RFQ 25-0202116 - Tufin Firewall Enterprise Automation Tool

The California Department of Technology (CDT) issued Request for Quotation (RFQ) #25-0202116 for the procurement of the Tufin Firewall Enterprise Automation Tool for Network, a three-year subscription license solution designed to enhance network security automation and management across two CDT locations: Gold Camp Campus in Rancho Cordova and Vacaville Campus in Vacaville. The solicitation requires comprehensive deliverables including installation of the Tufin Orchestration Suite (TOS) with high availability and disaster recovery capabilities, integration into CDT's existing network environment with authentication setup, deployment of TOS features supporting 20 firewall units and 50 routers, implementation of one unified security policy with five workflows, SecureApp coverage for two applications, SecureCloud onboarding, TOS report configuration and testing, project management, and knowledge transfer. The service period runs from March 1, 2026, through February 28, 2029, with annual advance payments. Quotes are due by 2:00 PM Pacific Time on February 11, 2026, submitted via two separate emails marked "BID" and "COST BID," with the anticipated Intent to Award date of February 17, 2026. Written questions must be submitted by February 4, 2026, at 10:00 AM PT, and responses will be posted by February 5, 2026. Pricing must be submitted as unit prices and extended prices for five line items covering 70 Tufin Enterprise Firewall Units for Years 1, 2, and 3, one Deployment Base Package, and one Deployment Package Option for 20 TOS Monitored Firewall Units. Award will be made to the lowest responsive and responsible bidder following application of applicable incentives and preferences.

The State of California has implemented specific set-aside designations and requirements for this procurement, including a five percent Small Business preference for California-certified small businesses or non-small businesses committing 25 percent subcontracting to certified small businesses, and a tiered Disabled Veteran Business Enterprise (DVBE) incentive ranging from one to five percent based on DVBE participation levels. Mandatory DVBE participation is required with a minimum one percent commitment of the net bid price, and the awarded contractor must submit a complete Prime Contractor's Certification-DVBE Subcontracting Report (STD 817) upon contract completion, with CDT withholding $10,000 from final payment pending receipt and validation of this report. Bidders must comply with California Civil Rights Laws, provide Payee Data Records (STD 204 and STD 205), submit Bidder Declaration forms identifying all proposed subcontractors, execute the Byrd Anti-Lobbying Amendment certification, and comply with Federal Tax Administration requirements and IRS Publication 1075 safeguarding standards. The procurement is governed by DGS General Provisions for Non-Cloud Goods & Services-Information Technology (DGS PD 403-ITGP) effective February 20, 2025. No specific budget range or award value is listed in the solicitation documents; however, the scope encompasses a three-year enterprise solution with significant implementation and licensing costs across two major campuses. The State reserves the right to reject any or all bids and cancel the RFQ if deemed in the State's best interest.