NET-16912 - USA (Alameda, California) - Firewall Replacement Service - Deadline August 28,2026

(1) Vendor needs to provide firewall replacement service to the government authority located in Alameda, CA.– provides a full range of services, including police protection, the transmission and distribution of water and wastewater, recreation and cultural events, the construction and maintenance of parks, facilities, and streets, as well as other general government activities.– The selected Vendor shall provide a turnkey engagement that includes:A. On‑site installation and racking of the new HA firewall pairB. Export, cleanup, consolidation, and optimization of the existing rulebase (security policies), NAT rules, objects, zones, and VPN configurations;C. Firmware updates and HA setup;D. Full migration and tested cutover during an approved maintenance window with an explicit rollback plan;E. Post‑cutover monitoring and stabilization;F. Administrator training; (g) complete documentation handover; andG. Three (3) years of premium manufacturer support plus required security subscriptions.– Project Planning & Discovery• Conduct project kickoff with stakeholders.• Review and analyze existing firewall configurations, VPNs, NAT rules, VLANs, routing, and system integrations.• Identify risks, gaps, and dependencies.• Develop the detailed Migration & Cutover Plan.• Export current configurations and produce a pre‑migration inventory covering security policies (rulebase), NAT rules, zones, address/service objects, and all site‑to‑site/user VPNs.• Deliver a Rulebase Cleanup Plan detailing de‑duplication, object normalization, unused/overly‑permissive policy removal, and modernization to best practices.• Provide a Risk & Dependency Register and a Cutover Runbook with timeboxed tasks, test points, and back‑out triggers.B. Hardware Procurement & Licensing• Supply two (2) Palo Alto PA‑1410 appliances configured as a high‑availability (HA) pair, including all necessary rack kits and accessories.• Provide three (3) years of Premium Support (manufacturer TAC access, software updates, and advanced hardware replacement).• Provide three (3) years of security subscriptions at minimum equivalent to Advanced URL Filtering and Advanced Threat Prevention (or a bundled Core Security subscription delivering equivalent capabilities). Itemize SKUs and quantities for HA deployments.(2) The contract period will be for one year.(3) Pre–bid meeting will be held on August 21, 2026.