Provision of Conditional Access and Device Posture Assessment

Tender description

UCD IT Services are looking to introduce a solution to control access to university resources by ensuring that end user devices meet minimum security requirements. As an alternative to a device management, IT Services has identified the following key requirements relating to the security and protection of end user devices in our environment. • The ability to apply, assess, and enforce security controls on end user devices. This is to ensure that key security controls such as device encryption, device is configured with latest critical OS and software patches, device has an up-to-date antivirus solution installed and running, and in the case of mobile devices that access is protected by a PIN or a password. The solution must integrate seamlessly with the following products, services, and applications – Cisco ASA VPN, Cisco AnyConnect Client, & our Single Sign On (SSO) service. Lot 1: UCD IT Services provides all central IT applications, support and infrastructure for staff and students throughout the University. As part of our annual refresh of critical Infrastructure equipment, UCD IT Services have the following requirement: UCD IT Services are looking to introduce a solution to control access to university resources by ensuring that end user devices meet minimum security requirements. UCD supports a diverse device environment which is best described as Bring Your Own Device (BYOD). As an alternative to a device management, IT Services has identified the following key requirements relating to the security and protection of end user devices in our environment. • The ability to apply, assess, and enforce security controls on end user devices. This is to ensure that key security controls such as device encryption, device is configured with latest critical OS and software patches, device has an up-to-date antivirus solution installed and running, and in the case of mobile devices that access is protected by a PIN or a password. The solution must integrate seamlessly with the following products, services, and applications – Cisco ASA VPN, Cisco AnyConnect Client, & our Single Sign On (SSO) service. UCD’s SSO service is managed and hosted by HEAnet utilising their Shibboleth Identity Provider (IdP) service. UCD’s hosted IdP service integrates with MIRACL, Azure MFA & Duo MFA. Please refer to the tender documents.