Tender Summary

Objectives

The primary objective is to procure, deploy, and maintain a cloud-based Web Application Firewall (WAF) solution for Transnet Ltd SOC over a five-year period. The initiative aims to strengthen web application security, ensure continuous threat monitoring, provide dedicated technical support, and build internal capacity through structured training.

Scope

The contract covers the end-to-end provisioning, installation, and commissioning of a cloud WAF platform within the client's environment. Key deliverables include:

• Licensing and deployment for 150 applications across all five contract years.
• Implementation of specialized security modules, including volumetric DDoS protection, bot management, real-time monitoring, and threat intelligence feeds.
• A managed service covering one enterprise application for the full contract duration.
• 24/7 telephone support and continuous maintenance throughout the five-year term.
• Training sessions for twenty (20) designated personnel.

Technical Requirements

Bidders must propose a cloud-native WAF architecture capable of seamless integration with existing infrastructure. The solution must include:

• Cloud WAF Core Platform: Enterprise-grade policy enforcement and traffic inspection.
• Volumetric Cloud DDoS Protection: Network-layer attack mitigation to prevent service disruption.
• Bot Manager Services: Advanced detection and classification of automated traffic to block malicious scripts while allowing legitimate bots.
• Real-Time Monitoring: Continuous visibility into application performance and security events.
• Active Attackers Feed: A live threat intelligence stream identifying known malicious IP addresses and attack patterns.
• ERT Premium Features: Dedicated emergency response capabilities for rapid incident containment and remediation.
• Commissioning & Configuration: Tailored setup within the client's specific network environment.
• Support Infrastructure: Round-the-clock technical assistance with defined escalation protocols.

Skills Requirements

Bidders must assign a dedicated, vetted project team consisting of:

• One Key Account Manager: Responsible for commercial oversight, contract management, and stakeholder coordination.
• Minimum Two Technical Support Resources: Tasked with implementation, administration, troubleshooting, and ongoing support.

All assigned personnel must demonstrate a minimum of three (3) years' hands-on experience in deploying, managing, and supporting the proposed WAF solution. Candidates must submit verified tertiary qualifications, comprehensive CVs, and relevant Original Equipment Manufacturer (OEM) certifications. The bidder bears full responsibility for background screening and vetting prior to deployment.

Key Terms & Unusual Requirements

Pricing & Compliance Rules: Submission requires the mandatory protected Excel pricing workbook; incomplete forms result in immediate disqualification. Unit prices must exclude VAT, while final totals must include VAT. Pricing is valid for 180 days, and only unconditional discounts will be evaluated. All numerical fields must be populated (use "0" if not applicable).

Currency Conversion: A fixed exchange rate of ZAR 18.36 to USD 1.00 applies to all calculations.

Technical Terminology: "ERT Premium" refers to dedicated Emergency/Incident Response Team capabilities for critical security breaches. "Active Attackers feed" denotes a continuously updated threat intelligence database tracking known malicious actors. "Bot Manager Services" specifically targets the identification, analysis, and mitigation of automated script-driven attacks that could compromise application integrity.