Next Generation Firewall

Tender description

The university requires a solution that provides traditional firewall features including stateful inspection, packet filtering, Network/Port Address Translation (NAT/PAT) and Virtual Private Network (VPN) termination. In addition Next Generation Firewall features that inspect the payload will be required including the ability to identify and control applications irrespective of port number and block sophisticated attacks by enforcing security policies at the application level. The aim is to prevent the growing number of application attacks taking place at layers 4-7 on the OSI network stack. The flexibility of the solution to deliver full IPS to identify and protect the network from spyware, phishing, pharming, trojans, worms, and other malware attacks and zero day exploits is also important and UCC will require the option to enable these features. The initial requirement is for two Next Generation Firewall appliances located in separate data centres on campus operating in a resilient or highly available mode.