FDIC's Palo Alto Hardware & Subscription Tech Refresh

The document, titled "NONPUBLIC//FDIC BUSINESS# 7.1.2-03 - Pre-Award Risk Management (SCRM) Information," outlines critical requirements for offerors submitting proposals to the FDIC. It specifically focuses on Supply Chain Risk Management (SCRM) by mandating that offerors provide their status as either an Original Equipment Manufacturer (OEM), Aftermarket Manufacturer (AM), or Authorized Supplier. Failure to clearly state one of these three categories may lead to the offeror's ineligibility for award. The document also requires the submission of the name and address of the manufacturer and any subcontractors involved. This file is crucial for ensuring transparency and accountability within the supply chain for federal government procurements, specifically those handled by the FDIC, by requiring detailed information about the origin and provision of goods, software, or services.

The Federal Deposit Insurance Corporation (FDIC) requires Palo Alto Networks (PA) equipment and licenses to support its Metro Office (MO) and Regional Office (RO) firewalls. These firewalls will inspect networking traffic using PA's Threat Prevention feature on SPAN/Mirror ports, functioning as an Intrusion Detection System (IDS). The procurement includes various hardware components such as PA-3410 and PA-3420 Lab Units, optical transceivers, and corresponding subscriptions for Advanced Threat Prevention, Advanced DNS, Advanced URL Filtering, Prisma Access Agent, Advanced WildFire, and Advanced SD-WAN. The requirement also specifies premium support for US Government accounts and 5-day ground shipping for certain items, with a period of performance of one year from the award date.

This government solicitation, CORHQ-25-Q-0410, issued by the Federal Deposit Insurance Corporation (FDIC), outlines requirements for purchasing Palo Alto Networks equipment and licenses to support Metro and Regional Office firewalls. The acquisition includes PA-3410 and PA-3420 Lab units, advanced threat prevention subscriptions, premium support, and various optical transceivers. The period of performance is one year from the award date. The document details delivery instructions, inspection and acceptance criteria, payment methods (Electronic Fund Transfer), and invoicing procedures. Key clauses cover post-government employment certification, commercial supplier agreement terms, off-site processing of FDIC information, and safeguarding contractor information systems. It also includes reporting requirements for supply chain events and defines terms related to covered articles, IT security incidents, and supply chain risks. The contract emphasizes compliance with federal law and FDIC policies regarding information security, data protection, and ethical conduct.