Specifications include, but are not limited to: . UMUC is seeking a vendor to assist with the identification of technical solutions available to meet the business need to protect proprietary data and systems from unauthorized access. UMUC is looking for a vendor to present a design for a comprehensive Solution to ensure the confidentiality, integrity and availability of UMUC data. As part of UMUCs security best practices, it has been deemed vital for UMUC to maintain and monitor appropriate security measures including Intrusion Detection and Prevention Systems, Firewalls and Vulnerability Scanning. The Vendor must ensure protection for UMUCs Internetfacing applications and customer services as well as preventing internal damage to the network from external sources. A 24 by 7 service that monitors the UMUC technology and security infrastructure and critical devices as well as conduct vulnerability scanning of certain devices accessible via the Internet for vulnerabilities is required. Additionally, the Vendor must be able to declare an incident and provide incident response support to enable UMUC to be able to conduct its business with minimal or no interruption. These services will enhance UMUCs security posture and reduce the risk of a security breach. The vendor will be asked to provide an infrastructure security architecture review and to recommend new technologies that are essential to bolster the security of the UMUC infrastructure. UMUCS CURRENT TECHNICAL ENVIRONMENT Number and type of Firewalls (HA pairs count as 1 for monitoring) o Checkpoint 2 (1 Pair IP690) o Cisco ASA 12 (will be at least 13 soon) o Cisco PIX 8 (2 Pair each) o Juniper SRX 2 (1 Pair) Number and type of NIDs/NIPs (HA Pairs count as 1 for monitoring) o Juniper 2 (may soon go up to 3) o Cisco 11 (may soon go down to 10) Number of endpoint AV clients o Approximately 3842 Windows, 70 Mac Number and type of OS and Application log sources Windows 260 Unix / Linux - 339 Number and type of routers / switches / etc o Cisco routers 22 o Cisco switches 226 o Cisco load-balancers 8 o Cisco Wireless APs 70 (5 controllers) o Aruba Wireless APs 59 (2 controllers) Remote Access VPN o 1 Juniper SSL VPN Secure Access 4000
