Objectives

The primary objective of this tender is to procure and implement a firewall solution to replace end-of-life firewalls within the Limpopo Department of Social Development. The solution aims to enhance security, reliability, and performance of the Department’s ICT infrastructure across eight sites, including the Head Office, district offices, and institutions. The project encompasses supply, installation, configuration, centralized management, and ongoing maintenance and support over a 36-month period.

Scope

Scope of Work

• Supply and delivery of eight (8) next-generation firewalls (NGFWs) with all necessary accessories and licenses.
• Installation and configuration of firewalls at eight different sites.
• Provision of a centralized management console for unified control and visibility.
• Configuration of firewall rules aligned with LDSD security policies.
• Maintenance and support for 36 months, including firmware updates and health checks.
• Training LDSD ICT staff on basic firewall management and incident triage.

Delivery Addresses

Refer to Table 1 for specific delivery locations across the Department’s sites.

Customer Environment

The solution must seamlessly integrate with the existing ICT environment, supporting LAN/WAN architecture, existing systems, and enabling secure connectivity across all sites.

Technical Requirements

Hardware and Software

• Eight NGFWs with advanced security licenses valid for 36 months.
• Centralized management console for unified oversight.
• All accessories, cables, and installation components included.

Technical Specifications

Head Office NGFW:

• Minimum 35 Gbps Firewall Throughput
• Minimum 25 Gbps VPN Throughput
• Minimum 7 Gbps NGFW Throughput
• Minimum 6 Gbps Threat Protection Throughput
• Minimum 9 Gbps IPS Throughput

District/Institution NGFWs:

• Minimum 20 Gbps Firewall Throughput
• Minimum 10 Gbps VPN Throughput
• NGFW/Threat Protection Throughput: 3–5 Gbps

Connectivity Interfaces

• Head Office: 8 x GE RJ45, 4 x GE SFP Fiber Slots, 4 x GE SFP+ 10 GE Fiber Slots
• District/Institutions: 8 x GE RJ45, 2 x GE SFP+ Fiber Slots

Skills and Service Requirements

• Provision of a full-service maintenance agreement for 36 months, including firmware updates, health checks, and emergency onsite support during public holidays.
• Monthly SLA review meetings and reporting.
• Ad hoc support for configuration changes and troubleshooting beyond standard SLA scope.
• Response times for fault logging, incident, and request management must be adhered to, with specified response times during office hours.
• Structured training program for LDSD ICT staff on firewall management, monitoring, and incident triage.
• Monthly reporting on bandwidth, web activity, geo-location traffic, IPS events, and SD-WAN performance.
• Assistance with compliance requirements from auditors and security advice.
• Implementation of automated monthly backups and proactive firmware/feature updates.
• Use of a ticketing system for incident and request management.

Additional Technical and Skills Requirements

• Personnel security clearance for staff working with sensitive information, including confidentiality agreements.
• Adherence to government procurement conditions, including signing a formal contract and compliance with health and safety standards.
• Capability to conduct business continuity and disaster recovery planning.
• Provision of evidence of accreditation from OEM/OEM partners for firewall supply.
• Ability to support and maintain the solution over the contract duration, including updates and security advisories.
• Experience in integrating solutions within complex ICT environments and supporting secure connectivity across multiple sites.