Część 1

The contract timeline is as follows:

• Contract Start Date: The agreement comes into effect on the date it is signed by both parties. The execution period for the subject of the agreement begins from its conclusion date.
• End Date and Total Duration:
• Execution of the Subject of the Agreement: This phase is to be completed within 60 days from the date the agreement is concluded, for both Part 1 and Part 2. The date of execution of the subject of the agreement is considered the date of signing the Final Acceptance Protocol.
• Confidentiality Agreement: This agreement is concluded for a definite period of 5 years from its date of conclusion. The obligation of confidentiality applies during the offer preparation, procurement process, contract implementation, and for 5 years from the last disclosure of Confidential Information. For certain sensitive information (trade secrets, authentication data, active vulnerabilities, security architecture/configuration, or information whose disclosure could affect the disclosing party's security), the confidentiality obligation lasts as long as the information retains its confidential nature or significance for security.
• Warranty, Service, Updates, and Subscriptions: These are realized for periods specified in Annex 3 to the SWZ. For solutions covered by the support period criterion, this period cannot be shorter than 12 months from final acceptance, or from the date of production launch if the OPZ links the start of the subscription to it.
• Key Milestones or Phases:
• Completion of the Subject of the Agreement: This must occur within 60 days from the contract's conclusion and includes delivery, installation, configuration, integration, tests, documentation handover, and final acceptance.
• Final Acceptance Protocol: Signing this protocol marks the date of execution of the subject of the agreement.
• Post-execution support: Warranty, service, updates, and subscriptions, which run for specified periods, generally at least 12 months after final acceptance or production launch.
• Possibility of Extension: The contracting authority allows for an appropriate change to the contract performance deadline if the Grantor (specifically CPPC) permits an extension of the project implementation period or eligibility of expenses. This extension can include shifting deadlines for delivery, installation, configuration, integration, tests, documentation handover, final acceptance, and related organizational deadlines.

• PTES (Penetration Testing Execution Standard) or equivalent methodology
• CVSS (Common Vulnerability Scoring System) or equivalent scale for vulnerability classification
• OSCP/OSCP+ certification
• OSWE certification
• OSEP certification
• PNPT certification
• eWPTX certification
• CPTS certification
• CRTO certification
• NTP (Network Time Protocol) for time synchronization
• MFA (Multi-Factor Authentication)
• Constant Internet access with guaranteed bandwidth not less than 512 kb/s
• PC or MAC class computer
• Web browser supporting TLS 1.2
• Java Script support enabled
• Acrobat Reader or other program supporting .pdf files
• Supported file formats: txt, rtf, pdf, xps, odt, ods, odp, doc, xls, ppt, docx, xlsx, pptx, csv, jpg, jpeg, tif, tiff, geotiff, png, svg, wav, mp3, avi, mpg, mpeg, mp4, m4a, mpeg4, ogg, ogv, zip, tar, gz, gzip, 7z, html, xhtml, css, xml, xsd, gml, rng, xsl, xslt, tsl, xmlsig, xades, pades, cades, asic, asics, sig, xmlenc, dxf, ath, prd
• Single file size limit up to 2 GB
• Modbus protocol analysis
• S7+ protocol analysis
• S7 protocol analysis
• Profinet protocol analysis
• HL7 protocol analysis
• EtherNet/IP protocol analysis
• GOOSE protocol analysis
• MAsterBus300 protocol analysis
• DLMS/COSEM protocol analysis
• IEC 101/102/103/104 protocol analysis
• SLMP protocol analysis
• IXL protocol analysis
• BACNET protocol analysis
• Threat Intelligence database for OT environments
• Machine Learning (ML) for behavioral analysis
• Integration with FortiGate firewalls
• Integration with Palo Alto firewalls
• Integration with Cisco ASA firewalls
• Integration with Cisco ISE firewalls
• Integration with Stormshield SNS firewalls
• Integration with Barracuda firewalls
• Integration with TXOne OT Defense Console firewalls
• Integration with Tanium SIEM systems
• Integration with ServiceNow SIEM systems
• Integration with IBM QRadar SIEM systems
• Integration with Splunk SIEM systems
• Integration with NetWitness SIEM systems
• Integration with Kafka SIEM systems
• Active Directory integration
• SSL support
• IPv4 support
• IPv6 support
• SNMP v3 support
• RESTful API
• Integrated Remote Console for Windows clients
• DNS/DHCP for network auto-configuration
• HTML5 for graphical interface
• PowerShell for REST API
• Virtual appliance format for management software
• VMware vSphere ESXi 8.x (supported hypervisor for management software)
• Microsoft Hyper-V Server 2022 (supported hypervisor for management software)
• VMware (supported hypervisor for virtual environment platforms)
• Hyper-V (supported hypervisor for virtual environment platforms)
• KVM (supported hypervisor for virtual environment platforms)
• XEN (supported hypervisor for virtual environment platforms)
• Minimum 1 Gbps throughput
• Minimum 1000 protected IP/MAC address points
• Minimum 20000 protected network elements
• Minimum 4000 protected IoT devices
• SFTP for backup
• Two-factor authentication
• Microsoft Windows Server 2022 (supported operating system)
• Microsoft Windows Server 2025 (supported operating system)
• Red Hat Enterprise Linux (RHEL) 9.4 (supported operating system)
• Red Hat Enterprise Linux (RHEL) 10.0 (supported operating system)
• SUSE Linux Enterprise Server (SLES) 15 SP6 (supported operating system)
• SUSE Linux Enterprise Server (SLES) 16 (supported operating system)
• VMware ESXi 8.0U3 (supported virtualization system)
• VMware ESXi 9.0 (supported virtualization system)
• Server operating system with ability to utilize 320 logical processors and at least 4 TB RAM in physical environment
• Server operating system with ability to utilize 64 virtual processors, 1TB RAM, and disk up to 64TB
• Deep Packet Inspection (DPI)
• WAF/WAAP (Web Application Firewall/Web Application and API Protection)