Indian Army NGFW Firewall Tender Pune Maharashtra 410301 - IPv6 Ready Enterprise Next-Generation Firewall 2026
Bid Publish Date
29-Aug-2026, 12:24 pm
Bid End Date
12-Sep-2026, 12:00 pm
Location
Progress
Tender Overview
The Indian Army, Department Of Military Affairs, requests an enterprise-grade Next Generation Firewall (NGFW) appliance for deployment in Pune, Maharashtra 410301. The bid covers a rack-mountable firewall with multiple interface capabilities, IPv6 readiness, and TEC certification compliance. Key scope includes on-site installation, configuration, testing, and OEM-trained deployment resources. The purchaser reserves a 25% quantity variation both up and during contract execution, with delivery timelines linked to the original delivery order and extended periods as defined. A data sheet must accompany the bid to enable precise parameter matching. This procurement targets robust security performance with high-throughput metrics and extensive interface options, suitable for defense-grade network protection under GR/IR-like requirements.
Technical Specifications & Requirements
- Product Type: Enterprise-grade NGFW appliance
- Form Factor: Rack-mount (rack size unspecified)
- Performance Metrics: IPS Throughput (Gbps), Firewall Throughput (Gbps), NGFW Throughput (Gbps), VPN Throughput, Threat Protection Throughput (Gbps)
- Interfaces: RJ45 ports, 2.5GE ports, SFP ports, 10G SFP+ ports, 25G SFP28, 40G QSFP+, 100G QSFP28
- Storage & Logging: Local log storage capacity in GB; logging integration supported
- Features: Networking features, management interfaces, and security features as per specification
- Warranty & Certification: Warranty Period (years); TEC certification as per GR/IR standards
- Warranty & Compliance: IPv6 readiness; Malicious Code Certificate requirement; OEM/authorized reseller deployment
Terms, Conditions & Eligibility
- Quantity Variability: Up to 25% increase/decrease in bid quantity at contract placement and during currency at contracted rates
- Data Sheet: Mandatory upload of product data sheet with bid; parameter consistency verification
- Vendor Code Documents: PAN, GSTIN, cancelled cheque, EFT mandate (certified)
- Installation Responsibility: Performed by OEM/OEM-certified resource or OEM-authorized reseller
- IPv6 Readiness: Equipment must be IPv6-ready from day one
- Malicious Code Certificate: Certification that hardware/software contains no embedded malicious code; breach consequences described
- ATC BBQR Clause: Adherence to broad qualitative requirements for security hardware — MDC Khadki East
Key Specifications
-
Enterprise-grade NGFW appliance (rack-mount)
-
Interface options: RJ45, 2.5GE, SFP, 10G SFP+, 25G SFP28, 40G QSFP+, 100G QSFP28
-
Throughput metrics: IPS, Firewall, NGFW, VPN, Threat Protection (Gbps)
-
Local log storage capacity in GB
-
Security features, management interfaces, and networking features
-
Warranty period and TEC GR/IR certification
-
IPv6 readiness from day one
-
Malicious Code certificate and IP/IPR compliance
Terms & Conditions
-
25% quantity variation allowed during procurement and contract currency
-
Data Sheet must match offered product parameters; mismatch can lead to rejection
-
Installation by OEM or certified partner; IPv6 readiness mandatory
-
Malicious code certificate required; IP/IR implications considered
-
TEC certification as per GR/IR requirements for interface and generic criteria
Important Clauses
Payment Terms
Not specified in provided data; standard government terms may apply including payment on delivery or milestones
Delivery Schedule
Delivery period linked to original delivery order; extended period governed by option clause with minimum 30 days
Penalties/Liquidated Damages
Not explicitly stated; apply standard procurement LDs for late delivery as per government terms
Bidder Eligibility
-
OEM or OEM-authorized reseller with deployment capability
-
Prior experience in deploying enterprise NGFW for defense or large-scale networks
-
Compliance with IPv6 readiness and TEC GR/IR certifications
Tender Data
Bid Details
Quantity
1
Bid Type
Two Packet Bid
Bid Validity
150 (Days)
Bid Type
Service
Evaluation
Total value wise evaluation
Inspection Required
No
RA Qualification Rule
50% Lowest Priced Technically Qualified Bidders
Tech Clarification Time
3 Days
Preference & Exemptions
EMD Required
No
MII Purchase Preference
No
MSE Purchase Preference
Yes
MSE Preference Band
L1+15%
MSE Exemption/Relaxation
Yes
Startup Exemption/Relaxation
Yes
Bid Splitting Applied
No
Requirements
Min. Avg. Annual Turnover
5
OEM Avg. Turnover
1
Past Performance
20 %
Warranty Period
3 years
Experience Required
1 Year (s)
Arbitration Clause
No
Mediation Clause
No
Additional Tender Data
Commercial Details
Tender Category
Goods
Bid To RA
No
Bid To RA Enabled
Yes
Item Category
Firewall (V4) (Q2)
Delivery Details
Max Delivery Days
15
Delivery Locations
1
Delivery Cities
Pune
Delivery Locations
| Consignee | Address | City | State | Pincode | Quantity | Delivery Days | Additional Requirement |
|---|---|---|---|---|---|---|---|
| - | Pune | Pune | - | - | 1 | 15 | - |
Authority Records
BID & GeM Expert Consultancy
End-to-end support — bid preparation, GeM registration, document filing & compliance by industry experts.
Free consultation · 24h response
Documents 3
GeM-Bidding-9683188.pdf
Main Document
CATALOG-Specification-1
CATALOG Specification
GEM General Terms and Conditions Document
GEM_GENERAL_TERMS_AND_CONDITIONS
Categories
2
🤖 AI-Powered Bidder Prediction
Discover companies most likely to bid on this tender
Required Documents
GST registration certificate
Permanent Account Number (PAN) card
Copy of Cancelled Cheque
EFT Mandate certified by bank
Data Sheet of offered product
OEM authorization or reseller authorization
Technical bid documents demonstrating compliance with listed specs
Experience certificates and prior deployment evidence
Technical Specifications
1 Item
Item #1 Details
View Catalog| Category | Specification | Requirement |
|---|---|---|
| Generic | Description of Store | Next Generation Firewall (NGFW) |
| Generic | Form Factor (Rack Size) | 1U |
| Generic | Type of Mounting | Desktop Mount |
| Performance | IPS Throughput (Gbps) | Up to 1, 1.1–5, 5.1–10, 10.1–20, 20.1–40, 40.1–80, 80.1-100, 100.1-150, 150.1-200 Or higher |
| Performance | Firewall Throughput (in Gbps) | Up to 1, 1.1–5, 5.1–10, 10.1–20, 20.1–40, 40.1–80, 80.1-100, 100.1-150, 150.1-200 Or higher |
| Performance | NGFW Throughput (Gbps) | Up to 1, 1.1–5, 5.1–10, 10.1–20, 20.1–40, 40.1–80, 80.1-100, 100.1-150, 150.1-200 Or higher |
| Performance | VPN Throughput | 501 Mbps–1 Gbps, 1.1–5 Gbps, 5.1–10 Gbps, 10.1-20 Gbps, 20.1–40 Gbps, 40.1–80 Gbps, 80.1-100 Gbps Or higher |
| Performance | Threat Protection Throughput (Gbps) | Up to 1, 1.1–5, 5.1–10, 10.1–20, 20.1–40, 40.1–80, 80.1-100, 100.1-150, 150.1-200 Or higher |
| Interface & Connectivity | Number of RJ45 Ports | 8 |
| Interface & Connectivity | Number of 2.5GE Ports | 0 |
| Interface & Connectivity | Number of SFP Ports | 0 |
| Interface & Connectivity | Number of 10G SFP+ Ports | 0 |
| Interface & Connectivity | Number of 25G SFP28 Ports | 0 |
| Interface & Connectivity | Number of 40G QSFP+ Ports | 0 |
| Interface & Connectivity | Number of 100G QSFP28 Ports | 0 |
| Interface & Connectivity | Local Log Storage Capacity (in GB) | 64, 120, 240, 480, 960 Or higher |
| Features | Features Supported | Intrusion Prevention System, Application Control, URL Filtering, Anti Malware Protection, Command and Control Protection, DNS Security, Sandboxing, SSL Inspection, Data Loss Prevention, Not Applicable for Stateful Inspection Firewall, Anti Spam |
| Features | Networking Features Supported | Network Address Translation (NAT), VLAN Support, Static Routing, Policy Based Routing, Dynamic Routing, Border Gateway Protocol (BGP), Dynamic Host Configuration Protocol (DHCP) Server, Dynamic Host Configuration Protocol (DHCP) Relay, IPv6 Ready/Certified, SD-WAN |
| Features | Management Interfaces Supported | Web GUI, Command Line Interface, REST API, Centralised Management Platform (Cloud), Centralised Management Platform (On-Premise) |
| Features | Logging Integration Supported | Local Logging, Syslog Integration, SIEM Integration, Centralised Logging (Cloud), Centralised Logging (On-Premise) |
| Features | Power Supply Configuration | Single Fixed Power Supply |
| Certification and Warranty | Warranty Period (in Years) | 3, 4, 5 Or higher |
| Certification and Warranty | Certification from TEC as per Standard for Generic Requirements (GR)/Interface Requirements (IR) | No |
Frequently Asked Questions
Key insights about MAHARASHTRA tender market
How to bid for the Indian Army NGFW firewall tender in Pune?
Bidders must submit the Data Sheet with exact specifications, provide PAN, GSTIN, cancelled cheque, and EFT mandate. OEM authorization or reseller certification is required; installation must be by OEM resources. Ensure IPv6 readiness and TEC GR/IR compliance. Include 25% quantity flexibility details in bid submission.
What documents are required for firewall procurement submission in Pune?
Required documents include GST certificate, PAN card, cancelled cheque, EFT mandate, Data Sheet, OEM authorization, and technical bid. Also attach experience certificates showing NGFW deployments and any TEC GR/IR certification evidence where applicable.
What are the essential technical specs for NGFW in this tender?
Key specs include IPS, Firewall, NGFW, VPN, and Threat Protection throughput in Gbps; multiple interfaces including RJ45, 2.5GE, SFP, 10G SFP+, 25G SFP28, 40G QSFP+, 100G QSFP28; local log storage in GB; IPv6 readiness; and TEC certification.
When is the delivery window and how are extensions handled?
Delivery starts from the last date of the original delivery order; option clauses allow up to 25% quantity changes with extended delivery time calculated as (Increase/Original) × Original period, minimum 30 days; extension can continue to reach original delivery period.
What is required to prove IPv6 readiness for the firewall?
Bidders must demonstrate IPv6-enabled hardware and dual-stack software support from day one; include configuration examples, test results, and vendor declarations confirming IPv6 compatibility and routing capabilities.
What is the role of Malicious Code Certificate in this procurement?
Proposers must certify that hardware and software do not contain embedded malicious code; failure to comply constitutes breach of contract and potential disqualification; include the certificate with bid documents.
Which organizations’ certification is specifically requested for this firewall?
TEC certification as per Standard for Generic Requirements (GR) or Interface Requirements (IR) is required; ensure documentation demonstrating TEC-compliant equipment and processes is attached.
What are the key evaluation points for the Data Sheet comparison?
Data Sheet must precisely reflect offered parameters; any mismatch triggers rejection risk. Align all throughput values, port counts, storage, and feature sets to the technical bid and TEC GR/IR references.