Inkomoko’s vision is an Africa with thriving communities where young people and refugees are engaged, communities have access to relevant innovations for self-determination, and where African solutions are unleashed to solve African problems. Founded in 2012, Inkomoko has provided business advisory and access to finance for thousands of entrepreneurs across East Africa. As the largest investor in refugee businesses, we have disbursed more than $6M in capital to more than 3000 clients. This affordable finance for Inkomoko entrepreneurs helps them grow their businesses, create jobs, and improve their livelihoods. As we look forward, Inkomoko is developing new ways to engage communities to thrive. Creating meaningful market linkages, expanding to secondary cities, and advocating for economic inclusion, Inkomoko has added these community-based approaches to our enterprise development work. By 2030, Inkomoko will be in 8 countries, serving more than half a million small businesses, creating a positive impact for more than 7 million people across the Continent.Objective The objective of this procurement is to secure Inkomoko's network perimeter and internal infrastructure through the implementation of a high-performance, identity-aware Next-Generation Firewall that supports: Zero Trust Network Access (ZTNA)  Multi-site orchestration  Advanced threat protection  High availability  Secure remote connectivity  Centralized management and reporting  Scope of Work The successful vendor shall provide the following: Supply of enterprise-grade Next-Generation Firewall appliances.  Installation and configuration at the Primary and Disaster Recovery sites.  High Availability deployment (Active-Active or Active-Passive).  Layer 7 application inspection.  Identity-aware access control.  SSL/TLS inspection.  Intrusion Prevention System (IPS).  Advanced malware protection and sandboxing.  Web and URL filtering.  Zero Trust Architecture implementation.  Device posture assessment.  Endpoint telemetry integration.  Micro-segmentation.  SD-WAN configuration.  Centralized cloud management.  Policy synchronization between sites.  Security logging and compliance reporting.  Migration from the existing firewall environment.  Knowledge transfer and administrator training.  24/7 support and maintenance.  Firmware and security signature updates.  Delivery shall be completed within 30 calendar days from issuance of the Purchase Order.  Deliverables The successful vendor shall provide: NGFW deployment and implementation plan.  Installed and configured firewall infrastructure.  Successful migration from existing firewall infrastructure.  Security policy documentation.  SD-WAN configuration documentation.  Administrator training.  Knowledge transfer documentation.  Acceptance testing report.  Warranty documentation.  Support and maintenance plan.  Requirements Vendor Qualifications Interested vendors should demonstrate: Experience implementing enterprise firewall solutions.  At least three similar projects completed within the past five years.  Authorization as a reseller or implementation partner for the proposed firewall solution.  Certified security engineers assigned to the project.  Availability of local or regional support.  Financial capacity to deliver the assignment.  Ability to provide 24/7 technical support.  Financial Proposal The quotation should clearly distinguish: Hardware costs  Software licenses  Professional implementation services  Training  Support and maintenance  Annual subscription costs  Warranty  CAPEX costs  Recurrent/OPEX costs  Evaluation Criteria The evaluation will comprise both technical and financial assessments. Proposals will be evaluated using the following criteria: Technical Compliance (30%) Assessment of compliance with the required Next-Generation Firewall (NGFW) specifications, including Zero Trust Architecture, Intrusion Prevention System (IPS), VPN capabilities, SSL inspection, SD-WAN functionality, reporting features, and overall security capabilities. Implementation Methodology (15%) Evaluation of the proposed implementation approach, including the migration strategy, project management methodology, testing procedures, documentation, and rollout plan. Vendor Experience (10%) Assessment of the vendor's experience in delivering similar enterprise firewall implementation projects, supported by relevant client references and project history. Technical Team Qualifications (10%) Evaluation of the qualifications, certifications, and relevant experience of the proposed technical team responsible for the implementation and support of the solution. Support and Service Levels (10%) Assessment of the vendor's support capabilities, including availability of 24/7 support, response and resolution times, escalation procedures, maintenance services, and local or regional support presence. Cybersecurity Standards (5%) Evaluation of compliance with recognized cybersecurity standards and best practices, such as ISO 27001, the NIST Cybersecurity Framework, and CIS Controls. Training and Knowledge Transfer (5%) Assessment of the proposed training program, administrator and user documentation, knowledge transfer approach, and operational manuals. Company Capacity and Financial Stability (5%) Evaluation of the vendor's organizational capacity, financial stability, corporate profile, and ability to successfully deliver and support the project. Warranty and Maintenance (5%) Assessment of the warranty period, firmware and software updates, security signature updates, and ongoing maintenance services included in the proposal. Financial Proposal – Total Cost of Ownership (5%) Evaluation of the overall cost of ownership, including hardware acquisition, software licensing, implementation services, subscriptions, maintenance, support, and any other recurring or one-time costs. Benefits Application Details Mandatory Requirements Vendors shall submit: Certificate of Incorporation/Registration  Valid Tax Compliance Certificate  Company Profile  Authorization letter from the manufacturer (where applicable)  Evidence of similar assignments  Reference letters or completion certificates  CVs of proposed technical personnel  Technical Proposal  Financial Proposal  Proposed implementation schedule