4618-20260930092701 HATTIESBURG CLINIC.pdf

Hattiesburg Clinic | Agency Bid Bank Solicitation Attachment

Scope of Work / Technical Specification NGFW Perimeter Defense Refresh — High-Availability Firewall Replacement Hattiesburg Clinic, P.A. | Bid Number 4618-20260930092509

1. Background and Purpose Hattiesburg Clinic operates two high-availability (HA) pairs of next-generation firewall (NGFW) appliances — one HA pair at the Support Services campus and one HA pair at the Orthopaedics campus, where the Clinic's secondary Internet circuit terminates — protecting more than 60 ambulatory locations across south Mississippi. All four appliances have reached manufacturer end-of-life and can no longer be extended under a compliant, vendor-supported contract. The Clinic requires a full one-for-one refresh of both HA pairs (four appliances total) with current-generation equipment, associated interconnect cabling, multi-year threat-prevention and URL-filtering subscriptions, multi-year premium support, and fixed-fee implementation services.

This solicitation is vendor-neutral. Any offeror capable of meeting the functional and performance requirements below may respond, regardless of underlying product name or manufacturer.

2. Current Environment

• Two HA pairs of NGFW appliances (four appliances total) — one pair at Support Services, one pair at

Orthopaedics

• Existing appliances provide IDS/IPS, web/URL content filtering, LAN-to-LAN IPsec tunneling to satellite sites, and User-ID / Active Directory integration for identity-aware policy enforcement

• Both HA pairs sit at the Clinic's two Internet edges, inspecting egress/ingress traffic for 60+ ambulatory sites, including EHR, patient portal, e-prescribing, lab/imaging exchange, and Teams Direct Routing voice traffic

• All four appliances are at or past manufacturer end-of-life; none can be extended under a compliant vendor support contract past the published end-of-support date

3. Required Capabilities (Functional Specification) Capability Minimum Requirement

Form factor Four (4) current-generation next-generation firewall appliances, configured as two high-availability pairs (2 appliances per pair), each with redundant AC power supplies.

Core security functions Intrusion detection and prevention (IDS/IPS), web/URL content filtering, LAN-to-LAN IPsec VPN tunneling, User-ID / Active Directory integration for identity-aware policy enforcement, and outbound Internet inspection.

Threat-prevention subscription

Vendor-updated Advanced Threat Prevention (IDS/IPS signatures, malware inspection, command-and-control detection) for all four appliances, minimum 3-year term.

URL filtering subscription Vendor-updated Advanced URL Filtering / web content classification for all four appliances, minimum 3-year term.

Support Premium 24×7 vendor support with replacement hardware coverage and engineering escalation, for all four appliances, minimum 3-year term.

Interconnect / uplink 10 GbE SFP+ direct-attach or equivalent interconnect cabling sufficient for HA synchronization and uplink at both campuses.

Hattiesburg Clinic | Agency Bid Bank Solicitation Attachment

High availability Both HA pairs must support active/passive or active/active failover with vendor-published convergence targets, validated via failover testing at cutover.

Implementation services Fixed-fee remote (or on-site, if required) professional services covering HA cutover, rule-base normalization, best-practice threat/malware/AV policy configuration, User-ID/AD integration, VPN tunnel migration, and NAT/security-zone re-establishment for both campuses.

Implementation timeline Full cutover of both HA pairs completed within 90 days of contract execution / equipment delivery.

4. Term and Delivery

• Subscription and support term: 3 years from cutover/activation date, covering all four appliances

• Implementation completed within 90 days of contract execution

• Delivery to two Hattiesburg, Mississippi campuses (Support Services and Orthopaedics) — exact delivery addresses provided upon award

5. Vendor Response Requirements

• A technical narrative demonstrating how the proposed solution meets each capability listed in Section 3

• Firm, itemized pricing broken out by: appliances/hardware, interconnect cabling, threat-prevention subscription, URL-filtering subscription, premium support, and implementation services

• Proposed implementation plan and timeline, including a cutover/failover testing approach

• Support model (hours of coverage, escalation path, hardware-replacement SLA)

• At least one reference customer of comparable size, healthcare references preferred but not required

• Completed MBE/WBE vendor status disclosure, if applicable, and any known qualified subcontractor participation

6. Evaluation and Submission Responses will be evaluated on demonstrated capability match to Section 3, price, implementation timeline, and support model. Submit responses per the instructions and due date posted with this solicitation on the Mississippi Agency Bid Bank. Direct questions to the Bid Specialist at 601-359-2036 or through the pre-bid conference, if requested.

This document is a technical specification only and does not disclose the Clinic's budget or target price for this procurement.