Cedar Rapids Ionwave #PUR1125-146 Addendum 1

Award for Next-Generation Firewall Upgrade and Implementation for City of Cedar Rapids

The City of Cedar Rapids Information Technology Department has awarded a contract for a comprehensive next-generation firewall upgrade and implementation project. - Government Buyer: - City of Cedar Rapids Information Technology Department (Purchasing Services) - Project oversight by IT Director Shawn Smith; procurement managed by Rebecca Johnson - OEMs and Vendors: - Primary OEM: Palo Alto Networks (current models 1420 and 3220 referenced for replacement) - Awarded Vendor: High Point Networks - Products and Solutions Requested: - Replacement of existing Palo Alto firewalls with new next-generation firewall appliances - Must support high availability (HA), redundancy, BGP routing, and FIPS compliance - Minimum performance: 9.5 Gbps firewall throughput, 6.2 Gbps threat prevention, 5.6 Gbps IPSec VPN, 1,000,000 concurrent sessions - Required interfaces: 1/2.5/5G RJ-45, 1G SFP, 1/2.5/5G PoE RJ-45, 1/10G SFP+ - Support for Layer 2/3 routing, segmented architecture (PCI DSS, Public Safety, Traffic, optional SCADA) - VPN access for 2,000 remote users - Centralized management and logging, with integration to Microsoft Entra ID, Active Directory, Microsoft Sentinel, Splunk, and LogRhythm - Support for SSL/TLS decryption, IPS, anti-malware, URL filtering, and web application firewall capabilities (future planning) - All components must be new and manufacturer-authorized with full OEM support - Software and Licensing: - Core security features (URL filtering, threat prevention, antivirus, application control) - 3- and 5-year bundled pricing for hardware, software, and support - Management appliance or virtual controller if required - Services Requested: - Design and architecture workshops, detailed documentation, and collaborative planning - Installation, configuration, and integration with City systems - Policy and rule migration, including validation and documentation - High availability and failover testing - Integration with identity and SIEM/logging systems - Training, knowledge transfer, and operational documentation for City IT staff - Post-implementation support (minimum 30 days), with options for long-term managed services - Unique/Notable Requirements: - Compliance with CJIS and PCI DSS standards - Logical segmentation for PCI DSS and SCADA networks - Solution must be independently deployable and scalable for future growth - Buy Local preference for Linn County businesses - Places of Performance and Delivery: - City of Cedar Rapids data center, Police Department, two campus locations, traffic control, water treatment, and optional SCADA expansion - Contracting office: City Hall, 101 First Street SE, Cedar Rapids, IA 52401

Description

The City of Cedar Rapids is seeking proposals for a next-generation firewall solution to upgrade and implement a firewall system that integrates with the City's existing and planned infrastructure. The solution must support high availability, redundancy, compliance with CJIS and PCI DSS standards, and centralized management and logging. The project includes design, hardware/software delivery, installation, configuration, policy migration, testing, integration with identity and logging systems, training, and post-implementation support. Vendors are required to submit proposals electronically by January 30, 2026, and the City will evaluate proposals based on technical merit, compliance, cost, and sustainability.

View original listing