Održavanje i nadogradnja zaštite informacijskog i komunikacijskog sustava Hrvatskih voda

The contract duration is 12 months. The contract start date is from the mutual signature of the parties.

The core scope of work for this tender is the "Maintenance and Upgrade of the Information and Communication System Protection of Hrvatske vode". This encompasses services for extending licenses of existing devices, maintaining active network and security equipment, providing software support, maintaining the Client's network infrastructure, and performing maintenance on existing equipment in accordance with Service Level Agreement (SLA) parameters for the protection of the information and communication system.

The Statement of Work summary and core deliverables include:

• Procurement, Implementation, and Maintenance of Hardware, Software, and Licenses: This category involves the acquisition and setup of various IT components.
• Procurement of specific licenses and software, renewal of manufacturer's warranty maintenance for devices, and implementation.
• Partner maintenance and support for the network and equipment.
• Specific Hardware and Software Deliverables:
• Two licenses for Firewall model FPR3105-NGFW-K9 L-FPR3105T-TC= 1Y with L3 Cisco support or equivalent.
• Five hundred Cisco CSEMAIL-SEC-SUB ESA-ESS-LIC licenses for Anti Spam security or equivalent.
• One basic manufacturer's warranty maintenance for 12 months for existing network equipment in L3 Cisco support mode CON-8X5XNBD.
• One implementation and configuration service for hardware equipment, licenses, and SW subscriptions.
• Twelve months of L2 partner maintenance and support for existing equipment and licenses according to SLA requirements on a monthly basis.
• One access control appliance, such as Allot with 4 links 1 GE interface, 16x1/10GE ports, and capacity to grow till 10Gbps (50Gbps FD), or equivalent.
• Twelve WiFi access points for HQ Split, such as Cisco access point model C9115AXI-E Cisco Catalyst 9115AX Series with L3 support, or equivalent.
• One WiFi access switch for HQ Split, such as Cisco LAN switch model C1300-48FP-4X Catalyst 1300 48-port GE, Full PoE, 4x10G SFP+, with L3 support, or equivalent.
• One LAN router, such as Cisco C8300-1N1S-6T, with accompanying interfaces and a 1-year manufacturer's warranty, or equivalent.
• Four 1000BASE-T copper SFP modules, such as Cisco GLC-TE, or equivalent, for interface expansion of new and existing Catalyst 8300 series routers.
• Key Service Activities:
• Demounting existing and mounting new access points, along with their installation and configuration, at defined positions in agreement with the Client.
• Associating access points with central controllers and configuring FlexConnect groups and local VLAN switching.
• Verification of wireless signal coverage in all work areas and preparation of as-built documentation, including a list of access points, their positions, MAC addresses, and associated switch interfaces.
• Replacement of the existing Cisco ISR4451 router with a new internet router for the WAN network.
• Installation of the new router for BGP internet traffic control, connection to the local network, and migration of eBGP connectivity and traffic management policies.
• Adjustment and configuration of network equipment as per tender documentation, including adaptation of existing Client equipment configuration (e.g., FTD firewalls, switches, wireless controllers) for integration.
• Migration of existing resources to the new infrastructure and testing of functionality.
• Activation of all licenses and registration of warranty maintenance contracts with the manufacturer in the Client's name.
• Performing and documenting all necessary acceptance tests and creating an acceptance protocol with equipment specifications, quantities, and locations.
• Submitting as-built documentation of the system with detailed equipment configurations in written and electronic form (2 copies).
• Providing expert support to Hrvatske vode employees during commissioning, equipment upgrades, or technical inquiries.
• Providing access to and delivery of new software versions (minor releases for virtual devices, switches, wireless access points, and other offered equipment).
• Offering remote support for configuration changes, system monitoring, troubleshooting, and equipment testing.
• Installation of updates annually or as needed upon user request.
• Performing regular monthly maintenance, including reviewing network device logs (syslog) and preparing monthly network status reports.