Firewall Security Management Tool Tufin Support

Limited / Sole Source Justification Posted

Solicitation number
RFQ205AE926Q00116
Agency
Set-aside
No set-aside

Opportunity facts

Place of performance
Kearneysville, West Virginia 25430, United States

Notice details come from SAM.gov. Updated .

About this opportunity

The Internal Revenue Service intends to award a sole-source contract for the Tufin Enterprise Suite, a network security policy management platform, on a limited-sources basis under FAR 16.505(a)(4) as a brand name specification, with a total contract value of $1,944,315.79.

Market research determined that Tufin is the only solution meeting all IRS technical, operational, and integration requirements, including IPv6 compliance, direct vendor-supported ServiceNow integration, Infoblox IPAM integration, and support for Cisco VRF, F5, Palo Alto, and Fortinet devices. Comparative analysis against two alternative products demonstrated critical deficiencies in competing solutions, including lack of API documentation, missing mandatory integrations, IPv6 non-compliance, and incomplete Section 508 accessibility compliance. The platform will support the Common Communications Gateway and CSRIC/Cybersecurity teams in reviewing, analyzing, auditing, and implementing firewall policy changes, replacing the existing FireMon Security Manager. Tufin integrates with enforcement points via API and CLI access and with ServiceNow to automate change management workflows.

The base period runs 9/30/2026 through 9/29/2027 at $799,261.11, with three one-year options valued at $354,634.21, $381,684.61, and $408,735.86. The procurement includes hardware appliances (T-1220 and T-820 models) and software licenses for 85 firewall units. Competition is limited to authorized Tufin resellers under the NASA SEWP V Government-Wide Acquisition Contract on a Lowest Price Technically Acceptable basis. NAICS code 541519 and PSC 7J20 apply. Award date is September 30, 2026.

Notice text

The primary purpose of this request is to procure the Tufin Enterprise Suite. Tufin will support the Common Communications Gateway (CCG) and CSRIC/Cybersecurity teams in reviewing,analyzing, auditing, and implementing firewall policy changes. It will replace the FireMon Security Manager, streamlining policy management and change workflows.

The platform integrates with enforcement points—including firewalls, routers, cloud accounts, and SASE services—via API and CLI access to retrieve live configurations and routing data. This capability enables Tufin to generate an interactive, unified map that consolidates traffic flows, endpoints, and connectivity paths across hybrid environments.

Tufin provides comprehensive Security Policy Management capabilities, including change tracking, policy optimization and cleanup, device configuration compliance and audit, and network segmentation management. It enhances network visibility through detailed mapping, visualization, and path analysis to support efficient troubleshooting and operational insight. Additionally, Tufin integrates with ServiceNow to support ITSM change management processes. This integration enables automation of key functions such as proactive risk assessment, change request verification, change design and path identification, and target selection, streamlining workflow efficiency and reducing manual intervention.

Awarded contract TBD to unknown vendor for unknown amount on 2026-09-30.

Files

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Find teaming partners
  • Similar opportunities
  • Ask GovTribe AI about this opportunity