Netwerk en security (exclusief F5)

The contract timeline details regarding the contract start date, end date, and total duration are not explicitly stated in the documents.

However, the deadline for submitting applications is November 13, 2026, at 10:00 AM via the e-Procurement platform. Additionally, it is stated that long-term support for products should be provided for a minimum of 5 years after purchase. For both "Perceel 1 Netwerk en security (exclusief F5)" and "Perceel 2 Netwerk en security F5," no extension is foreseen.

The core scope of work for this tender involves the comprehensive management and support of Emmaüs's networking and security environment. This includes approximately 45 firewalls, 630 switches, 3000 access points across 45 locations, and 35 cost centers. The assignment also covers the supply of passive materials such as copper cabling, fiber cabling, SFPs, network racks, and related equipment.

The technology stack in scope comprises switching (Cisco & HPE Aruba), WLAN (Cisco & HPE Aruba), firewalls (Fortinet & Cisco), load balancing (Fortinet), DDI (Infoblox), NAC (ISE), SSL VPN/Extranet/Web App FW (F5), IPSEC VPN (Fortinet), mail relay (Fortinet), and Privileged Access Management (Beyondtrust). Networks explicitly in scope are the campus network, front-end data center network, guest network, out-of-band network, and DMZ network, while data center storage and backend networks are excluded.

Key deliverables and responsibilities include:

• Daily Configuration Backups: Ensuring daily secure configuration backups for the entire environment.
• Vulnerability Management: Reporting, notifying, and investigating CVSS 3.1 Category High and Critical vulnerabilities for all security devices.
• Incident Support: Providing incident support, either 24x7 or 8x5, depending on the device category, with specific SLA targets for Prio 1 incidents (e.g., 1 hour for remote support, 4 hours for on-site support).
• Maintenance Contracts: Concluding maintenance contracts for Emmaüs devices to cover hardware replacement, software updates/upgrades, and TAC support.
• Patching Services: Delivering patching services for the environment based on vulnerability criticality and annual updates.
• CMDB Management: Maintaining an accurate Configuration Management Database (CMDB) to support lifecycle management, including annual reporting and quoting for expiring hardware and licenses, linked to specific cost centers for financial reporting.
• Access to Systems: Granting ICT Emmaüs access to the contractor's ITSM system for incident, change, and CMDB communication, with monitoring environment access being a plus.
• Technical Documentation: Making technical documentation of the supported environment available via Emmaüs's SharePoint, downloadable to contractor's managed devices.