specifications annexure-1 1. ip kvm - isro · scroll keys, windows keys and trackball mechanism for...

Specifications

Annexure-1

1. IP KVM

Spec Ref Description

1 Quantity –

Vendor shall quote for required quantity as specified. ISTRAC shall decide on the final quantity at the time of ordering.

No of IP console switches(KVM) = 4

No of RKM Units = 04

No. of USB interface adapter for KVM = 24

Nos. of Serial Interface Adapter to Connect COM Port of Network/Servers for KVM=24

Nos. of Virtual Media Interface Adapter=04 No

2 Specifications for KVM Switch –

No. of Target device ports per unit=16

Should have capability to cascade/Tier with 8-port KVM switch (Part NO:-336044-B21) using Cat-5/5e Ethernet Cable.

Supports up to 4 users as 2 remote users over IP KVM Session and 1 local user and 1 Tiered user.

Supported Video Modes: VGA, SVGA, XGA

Video resolution on Local Port: 1600 x 1200

Widescreen video support modes include; 1680 x 1050, 1440 x 900, 1280 x 800, 1024 x 640, 800 x 500

Form-Factor: 1U Height with 19” Rack Mountable Option

Remote virtual media - Easily load and update software and firmware from anywhere on the LAN or WAN when used with Virtual Media Interface Adapters.

Password Protection - For protection against unauthorized users, the switch box provides a local password option for security purposes as well as individual user authentication and access rights for remote users.

Switch Firmware Update - The application code of the switch can be quickly and easily updated via FLASH ROM. Updates can be accomplished remotely over the LAN using the IP Viewer 3.0 or higher software.

Support for a variety of server connections with Interface Adapters where virtual media is not needed PS/2, USB mouse and keyboard, True VT100 Serial Console Support, Blade Systems support via front diagnostics connector

Should be able to connect PS/2 or USB keyboard and mouse as well as VGA based Display Monitor.

IP Console Switch provides users with access to local KVM functions over their LAN or WAN.

Remote users can access servers and perform actions as if they are standing at a local console.

Should have one local port and one tiering/Cascading port:

Supports Virtual Media (VM), Tiering (or cascading) up to 2 levels (base plus one lower level) through the Tiering/Cascade port.

Dual-stack IPv6 with stateless auto configuration

Support for DVD-ROM data over virtual media

Syslog support

Remote console sessions to the data center can be shared by other remote users. Stealth mode can also be used by administrators to monitor remote sessions without announcing it for security reasons

Local security database on switch along with Active Directory integration using LDAP should be possible

Administrators can map local media on a workstation to a remote server in the data center or remote office to easily perform application installations or upgrades

A USB CD-ROM, USB DVD, USB floppy drive, or USB key can be attached directly to the Console Switch and mapped to an attached server

Two levels of cascading should be available to support up to 1024 servers. When all tiers are comprised of virtual media compatible console switches and interface adapters, virtual media can be mapped to a server on any tier

Internal dual power supply with rated Voltage 100 to 240V AC at 50 to 60 Hz should be offered

3 RKM(Rack Mountable Integrated Keyboard, Mouse and Display Monitor System) -

1U rack-mountable with integrated monitor, keyboard & mouse functionality

Mode (Output) 640 x 480 VGA through 1440 x 900 WXGA+

Refresh rates: 60, 70, 72 and 75 Hz

Keyboard/Mouse Output: PS2 and USB connectors o No of VGA IN Ports=1 o Monitor shall be mounted inside the foldable lid that covers the

keyboard o Keyboard shall have minimum 102 Keys layout including inverted T

scroll keys, Windows keys and trackball mechanism for smooth navigation in the base.

Display Type: o Flat-panel, active matrix-TFT LCD o Display 17 in (43.18 cm), 16 x 10 aspect ratio o Viewable (diagonal) 17 in digital display (43.18 cm), 16 x 10 aspect

ratio o Maximum Input Graphics Resolution 1440 x 900 @ 75Hz Refresh

Rate o Response time <25ms o Brightness >190 (cd/m^2) o Contrast ratio >350:1 o On Screen Display (OSD) Controls should support English language

and should provide option for Brightness, contrast, positioning, color temperature, individual color control, input selection, factory reset

Certification and Compliance o UL Listed o TCO 03 (emissions, ergonomics, environment) o CE Marking o Energy Star Compliant

4 USB Interface adapter for KVM: USB interface Adapter is required to connect End-Devices, specifically Servers with VGA-Out and not having PS2 Keyboard and mouse ports to the KVM console Switch.

5 Serial Interface adapter for KVM: To connect Serial port devices over 9-pin serial console port to KVM switch.

6 Warranty - Manufacture’s On-site comprehensive Warranty: Five Years. Warranty should start from the date of acceptance of the full configuration.

7 Installation & Commissioning

Vendor should install & commission the routers as per the configuration at INC Lucknow

Installation and commissioning is the sole responsibility of the vendor. Vendor should resolve all compatibility and installation issues if any.

At the time of installation and commissioning of the configuration if it found that some additional hardware accessories or software items with licenses are required to complete the configuration to meet the operational requirement of the configuration which were not included in the vendor’s original list of deliverables then vendor is required to supply such items to ensure the completeness of the configuration at no extra cost. Vendor should ensure completeness of the list of deliverables in the offer to avoid such discovery during installation.

8 Notes to the Vendor –

All the products should be of same make. This is a mandatory requirement.

Vendor shall submit following certifications from OEM on OEM’s letter head -

o The vendor is authorized for participating in the bid o The offered hardware is not an obsolete product o The offered hardware components will not reach End of Support

for atleast six years from the date of supply o The offered product is back to back supported by the OEM during

the warranty period

For all items in the list of deliverables offered by the vendor, the manufacturer's part number should be clearly indicated. Offer of items without clear specification of part number is not acceptable.

Vendor should indicate the part nos. of the deliverable items clearly. The part numbers & description of the items in the offer should match the part numbers & description of the items mentioned in the manufacturer's spec sheets.

The part numbers & description of the goods delivered should match the part numbers & description in the offer.

Vendor should carefully consider all the clauses in the specifications and should ensure that their offer is complete in all respects at the time of submission. Complete technical documentation justifying the compliance should be enclosed along with their offer. Offer which are incomplete are liable to be considered noncompliant.

Specifications of the major items have been provided in the enclosed document. In case any additional accessories/ software media/licenses are required to complete the configuration for full functionality and/or better manageability vendor should include such hardware accessories and related software elements or plug-ins with licenses in their offer.

Systems from the manufacturers who primarily assemble systems by getting components/ subsystems from different suppliers and who do not have direct control over the production process/ quality of the items so obtained, will not be acceptable.

Vendor should provide technical brochure from manufacturer for all subsystems to verify the current status (i.e. when released, whether due for replacement/obsolesce) the specification of the subsystems. The technical brochure shall give the details not only for the main system but also for all the subsystems and accessories. Technical brochure shall include details of

o Functional specification. o Hardware & software configuration. o Configuration options. o Electrical & environmental specification. o Safety compliance details. o Physical dimension. o System test report and reliability metric

End Usage – The product shall be deployed at INC Lucknow for supporting satellite heath-keeping operation of Indian Remote Sensing Satellites.

In case the approval of any Foreign Govt. agency, like US dept. of commerce, is required for the supply of any of the items, vendor should clearly indicate the items requiring such clearance. For such items vendor should obtain strong assurance from the manufacturer regarding their commitment to follow-up through the necessary clearance process. A written assurance to this effect should be enclosed with the technical offer.

In case of imported items ISTRAC Purchase will provide necessary documents including customs duty exemption certificate 51/96 .Vendor has to arrange customs clearance .Concessional customs duty is payable by the vendor and the same will be reimbursed by us against submission of Triplicate copy of Exchange control copy of Bill of entry ( original) and TR6 Challans . However no customs clearance charges, demurrage charges is payable by ISTRAC.

Annexure 2 Routers

Specifications for INC LUCKNOW Routers

1 Quantity and Deliverables -

1.1 Cisco 2911 Routers Configuration-I

Cisco 2911 w/3 GE 4 EHWIC 2 DSP 1 SM 256MB CF 512MB DRAM IPB (P.No: CISCO2911/K9) =4 No’s

SNTC 8X5XNBD Cisco 2911 w/3 GE4 for 60 Months (P.No: CON- SNTC -2911) =4 No’s

512MB DRAM for Cisco 2901-2921 ISR (Default) (P.No: MEM-2900-512MB-DEF) =4 No’s

Cisco 2901-2921 IOS UNIVERSAL (P.No: S29UK9-15501T) =4 No’s

Cisco 2911 AC Power Supply (P.No: PWR-2911-Acv) =4 No’s

AC Power Cord C13 BS 546 1.8m (P.No: CAB-ACSA) =4 No’s

DATA features for 2900 series APP license (P.No: SL-29-DATA-APP-K9) =4 No’s

Removable faceplate for SM slot on Cisco 290039004400 ISR (P.No: SM-S-BLANK) =08 No’s

Blank faceplate for HWIC slot on Cisco ISR (P.No: HWIC-BLANK) =4 No’s

Cisco Config Pro Express on Router Flash (P.No: ISR-CCP-EXP) =4 No’s

256MB Compact Flash for Cisco 1900 2900 3900 (P.No: ISR MEM-CF-256MB) =4 No’s

IP Base License for Cisco 2901-2951 (P.No: SL-29-IPB-K9) =4 No’s

2-port Voice Interface Card - E and M (P.No: VIC3-2E/M) =4 No’s

4-Port Serial HWIC (P.No: HWIC-4T) = 16 No’s

2-Port 3rd Gen Multiplex Trunk Voice/WAN Int. Card -G.703 (P.No: VWIC3-2MFT-G703) =04 No’s

16-channel high-density voice DSP module (P.No: PVDM3-16) =04 No’s

V.35 Cable DTE Male 10 Feet (CAB-V35MT)=64 No’s

Yellow Cable for Ethernet Straight-through RJ-45 6 feet= ( CAB-ETH-S-RJ45)=6 No’s

Console Cable 6 ft. with USB Type A and mini-B (CAB-CONSOLE-USB)=6 No’s

1.2 Cisco 2911 Routers Configuration-II

Cisco 2911 w/3 GE 4 EHWIC 2 DSP 1 SM 256MB CF 512MB DRAM IPB (P.No: CISCO2911/K9) =8 No’s

SNTC 8X5XNBD Cisco 2911 w/3 GE4 for 60 Months (P.No: CON- SNTC -2911) =8 No’s

512MB DRAM for Cisco 2901-2921 ISR (Default) (P.No: MEM-2900-512MB-DEF) =8 No’s

Cisco 2901-2921 IOS UNIVERSAL (P.No: S29UK9-15501T) =8 No’s

Cisco 2911 AC Power Supply (P.No: PWR-2911-Acv) =8 No’s

AC Power Cord C13 BS 546 1.8m (P.No: CAB-ACSA) =8 No’s

DATA features for 2900 series APP license (P.No: SL-29-DATA-APP-K9) =8 No’s

Removable faceplate for SM slot on Cisco 290039004400 ISR (P.No: SM-S-BLANK) =16 No’s

Blank faceplate for HWIC slot on Cisco ISR (P.No: HWIC-BLANK) =8 No’s

Cisco Config Pro Express on Router Flash (P.No: ISR-CCP-EXP) =8 No’s

256MB Compact Flash for Cisco 1900 2900 3900 (P.No: ISR MEM-CF-256MB) =8 No’s

IP Base License for Cisco 2901-2951 (P.No: SL-29-IPB-K9) =8 No’s

2-port Voice Interface Card - E and M (P.No: VIC3-2E/M) =8 No’s

4-Port Serial HWIC (P.No: HWIC-4T) =8 No’s

2-Port 3rd Gen Multiplex Trunk Voice/WAN Int. Card -G.703 (P.No: VWIC3-2MFT-G703) =08 No’s

4-port ISDN BRI High-Speed WAN Interface Card (P.No: HWIC-4B-S/T) =08 No’s

16-channel high-density voice DSP module (P.No: PVDM3-16) =08 No’s

V.35 Cable DTE Male 10 Feet (CAB-V35MT)=12 No’s

Yellow Cable for Ethernet Straight-through RJ-45 6 feet= ( CAB-ETH-S-RJ45)=6 No’s

Console Cable 6 ft. with USB Type A and mini-B (CAB-CONSOLE-USB)=6 No’s

2 Warranty -

The Support shall be 8X5 NBD type and valid for a period of Five year, starting from the date of acceptance of the full configuration.

Warranty shall cover all sub-components like SMPS/Power supply, FANS and any other modules etc. being procured under the current configuration.

On-Site support by the Vendor and OEM/Manufacturer Support both should be valid for Five years.

Warranty should start from date of acceptance of the hardware.

3 Installation & Commissioning -

Vendor should install & commission the routers as per the configuration at INC Lucknow

At the time of installation and commissioning of the configuration if it is found that some additional hardware accessories or software items are required to complete the configuration to meet the operational requirement of the configuration which were not included in the vendor's original list of deliverables then vendor is required to supply such items to ensure the completeness of the configuration at no extra cost. Vendor should ensure completeness of the list of deliverables in the offer to avoid such discovery during installation.


End Usage – The product shall be deployed at INC Lucknow for supporting satellite heath-keeping operation of Indian Remote Sensing Satellites.


In case of imported items ISTRAC Purchase will provide necessary documents including customs duty exemption certificate 51/96 .Vendor has to arrange customs clearance .Concessional customs duty is payable by the vendor and the same will be reimbursed by us against submission of Triplicate copy of Exchange control copy of Bill of entry ( original) and TR6 Challans . However no customs clearance charges, demurrage charges is payable by ISTRAC.

Annexure-3

Specifications for Switches


1. Quantity –

Vendor shall quote for required quantity as specified. ISTRAC shall decide on the final quantity at the time of ordering. Quantity -

Config-I 24 Port Layer-3 Switches: Qty: 24 No’s

Config_II 48 Port Layer-3 Switches: Qty: 12 No’s

Config-III Fiber Switches: Qty: 04 No’s

2. 24 Port Layer 3 Switch Specifications Qty: 24

2.1

Physical –

19 inch rack mountable chassis along with rack mount kit. Offered switch shall be with in 2U form factor.

Port Requirement –

Switch shall have atleast 24 nos.of 10/100/1000 Base-T ports including atleast 4 nos. of 1 Gbps SFP combo (dual personality) ports (SX/LX).

The Switch shall be configured with 2 nos. of 1000BaseLX transceivers (out of the four combo ports mentioned above) to support minimum upto 2KM.

The transceivers offered should be from the switch manufacturer only.

Scalability requirement –

Offered switch shall support atleast 2 additional nos. of 10G ports for future expansion.

Performance –

Minimum Switching capacity 88 Gbps

Minimum Throughput 65 million pps

The configuration for an individual switch shall be realized using a single chassis (not by stacking)

Layer 2 Features –

VLAN support and tagging

802.1s Multiple Spanning Tree Protocol

802.1X Authentication

GARP VLAN Registration Protocol

MAC Address Locking and MAC layer Filtering

IEEE 802.1v protocol VLANs

IGMP v2

PIM-SM Snooping

Jumbo packet support, Max Size=9000 Bytes

Rapid Per-VLAN Spanning Tree (RPVST+) Layer -3 Features –

VRF

BGP, OSPF

VRRP, VRRP-E

RIP v1/v2

Multicast Routing

Generic Routing Encapsulation (GRE) IPV6 Support –

IPv6 Routing (OSPF v3), RIPng (IPv6), BGP4+ (IPv6)

IPv6 Multicast Routing

VRRP-E (IPv6)

VRF (IPv6)

IPv6 over IPv4 tunnels

Multicast Listener Discovery (MLD) version 1 and 2 snooping Security Features –

802.x Accounting

MAC Authentication

Protection against Denial of Service (DoS) attacks ACLs-

Provide IP Layer 3 filtering based on source/destination IP address/subnet and source/destination TCP/UDP port number

Supported Protocol and RFC Standards-

802.1D Bridging

802.1q VLAN Tagging

802.1p Mapping to Priority Queue

802.1w Rapid Spanning Tree (RSTP)

802.3ad Link Aggregation

802.3x Flow Control

SNMP V1, V2, V3

RFC 783 TFTP

RFC 854 Telnet

RFC 1757 RMON MIB

RFC 896 Congestion Control in IP/TCP Internetworks

RFC 950 Internet Standard Subnetting Procedure

RFC 1191 Path MTU Discovery

RFC 1403 BGP OSPF Interaction

RFC 1519 Classless Inter-Domain Routing (CIDR):

RFC 1812 Requirements for IP Version 4 Routers

RFC 2236 Internet Group Management Protocol (IGMP) Version 2

RFC 1887 An Architecture for IPv6 Unicast Address Allocation

RFC 1981 Path MTU Discovery for IPv6

RFC 2374 IPv6 Aggregatable Global Unicast Address Format

RFC 2080 RIPng for IPv6

RFC 2373 IPv6 Addressing Architecture

RFC 2461 Neighbor Discovery for IP Version 6 (IPv6)

Power Supply –

Should be offered with internal hot-swappable , redundant power supplies (220 VAC at 50 Hz)

Required no of power cables (IEC-13/14 Power Cord 2 Meter) shall be offered with each switch

Switch Management –

command-line interface; Web browser; out-of-band management (RJ-45 Ethernet); SNMP Manager; Telnet and FTP; out-of-band management (serial RS-232C or Micro USB)

Environmental regulatory compliance -

RoHS-compliant

WEEE-compliant Product Certification –

The offered product must be certified with EAL 3 [Evaluation Assurance Level] or NIAP/CCEVS [National Information Assurance Partnership / Common Criteria Evaluation & Validation Scheme].

3 48 Port Layer 3 Switch Specifications

Qty: 12

3.1

Physical –



Switch shall have atleast 48 nos.of 10/100/1000 Base-T ports including

atleast 4 nos. of 1 Gbps SFP combo (dual personality) ports (SX/LX).

The Switch shall be configured with 2 nos. of 1000BaseLX transceivers (out of the four combo ports mentioned above) to support minimum upto 2KM.

The transceivers offered should be from the switch manufacturer only.

Scalability requirement –


Performance –











IGMP v2

PIM-SM Snooping



VRF

BGP, OSPF

VRRP, VRRP-E

RIP v1/v2

Multicast Routing




VRRP-E (IPv6)

VRF (IPv6)



802.x Accounting

MAC Authentication




802.1D Bridging

802.1q VLAN Tagging




802.3x Flow Control

SNMP V1, V2, V3

RFC 783 TFTP

RFC 854 Telnet

RFC 1757 RMON MIB













RFC 2461 Neighbor Discovery for IP Version 6 (IPv6) Power Supply –






RoHS-compliant



4 Configuration-III 24 Port fiber Switches Qty : 4 No’s

4.1 Physical –



Switch shall have atleast 24 nos.of 10/100/1000Base-SX ports

The transceivers offered should be from the switch manufacturer only. Scalability requirement –


Performance –











IGMP v2

PIM-SM Snooping



VRF

BGP, OSPF

VRRP, VRRP-E

RIP v1/v2

Multicast Routing




VRRP-E (IPv6)

VRF (IPv6)



802.x Accounting

MAC Authentication




802.1D Bridging

802.1q VLAN Tagging




802.3x Flow Control

SNMP V1, V2, V3

RFC 783 TFTP

RFC 854 Telnet

RFC 1757 RMON MIB













RFC 2461 Neighbor Discovery for IP Version 6 (IPv6) Power Supply –






RoHS-compliant



5 Quality Requirements –

The design and production of critical subsystems like system board, controllers etc., shall be under the control of manufacturer & international quality certified realization process.

All subsystems of the system shall have been selected to achieve optimal performance and high reliability.

The system architecture shall ensure maximum performance for data forwarding. The subsystems, the processor boards, the interconnections among subsystems and the software shall be properly matched to ensure maximum performance.

Systems shall be only from a proven product line from highly reputed manufacturers. The product line shall be an internationally established brand reputed for high quality and with wide acceptance in deployment for mission critical and business critical functions in the industry.

The manufacturer of the system shall be in total control of the lifecycle (Design, release, support, obsolescence and termination of the critical subsystems like motherboard, controllers etc.,) of the product.


Vendor shall offer products from such OEMs, who can provide direct after sales support/ warranty support in India and have support centers and spare warehouses in South and North India regions.


o The vendor is authorized for participating in the bid o The offered switches are not an obsolete product o The offered switches will not reach End of Support for atleast

eight years from the date of supply o The offered hardware / software component is back to back

supported by the OEM during the warranty period

For all items in the list of deliverables offered by the vendor, the manufacturer's part number should be clearly indicated. Offer of items without clear specification of part number is not acceptable.

Vendor should indicate the part nos. of the deliverable items clearly. The part numbers & description of the items in the offer should match the part numbers & description of the items mentioned in the manufacturer's spec sheets.

The part numbers & description of the goods delivered should match the part numbers & description in the offer.




Vendor should provide technical brochure from manufacturer for all subsystems to verify the current status (i.e. when released, whether due for replacement/obsolesce) the specification of the subsystems. The technical brochure shall give the details not only for the main system but also for all the subsystems and accessories. Technical brochure shall include details of


End Usage – The product shall be deployed at INC Lucknow for supporting IRNSS Mission

In case the approval of any Foreign Govt. agency, like US dept. of commerce, is required for the supply of any of the items, vendor should clearly indicate the items requiring such clearance. For such items vendor

should obtain strong assurance from the manufacturer regarding their commitment to follow-up through the necessary clearance process. A written assurance to this effect should be enclosed with the technical offer.

The vendor shall deliver the systems to ISTRAC-Stores, INC Lucknow

Annexure-4 UTM Appliance for Lucknow


1. Quantity –

Vendor shall quote for required quantity as specified. ISTRAC shall decide on the final quantity at the time of ordering. Quantity -

Configuration 1: Next generation Firewall with integrated IPS, IDS, Antivirus and

Gateway-antivirus= 04 No’s

Configuration 2: Next generation Firewall with integrated IPS, IDS, Antivirus and

Gateway-antivirus, Webfiltering, Deep Packet Inspection, SSL and IPSEC support = 02 No’s

Configuration 3: Logging and Management Devices

2. Configuration-1 Mission UTM with IPS/IDS, Antivirus

Qty:04

2.1

Physical –

19 inch rack mountable chassis along with rack mount kit. Offered device shall be with-in 2U form factor.


Shall be offered with 8 X GE RJ45 Ports, 8 XGE SFP Ports and 2 X GE

Dedicated management ports

All the port shall be firewall ports.

The transceivers offered should be from the same OEM or OEM Certified.

General Features –

Firmware should reside on Flash.

The proposed solution should have unrestricted user/node license.

The proposed solution must support user based policy configuration for security & management.

The proposed solution should support Route (Layer 3), transparent mode (Layer 2) and MIX mode deployment.

The proposed hardware shall have firewall partitioning feature to build virtual multiple firewall / firewall zones. At least 10 partitions / zone shall be offered in the base configuration.

The proposed solution should support SNMP v1, v2c & v3.

The proposed solution should provide online and offline update of the signature database for Antivirus, IPS/IDS Solution and other features.

The proposed solution should have integrated bandwidth management.

The proposed solution should have protection against Denial of Service (DoS) attacks.

Performance –

Minimum 4 Million number of concurrent connection

Minimum 24 Gbps Firewall throughput

Shall have integrated IPS solution with Minimum 7 Gbps of IPS throughput.

Shall have an integrated Anti-Virus solution with a minimum throughput

of 3 Gbps Minimum

Minimum combined throughput of 3 Gbps with IPS, Anti-Virus and Content Filtering Enabled on the device.

MTBF should be more than 2 years.

The configuration for an individual Firewall shall be realized using a single chassis (not by stacking).

Administration, Authentication & General Configuration Feature –

The proposed solution should support administration via secured communication over HTTPS, SSH and from Console.

The proposed solution should be able to export and import configuration backup including user objects.

The proposed solution should support user/ip/mac binding functionality to map username with IP address & MAC address for security reason.

The proposed solution should support ACL based user creation for administration purpose.

Support for user authentication services such as Active Directory, LDAP, RADIUS, TACACS+ and Local user group authentications.

IPV6 Support –

IPv6 Routing



Multicast Listener Discovery (MLD) version 1 and 2 snooping

High Availability Features –

The proposed solution should support High Availability Active/Passive or Active/Active deployment. The license shall be offered along with the product

The proposed solution should support Link, device & Session failure.

The proposed solution should support automatic & manual synchronization between appliances in cluster.

Firewall Features –

The proposed solution should be standalone appliance with hardened OS.

The proposed solution should support stateful inspection with user based one-to-one & dynamic NAT, PAT.

The proposed solution must support user identity as matching criteria along with Source/Destination IP/Subnet/group, destination Port in

firewall rule.

The proposed solution should have predefined application based on port/Signature & also support creation of custom application based on port/protocol number.

Firewall should supports Link Aggregation (LAG) for aggregating (combining) multiple network connections into a single connection

The proposed solution should support 802.1q VLAN tagging support.

The proposed solution should support dynamic routing like RIP1, RIP2, OSPF, and BGP4.

The proposed solution should support creation of schedule based policy for individual users or on group basis.

The proposed solution should support Fully Qualified Domain Name (FQDN) based host and host group.

The proposed solution should provide QoS to set different level of priority for different application.

IPS/IDS–

The proposed solution should have signature based and protocol anomaly based Intrusion prevention system.

The proposed solution must support creation of custom IPS signature.

The proposed solution must support configuration option to disable/enable category/signature to reduce the packet latency.

The proposed solution should generate the alerts for attacks like DoS

The proposed solution should generate historical reports based on top alerts, top attackers, severity wise, top victims, protocol wise.

Power Supply –


Required no of power cables (IEC-13/14 Power Cord 2 Meter) shall be offered with each device

Firewall Management –

command-line interface; Web browser; out-of-band management (RJ-45 Ethernet); SNMP Manage; out-of-band management (serial RS-232C or Micro USB)


RoHS-compliant

FCC and CE norms. Product Certification –

The offered product must be certified with ICSA Labs and EAL4+.

3 Configuration-2: Internet UTM with IPS/IDS, DOS, webfiltering, DPI, DLP, SSL

VPN Qty:02

3.1

Physical –

19 inch rack mountable chassis along with rack mount kit. Offered device shall be with-in 2U form factor.


Shall be offered with 8 X GE RJ45 Ports, 8 XGE SFP Ports and 2 X GE

Dedicated management ports

All the port shall be firewall ports.

The transceivers offered should be from the same OEM or OEM Certified.

General Features –

Firmware should reside on Flash.

The proposed solution should have unrestricted user/node license.

The proposed solution must support user based policy configuration for security & management.

The proposed solution should support Route (Layer 3), transparent mode (Layer 2) and MIX mode deployment.

The proposed hardware shall have firewall partitioning feature to build virtual multiple firewall / firewall zones. At least 10 partitions / zone shall be offered in the base configuration.

The proposed solution should support SNMP v1, v2c & v3.

The proposed solution should provide online and offline update of the signature database for Antivirus, IPS/IDS Solution, webfilering, IPSEC, SSL,

and DLP etc. The proposed solution should have integrated bandwidth management.

The proposed solution should have protection against Denial of Service (DoS) attacks.

The solution shall provide deep packet inspection and SSL offloading capabilities

The solution shall provide data leak prevention capabilities Performance –

Minimum 4 Million number of concurrent connection

Minimum 24 Gbps Firewall throughput

Shall have integrated IPS solution with Minimum 7 Gbps of IPS throughput.

Shall have an integrated Anti-Virus solution with a minimum throughput

of 3 Gbps Minimum

Minimum combined throughput of 3 Gbps with IPS, Anti-Virus and Content Filtering Enabled on the device.

MTBF should be more than 2 years.

The configuration for an individual Firewall shall be realized using a single chassis (not by stacking).

Administration, Authentication & General Configuration Feature –

The proposed solution should support administration via secured communication over HTTPS, SSH and from Console.

The proposed solution should be able to export and import configuration backup including user objects.

The proposed solution should support user/ip/mac binding functionality to map username with IP address & MAC address for security reason.

The proposed solution should support ACL based user creation for administration purpose.

Support for user authentication services such as Active Directory, LDAP, RADIUS, TACACS+ and Local user group authentications.

IPV6 Support –

IPv6 Routing



Multicast Listener Discovery (MLD) version 1 and 2 snooping

High Availability Features –

The proposed solution should support High Availability Active/Passive or Active/Active deployment. The license shall be offered along with the product

The proposed solution should support Link, device & Session failure.

The proposed solution should support automatic & manual synchronization between appliances in cluster.

Firewall Features –

The proposed solution should be standalone appliance with hardened OS.

The proposed solution should support stateful inspection with user based one-to-one & dynamic NAT, PAT.

The proposed solution must support user identity as matching criteria along with Source/Destination IP/Subnet/group, destination Port in firewall rule.

The proposed solution should have predefined application based on port/Signature & also support creation of custom application based on port/protocol number.

Firewall should supports Link Aggregation (LAG) for aggregating (combining) multiple network connections into a single connection

The proposed solution should support 802.1q VLAN tagging support.

The proposed solution should support dynamic routing like RIP1, RIP2, OSPF, and BGP4.

The proposed solution should support creation of schedule based policy for individual users or on group basis.

The proposed solution should support Fully Qualified Domain Name (FQDN) based host and host group.

The proposed solution should provide QoS to set different level of priority for different application.

IPS/IDS–

The proposed solution should have signature based and protocol anomaly based Intrusion prevention system.

The proposed solution must support creation of custom IPS signature.

The proposed solution must support configuration option to disable/enable category/signature to reduce the packet latency.

The proposed solution should generate the alerts for attacks like DoS

The proposed solution should generate historical reports based on top alerts, top attackers, severity wise, top victims, protocol wise.

Webfilering

The proposed should provide user ability to allow or block websites based on cateogory, FQDN, IP.

The solution shall provide flexibility to overide web filter Power Supply –



Firewall Management –



RoHS-compliant


The offered product must be certified with ICSA Labs and EAL4+.

4 Configuration 3: Logging Devices : Qty-01 Management Device: Qty 01

4.1 Vendor should quote for Logging and Management Device for the logging data from all the devices mentioned in configuration 1 & Configuration II Logging Device: Qty-01

The logging device shall be capable of logging all the logs for a minimum duration of 3 years

Logging device shall have sufficient storage in RAID1 configuration to store the logs for minimum 3 years duration.

Logging device shall be capable of integrating minimum 10 UTM devices of different models

Logging device shall be capable of providing various reports on hourly, daily, weekly, monthly basis.

Logging device shall be accessible over web

Logging device shall support custom reports

Logging device shall be specialized hardware optimized for logging data. Port Requirement –

Shall be offered with 2 X GE RJ45 with Dedicated management ports

Management –



RoHS-compliant


The offered product must be certified with ICSA Labs and EAL4+ or similar applicable

Power Supply –



Management Device : Qty 01

Shall be capable of managing all the firewall appliances/UTM.

Shall be capable of supporting firmware upgrade, definition updates, antispam, antivirus update in both push and pull models.

Shall be capable automatic updates of data from Internet and pushing it to network attached devices


Shall be offered with 2 X GE RJ45 with Dedicated management ports

Management –



RoHS-compliant


The offered product must be certified with ICSA Labs and EAL4+ or similar applicable

Power Supply –



5 Warranty –

OEM’s support package for on-site 24x7 comprehensive warranties with advance replacement support for 5 years for all Devices (including power supplies, transceivers) at INC Lucknow shall be offered.

Manufacturers support package for Warranty and technical support only should be quoted. The specific part number for such support should be

clearly indicated. Vendor shall not replace manufacturer’s warranty with their own warranty package.

Warranty should start from the date of acceptance of the full configuration.

Technical Support to cover the following o Access to technical support information for resolving problems,

configuration issues, utilities etc. o Firmware -updates and upgrades o Access to technical literature relating to the system o Onsite technical support in trouble-shooting

The manufacturer should support the product for at least 8 years after commissioning the Devices.

Firmware/Software upgrades to the device should be done free of cost within the warranty period.

6 Installation & System Support –

Vendor should install & commission the systems as per the configuration at INC Lucknow

The installation shall include unpacking and mounting of the devices in the rack, unpacking and loading the line cards and modules, OS upgradation and license activation and Registration etc.

Vendor shall configure the devices as per deployment configuration provided by INC Lucknow engineers.

System installation, commissioning is the sole responsibility of the vendor.

Vendor shall provide required skilled man-power during system installation and acceptance at INC Lucknow.

Vendor shall provide installation and acceptance report as a part of system installation.

At the time of installation and commissioning of the configuration if it is found that some additional hardware accessories or software items with licenses are required to complete the configuration to meet the operational requirement of the configuration which were not included in the vendor's original list of deliverables then vendor is required to supply such items to ensure the completeness of the configuration at no extra cost. Vendor should ensure completeness of the list of deliverables in the offer to avoid such discovery during installation.

System Support – Vendor shall provide on-call onsite support for the delivered set of hardware during the warranty period. The support shall include onsite activities like failed component replacement, IOS upgrades, troubleshooting, log collection and raising support call with OEM.

7 Quality Requirements –

The design and production of critical subsystems like system board, controllers etc., shall be under the control of manufacturer & international quality certified realization process.

All subsystems of the system shall have been selected to achieve optimal

performance and high reliability.

The system architecture shall ensure maximum performance for data forwarding. The subsystems, the processor boards, the interconnections among subsystems and the software shall be properly matched to ensure maximum performance.

Systems shall be only from a proven product line from highly reputed manufacturers. The product line shall be an internationally established brand reputed for high quality and with wide acceptance in deployment for mission critical and business critical functions in the industry.

The manufacturer of the system shall be in total control of the lifecycle (Design, release, support, obsolescence and termination of the critical subsystems like motherboard, controllers etc.,) of the product.


Vendor shall offer products from such OEMs, who can provide direct after sales support/ warranty support in India and have support centers and spare warehouses in South and North India regions.


o The vendor is authorized for participating in the bid o The offered devices are not an obsolete product o The offered devices will not reach End of Support for atleast eight

years from the date of supply. o The OEM does not have any objection on retention of failed media

at INC Lucknow during warranty replacements. o The offered hardware / software component is back to back

supported by the OEM during the warranty period.

For all items in the list of deliverables offered by the vendor, the manufacturer's part number should be clearly indicated. Offer of items without clear specification of part number is not acceptable .The part numbers & description of the items in the offer should match the part numbers & description of the items mentioned in the manufacturer's spec sheets.




Vendor should provide technical brochure from manufacturer for all

subsystems to verify the current status (i.e. when released, whether due for replacement/obsolesce) the specification of the subsystems. The technical brochure shall give the details not only for the main system but also for all the subsystems and accessories. Technical brochure shall include details of


End Usage – The product shall be deployed at INC Lucknow for supporting IRNSS Mission


In case of imported items ISTRAC Purchase will provide necessary documents including customs duty exemption certificate 51/96 .Vendor has to arrange customs clearance .Concessional customs duty is payable by the vendor and the same will be reimbursed by us against submission of Triplicate copy of Exchange control copy of Bill of entry (original) and TR6 Challans . However no customs clearance charges, demurrage charges is payable by ISTRAC

specifications annexure-1 1. ip kvm - isro · scroll keys, windows keys and trackball mechanism for...

Documents