3.1 Implementation and Configuration • Design and install a high availability (HA) firewall solution for the JCPS datacenter with multiple 100Gbps capable interfaces • Configure segmentation rules, NAT, VLANs, and protocols in coordination with the JCPS network team • Enable IDS/IPS services and ensure secure configuration following NIST and industry best practices • Establish VPN services for (1500 user count / 1000 concurrent) • Load balancing for approximately (25) web applications by way of: o SSL/TLS offloading o Traffic management and manipulation of different layers (L4-L7) • Ensure firewall logs are exportable and able to integrate with external log systems. 3.2 Training and Knowledge Transfer • Supply training to JCPS cybersecurity personnel on rule creation, policy enforcement, troubleshooting, and ongoing management. • Deliver comprehensive documentation. 3.3 Support and Maintenance • Support must be provided via a ticketing solution. • Reasonable SLAs must be defined for problem resolution.
