Lotul 1 Paravan de protecție (Next-Generation Firewall)

Caracteristica Cerinte tehnice minimale
Type Next-Generation Firewall, cu 36 luni suport incluse care să acopere cerințele de mai jos.
Throughput: Threat Defense Software 2.3 Gbps
IPS Throughput 2.6 Gbps
Interfaces 8 x RJ45, 4 x SFP
Throughput: Firewall (FW) + Application Visibility and Control (AVC) (1024B) 2.3 Gbps
Throughput: FW + AVC + Intrusion Prevention System (IPS) (1024B) 2.3 Gbps
Maximum concurrent sessions, with AVC 200K
Maximum new connections per second, with AVC 15K
Transport Layer Security (TLS) 850 Mbps
IPSec VPN throughput (1024B TCP w/Fastpath) 1,2 Gbps
Maximum VPN Peers 150
Device Manager (local management) Yes
Centralized management Centralized configuration, logging, monitoring, and reporting are performed by the Threat Defense Manager (FMC) or, alternatively, from the cloud with Defense Orchestrator
AVC Standard, supporting more than 4000 applications, as well as geolocations, users, and websites
Open-source application detectors Standard
Security Intelligence Standard, with IP, URL, and DNS threat intelligence
IPS Available; can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC) intelligence
Malware Defense for Networks Available; enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks.
Integrated threat correlation with AMP for Endpoints is also optionally available
Malware Analytics sandboxing Available
URL filtering: number of categories More than 80
URL filtering: number of URLs categorized More than 280 million
Automated threat feed and IPS signature updates Yes: class-leading Collective Security Intelligence
Stateful inspection firewall throughput1 4.5 Gbps
Stateful inspection firewall throughput (multiprotocol)2 2.5 Gbps
Concurrent firewall connections 200,000
New connections per second 75,000
IPsec VPN throughput (450B UDP L2L test) 1 Gbps
Maximum VPN Peers 150
Security contexts (included; maximum) 2; 5
High availability Active/active and Active/standby
High availability and clustering Active/standby
Scalability VPN Load Balancing
Adaptive Security Device Manager Web-based, local management for small-scale deployments
Form factor (rack units) 1RU
Integrated I/O, min 8 x RJ-45, 4 x SFP
Integrated network management ports 1 x 10M/100M/1GBASE-T Ethernet port (RJ-45)
Serial port 1 x RJ-45 console
USB, min 1 x USB 3.0 Type-A (500mA)
Storage, min 1 x 200 GB
Power supply configuration +12V
AC input voltage 100 to 240V AC
AC maximum input current < 2A at 100V, < 1A at 240V
AC maximum output power 100W
AC frequency 50 to 60 Hz
AC efficiency >85% at 50% load
Fans 1 integrated fan2
Noise 31.7 dBA @ 25C, 56.8 dBA at highest system performance
Rack mountable Yes. Fixed mount brackets included (2- post).
Humidity: operating 90% noncondensing
Humidity: nonoperating 10 to 90% noncondensing
Regulatory compliance Products comply with CE markings per directives 2004/108/EC and 2006/108/EC
Safety ● UL 60950-1
● CAN/CSA-C22.2 No. 60950-1
● EN 60950-1
● IEC 60950-1
● AS/NZS 60950-1
● GB4943
EMC: emissions ● 47CFR Part 15 (CFR 47) Class A (FCC Class A)
● AS/NZS CISPR22 Class A
● CISPR22 CLASS A
● EN55022 Class A
● ICES003 Class A
● VCCI Class A
● EN61000-3-2
● EN61000-3-3
● KN22 Class A
● CNS13438 Class A
● EN300386
● TCVN7189
EMC: immunity ● EN55024
● CISPR24
● EN300386
● KN24
● TVCN 7317
● EN-61000-4-2, EN-61000-4-3, EN-61000-4-4, EN-61000-4-5, EN-61000-4-6, EN-61000-4-8, EN61000-4-11
Licente 1. 1. Licență Threat Defense Threat, Malware and URL cu 1 ani subscripție..
2. Licență perpetuă pentru acces VPN securizat pentru 10 User.
- Oferta va include instalarea, configurarea despozitivului ca standby secondary device (High Availability) si darea in exploatare a produsului ofertat, inclusiv transferul de cunoștințe către Beneficiar, pentru a permite celor instruiți să preia menținerea și configurarea ulterioară a echipamentului ofertat, în conformitate cu necesitățile.
- Pentru aceasta ofertantul va demonstra capacitatea sa prin prezentarea următoarelor:
• Ofertantul va prezenta Certificat al inginerului tehnic din cadrul companiei ofertante pe produsul ofertat și inclusiv certificatul Cisco Certified Network Associate Routing and Switching sau echivalentul.
- Ofertantul va prezenta Autorizare(MAF) de la producător, actul care atestă dreptul oficial al reprezentantului pe teritoriul R. Moldova de a livra bunuri/lucrări/servicii.
- Termen de garanție – 1 an;