Appliance-Based Network IDS & Malware Protection Solution
The following are the minimum MANDATORY requirements that must be met by bidders for both our
wired and wireless campus networks. Compliance with these requirements must be clearly indicated and
the extent of compliance described in detail in bidders Bid Response. Failure to meet any or all of these
requirements will likely result in rejection of bidders Bid Response by PSU-OIT.
1. Must be Passive/Out of Band solution. Not interested in an In-Band solution.
2. Must be able to monitor and profile up to 1Gbps of IP traffic from a single appliance.
3. Must have multiple 10/100/1000 NIC interfaces for receiving multiple data streams.
4. Product must be mature (not rev. 0.1) and commercially available for at least one (1) year.
5. Must support a mixed-OS and mixed-browser environment.
6. Must provide different administrative roles with granular privilege delineation for multiple IT
support/security groups. Bid Response must include detailed description of these roles.
7. Must have robust methods of updating protocol signatures and other attack vector identifiers. Bid
Response must include detailed descriptions of your methods.
8. Must have "zero-day" attack prevention strategy. Bid Response must include detailed description of
your strategy.
9. Must provide "callback analysis" identifying communications with malware command & control
servers. Bid Response must include detailed description of your callback analysis.
10. Must provide highly-detailed log data of botnet activity including DNS lookups, affected host
processes, downloaded executables, etc.
11. Must provide detailed, accurate, and actionable alerts for security operations staff.
12. Solution must scale to multiple appliances for future expansion/growth. Bid Response must include
detailed description of how bidders solution scales.
13. We require a full 30-day trial period for system acceptance purposes. Once the system is fully
acceptable to us, invoicing can occur per the PAYMENT/INVOICING section of this bid document.
