their products, ensuring full warranty coverage and adherence to technical standards.