RFQ: Procurement and Implementation of a Next-Generation Firewall (NGFW) at Inkomoko

Objective

The objective of this procurement is to secure Inkomoko's network perimeter and internal infrastructure through the implementation of a high-performance, identity-aware Next-Generation Firewall that supports:

• Zero Trust Network Access (ZTNA) 
• Multi-site orchestration 
• Advanced threat protection 
• High availability 
• Secure remote connectivity 
• Centralized management and reporting 

Scope of Work

The successful vendor shall provide the following:

• Supply of enterprise-grade Next-Generation Firewall appliances. 
• Installation and configuration at the Primary and Disaster Recovery sites. 
• High Availability deployment (Active-Active or Active-Passive). 
• Layer 7 application inspection. 
• Identity-aware access control. 
• SSL/TLS inspection. 
• Intrusion Prevention System (IPS). 
• Advanced malware protection and sandboxing. 
• Web and URL filtering. 
• Zero Trust Architecture implementation. 
• Device posture assessment. 
• Endpoint telemetry integration. 
• Micro-segmentation. 
• SD-WAN configuration. 
• Centralized cloud management. 
• Policy synchronization between sites. 
• Security logging and compliance reporting. 
• Migration from the existing firewall environment. 
• Knowledge transfer and administrator training. 
• 24/7 support and maintenance. 
• Firmware and security signature updates. 

Delivery shall be completed within 30 calendar days from issuance of the Purchase Order. 

Deliverables

The successful vendor shall provide:

• NGFW deployment and implementation plan. 
• Installed and configured firewall infrastructure. 
• Successful migration from existing firewall infrastructure. 
• Security policy documentation. 
• SD-WAN configuration documentation. 
• Administrator training. 
• Knowledge transfer documentation. 
• Acceptance testing report. 
• Warranty documentation. 
• Support and maintenance plan. 

Requirements

Vendor Qualifications

Interested vendors should demonstrate:

• Experience implementing enterprise firewall solutions. 
• At least three similar projects completed within the past five years. 
• Authorization as a reseller or implementation partner for the proposed firewall solution. 
• Certified security engineers assigned to the project. 
• Availability of local or regional support. 
• Financial capacity to deliver the assignment. 
• Ability to provide 24/7 technical support. 

Financial Proposal

The quotation should clearly distinguish:

• Hardware costs 
• Software licenses 
• Professional implementation services 
• Training 
• Support and maintenance 
• Annual subscription costs 
• Warranty 
• CAPEX costs 
• Recurrent/OPEX costs 

Evaluation Criteria

The evaluation will comprise both technical and financial assessments. Proposals will be evaluated using the following criteria:

Technical Compliance (30%)

• Assessment of compliance with the required Next-Generation Firewall (NGFW) specifications, including Zero Trust Architecture, Intrusion Prevention System (IPS), VPN capabilities, SSL inspection, SD-WAN functionality, reporting features, and overall security capabilities.

Implementation Methodology (15%)

• Evaluation of the proposed implementation approach, including the migration strategy, project management methodology, testing procedures, documentation, and rollout plan.

Vendor Experience (10%)

• Assessment of the vendor's experience in delivering similar enterprise firewall implementation projects, supported by relevant client references and project history.

Technical Team Qualifications (10%)

• Evaluation of the qualifications, certifications, and relevant experience of the proposed technical team responsible for the implementation and support of the solution.

Support and Service Levels (10%)

• Assessment of the vendor's support capabilities, including availability of 24/7 support, response and resolution times, escalation procedures, maintenance services, and local or regional support presence.

Cybersecurity Standards (5%)

• Evaluation of compliance with recognized cybersecurity standards and best practices, such as ISO 27001, the NIST Cybersecurity Framework, and CIS Controls.

Training and Knowledge Transfer (5%)

• Assessment of the proposed training program, administrator and user documentation, knowledge transfer approach, and operational manuals.

Company Capacity and Financial Stability (5%)

• Evaluation of the vendor's organizational capacity, financial stability, corporate profile, and ability to successfully deliver and support the project.

Warranty and Maintenance (5%)

• Assessment of the warranty period, firmware and software updates, security signature updates, and ongoing maintenance services included in the proposal.

Financial Proposal – Total Cost of Ownership (5%)

• Evaluation of the overall cost of ownership, including hardware acquisition, software licensing, implementation services, subscriptions, maintenance, support, and any other recurring or one-time costs.

Benefits

Application Details

Mandatory Requirements

Vendors shall submit:

• Certificate of Incorporation/Registration 
• Valid Tax Compliance Certificate 
• Company Profile 
• Authorization letter from the manufacturer (where applicable) 
• Evidence of similar assignments 
• Reference letters or completion certificates 
• CVs of proposed technical personnel 
• Technical Proposal 
• Financial Proposal 
• Proposed implementation schedule