Hattiesburg Clinic | Agency Bid Bank Solicitation Attachment
Scope of Work / Technical Specification
NGFW Perimeter Defense Refresh — High-Availability Firewall Replacement
Hattiesburg Clinic, P.A. | Bid Number 4618-20260930092509
1. Background and Purpose
Hattiesburg Clinic operates two high-availability (HA) pairs of next-generation firewall (NGFW) appliances —
one HA pair at the Support Services campus and one HA pair at the Orthopaedics campus, where the
Clinic's secondary Internet circuit terminates — protecting more than 60 ambulatory locations across south
Mississippi. All four appliances have reached manufacturer end-of-life and can no longer be extended under
a compliant, vendor-supported contract. The Clinic requires a full one-for-one refresh of both HA pairs (four
appliances total) with current-generation equipment, associated interconnect cabling, multi-year threat-
prevention and URL-filtering subscriptions, multi-year premium support, and fixed-fee implementation
services.
This solicitation is vendor-neutral. Any offeror capable of meeting the functional and performance
requirements below may respond, regardless of underlying product name or manufacturer.
2. Current Environment
• Two HA pairs of NGFW appliances (four appliances total) — one pair at Support Services, one pair at
Orthopaedics
• Existing appliances provide IDS/IPS, web/URL content filtering, LAN-to-LAN IPsec tunneling to satellite
sites, and User-ID / Active Directory integration for identity-aware policy enforcement
• Both HA pairs sit at the Clinic's two Internet edges, inspecting egress/ingress traffic for 60+ ambulatory
sites, including EHR, patient portal, e-prescribing, lab/imaging exchange, and Teams Direct Routing
voice traffic
• All four appliances are at or past manufacturer end-of-life; none can be extended under a compliant
vendor support contract past the published end-of-support date
3. Required Capabilities (Functional Specification)
Capability
Form factor
Core security functions
Threat-prevention
subscription
URL filtering subscription
Support
Interconnect / uplink
Minimum Requirement
Four (4) current-generation next-generation firewall appliances,
configured as two high-availability pairs (2 appliances per pair), each
with redundant AC power supplies.
Intrusion detection and prevention (IDS/IPS), web/URL content
filtering, LAN-to-LAN IPsec VPN tunneling, User-ID / Active Directory
integration for identity-aware policy enforcement, and outbound
Internet inspection.
Vendor-updated Advanced Threat Prevention (IDS/IPS signatures,
malware inspection, command-and-control detection) for all four
appliances, minimum 3-year term.
Vendor-updated Advanced URL Filtering / web content classification
for all four appliances, minimum 3-year term.
Premium 24×7 vendor support with replacement hardware coverage
and engineering escalation, for all four appliances, minimum 3-year
term.
10 GbE SFP+ direct-attach or equivalent interconnect cabling
sufficient for HA synchronization and uplink at both campuses.
Page 1
Hattiesburg Clinic | Agency Bid Bank Solicitation Attachment
High availability
Implementation services
Implementation timeline
Both HA pairs must support active/passive or active/active failover
with vendor-published convergence targets, validated via failover
testing at cutover.
Fixed-fee remote (or on-site, if required) professional services
covering HA cutover, rule-base normalization, best-practice
threat/malware/AV policy configuration, User-ID/AD integration, VPN
tunnel migration, and NAT/security-zone re-establishment for both
campuses.
Full cutover of both HA pairs completed within 90 days of contract
execution / equipment delivery.
4. Term and Delivery
• Subscription and support term: 3 years from cutover/activation date, covering all four appliances
• Implementation completed within 90 days of contract execution
• Delivery to two Hattiesburg, Mississippi campuses (Support Services and Orthopaedics) — exact
delivery addresses provided upon award
5. Vendor Response Requirements
• A technical narrative demonstrating how the proposed solution meets each capability listed in Section 3
• Firm, itemized pricing broken out by: appliances/hardware, interconnect cabling, threat-prevention
subscription, URL-filtering subscription, premium support, and implementation services
• Proposed implementation plan and timeline, including a cutover/failover testing approach
• Support model (hours of coverage, escalation path, hardware-replacement SLA)
• At least one reference customer of comparable size, healthcare references preferred but not required
• Completed MBE/WBE vendor status disclosure, if applicable, and any known qualified subcontractor
participation
6. Evaluation and Submission
Responses will be evaluated on demonstrated capability match to Section 3, price, implementation timeline,
and support model. Submit responses per the instructions and due date posted with this solicitation on the
Mississippi Agency Bid Bank. Direct questions to the Bid Specialist at 601-359-2036 or through the pre-bid
conference, if requested.
This document is a technical specification only and does not disclose the Clinic's budget or target price for this procurement.
Page 2