| Queensland Shared Services (QSS), as a part of the Department of Science, Information Technology and Innovation (DSITI), is seeking Proposals for Web Application Firewall
The scope of works includes:
QSS require Implementation of Web Application Firewall (WAF) service solution to be managed by a 3rd party vendor. The WAF services adds a layer of security to help protect against attacks. The solution needs to be a managed service by the vendor with the vendor providing assurance of the integrity of inbound and outbound traffic. The vendor will leverage and provide high level expertise in developing and implementing new application services and provide expert analysis of traffic traversing the WAF to ensure the outgoing integrity of QSS services and applications.
The WAF solution will initially protect QSS applications accessible from the Internet, and there is also a potential requirement to also protect internal Queensland Government Network (QGN) traffic. As new services are on-boarded to this service, this requirement may change and as such the solution needs to be scalable to cater for this increased traffic.
The WAF solution should be designed as a ‘turn-key’ service, in that it is designed, supplied, built, and installed ready to operate where limited QSS resources will be required. The vendor will be responsible for providing daily reports, reporting on the health of the services, installation, configuration and testing of the services, application configuration and penetration testing to highlight some of the key business requirements.
QSS anticipate a technical implementation of the WAF into our network environment which currently resides in the CITEC controlled QGN network. The contractor will be required to project manage and work with various areas as directed by QSS following existing policy, procedures and constraints as required. A per service implementation is expected, which involves once off service implementation per WAF service, which will also include ongoing support for the service. Modifications to existing services will also be required at various stages post implementation, therefore QSS require the contractor to lead and implement these changes adhering to DSITI policy.
For detailed information on the specific goods / services sought under this tender, please review the "Business Requirements Document".
|
