Any solution proposed in response to this request for proposals shall meet or exceed these specifications. 1. Firewall Appliances: Two (2) FortiGate 200G series next-generation (or equivalent) firewalls shall be provided, installed, and configured in accordance with manufacture recommendations at the district’s primary data center/main network ingress points, as noted in Appendix A. The firewalls shall provide the following technical capabilities: a) IPv4 Firewall Throughput (expected minimum 30Gbps) b) Concurrent Sessions capacity (11 million) c) New Sessions/Second capacity (400,000) d) Interfaces: 2 – GE JR45 MGMT/HA Ports; 8 – GE RJ45 Ports; 8 – 5/2.5/GE RJ45 Ports; 8 – 10 GE SFP+/SFP FortiLink (or equivalent) Slots; 4 – GE SFP Slots e) Ability to support high availability (Active-Passive or Active-Active clustering) f) Integrated Intrusion Prevention System (IPS) g) Application Control h) Web Filtering (URL, DNS, Video Filtering) i) Antivirus and Anti-Malware capabilities j) SSL Inspection capabilities (to decrypt and inspect encrypted traffic for threats) k) VPN functionality (IPSec and SSL VPN for remote access and site-to-site connectivity) l) Reporting and logging capabilities m) Support for multiple VLANS for network segmentation; 2. Support and Security Bundles: Each firewall appliance shall include three (3) years of the following bundled services available form Fortinet (or equivalent services as may be applicable). a) FortiCare Premium (or equivalent) – 24x7 technical support, rapid response time, firmware upgrades, general updates, hardware replacement service, knowledge base and documentation b) FortiGuard Unified Threat Protection (UTP) (or equivalent) – intrusion prevention system (IPS); advanced malware protection (AMP) / antivirus; application controls; URL, DNS, & video filtering; anti-spam service; sandbox type cloud service
