Background

Inkomoko’s vision is an Africa with thriving communities where young people and refugees are engaged, communities have access to relevant innovations for self-determination, and where African solutions are unleashed to solve African problems. Founded in 2012, Inkomoko has provided business advisory and access to finance for thousands of entrepreneurs ac...

Objective

The objective of this procurement is to secure Inkomoko's network perimeter and internal infrastructure through the implementation of a high-performance, identity-aware Next-Generation Firewall that supports:

• Zero Trust Network Access (ZTNA)
• Multi-site orchestration
• Advanced threat protection
• High availability
• Secure remote connectivity
• Centralized management and reporting

Scope of Work

The successful vendor shall provide the following:

• Supply of enterprise-grade Next-Generation Firewall appliances.
• Installation and configuration at the Primary and Disaster Recovery sites.
• High Availability deployment (Active-Active or Active-Passive).
• Layer 7 application inspection.
• Identity-aware access control.
• SSL/TLS inspection.
• Intrusion Prevention System (IPS).
• Advanced malware protection and sandboxing.
• Web and URL filtering.
• Zero Trust Architecture implementation.
• Device posture assessment.
• Endpoint telemetry integration.
• Micro-segmentation.
• SD-WAN configuration.
• Centralized cloud management.
• Policy synchronization between sites.
• Security logging and compliance reporting.
• Migration from the existing firewall environment.
• Knowledge transfer and administrator training.
• 24/7 support and maintenance.
• Firmware and security signature updates.
• Delivery shall be completed within 30 calendar days from issuance of the Purchase Order.

Deliverables

The successful vendor shall provide:

• NGFW deployment and implementation plan.
• Installed and configured firewall infrastructure.
• Successful migration from existing firewall infrastructure.
• Security policy documentation.
• SD-WAN configuration documentation.
• Administrator training.
• Knowledge transfer documentation.
• Acceptance testing report.
• Warranty documentation.
• Support and maintenance plan.

Requirements

Vendor Qualifications

Interested vendors should demonstrate:

• Experience implementing enterprise firewall solutions.
• At least three similar projects completed within the past five years.
• Authorization as a reseller or implementation partner for the proposed firewall solution.
• Certified security engineers assigned to the project.
• Availability of local or regional support.
• Financial capacity to deliver the assignment.
• Ability to provide 24/7 technical support.

Financial Proposal

The quotation should clearly distinguish:

• Hardware costs
• Software licenses
• Professional implementation services
• Training
• Support and maintenance
• Annual subscription costs
• Warranty
• CAPEX costs
• Recurrent/OPEX costs

Evaluation Criteria

The evaluation will comprise both technical and financial assessments. Proposals will be evaluated using the following criteria:

• Technical Compliance (30%)
• Assessment of compliance with the required Next-Generation Firewall (NGFW) specifications, including Zero Trust Architecture, Intrusion Prevention System (IPS), VPN capabilities, SSL inspection, SD-WAN functionality, reporting features, and overall security capabilities.
• Implementation Methodology (15%)
• Evaluation of the proposed implementation approach, including the migration strategy, project management methodology, testing procedures, documentation, and rollout plan.
• Vendor Experience (10%)
• Assessment of the vendor's experience in delivering similar enterprise firewall implementation projects, supported by relevant client references and project history.
• Technical Team Qualifications (10%)
• Evaluation of the qualifications, certifications, and relevant experience of the proposed technical team responsible for the implementation and support of the solution.
• Support and Service Levels (10%)
• Assessment of the vendor's support capabilities, including availability of 24/7 support, response and resolution times, escalation procedures, maintenance services, and local or regional support presence.
• Cybersecurity Standards (5%)
• Evaluation of compliance with recognized cybersecurity standards and best practices, such as ISO 27001, the NIST Cybersecurity Framework, and CIS Controls.
• Training and Knowledge Transfer (5%)
• Assessment of the proposed training program, administrator and user documentation, knowledge transfer approach, and operational manuals.
• Company Capacity and Financial Stability (5%)
• Evaluation of the vendor's organizational capacity, financial stability, corporate profile, and ability to successfully deliver and support the project.
• Warranty and Maintenance (5%)
• Assessment of the warranty period, firmware and software updates, security signature updates, and ongoing maintenance services included in the proposal.
• Financial Proposal – Total Cost of Ownership (5%)
• Evaluation of the overall cost of ownership, including hardware acquisition, software licensing, implementation services, subscriptions, maintenance, support, and any other recurring or one-time costs.

Benefits

Application Details

Mandatory Requirements

Vendors shall submit:

• Certificate of Incorporation/Registration
• Valid Tax Compliance Certificate
• Company Profile
• Authorization letter from the manufacturer (where applicable)
• Evidence of similar assignments
• Reference letters or completion certificates
• CVs of proposed technical personnel
• Technical Proposal
• Financial Proposal
• Proposed implementation schedule

• Supply of enterprise-grade Next-Generation Firewall appliances.
• Installation and configuration at the Primary and Disaster Recovery sites.
• High Availability deployment (Active-Active or Active-Passive).
• Layer 7 application inspection.
• Identity-aware access control.
• SSL/TLS inspection.
• Intrusion Prevention System (IPS).
• Advanced malware protection and sandboxing.
• Web and URL filtering.
• Zero Trust Architecture implementation.
• Device posture assessment.
• Endpoint telemetry integration.
• Micro-segmentation.
• SD-WAN configuration.
• Centralized cloud management.
• Policy synchronization between sites.
• Security logging and compliance reporting.
• Migration from the existing firewall environment.
• Knowledge transfer and administrator training.
• 24/7 support and maintenance.
• Firmware and security signature updates.

• Zero Trust Network Access (ZTNA)
• Multi-site orchestration
• Advanced threat protection
• High availability
• Secure remote connectivity
• Centralized management and reporting
• Layer 7 application inspection
• Identity-aware access control
• SSL/TLS inspection
• Intrusion Prevention System (IPS)
• Advanced malware protection and sandboxing
• Web and URL filtering
• Zero Trust Architecture implementation
• Device posture assessment
• Endpoint telemetry integration
• Micro-segmentation
• SD-WAN configuration
• Centralized cloud management
• Policy synchronization between sites
• Security logging and compliance reporting
• Migration from existing firewall environment
• Knowledge transfer and administrator training
• 24/7 support and maintenance
• Firmware and security signature updates

• Experience implementing enterprise firewall solutions.
• At least three similar projects completed within the past five years.
• Authorization as a reseller or implementation partner for the proposed firewall solution.
• Certified security engineers assigned to the project.
• Availability of local or regional support.
• Financial capacity to deliver the assignment.
• Ability to provide 24/7 technical support.