仕様書

Size: px

Start display at page:

Download "仕様書"

しなつさくいし
6 years ago
Views:

1 Network Firewall Enhancement ()General Information 本仕様書は学校法人沖縄科学技術大学院大学学園が実施する研究事業において使用する Network Firewall Enhancement の仕様について定める OIST キャンパスの Next Generation Firewall のアップグレードについて PaloAlto PA560 及び Firepower 50 の製品が Network and Connectivity Section によって事前評価されており本仕様の参考構成とするまた本仕様要求として製品を除いた成果物の納品及び連絡のやり取りを英語で希望するため総則納入場所その他を除くその内容について英語表記とする ()System Components Palo Alto Networks PA560 The implementation required following existing components. S.No Product Number Description QTY Palo Alto Networks PA-560 with redundant AC power PAN-PA-560-AC supplies GlobalProtect subscription for device in an HA pair year, PAN-PA-560-GP-HA PA-560 Threat prevention subscription for device in an HA pair year 3 PAN-PA-560-TP-HA, PA-560 PANDB URL filtering subscription for device in an HA pair PAN-PA-560-URL-HA year, PA-560 WildFire subscription for device in an HA pair year, PA- 5 PAN-PA-560-WF-HA 560 Power cord for Japan with IEC-6030 C3 and JISC PAN-PWR-CORD-JP-5 cord ends, 5A, 5V max, 6ft QSFP+ form factor, 0Gb SR optical transceiver, short reach 8 7 PAN-QSFP-0GBASE-SR 00m OM3, strand MPO connector, IEEE 80.3ba 0GBASE-SR compliant SFP+ form factor, SR 0Gb optical transceiver, short reach 6 8 PAN-SFP-PLUS-SR 300m, OM3 MMF, duplex LC, IEEE 80.3ae 0GBASE-SR compliant 9 PAN-SVC-PREM-560 Premium support year, PA-560 Palo Alto Networks M-500 chassis with TB storage (xtb 0 PAN-M-500 RAID certified drives) and post rack mount rails Panorama central management software license, 5 devices PAN-M-500-P-5 or log collector for the M inch spare TB HDD Raid certified drives for M-Series 0 PAN-.5IN-HDD-TB-PAIR and PA-500 Series, shipped in pair Premium support, Panorama M devices, 3 PAN-SVC-PREM-M-500-P-5 PAN-DB Private Cloud or log collector Palo Alto Networks On-Site training course, 5 days, up to PAN-EDU-ONSITE-5DAY- students. 5 PAN-PA-500-RACK Palo Alto Networks PA-500 post rack mount kit. 6 PAN-PWR-CORD-JP-5 Power cord for Japan with IEC-6030 C3 and JISC8303 cord ends, 5A, 5V max, 6ft (3)Switch specifications and capabilities This implementation should be executed based on the vendors global best practices. PA550 Models and Capabilities PA-560 Models Firewall throughput Threat prevention throughput PAN-PA-560-AC 7. Gbps 30 Gbps

2 IPsec VPN throughput Gbps Maximum concurrent sessions 3,000,000 New sessions per second 58,000 Management I/O x 00/000 copper port, x RJ5 console port x 00/000/0G Copper, 6 x GE/0GE SFP/SFP+, x Data I/O 0GE/00GE QSFP+ ()System Components Cisco Firepower 50 The implementation required following existing components. S.No Product Number Description QTY FPR50-FTD-HA-BUN Cisco Firepower 50 Threat Defense Chss,Subs HA Bundle FPR50-NGFW-K9 Cisco Firepower 50 NGFW Appliance, U, x NetMod Bays 3 CON-SNTP-FPR5NG SNTC-X7X Cisco Firepower 50 FPRK-PWR-AC-00 Firepower 000 Series 00W AC Power Supply 5 CAB-L60P-C3-JPN Power Cord, 50VAC, 5A, NEMA L6-0 to C3, JAPAN 8 6 SF-FXOSK-.-K9 Cisco Firepower Extensible Operating System v. for FPR000 7 SF-FK-TD6..-K9 Cisco Firepower Threat Defense software v6.. for FPR00 8 FPRK-SSD00 Firepower 000 Series SSD for FPR-0/50 9 FPRK-SSD-BBLKD Firepower 000 Series SSD Slot Carrier 0 FPRK-ACC-KIT FPRK Hardware Accessory Kit (Rack Mounts, Cables) FPRK-FAN Firepower 000 Series Fan FPRK-PWR-AC-00 Firepower 000 Series 00W AC Power Supply 3 FPRK-RACK-MNT Firepower 000 Series Rack Mount Kit FPRK-NM-X0G Cisco FirePower port QSFP+ Network Module 5 CON-SNTP-FPRKNMX SNTC-X7X Cisco FirePower 6 port 0G SR FTW Network 6 FPRK-NM-6X0SR-F Cisco FirePower 6 port 0G SR FTW Network Module 7 CON-SP-FPRKNMF SNTC-X7X Cisco FirePower 6 port 0G SR FTW Network Cisco FPR50 Threat Defense Threat, Malware and URL 8 L-FPR50T-TMC= License Cisco FPR50 Threat Defense Threat, Malware and URL Y 9 L-FPR50T-TMC-Y Subs 0 GLC-TE 000BASE-T SFP transceiver module for Category 5 copper wire SFP-0G-SR 0GBASE-SR SFP Module QSFP-0G-SR 0GBASE-SR QSFP Transceiver Module with MPO Connector 6 3 FMC500-K9 Cisco Firepower Management Center 500 Chassis CON-SNTP-FMC500K SNTC-X7X Cisco Firepower Management Center FMC-PWR-AC-770W Cisco AC Power Supply 770W for FMC 6 CAB-C9-C0-3M-JP Power Cord C9-C0, 3M/0ft Japan PSE mark 7 SF-FMC-6.-K9 Cisco Firepower Management Center Software v6. 8 FSK-0G-NIC Cisco FMC X50-DA 0 Gbps port NIC 9 FSK-NIC-SFP Cisco FMC 0 Gbps Ethernet SFP SR 30 FMC-MRAIDG Cisco FMC G SAS Modular Raid Controller 3 FMCK-SSD-800G Cisco 800GB Gbps SAS SSD for FMC 3 FMC-SD-3G-S Cisco FMC 3GB SD Card Module Cisco.0 GHz E5-60 v/90w 0C/5MB Cache/DDR 33 FMCK-CPU-E560E 33MHz 3 RXX-RAID6 Enable RAID 6 Setting

3 Cisco FMC Gbps SAS GB FBWC Cache module (Raid 35 FMC-MRAID-G 0//5/6) Cisco 6GB DDR-00-MHz RDIMM/PC-900/single 6 36 FMCK-MEM-6GB rank/x/.v 37 L-AC-APX-Y-S3 Cisco AnyConnect Apex -Year License TRN-CLC Prepaid training credits (5)Switch specifications and capabilities This implementation should be executed based on the vendors global best practices. Cisco FP50 Models and Capabilities FP50 Models FPR50-FTD-HA-BUN Firewall throughput 70 Gbps Threat prevention throughput Gbps IPsec VPN throughput Gbps Maximum concurrent sessions 30,000,000 New sessions per second 00,000 Management I/O x 000 copper port, x RJ5 console port Data I/O 8 x 0GE SFP/SFP+, x 0GE QSFP+ (6)On-site installation and training The selected vendor or preferred vendor partner should provide at least 5 days of on-site assistance for initial installation, configuration and training. (7)Location for the delivery 学校法人沖縄科学技術大学院大学学園 ( 沖縄県国頭郡恩納村字谷茶 99- 学校法人沖縄科学技術大学院大学学園 Lab,Lab,Lab3,Center 棟において本学担当者が指定する箇所 (8)Completion Due Date 8 th February 08 (9)Test and Inspection Bid Winning vendor should show the person in charge at OIST IT that all the features covered in the specification works using the system. (0)Operation & Knowledge transfer Bid Winning vendor should train the IT Network Team how to implement the capabilities delivered in this engagement. ()Delivery Handover Documents Training materials and documentation Delivery plan document ()Warranty & Assurance

4 General Vendor support

5 (3) Warranty and Support All maintenance, licensing, support, and any other costs must be itemized per quote. All maintenance, licensing, support, and any other conditions must be consistent over the 5 years of operation, both the st year and subsequent year quotes must include any and all items to facilitate this. The bid should include the first fiscal year of all costs, including maintenance, licensing, and support, and quotes for 5 years should be provided for reference ( quote per fiscal year). ()Other 本仕様に定められた以外の事項で疑義を生じた場合には双方協議することとし可能な限り本学の意向を尊重することとする納品搬入にあたっては事前に本学担当者と納品予定日に関する情報を共有することまた納品物が多数になる場合は搬送業者と OIST 内保管場所まで運搬する様に調整し開梱作業にも協力する事また梱包に関わる資材について本学が指定するものについては持ち帰る事物品は指定した納期までに納品することとするが万一遅れが生じた場合は速やかに本学担当者に報告しその指示に従うこと

仕様書

コアスイッチ Research Core Switches Upgrade (for DC and Campus network)( 変更後 ) 1, 一般事項 (1) 総則本仕様書は学校法人沖縄科学技術大学院大学学園 ( 以下 OIST) 内で使用する Cisco switches for campus and DC network の仕様について定めるものである (2) 構成 S.No Product