MESPT-ICT-09-2025 – PROVISION OF FORTINET NEXT GENERATION FIREWALL Full Time NEW

TERMS OF REFERENCE

FIRMS ONLY

PROVISION OF FORTINET NEXT GENERATION FIREWALL

INTRODUCTION

Micro-Enterprises Support Programme Trust (MESPT) is a Kenyan development organization established in 2002. MESPT’s overall objective is to promote economic growth, employment creation and poverty alleviation through enterprise development. This is achieved predominantly through support to the development of agricultural value chains whilst embracing and promoting the green growth and climate change agenda. Through its vision of building a more Prosperous Society, MESPT facilitates increased commercialization, decent employment and green transformation through targeted interventions in the selected value chains. The Trust is a multi-donor entity jointly founded by the Government of Kenya and the European Union who later relinquished their position to the Royal Danish Embassy in Kenya, Ministry of Foreign Affairs of Denmark (DANIDA). To learn more about MESPT, please visit www.mespt.org.

1. PURPOSE

The purpose of this Request for Proposal (RFP) is to solicit proposals from vendors for Fortinet Next generation firewall. The firewall will provide perimeter security at the HQ in Nairobi and remote offices.

1. OBJECTIVE

The objective of this RFP is to acquire and install the Fortinet next generation firewall. The specific Objectives are as follows:

1. Implement common next generation firewall security features, such as application awareness, advanced malware protection etc.
2. URL filtering
3. Provide network security intelligence, Intrusion detection and Intrusion prevention
4. Provide secure connectivity between HQ and field offices
5. Provide client VPN connectivity

Technical Specifications and Requirements

1. **Scalable Architecture:**Support for additional sites.
2. Advanced Security: Secure connectivity, with encryption and continuous monitoring to safeguard sensitive data.
3. Monitoring and Management: End-to-end network monitoring with alerts and notifications for proactive management and issue resolution.
4. Seamless Integration: Compatibility with existing infrastructure for real-time transaction processing and proactive security e.g. integration with SIEM etc.
5. Networking Protocols and Standards: Support for essential networking protocols to ensure reliable and secure data transmission.
6. IPSec VPN: Implementation of IPSec VPN tunnels for secure communication across potentially insecure networks like the Internet.
7. SD-WAN Features: Application-aware routing, software-defined security, and dynamic path selection for enhanced network performance and security
8. Integration with Active directory: to associate traffic to users and authenticate VPN client users, etc
9. Logging and reporting: The solution shall include components with logging, analytics, reporting and security.
10. IPV6 and IPV4 – the product must be both Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (Ipv6) compliant.
11. Role based Access: The solution should provide role-based access by function.

EXPECTED DELIVERABLES

1. Inception report for the assignment outlining approach/methodology.
2. Firewall Implemented according to MESPT requirements and Use Cases
3. Add-ons or customization
4. Training of MESPT ICT team
5. Licenses
6. As built documentation

Assignment Timelines

The consultant should finish all the above within eight weeks.

Submission Procedure

The companies that wish to send their proposal can do so through [email protected] by 2nd May 2025 at 12.00pm

Link to requirements: MESPT-ICT-09-2025 – PROVISION OF FORTINET NEXT GENERATION FIREWALL