Objectives

The primary objective is to design, implement, manage, and support a fully managed Software-Defined Wide Area Network (SD-WAN) based infrastructure solution for CATHSSETA. The contract spans forty (40) months, encompassing end-to-end deployment, ongoing operational support, maintenance, and structured exit management upon conclusion.

Scope

• Deployment across multiple geographic locations including the Head Office (Midrand), regional offices (Durban, Cape Town, Bloemfontein), and a dedicated collocation/disaster recovery site situated over fifty kilometres from primary premises.
• Full project lifecycle delivery: initial design, three-month implementation and commissioning phase, user acceptance testing, administrator training, and submission of as-built documentation.
• Long-term managed services including proactive network monitoring, preventative and corrective maintenance, firmware/software patching, hardware replacement, and monthly performance reviews.
• Strict adherence to defined Service Level Agreements (SLAs) with explicit turnaround time commitments and penalty structures for non-compliance.
• Comprehensive exit management protocol ensuring complete documentation handover, cooperation with incoming providers, and zero service disruption during transition.

Technical Requirements

• SD-WAN Architecture: Next-generation, centrally managed software-defined networking with policy-driven traffic steering, cloud optimization, and integrated security controls.
• Connectivity & Security: Fully meshed IPsec tunnels interconnecting all sites, Zero Trust Network Access (ZTNA) frameworks, Quality of Service (QoS) prioritization for critical applications, and Role-Based Access Control (RBAC).
• Voice & Unified Communications: Deployment of Microsoft Teams telephony services, SIP trunk provisioning, and IP-based team phones supporting advanced collaboration features.
• Mobile & Data Services: Secure Access Point Name (APN) configuration for enterprise mobile/IoT data connectivity and seamless integration with existing ICT infrastructure.
• Hardware & Infrastructure: Supply and commissioning of enterprise-grade AI-capable stacked switches, high-performance servers, QSFP/SFP transceivers, and 12U rack enclosures. Solutions must include vendor lock-in protection clauses.
• Data Centre Collocation: Provisioning of a redundant disaster recovery (DR) site with dedicated power, cooling, and network uplinks outside the primary premises radius.
• Management & Visibility: Out-of-band (OOB) management capabilities, real-time dashboards, historical logging, and read-only administrative access provisions for the client.

Skills and Competency Requirements

• Corporate Experience: Demonstrated capability in delivering enterprise SD-WAN, APN, voice, and collocation solutions. Mandatory submission of five (5) verifiable reference letters from clients within the past five years covering these exact service areas.
• Project Management: Appointment of a dedicated Project Manager with minimum eight (8) years of experience in large-scale ICT/telecommunications deployments, supported by formal project management certifications.
• Engineering Expertise: At least two (2) certified engineers with proven experience in SD-WAN implementation, network security, and IT infrastructure support, alongside qualified network specialists.
• Certifications & Accreditations: Valid vendor certifications/accreditations (e.g., Cisco, Fortinet, Aruba/HPE, VMware, Microsoft, Palo Alto Networks, Juniper) must be provided as mandatory proof of technical competence.
• Support Model: Clear documentation of support hierarchies, escalation paths, SLA compliance mechanisms, and guaranteed response/repair timelines.

Key Technical Terms Explained

• SD-WAN (Software-Defined Wide Area Network): A modern networking approach that uses software to centrally manage and optimize connectivity across multiple locations, improving application performance and reducing reliance on expensive traditional leased lines.
• ZTNA (Zero Trust Network Access): A security model operating on the principle of “never trust, always verify,” requiring continuous authentication and authorization for every user and device attempting to access resources, regardless of whether they are inside or outside the corporate network.
• APN (Access Point Name): A gateway identifier that enables secure mobile data connections between cellular networks and private enterprise systems, ensuring controlled and authenticated access for mobile devices and IoT endpoints.
• IPsec (Internet Protocol Security): A protocol suite that encrypts and authenticates IP packets to ensure secure, confidential communication over public or shared networks.
• Collocation/DR Site: A secondary data facility where organizations rent physical space, power, and network bandwidth to host critical servers, providing redundancy and rapid recovery capabilities in case of primary site failure.