Next Generation Firewall and Secure Web Gateway Service

The organization seeks a vendor to provide, deploy, and support next-generation firewall and secure web gateway services to protect its global network. The required next-generation firewall capabilities include deep packet inspection, application awareness and control, intrusion detection and prevention, TLS/SSL inspection including TLS 1.3, denial-of-service and distributed denial-of-service protection, anti-spoofing, data leak prevention, threat intelligence feed ingestion, site-to-site and remote-access VPN, and standards-based routing.

The secure web gateway must provide web and content filtering, vendor-maintained URL categorization, malware scanning and sandboxing, and SaaS/CASB visibility and control. Protection must extend to users and mobile devices operating outside the organization's network. The solution must be available as both physical and virtual appliances across capacity categories ranging from branch offices to enterprise data centers.

The solution must support centralized management with delegated, role-based local administration, multi-factor authentication for administrative access, standardized logging with a minimum two-year retention period, and real-time export to third-party SIEM tools. It must also integrate with existing enterprise directory services, public cloud platforms, and SD-WAN infrastructure. The contract period will be three years.