A. Firewall and Throughput: 1. The Internet service must include E-Rate eligible, bundled firewall services. 2. Firewall services must be able to process inbound/outbound traffic at a minimum of 10 Gbps. This ensures the firewall does not create a bottleneck at the requested speeds. 3. The proposed solution must include the following minimum firewall functionalities (consistent with bundled FaaS options): ○ NAT (Network Address Translation). ○ ACL (Access Control Lists). ○ BGP (Border Gateway Protocol) for multi-homing (2 or more ISPs), receiving Full routes. ○ Stateful firewall functionality. ○ IDS/IPS (Intrusion Detection/Prevention System) required. ○ DMZ (Demilitarized Zone) required. ○ Routing protocols required. ○ Basic content filtering and malware detection required. ○ VPN (Virtual Private Network) for client sessions, supporting 50 (fifty) concurrent sessions with the ability to scale to approximately 200 (two hundred). ○ Ability to manage multiple ISPs. B. IP Address Space: 1. The proposal must specify provision for 5 (five) concurrent Class C external IP address spaces. 2. The internal routing scheme cannot be changed.
