Summary of Requirements.pdf

NCIA/ACQ/2025/07470

Annex A – Summary of Requirements

1. Project Objective

The NCI Agency is seeking to establish five (3) IDIQ contracts for use at NATO Enterprise

Level for the entire product lifecycle of Palo Alto Networks Platform products and services under the Enterprise Frequent and Swift Transaction (e-FAST) Contract Programme.

2. Scope of Work

a) The NATO Communications and Information Agency (NCIA) has growing requirements for Palo Alto Networks devices and is looking into renewing the existing preferred vehicle for the procurement of such devices. Therefore, the objective is to establish an e-FAST IDIQ framework with five (5) suppliers as the preferred vehicle for the procurement of Palo Alto Networks devices during its Period of Performance.

b) The IDIQ will provide an overarching set of terms and conditions and a broad requirement. Five suppliers will receive a place on this IDIQ framework.

c) When the Agency has a requirement for Palo Alto Networks devices, a Statement of

Work (SoW) will be developed and a Delivery Order competition will be run between the five suppliers on the IDIQ. The resulting lowest priced, technically compliant offer would be awarded the resulting Task Order to complete the work detailed in the SoW.

Whilst it is envisaged that the Agency has growing requirements for Palo Alto

Networks devices, there is no guarantee of any work through the IDIQ framework.

d) A place on the IDIQ framework agreement will be awarded through competition. The

Agency will issue the IDIQ requirements, alongside a SoW for the first Task Order to be placed under the IDIQ framework. The five lowest priced, technically compliant bids received for first Task Order will be awarded a place on the IDIQ framework. Of these five, whichever supplier has the lowest price, technically compliant bid will be awarded the first Task Order. This approach will ensure that the five lowest priced suppliers in the market will competitively be awarded a place on the IDIQ for future Task Orders, whilst simultaneously awarding the lowest priced (of the five) the first Task Order.

e) With the IDIQ established with up to five suppliers, Palo Alto Networks device requirements during the Period of Performance will be procured via a Delivery Order competition through this IDIQ framework. For each Delivery Order competition, the lowest priced, technically compliant quote will win the resulting Task Order. This approach will ensure that the Agency receives the best prices through competition and allow the Agency to capitalise on opportune buying points (such as discounts and promotions) throughout the Period of Performance.

NCIA/ACQ/2025/07470

f) The aim of the IDIQ framework is to ensure a broad scope; however, a non-exhaustive list of potential hardware devices, subscriptions/services and other requirements includes:

a. Palo Alto Networks appliances (hardware and software firewalls) to cover the entirety of Palo Alto Networks’ product portfolio;

b. Palo Alto Networks security services/subscriptions and Cloud-delivered security services/subscriptions, such as (Advanced) Threat Prevention, (Advanced) URL Filtering, Global Protect, (Advanced) Wildfire, DNS Security, IOT security, Enterprise DLP SaaS Security, Proxy or SD-WAN may be delivered with the appliances delivered under this Schedule A;

c. Hardware licenses (extra virtual systems);

d. Accessories such as rack mounting kits and SFPs;

e. Software Next Generation Firewall (NGFW) Credits (such as VM series and/or

CN series);

f. Panorama (hardware or virtual appliance);

g. WildFire Private Cloud Appliances;

h. PRISMA Services such as PRISMA Cloud, PRISMA Access, PRISMA Access browser, PRISMA SASE;

i. CORTEX products such as XSOAR, XDR, Xpanse, XSIAM;

j. On-demand services such as Unit42 Incident Response or Cyber Risk

Management;

k. Additional continuous services like Unit42 Forward Deployed Analyst or

Focused Services;

l. Additional Palo Alto Networks appliances and licenses that might become available during the Period of Performance.

g) A basic period of three (3) years plus two 12-month option periods

3. Geographical Implementation

a. The Contractor shall supply equipment and services to all authorized NATO Command Locations in Europe and North America including any of NATO’s Affiliates, upon issuance of Task Orders in accordance with the terms of the Contract. The list of existing affiliates is available at:

http://www.nato.int/cps/en/natolive/structure.htm http://www.nato.int/cps/en/natolive/structure.htm