Objectives

The primary objective of this tender is to procure security services for the configuration, deployment, and commissioning of VPN and firewall solutions to enhance the municipality's network security infrastructure. This includes establishing a secure WAN connection, implementing a Client-to-Site VPN, setting up VPN user access, installing VPN client software on user devices, and configuring firewall policies to ensure secure internet and remote access.

Scope

The scope of work encompasses:

• WAN configuration including ISP connectivity, IP addressing, routing, NAT, and internet access routing through the firewall.
• Configuration of a secure Client-to-Site VPN solution with authentication, encryption, access policies, and remote access setup.
• Creation and configuration of VPN user accounts, including integration with Active Directory if applicable.
• Installation and configuration of VPN client software on user devices to enable secure access.
• Firewall configuration covering security policies, NAT, routing, VPN rules, logging, and monitoring.
• End-to-end testing and commissioning of all configurations and connectivity.
• Provision of comprehensive documentation, including network topology, configuration backups, user guides, and knowledge transfer to administrators.

Technical Requirements

The technical requirements include:

• Configuration of WAN connection with ISP connectivity, IP addressing, DNS, NAT, and routing.
• Deployment of a secure Client-to-Site VPN with proper authentication, encryption, and access controls.
• Setup of VPN user accounts with appropriate permissions and integration with existing user management systems.
• Installation and configuration of VPN client software on designated user devices.
• Firewall policy configuration to secure internet and remote access traffic, including logging and monitoring capabilities.
• Comprehensive testing to verify connectivity, security policies, and user access.
• Preparation of detailed documentation and conducting knowledge transfer sessions for administrators.

Skills Requirements

The successful bidder must demonstrate:

• Proven experience in installing and configuring Virtual Private Networks (VPNs), with a minimum of 3 years in IT security.
• Ability to provide at least two references with documented experience in similar projects, including contact details and project descriptions.
• Qualified personnel with:
• Diploma or higher in IT or related field.
• Certified Ethical Hacker or equivalent security certification.
• Relevant experience in network security, VPN deployment, and firewall configuration.
• Capability to produce detailed technical documentation, including network topology diagrams, configuration backups, user guides, and troubleshooting manuals.
• Skills transfer capability to ensure municipal staff can manage and maintain the implemented solutions effectively.