منافسة عامة
✓ مرسّى
تأمين أجهزة البنية التحتية التقنية لمواقع الحج الموسمية
الأمن العام (التقنية والذكاء الاصطناعي)
رقم المنافسة
230939011945
المعرّف
#672592
عنوان الضمان الإبتدائى
مجمع الأمن العام بالوشم بمدينة الرياض بمقر الإدارة العامة للمشتريات والعقود
الغرض من المنافسة
توريد وتركيب أجهزة شبكية ونقاط شبكية للمواقع الموسمية التابعة للأمن العام بموسم الحج
| التاريخ | ميلادي | هجري |
|---|---|---|
| تاريخ النشر | 2023/10/25 13:09 | — |
| آخر موعد للاستفسارات | 2023/11/22 | 1445-05-08 |
| آخر موعد تقديم العروض | 2023/11/27 09:00 | 1445-05-13 |
| موعد فتح العروض | 2023/11/27 10:00 | 1445-05-13 |
| موعد فحص العروض | — | — |
| التاريخ المتوقع للترسية | 2024/02/18 | 1445-08-08 |
| تاريخ بدء الأعمال | 2024/02/25 | 1445-08-15 |
| تاريخ خطاب تأكيد المشاركة | — | — |
| بداية إرسال الأسئلة | 2023/11/21 | 1445-05-07 |
| أقصى مدة للإجابة | 10 يوم | |
| مكان فتح العروض | الإدارة العامة للمشتريات والعقود بمجمع الأمن العام بالوشم بمدينة الرياض | |
| مدة الوقفة | 5 يوم |
موقع التنفيذ
مجال التصنيف
الأنشطة
- • تقنية المعلومات
جدول 1 جدول الكميات
| البند | الكمية | وصف البند | المواصفات | وحدة القياس | الرقم التسلسلي | الرمز الإنشائي | منتج من القائمة الإلزامية |
|---|---|---|---|---|---|---|---|
| 1 | 90 | موجه شبكة راوتر مدمج (SD-WAN) | Small Routers with 8 Gigabit Ethernet LAN ports, two Gigabit Ethernet WAN/SFP ports, one pluggable LTE module, and one embedded access point. withDNA Essentials On Premise License, supporting Agg 50M, for 3Years. In addition to Embedded Support DNA Essentials On Premise License for 3 Years. Must include a module that has 4 Ports 802.3at POE Module (4 POE or 2 POE+) Support 2 integrated GE WAN combo (copper/fiber) ports 1 integrated RJ-45 console port Smart Net Service from the vendor covering 8 days, 5 hours with RMA Next Business Day SLA for 3 years Must have DRAM/flash of 8 GB/16 GB Must support the below: • Number of ACLs per system of 4K • Number of IPv4 ACEs per system of 10K • Number of IPv4 routes of 280K • Number of IPv6 routes of 260K • Number of NAT sessions of 100K • Number of firewall sessions of 20K • Number of VRFs of 1K Supports Type A USB 2.0 port for convenient storage pluggable 5G module, LTE technology (CAT 4, CAT6, CAT18), LTE USB dongle (CAT4) Must Have Embedded access point (802.11ax wireless LAN) Must Support the existing SDWAN solution deployed in Public Security, from the same vendor. Routers Can be deployed in many different environments where space, heat dissipation, and low power consumption are critical factors Must Support SD-WAN IPsec throughput (1400 bytes) of 1889 Mbps Must Support SD-WAN IPsec throughput (IMIX) of 465 Mbps Must Support SD-WAN overlay tunnels of 200 Must have High-performance multicore processors support high-speed WAN connections. The data plane uses a flow processor that delivers Application-Specific Integrated Circuit (ASIC)-like performance that does not degrade as services are added Must Support protocols including IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast Sparse Mode (PIM SM), PIM Source-Specific Multicast (SSM), Resource Reservation Protocol (RSVP), Discovery Protocol, Encapsulated Remote Switched Port Analyzer (ERSPAN), IOS IP Service-Level Agreements (IPSLA), Call Home, IOS Embedded Event Manager (EEM), Internet Key Exchange (IKE), Access Control Lists (ACL), Ethernet Virtual Connections (EVC), Dynamic Host Configuration Protocol (DHCP), Frame Relay (FR), DNS, Locator ID Separation Protocol (LISP), Hot Standby Router Protocol (HSRP), RADIUS, Authentication, Authorization, and Accounting (AAA), Application Visibility and Control (AVC), Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, Multiprotocol Label Switching (MPLS), Layer 2 and Layer 3 VPN, IPsec, Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE 802.1ag, and IEEE 802.3ah. Supports the below types of encapsulations: Generic Routing Encapsulation (GRE), Ethernet, 802.1q VLAN, Point-to-Point Protocol (PPP), Multilink Point-to-Point Protocol (MLPPP), Frame Relay, Multilink Frame Relay (MLFR) (FR.15 and FR.16), High-Level Data Link Control (HDLC), Serial (RS-232, RS-449, X.21, V.35, and EIA-530), and PPP over Ethernet (PPPoE). Must support the below for traffic management:Quality of Service (QoS), Class-Based Weighted Fair Queuing (CBWFQ), Weighted Random Early Detection (WRED), Hierarchical QoS, Policy-Based Routing (PBR), Performance Routing (PfR), and Network-Based Application Recognition (NBAR). Support Encryption: DES, 3DES, AES-128 or AES-256 (in CBC and GCM modes) Support Authentication: RSA (748/1024/2048 bit), ECDSA (256/384 bit); Integrity: MD5, SHA, SHA-256, SHA-384, SHA-512 | جهاز | 1 | 0 | |
| 2 | 70 | موزع شبكة (24 منفذ) (سويتش) | The switch is a 24-port 1G copperwith fixed 4x1G SFP uplinks, Stackable, PoE+ Network Essentials. With one600W AC Power supply. With Stack Module and Cable. Must Support redundant Power supply in the future Smart Net Service from the vendor covering 8 days, 5 hours with RMA Next Business day SLA for 3 years Support switching capacity of 56 Gbps Support stacking bandwidth can reach up to 80Gbps and Forwarding rate with Stacking of 101 Mpps Have DRAM of 2 GB and Flash Memory of 4 GB Total number of MAC addresses that can be supported is up to 16,000 Total number of IPv4 routes (ARP plus learned routes) that can be supported is 11,000 (8,000 direct routes and 3000 indirect routes) Support Multicast routing scale up to 1000 Support Packet buffer of 6 MB buffer FNF entries: 16,000 flow Support Forwarding rate up to 41.66 Mpps and 101 MppsForwarding rate with stacking Switching Features Must be Supported: Spanning Tree Protocol (STP), Rapid STP (RSTP), VLAN Trunking Protocol (VTP), trunking, Private VLAN (PVLAN), dynamic voice VLAN, IPv6, PnP, Discovery Protocol, 802.1Q tunneling (Q-in-Q), Routed Access – OSPF and RIP, Policy-Based Routing (PBR), Virtual Router Redundancy Protocol (VRRP), Internet Group Management Protocol (IGMP), PIM Stub, Weighted Random Early Detection (WRED), First Hop Security (FHS), 802.1X, MACsec-128, Control Plane Policing (CoPP), TrustSec® SGT Exchange Protocol (SXP), IP SLA Responder, SSO, EIGRP Stub, Microflow Policing, Class-Based Weighted Fair Queuing (CBWFQ), hierarchical QoS (H-QoS), Application Reporting, Syslog, SNMP Can Support advanced switch capabilities and scale without hardware change: BGP, EIGRP, Hot Standby Router Protocol (HSRP), IS-IS, Bootstrap Router (BSR), Multicast Source Discovery Protocol (MSDP), Bidirectional PIM (PIM-BIDIR), Label Switched Multicast (LSM), IP SLA, Full OSPF Can Support Network segmentation such as VPN Routing and Forwarding (VRF), Virtual Extensible LAN (VXLAN), Locator/ID Separation Protocol (LISP), TrustSec, SD-Wireless, Multiprotocol Label Switching (MPLS), Layer 3 VPN (L3VPN), Multicast VPN (mVPN) Optimized network deployments with mDNS gateway Can support Automation via Netconf/YANG, PnP Agent, ZTP/Open PnP Can support Advanced automation using Containers, Python, IOS Embedded Event Manager (EEM), Autonomic Networking Infrastructure Telemetry and visibility using Streaming telemetry, sampled NetFlow, Switched Port Analyzer (SPAN), Remote SPAN (RSPAN) Can Support advanced telemetry and visibility with Flexible NetFlow and Wireshark without the need to change the hardware High availability and resiliency using NSF and Graceful Insertion and Removal (GIR)Can support security using MACsec-256 with additional license Support SDN without the need to replace the hardware Support data stacking | جهاز | 2 | 0 | |
| 3 | 30 | موزع شبكة (48 منفذ) (سويتش) | The switch is a 48-port 1G copperwith fixed 4x1G SFP uplinks, Stackable, PoE+ Network Essentials. With one600W AC Power supply. With Stack Module and Cable. Must Support redundant Power supply in the future Smart Net Service from the vendor covering 8 days, 5 hours with RMA Next Business day SLA for 3 years Support switching capacity of 56 Gbps Support stacking bandwidth can reach up to 80Gbps and Forwarding rate with Stacking of 101 Mpps Have DRAM of 2 GB and Flash Memory of 4 GB Total number of MAC addresses that can be supported is up to 16,000 Total number of IPv4 routes (ARP plus learned routes) that can be supported is 11,000 (8,000 direct routes and 3000 indirect routes) Support Multicast routing scale up to 1000 Support Packet buffer of 6 MB buffer FNF entries: 16,000 flow Support Forwarding rate up to 41.66 Mpps and 101 MppsForwarding rate with stacking Switching Features Must be Supported: Spanning Tree Protocol (STP), Rapid STP (RSTP), VLAN Trunking Protocol (VTP), trunking, Private VLAN (PVLAN), dynamic voice VLAN, IPv6, PnP, Discovery Protocol, 802.1Q tunneling (Q-in-Q), Routed Access – OSPF and RIP, Policy-Based Routing (PBR), Virtual Router Redundancy Protocol (VRRP), Internet Group Management Protocol (IGMP), PIM Stub, Weighted Random Early Detection (WRED), First Hop Security (FHS), 802.1X, MACsec-128, Control Plane Policing (CoPP), TrustSec® SGT Exchange Protocol (SXP), IP SLA Responder, SSO, EIGRP Stub, Microflow Policing, Class-Based Weighted Fair Queuing (CBWFQ), hierarchical QoS (H-QoS), Application Reporting, Syslog, SNMP Can Support advanced switch capabilities and scale without hardware change: BGP, EIGRP, Hot Standby Router Protocol (HSRP), IS-IS, Bootstrap Router (BSR), Multicast Source Discovery Protocol (MSDP), Bidirectional PIM (PIM-BIDIR), Label Switched Multicast (LSM), IP SLA, Full OSPF Can Support Network segmentation such as VPN Routing and Forwarding (VRF), Virtual Extensible LAN (VXLAN), Locator/ID Separation Protocol (LISP), TrustSec, SD-Wireless, Multiprotocol Label Switching (MPLS), Layer 3 VPN (L3VPN), Multicast VPN (mVPN) Optimized network deployments with mDNS gateway Can support Automation via Netconf/YANG, PnP Agent, ZTP/Open PnP Can support Advanced automation using Containers, Python, IOS Embedded Event Manager (EEM), Autonomic Networking Infrastructure Telemetry and visibility using Streaming telemetry, sampled NetFlow, Switched Port Analyzer (SPAN), Remote SPAN (RSPAN) Can Support advanced telemetry and visibility with Flexible NetFlow and Wireshark without the need to change the hardware High availability and resiliency using NSF and Graceful Insertion and Removal (GIR) Can support security using MACsec-256 with additional license Support SDN without the need to replace the hardware Support data stacking | جهاز | 3 | 0 | |
| 4 | 20 | SFP 1G Single Mode | SFP transceiver module for SMF, 1300-nm wavelength, 10km, extended operating temperature range and DOM support, dual LC/PC connector | قطعة | 4 | 0 | |
| 5 | 30 | Multimode 1G SFP | SFP transceiver module for MMF, 850-nm wavelength, extended operating temperature range | قطعة | 5 | 0 | |
| 6 | 10 | Multimode 10G SFP+ | SFP+ transceiver module for MMF, 850-nm wavelength | قطعة | 6 | 0 | |
| 7 | 6 | Multimode 40G QSFP | QSFP transceiver module for MMF, 850-nm wavelength, LC | قطعة | 7 | 0 | |
| 8 | 90 | لوحة نقاط الشبكة 24 منفذ | The Patch Panels shall be modular in design, capable of utilizing individual modules, ganged style adaptors (pre-terminated) or pre-populated configurations. The solution shall provide an option for Patch Panels that are either AIM (Intelligent) Enabled or Upgradeable later. The following provides the requirements and options that should available for the design: • Available in 24-port Configurations in 1U and 2U sizes as standard. • Available in Angled and Standard Configurations. • Available in High Density Configurations –1U • Compatible with 19 inch mounting hardware as per IEC 60297. • Compliant with IEC 60603-7-4. • Integral termination managers at the rear of the panel shall be provided. • The panel shall provide adequate space for labeling. • 3rd Party test certification shall be provided to show component compliance to the latest ISO and TIA standards. | عدد | 8 | 0 | |
| 9 | 1500 | نقاط شبكة مع ملحقاتها | LAN Cabling Specifications: The Structured Cabling Distribution System design will be based on the requirements and facilities drawings, which will be supplied to the Bidder. The Bidder, with permission, shall have an opportunity to walk through the premises prior to submission of the proposal if necessary. The Horizontal Cable architecture is to be based on Category 6 (CAT 6) 4-pair copper system and runs should not exceed 90 meters. A Fiber-optic can be used as necessary to connect communications closets (for multiple floors/buildings). Number of frames, outlets, and other LAN infrastructure components must be designed for at least 15% spare capacity per area. I. Distribution Frames: Contractor will design, procure and install all required Distribution Frames. The cross-connect patch field shall be mounted in the available cabinets. More cabinets may be installed as needed. Distribution Frames will be located on each floor in an Interconnect Distribution Frame (IDF) to ensure horizontal cable runs do not exceed 90 meters. The IDF shall house the data distribution equipment, fiber terminations of the riser cable and the horizontal cables associated with the Information Outlet’s (IO’s) assigned to that floor. Each IDF shall be connected to a Main distribution Frame (MDF) via the intra-building fiber backbone. All patch panels should be modular. Each floor should be designed to house one equipment room. Each equipment room should be located so that the maximum horizontal cable distance between closets, and the farthest IO, is limited to 90 meters or less as specified in ETA/TIA 568 A and the appropriate clauses of ISO DIS 11801. Due to the possible variations in designs, contractor must identify and recommend any changes in the layout of wiring closets that best utilize the recommended implementation. J. Information Outlets (IO’s): 1. Must have high performance Cat-6 socket(s) 4-pair modular RJ-45 interface(s). 2. Must be mounted in existing floor distribution boxes in 45-degree faceplates. 3. Each IO may be cabled with one, two or three (4-pair) Unshielded Twisted Pair (UTP), high speed Cat-6 cable. K. Installation Methodology, Documentation, Quality, & Standards: 1. EIA/TIA 568A and the ISO 11801 shall be considered as Minimum of performance specifications. Special consideration shall be given to higher performing cables in terms of Near End Cross talk. 2. The system will be based on open distribution architecture so that existing equipment and facilities, as well as future equipment for multiple vendors, can be supported by the proposed system. 3. The cabling system must support the high-speed data at any of the work areas and must support transmission of various protocols and LAN standards. 4. All system products and components shall be from a well-known manufacturer. Proposal should include manufacturer name and country where products were made. 5. Materials and equipment shall be the standard products of a manufacturer regularly engaged in the manufacture of structured cabling products and not custom designed especially for this project. 6. All systems and components shall have been thoroughly tested and proven in actual use/function for at least 1 year prior to proposal. 7. Under no circumstances shall a contractor permit any horizontal UTP cable run to contain more than 3 cm of untwisted wire. This includes the sum of the untwisting from both the cable terminations at the patch panel and the I/O socket. Manual re-twisting of wire is not permitted. Under no circumstances shall splices of UTP Cable be permitted. 8. Upon completion of the installation, the contractor will furnish a complete set documentation including, but not limited to, Backbone (riser) & horizontal diagrams, Technical description, labeling, color coding, and as-built drawings on proper papers showing cable routes and termination points based on preliminary drawings provided. 9. All equipment will be mounted in the available Communication Cabinets in each IDF and Communication Cabinets in MDF. Sufficient space shall be provided to allow the installation of active components. All Cabinets must include front glass door, solid doors to the rear & with key set (and a master key set for all delivered Cabinets), power strip and ventilation fan set. 10. Installation of all cables, patch cords, patch panels, IO's, and Comm. Cabinets shall be in accordance with applicable sections of the current edition of the applicable local codes for signaling systems, specifically EIA/TIA 568 B. 11. All wiring that is exposed to potential electrical hazardous voltages and currents must be protected with the appropriate heat coils and sneak current protection as prescribed in the appropriate electrical code for Saudi Arabia. In addition, the contractor must comply with all regulations set forth by the US National Electrical Code (NEC) Article 250. Cables shall not be installed in the same cable tray, riser or floor trench compartment with AC power. 12. All cables not installed in conduit, floor trenches or raceways shall be properly secured and neat in appearance. 13. Cables shall not be stressed such that twisting, stretching or kinking occurs. 14. Cable shall not run through structural members or in contact with pipes, ducts or other potentially damaging items. 15. Cables shall be terminated; no cable shall contain un-terminated elements. 16. As a Minimum of , each IO shall be labeled as to its function and a unique number to identify the cable link. 17. UTP and fiber optic cables shall have a Minimum of 6 inches of slack cable loosely coiled into the outlet boxes. Minimum of manufactures bend radius for each type of cable shall not be exceeded. 18. Patch Panels shall be modular and mounted in equipment racks with sufficient modular jacks to accommodate the installed cable plant. It is recommended that cable guides shall be provided above and below each panel. L. Testing: 1. Contractor must submit an outline of the recommended test criteria prior to the installation of the cable system with a complete detailed acceptance test procedure covering the proposed Structured Cabling Distribution System. 2. Contractor must test for grounds, shorts, crosses and reverses, attenuation measurements for signal loss, Optical Time Domain Reflecto-meter test etc. 3. Each circuit leg and complete circuit shall be tested for insertion loss at 650 and 1300 mm using a light source similar to that used for the intended communications equipment. High-resolution optical time domain Reflecto-meter tests shall be preformed for one end of each fiber. Scale of the OTDR trace shall be such that the entire circuit appears over a Minimum of 80 percent of the X-axis. 4. When measurement is made on Category 5e links by suitable Tester, the following measurements must be performed: 5. Wire map, PSNEXT, Length, FEXT, Delay, ELFEXT, Delay Skew, PSELFEXT, Attenuation, Return loss, NEXT. 6. Contractor must give printed reports showing that ALL nodes have passed all required tests. Then a randomly selected 20% of nodes shall be tested with NIC representatives to verify the above reports. M. Cabling Warranty: For the cabling, the contractor will offer a Minimum of a 15 year product warranty for all passive components and a 15 year warranty for systems assurance. Contractor will provide a clear definition of the benefits of such a warranty. All associated paperwork, including a copy of the registration document and certificates, must be provided. A) UTP Part: - The UTP part is divided into two parts: - Part 1) Cabinet Area (wiring Closet):- The cabinet label for Building should be written as: - (Building Name - Floor# - Area name) Part 2) Node Area (Work Area): - The labeling scheme for Node Area is: - (Cabinet Label - Patch Panel Number – Port Number) Cabinet Label: - As in UTP (Part 1) above (Building Name - Floor # - Area Name). Port Number: - It is the port number in the PATCHMAX Panel. The ranges will be 1 to 24. Notes for UTP Labels: - Yellow numbered labels should be used in terminated cables in PATCHMAX Panel. Black Labels should be used for numbering PATCHMAX panel. Labels should be placed in the bottom right corner of the PATCHMAX Panel and nodes. Transparent tape should be used to fix black labels onto the cabinets and or nodes. B) Fiber Part: - The outdoor fiber and the indoor fiber cables label should be written as: - (Source Cabinet Name Label – Destination Cabinet Name Label) Source Cabinet Name Label: - As in UTP (Part 1) above (Building Name - Floor # - Area Name). Destination Cabinet Name Label: - As in UTP (Part 1) above (Building Name - Floor # - Area Name). | نقطة شبكية | 9 | 2114 | 1 |
| 10 | 90 | كابينة | Rack & PDU: 1. 15U 750x600 x600 mm Enclosure with Sides Black Perforated from front and back. 2. Rack PDU 2G, Metered 230V as per site requirement. 4. 3 years Full warranty. 5. Cable Organizer. 6. Cable Management Rings. 7. cooling fans | عدد | 10 | 0 | |
| 11 | 40 | موجه شبكة راوتر صغير | 1RU w/ 1 NIM slot and 4x 1 Gigabit Ethernet WAN ports. With HSEC license and DNA Essential On-Prem License for 3Y - upto 200M (Aggr, 400M) Must Support: • IPv4 forwarding throughput (1400 bytes) Up to 3.8 Gbps • IPsec throughput (1400 bytes, clear text) Up to 1Gbps • SD-WAN IPsec throughput (1400 bytes, clear text) Up to 1Gbps • SD-WAN overlay tunnels scale of 2500 • Number of Virtual Route Forwarding (VRF) instances of 4000 Router Must have 8GB Memory Smart Net Service from the vendor covering 8 days, 5 hours with RMA Next Business day SLA for 3 years Must use an Intel x86 CPU with 8 GB memory default and have an integrated onboard 8-GB flash and are not upgradable. Storage can be upgraded to 16G, 32G USB and 600G Built-in end-to-end segmentation (VPNs), ZBFW, PKI, DNA Layer Security, SIG Support Centralized control through the SDWAN Controller The proposed solution should contain the license for 100 Mbps Must have 4 built-in Ethernet WAN ports: Two Ethernet ports are Small Form-Factor Pluggable (SFP) and two are RJ45 ports, enabling fiber as well as copper connectivity Support one network interface module The router must support voice ports FXO whenever needed. The router must support the SRST feature and configure it as a backup for the existing call manager. The router should support up to 1 Gbps for non-SD-WAN IPv4 forwarding throughput. Support Cat18 Module for advanced LTE and 5G ready for future. Must have an embedded RFID tag that holds the serial number and product ID for easy asset and inventory management using commercial RFID readers. Must be 1RU Support Dynamic routing: OSPF,EIGRP, BGP with the functionality that the controller feature support. Support Routing table entry of 4M routes for IPv4 and IPv6 with a memory upgrade. IPSec Connection with AES-256 bit Support VRRP & HSRP Gateway Redundancy Support Forward Error Correction (FEC) both packet parity and packet duplication and support NAT Support multicast functionality Auto-RP or Static RP and IGMPv1 and IGMPv2 Support TACAC+, Radius for authentication to the device. Support 802.1Q Encapsulation Support IPv4, IPv6, static routes, OSPF, EIGRP, BGP, Overlay Management Protocol (OMP), Application Aware Routing (AAR), Traffic Engineering, service insertion, zero trust, whitelisting, tamper-proof module, DTLS/TLS, IPsec, classification, prioritization, low latency queuing, remarking, shaping, scheduling, policing, mirroring, Multicast IPv4 support, service advertisement and insertion policy, Simple Network Management Protocol (SNMP), Network Time Protocol (NTP), DNS client, DHCP, DHCP client, DHCP server, DHCP relay archival, syslog, Secure Shell (SSH), Secure Copy (SCP), Cflowd v10 IPFIX export, IPv6 for transport side, Virtual Router Redundancy Protocol (VRRP), MPLS, NAT (DIA, service-side, overload/PAT, NAT64, etc.), NAT pools, split DNS, ACLs, BFD, NETCONF over SSH, CLI, NTP server support, BFD with service-side BGP, BGP community propagation to OMP, 6 SLA for AAR, TrustSec®/SD-Access (inline scalable group tag [SGT] propagation), custom app with Software-Defined AVC (SD-AVC), multicast AAR, dynamic on-demand tunnels, OSM, OSPFv3, route policies, multi-VRF support QoS functionality support. Application Control, Shaping, and policing, DSCP Marking, Rewrite with 16K queues. Support MACSEC and SYNCE on all the ports Firewall session up to 512K Number of Network Address Translation (NAT) sessions supported is up to 600,000 with default 8 GB, up to 2M with 32 GB | جهاز | 11 | 0 | |
| 12 | 3 | موجه شبكة راوتر متوسط | 1RU 12x 1/10GEWAN ports. With HSEC license and DNA Advantage On-Prem License for 3Y - upto 10G (Aggr, 20G) with redundant power supplies Must Support: • IPv4 forwarding throughput (1400 bytes) Up to 118Gbps • IPsec throughput (1400 bytes, clear text) Up to 84Gbps • SD-WAN IPsec throughput (1400 bytes, clear text) Up to 51Gbps • SD-WAN overlay tunnels scale of 8000 • SD-WAN IPsec Throughput (IMIX, clear text)Up to 22.6Gbps • Number of Virtual Route Forwarding (VRF) instances of 8000 Router Must have CPU with 16 GB memory default (up to 64 GB memory) for high-speed control plane processes Smart Net Service from the vendor covering 8 days, 5 hours with RMA Next Business day SLA for 3 years Must have SSD Storage with Default 32-GB eUSB for storage with optional 480-GB SSD upgrade Support Centralized control through the SDWAN Controller deployed in public security Must support th below capabilities: • Number of ACLs per system of 4000 • Number of IPv4 ACEs per system of 47K • Number of IPv4 Routes of 4M w/ default 16GB • Number of IPv6 Routesof 4M w/ default 16GB • Number of Queues of 256K • Number of NAT Sessions of 12M • Number of Firewall Sessions of 6M • Number of VRFs of 8000 Must support security features including: Built-in end-to-end Segmentation (VPNs), ZBFW, PKI, DNS Layer Security, Security Internet Gateway (Umbrella, Zscaler), ALG for ZBFW Must Support: Encryption: AES-256 (in CBC and GCM modes), Internet Key Exchange (IKE), PKI Authentication: AAA, RSA (2048 bit), ESP-256-CBC, HMAC-SHA1, ECDSA (256/384 bit) Integrity: SHA-1, SHA-2 Must Support: Quality of Service (QoS), Forward Error Correction (FEC), COS Marking, Weighted Random Early Detection (WRED), Hierarchical QoS, Policy-Based Routing (PBR), Network-Based Application Recognition (NBAR), Software Defined Application Visibility and Control (SD-AVC), per tunnel QoS, Cloud onRamp for SaaS, Enhanced Office 365 traffic steering, Direct Internet Access, Flexible Netflow (FnF) Application Experience Supported: Quality of Service (QoS), Forward Error Correction (FEC), COS Marking, Weighted Random Early Detection (WRED), Hierarchical QoS, Policy-Based Routing (PBR), Network-Based Application Recognition (NBAR), Software Defined Application Visibility and Control (SD-AVC), per tunnel QoS, Cloud onRamp for SaaS, Enhanced Office 365 traffic steering, Direct Internet Access, Flexible Netflow (FnF) Encapsulations Supported: Generic Routing Encapsulation (GRE), Ethernet, 802.1q VLAN Must have an embedded RFID tag that holds the serial number and product ID for easy asset and inventory management using commercial RFID readers. Must support the following protocols: IPv4, IPv6, static routes, Routing Information Protocol Versions 1 and 2 (RIP and RIPv2), Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), Border Gateway Protocol (BGP), BGP Router Reflector, Intermediate System-to-Intermediate System (IS-IS), Multicast Internet Group Management Protocol Version 3 (IGMPv3), Protocol Independent Multicast Sparse Mode (PIM SM), PIM Source-Specific Multicast (SSM), Resource Reservation Protocol (RSVP), Discovery Protocol, Encapsulated Remote Switched Port Analyzer (ERSPAN), IOS IP Service-Level Agreements (IPSLA), Call Home, IOS Embedded Event Manager (EEM), Internet Key Exchange (IKE), Access Control Lists (ACL), Ethernet Virtual Connections (EVC), Dynamic Host Configuration Protocol (DHCP), Frame Relay, DNS, Locator ID Separation Protocol (LISP), Hot Standby Router Protocol (HSRP), RADIUS, Authentication, Authorization, and Accounting (AAA), Application Visibility and Control (AVC), Distance Vector Multicast Routing Protocol (DVMRP), IPv4-to-IPv6 Multicast, Multiprotocol Label Switching (MPLS), Layer 2 and Layer 3 VPN, IPsec, MACsec Layer 2 Tunneling Protocol Version 3 (L2TPv3), Bidirectional Forwarding Detection (BFD), IEEE 802.1ag, and IEEE 802.3ah, *Broadband (BNG, LNS, LAC, and IWAG - L2/IPoE, EoGRE, L3/Routed) | جهاز | 12 | 0 | |
| 13 | 4 | موجه شبكة Virtual Router | Virtual router to extend the existing SDWAN deployed by public security from the same vendor. With Advantage license for On-Prem Lic 3Years - upto 1G (Aggr, 2G) The goal of this router is to extend the existing SD-WAN fabric deployed in public security to the cloud The software should be available in ISO, BIN, OVA, and QCOW2 formats Supported hypervisors: ● VMware ESXi 7.0 ● Red Hat KVM (Red Hat Enterprise Linux 7.7) ● Ubuntu 16.04 LTS ● NFVIS 4.10.1 Supported public clouds: ● Amazon Web Services ● Microsoft Azure ● Google Cloud Platform Must supports several modes of communication between virtual Network Interface Cards (vNICs) and the physical hardware: ● Paravirtual ● PCI Passthrough ● Single-Root I/O Virtualization (SR-IOV) ● Cisco Virtual Machine Fabric Extender (VM-FEX) ● Accelerated networking (Azure) ● Enhanced networking (AWS) Virtual-machine specifications: can run on servers that support VMware ESXi, Red Hat KVM, or on the cloud: Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform. It requires the following from the virtualized server hardware: ● CPU – 1 to 8 virtual CPUs (depending on the throughput and feature set) ● Memory – 4 GB to 16 GB (depending on the throughput and feature set) ● Disk space – 8 GB ● Network interfaces – two or more vNICs, up to maximum allowed by hypervisor ● If you run it on Amazon Web Services (AWS), you can use encrypted Elastic Block Store (EBS) by following a process that creates a private Amazon Machine Image (AMI). Supported Software networking: ● Routing: BGP, OSPF, EIGRP, Policy-Based Routing (PBR), IPv6, VRF-Lite, Multicast, LISP, GRE, and Connectionless Network Services (CLNS) ● MPLS: MPLS VPN, VRF, and Bidirectional Forwarding Detection (BFD) ● Addressing: DHCP, Domain Name System (DNS), NAT, 802.1Q VLAN, Ethernet Virtual Connection (EVC), and VXLAN ● High availability: HSRP, Virtual Router Redundancy Protocol (VRRP), Gateway Load Balancing Protocol (GLBP), and box-to-box high-availability for ZBFW and NAT ● Traffic redirection: AppNav ● Application visibility, performance monitoring, and control: QoS and AVC ● Hybrid cloud connectivity: OTV, VPLS, and Ethernet over MPLS (EoMPLS) ● NFV: vRR Software security to be supported: ● VPN: IPsec VPN, DMVPN, FlexVPN, and GetVPN ● Firewall: ZBFW ● Access control: ACL, AAA, RADIUS, and TACACS+ Supported Management Features: ● Virtual-machine creation and deployment: VMware vCenter and VMware vCloud Director ● Provisioning and management: IOS XE CLI, Secure Shell (SSH) Protocol, Telnet, and OpenStack Config-drive ● Monitoring and troubleshooting: Simple Network Management Protocol (SNMP), Syslog, NetFlow, IP SLA, and IOS Embedded Event Manager (EEM) ● RESTful Application Programming Interfaces (APIs): License installation and Smart Licensing, interfaces and subinterfaces, routing protocols, IPsec VPN, firewall, ACL, NAT, configuration import and export, reports (CPU usage, interface statistics, routing table, VPN and firewall sessions, etc.), VRF, Network Time Protocol (NTP), DNS, DHCP, SNMP, TACACS, LISP, VXLAN, and HSRP ● The SD-WAN Software for this router must provides simplicity of management from the cloud with the existing SDWAN solution deployed in public security | جهاز | 13 | 0 | |
| 14 | 1 | خدمات تنفيذ المشروع من الشركة المصنعة | يشمل ذلك الأعمال التالية: 1-تصميم وتحليل الحلول المقدمة بالمشروع لتطبيقها بمركز بيانات الأمن العام 2- تركيب الراوترات الافتراضية وربطها مع الخدمات السحابية 3-تنفيذ أعمال الربط الشبكي لخدمة ال sd-wan وتكاملها مع مركز بيانات الأمن العام | خدمة | 14 | 0 |
14 بند
كراسة الشروط الرئيسية
المستندات الداعمة (7 ملف)
| اسم المورد | قيمة العرض (ر.س) | قيمة الترسية (ر.س) | النتيجة الفنية | الحالة |
|---|---|---|---|---|
| شركة مسار التكنولوجيا | 13,084,881.70 | — | غير مطابق | مشارك |
| شركة ام دي اس لانظمه الحاسب الالي شركة شخص واحد | 6,980,155.00 | — | مطابق | مشارك |
| شركة الوسام العربي المحدودة | 5,317,411.40 | — | غير مطابق | مشارك |
| الشركة العربية لخدمات الانترنت وا لاتصالات شركة مساهمة سعودية مدرجة | 7,060,590.53 | — | مطابق | مشارك |
| شركة دار دلتا لتقنية المعلومات | 6,875,850.00 | — | غير مطابق | مشارك |
| شركة ابتكار للتقنية المحدودة | 5,836,509.90 | — | مطابق | مشارك |
| شركة ابتكار للتقنية المحدودة | 5,836,509.90 | 5,836,509.90 | — | مرسّى |
الآليات
القائمة الإلزامية
تفضيل المنشآت الصغيرة والمتوسطة
وثائق المحتوى المحلي
معايير التقييم
معايير التقييم الفني
| المستوى الاول | المستوى الثاني | المستوى الثالث | الوزن النهائي |
|---|---|---|---|
| التقييم الفني |
معايير التقييم المالي
| المستوى الاول | المستوى الثاني | المستوى الثالث | الوزن النهائي |
|---|---|---|---|
| التقييم المالي | السعر | التكلفة الكلية | 100% |
أخبار المنافسة
title
تاريخ الإنشاء
value
28/02/45 01:29:01 م
title
تاريخ فتح العروض
value
13/05/45 10:00:00 ص
title
تمديد تواريخ المنافسة
value
تاريخ فتح العروض13/05/45 10:00:00 صآخر موعد لتقديم العروض13/05/45 09:00:00 صآخر موعد لإستلام الإستفسارات08/05/45 12:00:00 ص
title
تاريخ الترسيه
value
07/09/1445