RFQ: Procurement and Implementation of a Next-Generation Firewall (NGFW)

<p><strong>ABOUT INKOMOKO&nbsp;</strong></p><p>Inkomoko supports entrepreneurs to grow their businesses in order to improve livelihoods, create jobs, and help communities thrive.</p><p>In 2025, Inkomoko was listed by the Financial Times as the 8th fastest-growing company in Africa, supporting entrepreneurs across East and Central Africa to grow thriving businesses and build inclusive, resilient economies. <br>Founded in 2012, Inkomoko is a non-profit that has worked with more than 100,000 entrepreneurs, including thousands of refugee businesses. Inkomoko provides a combination of training, consulting, access to finance, and market-level systems change to drive impact for our clients. We are the largest investor to refugee entrepreneurs in Africa.<br><br>Inkomoko has 800+ staff in 50 offices across Chad, Ethiopia, Kenya, Rwanda, and South Sudan. Through Inkomoko’s 2030 strategic plan, we are adding 3 additional countries to positively impact 7M people, by serving more than 550,000 entrepreneurs and growing our $30M loan fund.<br><br><strong>INKOMOKO VALUES</strong><br>All staff at Inkomoko are connected to a shared set of organizational values:</p><ul><li><em><strong>Purpose: </strong></em>be solutions-oriented, produce high-quality work, and be a global leader.</li><li><em><strong>Achievement:</strong></em> push yourself to reach beyond what you previously thought possible.&nbsp;</li><li><em><strong>Improvement:</strong></em> be humble, engage in continuous growth through open &amp; accurate feedback</li><li><em><strong>Bravery:</strong></em> willing to take risks, create a safe space for others, be compassionate, and inclusive.</li><li><em><strong>We Eat Goat: </strong></em>we celebrate success and support each other in hard times. We do this work together in the spirit of turikumwe, tuko pamoja, abren nen, Kula na sawa, On est ensemble.</li></ul><p><strong> Introduction</strong></p><p>Inkomoko invites qualified and experienced ICT solution providers to submit quotations for the supply,<strong> implementation, configuration, and support of a Next-Generation Firewall (NGFW) and Zero Trust Architecture (ZTA) solution.</strong></p><p>The selected vendor will provide a comprehensive security solution capable of protecting Inkomoko's network infrastructure across its primary and disaster recovery (DR) environments while supporting secure connectivity for multiple country offices.</p><p>The assignment includes supply of equipment, implementation, migration, configuration, testing, documentation, training, and post-implementation support.&nbsp;</p><p><strong>Objective</strong></p><p>The objective of this procurement is to secure Inkomoko's network perimeter and internal infrastructure through the implementation of a high-performance, identity-aware Next-Generation Firewall that supports:</p><ul><li>Zero Trust Network Access (ZTNA)&nbsp;</li><li>Multi-site orchestration&nbsp;</li><li>Advanced threat protection&nbsp;</li><li>High availability&nbsp;</li><li>Secure remote connectivity&nbsp;</li><li>Centralized management and reporting&nbsp;</li></ul><p><strong>Scope of Work</strong></p><p>The successful vendor shall provide the following:</p><ul><li>Supply of enterprise-grade Next-Generation Firewall appliances.&nbsp;</li><li>Installation and configuration at the Primary and Disaster Recovery sites.&nbsp;</li><li>High Availability deployment (Active-Active or Active-Passive).&nbsp;</li><li>Layer 7 application inspection.&nbsp;</li><li>Identity-aware access control.&nbsp;</li><li>SSL/TLS inspection.&nbsp;</li><li>Intrusion Prevention System (IPS).&nbsp;</li><li>Advanced malware protection and sandboxing.&nbsp;</li><li>Web and URL filtering.&nbsp;</li><li>Zero Trust Architecture implementation.&nbsp;</li><li>Device posture assessment.&nbsp;</li><li>Endpoint telemetry integration.&nbsp;</li><li>Micro-segmentation.&nbsp;</li><li>SD-WAN configuration.&nbsp;</li><li>Centralized cloud management.&nbsp;</li><li>Policy synchronization between sites.&nbsp;</li><li>Security logging and compliance reporting.&nbsp;</li><li>Migration from the existing firewall environment.&nbsp;</li><li>Knowledge transfer and administrator training.&nbsp;</li><li>24/7 support and maintenance.&nbsp;</li><li>Firmware and security signature updates.&nbsp;</li></ul><p>Delivery shall be completed within 30 calendar days from issuance of the Purchase Order.&nbsp;</p><p><strong>Deliverables</strong></p><p>The successful vendor shall provide:</p><ul><li>NGFW deployment and implementation plan.&nbsp;</li><li>Installed and configured firewall infrastructure.&nbsp;</li><li>Successful migration from existing firewall infrastructure.&nbsp;</li><li>Security policy documentation.&nbsp;</li><li>SD-WAN configuration documentation.&nbsp;</li><li>Administrator training.&nbsp;</li><li>Knowledge transfer documentation.&nbsp;</li><li>Acceptance testing report.&nbsp;</li><li>Warranty documentation.&nbsp;</li><li>Support and maintenance plan.&nbsp;</li></ul>