44
NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia ICT DIVISION BID SCHEDULE FOR PROCURING VARIOUS ICT PRODUCTS OF BANK ASIA LOT-B “Secure Web Gateway with Bandwidth Manager and Application Delivery Controller” ICT DIVISION 68 Purana Paltan, Rangs Tower (8th Floor) Dhaka-1000

ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

Embed Size (px)

Citation preview

Page 1: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia

ICT DIVISION

BID SCHEDULE FOR

PROCURING VARIOUS ICT PRODUCTS OF BANK ASIA

LOT-B

“Secure Web Gateway with Bandwidth Manager and Application Delivery Controller”

ICT DIVISION 68 Purana Paltan, Rangs Tower (8th Floor)

Dhaka-1000

Page 2: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 1 of 44

1 Invitation for Tender Offers

BID SCHEDULE

For “Secure Web Gateway with Bandwidth Manager and Application Delivery Controller”

Page 3: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 2 of 44

INVITATION TO BID

Bank Asia Limited invites tender from bona-fide bidders, proposals to offer “Secure Web Gateway with Bandwidth Manager and Application Delivery Controller”. The bidder should be well experienced to

complete the task/tasks. The last date for submission of Tender in August 09, 2017 and Tender should be

dropped Bank Asia Limited, Logistic Support & Service Department (LSSD), Corporate Office, RANGS Tower, (6th floor), 68, Purana Paltan, Dhaka-1000 by 3:30 pm. This Bids will be opened on same day at 4:00

pm. The bidder may depute their representative at the time of opening of Tender.

Page 4: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 3 of 44

TABLE OF CONTENTS

1. Executive Summary.....................................................................................................................04

2. Background ...............................................................................................................................06

3. Scope of BID .............................................................................................................................07

4. Bidders’ Qualification & Instruction ……………………………………………………………………………………………08

5. Evaluation Criteria and Technical & Financial weights………………………………………………………………….14

6. Technical Requirement……………………………………………………………………………………………………………….21

7. Terms & Condition………………………………………………………………………………………………………………………30

8. Financial Proposal……………………………………………………………………………………………………………………….36

9. Bid Form, BG & Others ………………………………….……………………………………………………………………………38

Page 5: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 4 of 44

1 EXECUTIVE SUMMARY

Bank Asia has been launched by a group of successful entrepreneurs with recognized standing in the

society. The management of the Bank consists of a team led by senior bankers with decades of

experience in national and international markets. The senior management team is ably supported by a

group of professionals many of whom have exposure in the international market.

It set milestone by acquiring the business operations of the Bank of Nova Scotia in Dhaka, first in the

banking history of Bangladesh. It again repeated the performance by acquiring the Bangladesh

operations of Muslim Commercial Bank Ltd. (MCB), a Pakistani bank.

In the year 2003 the Bank again came to the limelight with oversubscription of the Initial Public Offering

of the shares of the Bank, which was a record (55 times) in our capital market's history and its shares

commands respectable premium.

The asset and liability growth has been remarkable. Bank Asia has been actively participating in the

local money market as well as foreign currency market without exposing the Bank to vulnerable

positions. The Bank's investment in Treasury Bills and other securities went up noticeably opening up

opportunities for enhancing income in the context of a regime of gradual interest rate decline.

Bank Asia Limited started its service with a vision to serve people with modern and innovative banking

products and services at affordable charge. Being parallel to the cutting edge technology the Bank is

offering online banking with added delivery channels like ATM, Tele-banking, SMS and Net Banking.

And as part of the bank's commitment to provide all modern and value added banking service in

keeping with the very best standard in a globalize world.

Till now all Banks are operating their business in Urban and semi urban area leaving large numbers of

un-banked rural people. To connect the geographically dispersed population to banking net has started

Agent Banking recently through Bank’s authorized agent. Bank Asia is the pioneer have successfully

introduced Agent Banking in 6(six) Upazila under Munshiganj District as a pilot Project. This success has

given the confidence to expand the project all over Bangladesh.

The agent banking model is one in which banks provide financial services through nonbank agents, such

as educated individuals, chain grocery stores, retail outlets, post offices, pharmacies or NGOs. This

model allows banks to expand services into areas where they do not have sufficient incentive or

capacity to establish a formal branch, which is particularly true in rural and poor areas where as a result

a high percentage of people are unbanked.

Page 6: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 5 of 44

The term financial inclusion refers to a broad financial system that provides access to financing,

mobilization of savings, credit allocation, risk management as well as payment services. Financial

inclusion refers to both the adequate provision of services by the financial institutions as well as the

appropriate uptake or use of these services by all segments of the population. Although it is just one

aspect of financial inclusion, an integrated payment system is a critical component of financial

inclusion.

Page 7: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 6 of 44

2 BACKGROUND

Bank Asia wishes to receive bids from the bona fide firms for “Secure Web Gateway with Bandwidth

Manager and Application Delivery Controller” at Bank Asia, Rangs Tower located at 68 Purana Paltan, Dhaka. The bid must be included, delivery, installation, configuration, implementation etc. cost, VAT,

Taxes & all other duties, fees/charges as applicable. If require bidder shall provide break-down price in

separate sheet along with the above mentioned bundle pricing format as mentioned in this document. The successful Bidder shall be the Contractor for all the products and services offered and be fully

responsible for the overall project management and co-ordination of the supply, installation,

integration, testing, training and commissioning for the “Secure Web Gateway with Bandwidth Manager and Application Delivery Controller” Bidders are required to propose solution as specified in

the design, bill of quantity / material for the “Secure Web Gateway with Bandwidth Manager and

Application Delivery Controller” at Bank Asia Datacenter, Rangs Tower. Bidders are required to propose all items as mentioned in the schedule and are wholly responsible for the products and

services offered unless otherwise specified and as specified in the terms and conditions. The scope will

also include the successful bidder to provide standard operating procedure (SOP) for the “Secure Web Gateway with Bandwidth Manager and Application Delivery Controller”.

Page 8: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 7 of 44

3 SCOPE OF BID

3.1 Scope of Bid

Bank Asia wishes to receive bids from the bona-fide firms for procuring “Secure Web Gateway with

Bandwidth Manager and Application Delivery Controller”. The bid includes supply, installation, testing, commissioning, and maintenance of the required products.

Bidders are required to propose solutions as specified in the technical and financial proposal for

implementing “Secure Web Gateway with Bandwidth Manager and Application Delivery Controller”

at Bank Asia is required to propose their solutions under two envelop system, one for technical

proposal and other for financial proposal with additional a set of documents excluding financial.

Bidders are required to quote for all items and are fully responsible for offered products and

implementation of the same as specified in the terms and conditions.

The successful Bidder shall be the Contractor for services that is offered by him and is responsible for

the project management and co-ordination of the supply, installation, testing, commissioning, and

maintenance for the implementation of the project. The scope of the bid includes design, specification,

bill of quantity, and prices of the items as detailed in this document and any other items that deem

necessary but not mentioned in this document. The scope will also include the successful bidder to

provide standard operating procedure (SOP). The successful bidder has to complete the project as turn-

key basis.

Page 9: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 8 of 44

4 BIDDERS’ QUALIFICATION & INSTRUCITON

4.1 Bidder’s qualification Bidders must have the following qualifications to bid:

1. The bidder should be an Authorized Partner of the proposed products. 2. The bidder as a registered company should have a legal entity to enter into contracts with at

least 3 years’ experience in the relevant business including IT based profession. 3. The bidder should have own/representative office and all time presence in Dhaka with

well equipped service/support/ system up-gradation cell manned with adequate

minimum three trained and certified qualified technical personnel for installation,

maintenance and support to the proposed products/ systems.

4. The bidder must be regular tax payer.

5. The bidder must have past performance on installation, commissioning, and maintenance of

the relevant products for at least in 3 (Three) organizations preferably in the banking sector.

Details of experience and past performance of the bidder are to be submitted along with the

bid in support of proof. 6. The bidder must hold manufacturer’s authorization on this bid for the items those are not

produced by the bidder itself but offered in the bid

4.2 Deliverables

The deliverables of this project includes the followings:

- “Secure Web Gateway with Bandwidth Manager and Application Delivery Controller”: Supply,

installation, commissioning, testing, and maintenance of “Secure Web Gateway with Bandwidth

Manager and Application Delivery Controller” for running exiting system in the Data Center (DC).

-Other deliverables: The other deliverables of the project are as follows:

To prove overall project implementation plan including Gantt chart;

To provide procedures for testing and commissioning of products installed in the DC and DR;

To provide standard operating procedure of “Secure web gateway with bandwidth manager

and Application delivery controller”;

Page 10: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 9 of 44

To provide suitable program management plan to ensure successful implementation of the

project;

Schedule of authorized principle training of 3 persons on the operation and maintenance of the

supplied, installed, and commissioned systems and sub systems using Contractor’s arranged

state of the art training facilities;

To provide product brochures, documentation, operation manuals, and required CD media kit

of all software systems;

To perform verification test to ensure all system components are functioning as desired;

To provide acceptance checklist for the project;

To propose additional items with price that estimate necessary but not mentioned in this tender with

logic supporting necessity of the items.

The bidder is expected to examine carefully the contents of the bidding documents. Failure to comply

with requirements of bid submission will be at bidder’s own risk and which are not substantially

responsive to the requirements of the bidding documents will be rejected.

4.3 Documents comprising the bid The bid submitted by the bidder shall comprise two envelopes submitted simultaneously, one

containing only the "Technical Proposal" and the other the "Financial Proposal".

The technical proposal shall contain the followings:

a. Signed bid document;

b. Power of attorney (authorizing the person to sign and initial the bid document on behalf of the

company);

c. Documents showing eligibility of the bidder as mentioned in this document;

d. Response to the eligibility criteria as mentioned in this document;

e. Technical description of the deliverables to demonstrate the specified technical requirement;

f. Response to the bidder’s profile as mentioned in this document;

g. Response to the technical specification as mentioned in this document;

h. Bid form for technical proposal; and i. Any other things required for technical proposal.

Page 11: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 10 of 44

The financial proposal shall contain the following:

a. Bid security pursuant (Original);

b. Bid form for financial proposal;

c. Schedule for financial proposal as mentioned in this document; and

d. Any other things required for financial proposal.

4.4 Bid prices Bidders shall quote the price in Bangladeshi Taka (BDT) for the items quoted. The govt. charges such as

VAT, Tax, AIT, etc. should be shown separately. The price will include supply, installation, testing,

commissioning, maintenance, and 3 years technical support and maintenance. Bidders shall quote

separate price for annual maintenance contract (AMC) for the items that will be valid for additional

four (4) years after the end of the 3 years. If bank wishes it will sign an AMC for four (4) years. Quoted

AMC price will be sued for such contract.

Supplementary financial proposals which are not received in the time required by the Bank will result in

the rejection of the bid.

4.5 Pre-Bid Meeting The Bank will arrange a pre-bid meeting on August 02, 2017 at 11:30 AM with the participated bidders

to discuss on technical issues / specifications to find the anomalies / discrepancies (if any). The Bank

will issue addenda of the bidding documents (if any found in the meeting). The meeting will be held at

ICT Division, Bank Asia Limited, Rangs Tower (8th floor), 68 Purana Paltan, Dhaka-1000.

4.6 Correction or Amendment of bidding documents The Bank may, for any reason, whether at its own initiatives or in response to a clarification requested

by a prospective bidder, modify the bidding documents by issuing addenda by August 06, 2017 through

email.

Any addenda thus issued shall be part of the bidding document and shall be communicated in writing

to all purchasers of the bidding documents. Where amendments or changes are required by the Bank,

bidders will be requested in writing to adjust their proposals accordingly and submit a supplementary

financial proposal within 5 (Five) working days. The supplementary financial proposal should only

contain the changes in price resulting from the changes in the technical proposals. Bidders should note

Page 12: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 11 of 44

that, if the Bank, during the evaluation of the financial proposals, considers that the changes in price

are unrealistic in comparison with the original financial proposal, the bid is liable to be rejected. Bidders

not wishing to change their technical proposals may withdraw from the bidding process and their

financial proposals will be returned unopened.

4.7 Bid validity

Bid shall remain valid for a period of 12 (Twelve) months after the date of opening of the proposals. In

exceptional circumstances, prior to expiry of the original bid validity period, the Bank may request the

bidder to extend the period of validity for a specified additional period. The request and the responses

shall be made in writing. A bidder agreeing to the request will not be permitted to modify its bid.

3.10 Bid Security The bidder shall furnish as bid security of 2.50% of the total financial offer in the form of Payment

Order / Demand Draft in favor of Bank Asia Limited. The bid security must be submitted inside the

financial proposal. The bid security should be valid for 12 (Twelve) months after the date of bid

opening. Any bid not accompanied by an acceptable bid security shall be rejected as non-responsive

even if that bid is found technically responsive during technical evaluation.

The bid security of unsuccessful bidders will be returned after selection of the successful vendor. The

bid security of the successful bidder will be returned when the bidder has signed the agreement and

furnished the required performance security.

The bid security may be forfeited if (a) the bidder withdraws its bid during the period of bid validity

specified in the bid form; (b) if a successful bidder fails to sign the contract and (c) if a successful bidder

fails to furnish the performance security.

4.8 Format and signing of bid The bidder shall prepare one original and two copies of the technical proposal and the financial

proposal, clearly marking each one as: “ORIGINAL - TECHNICAL PROPOSAL”, ”ORIGINAL - FINANCIAL PROPOSAL”, “COPY – TECHNICAL PROPOSAL”, “COPY - FINANCIAL PROPOSAL” etc. as appropriate. In

the event of discrepancy between the original and any copy, the original shall prevail. All the envelopes

will contain the full name and address of the participant company.

Page 13: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 12 of 44

The original and all copies shall be signed by a person or persons duly authorized to sign on behalf of

the bidder. All pages of the bid where entries or amendments have been made shall be initialed by the

person or persons signing the bid.

The bid shall contain no alterations, omissions or additions, except those to comply with the

instructions issued by the Bank, or as necessary to correct errors made by the bidder, in which case

such corrections shall be signed by the person or persons signing the bid.

4.10 Sealing and marking of bid

The bidder shall seal the original technical proposal, the original financial proposal and the copies of

the technical proposal and financial proposal in separate envelopes clearly marking each one as: “ORIGINAL - TECHNICAL PROPOSAL”, ”ORIGINAL – FINANCIAL PROPOSAL”, “COPY – TECHNICAL

PROPOSAL”, “COPY - FINANCIAL PROPOSAL” etc. as appropriate.

The bidders shall seal the original bids and each copy of the bids in an inner and outer envelope, duly

marking the envelopes as “ORIGINAL” and “COPY”.

The inner and outer envelopes shall -

Be addressed to the Bank at the following address: LSSD Department, Bank Asia Limited, Rangs Tower

(6th floor), 68 Purana Paltan, Dhaka-1000 bear the identification of bid for supply and installation of the mentioned deliverables.

a. In addition to the above requirements, the inner envelope shall indicate the name and

address of the bidder to enable the bid to be returned unopened in case it is declared.

b. If the outer envelope is not sealed and marked as above, the Bank will assume no

responsibility for the misplacement or premature opening of the bid.

4.11 Deadline of bid Bids must be received by the Bank at the address specified above no later than August 09, 2017 at 3.30 pm. 4.13 Opening of bids The Bank will open the technical proposals in the presence of the bidder’s representative (if any

present) at 04.00 pm on August 09 , 2017 at LSSD Department, Bank Asia Limited, Rangs Tower (6th floor), 68 Purana Paltan, Dhaka-1000. The Bank will open the financial proposals of the technically

responsive bidders in the presence of the bidder’s representative (if any present) after the completion

of technical evaluation. The date and time of such opening will be informed to the technically responsive bidders in writing. The bidder’s names, the Bid Prices including Supplementary financial

Page 14: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 13 of 44

Proposals, the total amount of each bid, any discounts, the presence or absence of bid security and such other details will be announced and recorded by the Bank at the opening. The bidder’s

representatives will be required to sign this record.

The Bank shall prepare minutes of the bid opening including the information disclosed to those, who

will present in the opening.

4.14 Preliminary Examination of Proposals and determination of Responsiveness The Bank will examine the bids to determine whether they are complete, whether the documents have

been properly signed, whether the bids are substantially responsive to the requirements of the bidding

documents and whether the bids provide any clarification and or substantiation that the Bank may

require.

A substantially responsive bid is one which confirms to all the terms, conditions and requirements of

bidding documents, and includes the amendments and changes, if any, requested by the Bank during

the evaluation of the bidder’s proposal. If a proposal is not substantially responsive, it will be rejected

by the Bank, and may not subsequently be made responsive by correction or withdrawal of the

nonconforming deviation or reservation.

4.15 Correction of Errors

The Bank for any arithmetic errors will check financial proposals determined to be substantially

responsive. Arithmetic errors will be rectified on the following basis.

a. If there is a discrepancy between the unit rate and the total cost that is obtained by

multiplying the unit rate and quantity, the unit rate shall prevail and the total cost will be

corrected unless in the opinion of the Bank there is an obvious misplacement of the decimal

point in the unit rate, in which case the total cost as quoted will govern and the unit rate

corrected.

b. If there is a discrepancy between the total bid amount and the sum of total costs, the sum of

total costs shall prevail and the total bid amount will be corrected.

The amount stated in the Form of Bid for Financial Proposal will be adjusted by the Bank in

accordance with the above procedure for the correction of errors and, shall be considered as

binding upon the bidder. If the bidder does not accept the corrected amount of bid, its bid will

be rejected, and the bid security may be forfeited.

Page 15: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 14 of 44

5 EVALUATION CRITERIA AND TECHNICAL , FINANCIAL WEIGHTS

5.01 Evaluation of proposals

The Bank will carry out a detailed evaluation of the bids according to the information supplied by the

bidder through its proposals and based on the evaluation criteria specified in Clause 1.19 of this

document.

Technical proposals of the bids will be opened and evaluated first keeping the financial proposal closed.

The bidders must secure at least 60% marks in technical proposal to become technically responsive.

Technically non-responsive bids will be rejected at this stage and will not be considered for further

evaluation.

Once the evaluations of all the technical proposals are finished, the financial proposals of all the

technically responsive bidders will be opened to complete the evaluation process. At this stage, if any

bid is found not accompanied by an acceptable bid security that bid will be rejected right away as non-

responsive.

The Bank may arrange a discussion meeting with each bidder to understand each and every aspect of

technicality of the proposal. To assist in the examination, evaluation and comparison of financial

proposals, the Bank may, at its discretion, ask any bidder for clarification of its bid. The request for

clarification and the response shall be in writing, but no change in the price or substance of the bid shall

be sought, offered or permitted except as required to confirm the correction of arithmetic errors

discovered by the Bank in evaluation of the bids in accordance with Clause 1.18.

The Bank will choose the offer that will be more comprehensive and that confirms the Bank’s

requirements and international standards. Information relating to the examination, clarification,

evaluation and comparison of bids and recommendations for the award of a contract shall not be

disclosed to bidders or any persons not officially concerned with such process until the award to the

successful bidder has been announced. Any efforts by a bidder to influence the Employer's processing of

bids or award decision may result in rejection of the bidder's bid.

Page 16: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 15 of 44

5.02 Evaluation Criteria The technical proposal and the financial proposal of a bidder will be evaluated separately. The evaluation criteria and the relative weight for each criterion are given in Tables 1.19.1 and 1.19.2. Bank Asia reserves the right to change the evaluation criteria and the weights if it feels to do so for the benefit of the Bank.

Table 1.19.1: Evaluation criteria and their weights

SL. Items of Evaluation Weight of Evaluation

Technical Proposal

01 Design and Specifications of the supplied products 10

02 Company Profile & Financial status 6

03 General experience 3

04 Specific experience including work experience in Bank Asia environment 6

05 Support and technical expertise details 6

06 Maintenance with other organizations 4

07 Proposal & product catalogues 5

08 Training proposal 5

09 Submitted overall project plan and delivery time line 5

10 Operation manuals 6

11 Warranty and spare parts availability 4

Total Technical Proposal marks 60

Financial Proposal

Quoted price* 30

Annual Maintenance Charge (AMC)* 10

Total Financial Proposal marks 40

*Note: The lowest bidder will get highest marks, the highest bidder will get 50% marks and rest of the bidder will get relative marks between lowest and highest bidders.

Table 1.19.2: Marking of Technical Evaluation

SL. Attributes Mark Requirements

01 Design and Specifications of the supplied products.

10

-Detailed design for offered systems should be furnished by the bidder (if any).

--The minimum requirements are presented in the specifications in the document. -Better specifications and feature with latest technological information is required for evaluating this attribute. The specifications must be filled as per Format presented in the document. -The specification failing to maintain minimum requirement willlead towards disqualification. -Project implementation schedule in the form of a Gantt chart must be provided.

Page 17: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 16 of 44

02 Company profile and Financial status.

6 -Company overview should be provided with the address and telephone number of the contact person. -Company profile along with supported all documents. -Details of assets, financial strength, turnovers, etc.

03 General experience. 3 -General IT Experience

-Experience in implementation of data center and disaster recovery sites. -Specific experience in implementation of products in data center and disaster recovery sites.

04 Specific experience including work experience in Bank Asia environment.

6 -Experience in build complete datacenter infrastructure for any Bank or financial company. -Existing service or worked experience with Bank Asia (if any).

05 Support and technical expertise details.

6 -Third party dependency -Support team and expertise details -Expertise details on particular product -Support experience of similar work. --Should have adequate 1st level to all levels of support, service and maintenance arrangement. -Minimum response time should be within 30 min. - For solution of the problem should attended within 2 (two) hours from the reporting. -24x365 days support officials availability -Should be appointed on premises support engineer for 01 (one)year from the UAT date. -The proposed maintenance support plan must be presented for evaluating the attribute and s should have adequate personnel with necessary qualifications to provide support, maintenance and training. -On call support -Remote support -Preventive maintenance -Corrective maintenance

06 Maintenance with other organizations

4 -Top three clients list -Client’s certificate - Annual Maintenance details with other organizations

SL. Attributes Mark Requirements

07 Proposal & product catalogues

5 -Specific products proposal -Justification of proposed product -Product Brochures -Product Catalogues -Product Data Sheets -Operation Manuals

08 Training proposal 5 -Training on specific products (Both local & foreign) -Number of participants and duration of the training

09 Submitted overall project plan and delivery time line

5 -Project plan including Gantt chart -Project proposal quality (Technical & Management level) -Justification of project plan with experienced documents. -Product delivery time line including custom or other authority formalities -Installation, testing, commission, and maintenance plan

Page 18: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 17 of 44

10

Operation manuals

6 -Supplied products specific operation manuals which will help to operate the device properly.

11 Warranty and spare parts availability

4 -Specified minimum 3 three years product warranty -Replacement time line of faulty spare parts - Ensure the availability of spare parts location/warehouse details.

12 Financial proposal 40% -Quoted lowest bidder including AMC/Annual Subscription

Total Mark 100%

3.20 Consolidated evaluation Final evaluation will be made taking 60% marks from technical evaluation and 40% marks from

financial evaluation. The higher scored bidders will be selected for price negotiation.

3.21 Price Negotiation The Bank may request higher scored bidders in writing to negotiate the price. Representative of the

Bidders must have authorization for price negotiation. The highest scoring bidder is not agreed for price

negotiation then the second highest scored bidder will be called for price negotiation and so on.

Bank will choose the successful bidder, after price negotiation and considering other performance,

which are deemed fit to the Bank.

3.22 Award of Contract The Bank will award the Contract to the successful bidder. Prior to expiration of the period of bid

validity prescribed by the Bank and after successful negotiations, the Bank will notify the successful

bidder that his bid has been accepted. The notification of award will constitute the formation of the

Contract. Upon the furnishing by the successful bidder of a Performance Security (full warranty period)

the Bank will promptly notify other bidders that their bids have been unsuccessful.

3.23 Bank’s right to accept any bid and to reject any or all bids.

The Bank reserves the right to accept or reject any bid, and to annul the bidding process and reject all

bids at any time prior to award of Contract, without thereby incurring any liability to the affected

bidder or bidders or any obligation to inform the affected bidder or bidders of the grounds for the

Bank’s action.

Page 19: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 18 of 44

3.24 Signing of contract / Work order At the same time that the Bank will notify the successful bidder that its bid has been accepted, the

Bank will sent the bidder the Form of Contract Agreement incorporating all agreements between the

parties (the Bank & the Vendor) or will issue Work orders (where applicable).

Within 15 days of receipt of the Form of Agreement, the successful bidder shall sign the Form and

return it to the Bank.

3.25 Process to be confidential Information relating to the examination, clarification, evaluation and comparison of bids and

recommendations for the award of a contract shall not be disclosed to the bidders or any other persons

not officially concerned with such process until the award to the successful bidder has been

announced. Any effort by a bidder to influence the Bank’s processing of bids or award decisions may result in the

rejection of the bidder’s bid.

3.26 Duration and Penalty The duration of the project completion excluding training would be 3 (three) from the day of awarding

of the contract. The bidder will provide a detailed implementation plan of the project using Gantt chart.

In case of a failure of the successful bidder to meet the contract obligations in the prescribed time, the

firm will be liable to pay 1% of the Contract price as liquidity damages for every week after the dead

line. Upon reaching the penalty to 10% of contract price, the performance security will be forfeited on

sending a letter to the vendor / contractor.

3.27 Performance Security Within 15 days of receipt of award from the Bank, the successful bidder shall furnish to the Bank a

performance security in the form of ‘Bank Guarantee’ (Appendix–C) in an amount of 10% of Contract

price in accordance with the Conditions of Contract. The performance security must be valid for till

offered warranty periods. The bid security will be returned after receiving the performance security.

Page 20: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 19 of 44

Failure of the successful bidder to comply with the requirements of this clause shall constitute

sufficient grounds for the termination of the award and forfeiture of the bid security.

3.28 Training The bidder should submit a training proposal for authorized principle training and certification for 3

(three) trainees of the Bank specifying the topics of all the training modules, duration, location, and the

instructor of each such training module. A training schedule in the form of Gant chart and the CVs of

the instructors must be submitted with the training proposal. Training should be provided after the

work order is given and it should be completed within 1 (one) month from the day project completion.

In case of a foreign training all the expenses, e.g., air fare, hotel expenses, local travel, food, etc. should

have to be borne by the bidder.

3.29 Payment Terms

i. No advance payment will be mad for any products or services.

3.30 Local Support and Maintenance All products/items supplied should be covered under 3 (three) year local support and maintenance.

Price for such support and maintenance should be included in the bidding price. The bidder has to

submit a separate Annual Maintenance Proposal with the bid. Quoted annual maintenance price must

be valid for at least 2 years. If Bank Asia wishes, a separate Annual Maintenance Agreement will be

signed with the successful bidder to get maintenance support. Quoted Annual Maintenance price will

be used in such agreement.

3.31 Annual Technical Support Products Annual Technical Support (ATS) Licenses for one (1) year must be provided by the bidder.

During this one year support period, the bidder must guarantee 24x7 operation of the supplied,

installed, and commissioned items through regular maintenance, repair, or replacement, if necessary.

3.32 Design The bidders should provide a detailed design (if any) of the products implementation in compliance

with the existing hardware infrastructure of the Bank. The bidder may request the Bank for information

regarding the existing bank infrastructure.

Page 21: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

Secure Web Gateway with BWM and Application Delivery Controller for Bank Asia Page 20 of 44

3.33 Withholding Sales Tax & VAT

The bidder is hereby informed that the Bank shall deduct tax at the rate prescribed under the Tax Laws

of Bangladesh, from all payments for services rendered by any bidder who signs a contract with the

Bank. The bidder will be responsible for all taxes on transactions and/or income, which may be levied

by the bank. If bidder is exempted from any specific taxes, then it is requested to provide the relevant

documents with the proposal.

Page 22: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 21 of 44

4 TECHNICAL REQUIREMENT

The scope of the bid includes for implementing “Secure Web Gateway with Bandwidth Manager and

Application Delivery Controller” at Bank Asia as described below as summary:

ITEM 1: SWG with BWM -Secure Web Gateway with Bandwidth Manager

Features Specification Bidder’s Offer Comply?

(Y/N)

Type Secure web gateway with bandwidth manager

Brand Should be mentioned by bidder

Model Should be mentioned by bidder

Country of Origin USA/EU

Certification The proposed vendor must be in the certified on ICSA Labs Advanced Threat Defense Criteria v.1.0

The proposed vendor must be in the Leader’s quadrant of the Enterprise Firewalls Gartner Magic Quadrant for 2016

Return of Investment The proposed solution should have highest Return on Investment with lowest Mbps protection cost with all feature enabled protection throughput capacity of the device.

Form factor Rack Mountable 19”

Architecture The Secure Web Gateway solution should be present in Leaders quadrant in Gartner’s report for Secure web Gateway 2016

The solution shall include Web Proxy with Caching, Web Content Filtering, URL filtering, Application layer filtering, Layer-7, Application control features etc.

Main Features 1. Solution should have inbuilt caching in order to cache Web objects with: a. Support for live Stream Splitting b. Support Content Pre-population

2. The solution should have proprietary or hardened Operating System. The Operating system should be secure from vulnerabilities.

3. All the hardware provided as part of solution should be rack mountable. Rack mounts kit to be provided.

4. The Solution should support explicit and transparent mode deployment.

5,The solution should support high availability, Active-Active and Active-Passive mode.

6. All components of the solution (Proxy, web/URL filtering ) must be deployed in Active-Active and HA Mode.

7.The solution when deployed in-line mode should support bypass mode in case of appliance failure i.e.

Page 23: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 22 of 44

traffic flow should not break. There should also be bypass indication to know whether bypass is active or not OR any other mode to achieve the above functionality.

8. The solution should be a Web Proxy and should support HTTP, HTTPS, TCP Proxy, SOCKS and Active FTP over HTTP and HTTPS.

9. The solution should support both IPv4 and native IPV6 proxy and gateway translation.

10. The solution should support Reverse proxy functionalities with web acceleration features including security functionalities and anonymity.

11. The solution should have Global web content monitoring services to provide regular and updated caching algorithms and signatures on regular intervals to the on-premises proxy to enable effective caching for popular web 2.0 and video sites.

12. The solution should allow administrator to define access to the internet based on IP addresses, range of IP addresses, subnet and CIDR basis.

13. The solution should support integration with Active Directory, LDAP and any standard based authentication server. This should allow administrator to define user or group based access policies to the internet.

14. The solution should have authentication options for users/groups; it should support authentication and authorization of users via Integrated Windows Authentication (Kerberos), NTLM (NTLM v1 and v2 in Session Security), Certificate based, RADIUS, AD/ LDAP etc.

15. The authentication should be done every time a user access web through the appliance after defined idle time. The appliance should timeout user if the connection is left idle for a certain amount of time. Or any other recommended approach to meet the above requirement.

16. The solution should support user defined caching option: i.e. Whitelists, Blacklists, Protocol and content.

17. The solution should provide facilities like Bandwidth management based on user/user IP address/category or Group.

18. The solution must identify and block Web Pages with: a. Malicious JavaScript/VB-Script b. Malicious (or unauthorized) ActiveX applications c. Phishing URLs

19. The solution should support protocol tunneling.

20. The Appliance should have an inbuilt URL filtering functionality with pre-defined /custom categories.

21. The Solution should have the capability to decrypt the SSL traffic and subsequently feed decrypted traffic

Page 24: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 23 of 44

to one passive device (IDS, Security Analytics etc) for further analysis

22. The content filtering software should have a database of URLs segregated into different groups/categories on content which should be automatically updated with latest changes on regular basis from the OEM’s web sites.

23. The License should be trust based & shouldn’t have water marking on average IP count.

24. The solution should have facility to multi categorize a single URL

25. The appliance should filter the traffic passing through it based on URL patterns specified in the policies.

26. The solution should provide high accuracy for Web 2.0 website classification. The solution should be capable of controlling and filtering web 2.0 operations on popular sites.

26. The solution should support web 2.0 traffic and protect against web 2.0 based attacks.

27. The solution must allow to create polices with administrator having the provision to allow or deny any group/category as per the appliance’s URL data base and assign it to a particular user, IP address or group etc. based on the time of the day, day of the week etc.

28. It should be possible to configure restrictions on downloads from Internet based on file types i.e., on extensions. Detection and subsequent block should be based on true file type.

29. The solution should send an alert message to the user; if he/she is trying to access a blocked website The Message should be configurable by administrator.

30. The solution should have facility to inform end user with notification page informing them of organization Internet usage policies and provide reasons as to why they have been blocked.

31. Support portal should give facility to administrator/end user to check URL category, and submit new URL for categorization.

32. The solution should support for all leading web browsers & Multi-languages URL filtering.

33. The solution should support inbuilt database of cloud applications with 50+ attributes so that policies are be written to allow/deny access to cloud applications based on not just their name but also attributes.

34. The solution should be able to group the users on IP or user credentials.

35. The solution should provide Web reputation based blocking/filtering.

Page 25: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 24 of 44

36. The solution should support integration with Data Leak Prevention (DLP) solution for HTTPS (SSL) scanning of outbound content to prevent leakage of confidential information.

37. The solution should allow organizations to establish flexible Internet use policies. Choose between Allow, Block, and Block by File Type options for managing web access; filter sites based on time of day etc.

38. The time at which the update is downloaded during the day should be configurable.

39. The solution should have facility for End User to provide/report misclassification in URL category.

40. The solution should have facility to configure the total time of browsing for a user or group (Active Directory).

41. The solution should provide Selective Authentication where different types of authentication can be enforced based on incoming IP range.

41. The solution should prevent SSL-based tunneling software including, but not limited to, Ultra Surf, from tunneling through using HTTPS encryption.

42. The solution should be able to address potentially malicious websites based on reputation, including sites likely to contain little or no useful and potentially damaging content and sites that camouflage their true nature or identity, or that include elements suggesting latent malign intent and site found to be hosting known and potential exploit code.

43. The solution should provide the same level of spyware protection, URL filtering, content and mobile code protection for SSL as it does for non- SSL traffic.

44. The solution should have provision to use regular expressions.

45. The solution should support inbuilt SSL interception and also support SSL scanning capabilities maintaining data integrity, including decryption, re-encryption of storage keys, without processing overhead and latency.

46. The solution should detect and evaluate connections from servers with questionable certificates.

47. The solution should have capability to read encrypted web traffic.

48. The SSL proxy shall support IPv4 and IPv6 in a dual stack arrangement.

49. The solution shall decrypt other (SSL, FTPS) traffic. 50. The solution shall provide the ability to exclude data from analysis (PII, Health, Banking, etc.) for privacy purpose.

Page 26: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 25 of 44

51. The solution shall provide unencrypted traffic to DLP via ICAP and to third party Security Analytics/Forensics logging/IDS solutions dedicated TAP on the appliance.

52. The solution should have the capability to integrate with malware scanning for inbound and outbound traffic. The solution should have Zero Day Malware protection (Both Inbound and Outbound) and should be able to integrate with various third-party Sandboxing/APT solutions.

53. The solution should have own in built intelligence & correction to inspect for, detect, and block active and dormant botnets.

54. Informative and exhaustive set of reports on User Activity and URL filtering activities (GUI to report past activity, top usage users and top malware threat).

55. The solution should provide standard report templates, able to generate dynamically build a custom web-based report, able to generate report by predefined report templates for viewing and reporting historical internet and application access by employees with customizable parameters, able to create and store custom reports that can be automatically generated at schedule times and emailed to specified recipient or accessed ad hoc. Output should be available in multiple formats (.xls, .pdf, .html, .xls and .doc).

56. The solution should also support user self-reporting features that would allow the employees to view their browsed sites. This should be integrated with directory structure, hence allowing the employee to login into the portal via their directory credentials.

57. Any additional software/hardware required for detailed analysis of log data to be provided as part of solution. Mention the name of software that will be provided along with solution.

58. Solution should provide centralized reporting and logging solution for the Web proxy/content filter to get a single, consolidated view of web access and security threats across complete environment regardless of the model.

59. The solution should have base lining capabilities. Abnormal usage should generate alerts.

60. Report information can be exported to HTML, CSV, PDF and text formats etc.

60. The solution should have provision to back up the system data, configuration data, and policy data to an external storage medium.

61. The solution should be able to detect infected nodes with user information.

62. The solution must allow customizing notification Web page to end users.

Page 27: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 26 of 44

63. The solution should must detect and protect against anonymizing websites, anonymizing tools.

64. The solution should provide for termination of open session based on inactivity.

65. The solution should be capable to block executable; independent of file extension and MIME Type.

66. The appliance should be manageable via HTTP /HTTPS / SSH.

67. Support capability for the authentication sources mentioned below: HTTP headers, Open LDAP, Radius/ACS, Local Password, Transparent- authentication.

68. The proposed solution should support SNMP v2c, V3 and should have capabilities of hardware & software monitoring via both enterprise grade MIBS as well as alert via SNMP traps. It should integrate with EMS (HP Open View).

69. The solution should be able to export policies to a restorable file.

70. The solution should be able to import all configuration data and policy data from the backup medium and restore the functioning of the appliance to the stage at which backup was taken.

71. The solution should capture all activity information as part of audit logging.

72. Vendor should quote appliance with 150 Mbps BW shaping capacity and 3000 users. Same appliance must handle 6000 users in future without any additional cost.

Authentication

The proposed firewall administrative module shall support the following authentication protocols: - LDAP - Radius (vendor specific attributes) - Token-based solutions (i.e. Secure-ID) - Kerberos

The proposed firewall’s SSL VPN shall support the following authentication protocols - LDAP - Radius - Token-based solutions (i.e. Secure-ID) - Kerberos - Any combination of the above

Management and Reporting

The management server must be capable of providing rich reports based on application, users and threats or in any combination.

The management server must be able to monitor system and status that will send out emails to the administrator regarding the health of the appliance based on the threshold been set

The management server must support the report generation on a manual or schedule (Daily, Weekly,

Page 28: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 27 of 44

Monthly, etc. ) basis

The management server must allow the report to be exported into other format such as PDF, HTML, CSV, XML etc.

Power supplies Internal power supply having input voltage 230 V and 13Amp power cable should be available

Authorization Original Manufacturer Authorization Certificate to be submitted along with the bid

Warranty Should have 03 (three) years OEM Warranty including subscription & Support and bidder Should quote the manufacturer support part code.

ITEM 2: ADC- Application Delivery Controller

Features Specification Bidder’s offer Comply? (Y/N)

Type Application Delivery Controller

Brand Should be mentioned by bidder

Model Should be mentioned by bidder

Country of Origin USA/EU

Return of Investment The proposed solution should have highest Return on Investment with lowest Mbps protection cost with all feature enabled protection throughput capacity of the device.

Architecture High-performance platform designed for data centers

Facilities GeoIP-based application control and Pre-built application templates for rapid

deployment

Form factor Rack Mountable 19”

Architecture • Advanced Layer 4 & Layer 7 load balancing

• SSL offloading & application acceleration • Global Server Load Balancing for

application delivery across data centers

• Comprehensive attack protection and Data Loss Prevention

Page 29: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 28 of 44

Load Balancing • Layer 4 & Layer 7 load balancing

• IPv6/IPv4 support • Active/passive high availability

• Default load balancing

–– Round robin –– Weighted round robin

–– Least connection

• Adaptive load balancing by CPU load, URL load, and terminal sessions

• Session persistence • Server health check and monitoring

Acceleration • SSL offloading • Caching & compression

• TCP connection pooling

Control • Application traffic

–– Layer 7 content-based routing –– Request/response rewrite

• Client & user limits

–– Brute-force –– Rate control

–– GeoIP reputation

Application Security • Security policies out of the box • Website cloaking

• Form field metadata violation

• Protection against common attacks –– OWASP Top 10

–– SQL injections

–– Cross-site Scripting –– Cookie or form tampering

• Data Loss Prevention (DLP)

–– Credit card & SSN numbers –– Custom patterns

• Granular policy management

Authentication/Authorization • LDAP • RADIUS • Kerberos • Two-factor authentication.

Supported Protocols • HTTP/S • SSH • SMTP • IMAP • POP3 •

NNTP • ASP • DNS • LDAP • RADIUS • TFTP • RDP • VDI • Windows Terminal Services •

Any TCP/UDP application.

Throughput and Hardware Maximum Throughput - 2 Gbps Real Server Support - 50 SSL TPS (2k)¹ - 400 Rackmount Chassis - 1U

Page 30: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 29 of 44

10/100 Copper Ethernet NICs 1 Gb Copper NICs (std/max) - 4 10 Gb Copper NICs (std/max) 10 Gb Fiber NICs (std/max)

FEATURES/ Availability Layer 4 Load Balancing Direct Server Return Layer 7 Load Balancing High Availability Cluster Global Server Load Balancing

Application Delivery SSL Offloading Content Routing AD and Kerberos Integration HTTP Compression Content Caching Hardware Based SSL Offloading SSL hardware acceleration

Application Security Inbound Attack Protection Outbound Data Theft Protection Protection Against DDoS Attacks

• Centralized management

• Real-time traffic statistics • Web firewall, access, audit, and system

logs

• Certified deployments with third-party applications

Warranty Should have 03 (three) years OEM Warranty including subscription & Support and bidder Should quote the manufacturer support part code.

Bidders may bid for all above categories. Bidders must participate in all above items in which they offer

their bid. The successful Bidders shall be responsible jointly and severally for all the products and

services offered by them for project management and co-ordination of the supply, installation,

integration, testing, training and commissioning for the implementation of the said items. The offer

should include design as outline in this document and any other items that deem necessary but not

mentioned in this document. During the course of final integration the successful bidder will have to

work together for final implementation for which they will be held jointly and severally responsible.

Page 31: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 30 of 44

4 TERMS & CONDITIONS

TERMS & CONDITIONS FOR SUPPLY OF ITEM(s)

Sealed quotations are invited from the selected reputed firms implementing data center infrastructure

and network cabling system Bank Asia as per following terms and conditions:

1) Financial and Technical proposal/offer, in sealed envelope, must be dropped in the Tender Box kept

at the office of the Logistic Support & Service Division (LSSD), Bank Asia Limited, Corporate Office: Rangs Tower (6th floor), 68 Purana Paltan, Dhaka on August 09, 2017 from 10:30 am to 3.30 pm and

be clearly marked “Secure Web Gateway with Bandwidth Manager and Application Delivery

Controller” envelope. Tenders will be opened at 04:00 pm on the same date in presence of the bidders or their representatives, who may remain present.

2) A bidder, who submitted a bid, cannot withdraw from the bidding process. Earnest money may be

forfeited for violating this condition.

3) The bidders should quote the unit price & total cost both in figure and words and there should not

be any cutting/erasing/overwriting.

4) In the price proposal if the values in digits and words differ then the value in words will prevail.

Again, if the total value does not match with the calculated value (Unit Price X Quantity) then the

total value will be recalculated by multiplying the quantity with the unit price.

5) Emphasis will be given to the quality and technical specification of the item(s). So, Bank is not bound

to accept the lowest bid. Bank reserves the right to accept or reject any or all the quotations without arising any reasons whatsoever.

6) The Bank reserves the right to reduce or increase the quantity. The Bank also reserves the right to distribute the work among the bidders or assign it to a single bidder.

7) VAT, Taxes etc. shall be deducted from the bill as per approved rate of the National Board of Revenue, Govt. Bangladesh.

8) If the Tenderer submit any wrong information then the Bank reserves the right to reject their

quotation partially or fully.

9) The supplier must obtain formal written work order from the Bank management before supply.

10) Earnest money (refundable) equivalent to 2.5% of the quoted value or 6 (Six) lac taka which is

lower of works in the form of pay order/bank draft/Bank Guaranty of any scheduled bank in favor

of Bank Asia Limited shall be submitted along with the tender.

Page 32: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 31 of 44

11) The RFP/work order will be automatically cancelled if the requisite terms & conditions are not

fulfilled.

12) Bidders must submit the following documents along with their offer and their offer would be in

their own Letter Head Pad and signed by any authorized persons.

13)

3 years’ experience certificate in the related field.

i) SWG with BWM - vendor must have deployment experience of offered product. ii) ADC - vendor must have deployment experience of offered product.

Top detail clients list for similar product.

Income Tax certificate

VAT certificate

Valid Trade License/Memorandum/Article of

Company profile.

Distributorship Certificate’ from the principal/Manufacturer

Draft SLA

Project Implementation & Training schedule

Submit at least 3 (three) experts profile along with valid certificate.

14) Following details should be submitted with the Proposal:

a. Technical Specifications of products. b. Country of origin and manufacturing

c. Required Software and Software Specifications

d. Pre-installation Requirements and Pre-requisites e. Trained and certified engineer for migration and installation of offered product

f. Delivery Period & implementation Plan.

g. Detail design/layout have to done by 2 (Two) certified experts.

15) Bidders must submit the description of their support team with the profile of experts for the items

they will supply.

16) During implementation phase minimum one trained IT resource (full time) should be provided by

bidder at on-site for smooth function of equipment and who will be continued for additional 3 (three) months after UAT.

17) Validity of Price Quotation must be for a minimum of 12 (twelve) months.

18) Tenderer will have to ensure that their technology and support will be available for next 7 (seven)

years.

Page 33: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 32 of 44

19) The information provided by the bidders in response to this Tender Document will become the

property of Bank Asia and will not be returned.

20) Bank Asia reserves the right to purchase partially, amend, rescind or reissue this Tender Document

and all amendments will be advised to the bidders and such amendments will be binding on them.

21) Product warranty will be minimum 03 (three) years.

22) Annual Maintenance Contract (AMC) will be started automatically after completion of warranty period.

23) Warranty will be started after successful installation & UAT.

24) The bidder should submit “Technical Proposal” with one additional copy in the sealed envelope.

25) “Financial Proposal” in the sealed envelope.

26) Individual Product Part Number should be incorporated with the Technical Proposal.

27) Summery price should be given in the Form – 01 format. Besides this, product wise and part wise detail price offer should be submitted in the Form - 02 formats.

28) Delivery period:

Please mention the delivery lead time with implementation period.

29) Submission of bill:

Bill should be submitted together with the original copies of Challan and Work Completion Certificate

duly sealed and signed by the ICT Department for payment.

30) Penalty:

In the event of delay in completion following provisions of penalty shall be applicable:

a) 0.05% of the total price for per day delay.

b) Maximum amount of total penalty will be 15% of the total price. c) 3% of submitted bill will be imposed as penalty for not supplying the full quantity

ordered, i.e. short supply.

31) Price, currency and payments:

Bidders shall submit their quotations for undertaking the job under the schedule in financial Offer to be filled in completely with all rates and amount in Bangladeshi currency.

Page 34: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 33 of 44

ii. No advance will be paid. Payment shall be made after deducting VAT, Income Tax & other Govt.

Taxes (if applicable) from the bill as per Govt. rule. Payment shall be made in the form of Payment

Order in favor of the firm(s) only after completion of the work(s) complying with all specifications,

terms & conditions. 90% of the bill will be paid after successful implementation of the solution.

Rest 10% of total value will be kept as security money and will be disbursed without any interest

after successful running of twelve months of the solution. During this period, all complaints will be

lodged with the vendor(s) and the vendor(s) must resolve those.

36) The Supplier shall not, without the Bank’s prior written consent, disclose the Contract, or any

provision thereof, or any specification, plan, drawing, pattern, sample or information furnished by

or on behalf of the Bank in connection therewith, to any person other than a person employed by

the Supplier in the performance of the Contract. Disclosure to any such employed person shall be

made in confidence and shall extend only as far as may be necessary for purposes of such

performance.

32) Within 10 days from Date of receipt of notification of award of Contract, the selected bidder(s) shall

furnish to the Bank, the Security money for an amount of 10% of the contract amount valid up to 12

months from the date of the acceptance of the contract or 12 months from the date of complete

installation & commissioning, satisfactory functioning of the entire solution and acceptance of all

the equipment under the contract whichever is later.

38) The Security money shall be payable to the Bank as compensation for any loss resulting from the

Supplier’s failure to complete its obligations on delivery & successful installation and acceptance

of all equipment under the Contract.

39) The Supplier will be entirely responsible for all applicable taxes, duties, levies, charges, license fees

in connection with delivery of products at site.

40) Tender may be marked disqualified for any one of the reasons listed herein under. Decision of the

procuring entity will be final in this regard and no appeal will be accepted:

Page 35: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 34 of 44

i) Failure to put signature at proper place of every page and failure to put signature or mark with

seal where required.

ii) Failure to comply with Specifications annexed herewith.

iii) Any false statement or evidence of fraud.

iv) Failure to comply with any of the instructions for presenting the Tender.

v) Price quoted in words and figures, does not tally each other.

vi) Failure to furnish requisite Earnest Money.

vii) Failure to submit Tender before the specified closing time.

viii) If provide any wrong information.

41) General instruction:

With the submission of the bid, the bidder acknowledges that he had carefully examined in detail the

tender documents, terms & conditions and information related to schedules, specifications of the

system and requirements of the related job facilities.

i. In the event of supply of any items, which does not match with the required specification,

quantity or sample’s quality or is of substandard quality, the Bank reserves the right for

outright rejection of the goods, and the vendor will have to take back those at its own cost and

will replace with acceptable quality within 30 (thirty) days from the date of rejection.

i. After issuance of the Notification of Award or Work Order the vendor shall submit a written

undertaking on non-judicial stamp paper of Tk. 300/- that the vendor will accomplish the job as

per terms and conditions mentioned in the tender schedule.

ii. If the bidder provides any false certificate and make fraud and forgery at the time of bid

submission, the pay order submitted by the bidder as Earnest Security Money to Bank Asia

Limited may be forfeited.

iii. The Bank reserves the right to impose penalty or not to take delivery of the goods for any type

of substandard goods supplied by vendor.

iv. The Bank may increase/decrease the quantity of ordered item(s) to be installed. The Bank

reserves the right to calculate the total price on the basis of the approved unit cost for the

additional job. Vendor will have to execute further order(s) for installation of additional quantity

as per requirements of Bank.

Page 36: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 35 of 44

v. Bank can ask or request to submit all the relevant documents related with production and

import (i.e. All shipping documents attested by L/C opening bank) for further clarification and

settlement of the bill.

vi. Bank Asia Limited reserves the right to divide the quantity among the vendors as per lowest

quoted unit rate in the tender. The total bill will be calculated as per aforesaid rate upon

acceptance of the award of notification or work order by the vendor(s).

vii. Manipulation or any kind of unusual approach or failure to submit the proposal/offer within

stipulated time frame will be treated as “Disqualification” to attend in the bidding.

Page 37: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 36 of 44

Page 38: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 37 of 44

7 FINANCIAL PROPOSAL DETAILS

Table 1: Total financial summary

Description of items Qty. Unit Cost Total Cost

AMC

ITEM 1: SWG with BWM 01 4 5 6 7

ITEM 2: ADC 01

Note: Quoted price must be included, delivery, installation, configuration, implementation etc. cost,

VAT, Taxes & all other duties, fees/charges as applicable. If require bidder shall provide break-down price as like table 2 along with the above mentioned bundle pricing format.

AMC Cost Applicable (If any) after Warranty Period

Item no. Description of items Unit of Measure Unit Price (in BDT)

ITEM 1 Secure Web Gateway with Bandwidth Manager

(SWG with BWM) Per Year

ITEM 2 Application Delivery Controller (ADC)

Note: Quoted price must include VAT, Taxes & all other charges/cost if any associate with.

Page 39: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 38 of 44

Page 40: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 39 of 44

7 BID FORM, BG & OTHERS

BID FORM

Having examined the terms, conditions, instructions and specifications included in the tender schedule,

we the undersigned offer to Secure Web Gateway with Bandwidth Manager and Application Delivery Controller” of Bank Asia Limited in conformity with the said conditions and specifications.

We undertake, if our bid is accepted, to complete the “Secure Web Gateway with Bandwidth Manager and Application Delivery Controller” for Bank Asia Limited within ……………….………………

(……………………………….) days after receiving and accepting the work order. We agree to abide by this

tender document which will remain valid up-to…………………………………………... 2017.

Until a formal contract is prepared and executed, this bid together with your written acceptance thereof

in your notification of award or work order shall constitute a binding contract between us.

Dated this ………………………………………day of ……………………………………………………………………………………..2017.

---------------------------------------- ----------------------Seal with Signature of the authorized official Round seal of the company

Witness with address:

1.

2.

Page 41: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 40 of 44

Company Information

Company Contact Details

Company Name

Address Office:

Telephone No

Fax

Contact Person &

Designation

Mobile Phone No.

Email

REQUIRED INFORMATION

Trade License No.

TIN No.

VAT Registration No.

Page 42: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 41 of 44

Undertaking

Supply and Implementation of “Secure Web Gateway with Bandwidth Manager and Application

Delivery Controller”.

We………………………………………………………………………………………..............hereby

Undertake to supply the item at the price quoted above. We confirm that the price will remain valid

up-to --------------------, 2016.

__________________ ___________________ Signature Date

SEAL:

Earnest Money for Supply and Implementation of “Secure Web Gateway with Bandwidth Manager and

Application Delivery Controller” of Bank Asia Limited.

Pay Order No. & Date

Amount

Issuing Bank

Branch

Signature : ____________________ Date: __________________

Name :

Seal :

Page 43: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 42 of 44

Bank Asia Limited

Corporate Office

Rangs Tower

68 Purana Paltan

Dhaka-1000.

Subject: Bank Guarantee No. ……………….. dated for BDT __________.00

(______________________________) only issued on account of

‘______________________________________’.

r Sir,

We, ________ Bank Limited, ____________ Branch, Dhaka-________, having its registered office at

________________________________, on behalf of our client ‘________________’, having its office at

_________________________, Dhaka, do hereby stand for a surety for __________________.00

(____________________________) only against your letter dated _________________ under the

following conditions:

1) To make unconditional payment of BDT _____________________.00

(___________________________) only to you on your demand without any question and

without any reference of our client whatsoever.

2) The Guarantee will remain valid up to the date of its issuance i.e. up to ____________________.

3) The period of Guarantee is further extendable if desired by our client and agreed upon by you

and in that case we shall intimate you before expiry of the period and mentioning the period of

extension.

Ref: Issue Date: ______________ Amount: BDT ___________ Expiry Date: _____________

Page 44: ICT DIVISION BID SCHEDULE FORVersion2).pdfNGWF & Log Management system with Cyber Security ... “Secure Web Gateway with ... The bidder is expected to examine carefully the contents

ICT DIVISION Rangs Tower, 68 Purana Paltan (8th Floor)

Dhaka-1000

NGWF & Log Management system with Cyber Security related Appliances and Software for Bank Asia Page 43 of 44

4) The Guarantee shall remain in force on us and is irrevocable and confirmed.

5) The liabilities under this Guarantee is restricted up to BDT _______________.00

(__________________) only. Any claim under this Guarantee must be presented before us on or

before the date of expiry of this Guarantee. No claim will be entertained by us after expiry of

this Guarantee if not extended beforehand.

6) After expiry of this Guarantee we shall be released and discharged from all liabilities within this

Guarantee and the same shall stand null and void forthwith.

Authorized signature & Seal Authorized signature & Seal