SAM #RFQ205AE926Q00116

Procurement of Tufin Enterprise Suite for Firewall Security Management

The IRS is seeking to procure the Tufin Enterprise Suite for advanced firewall security management and automation. - Purpose & Context: - IRS IT Strategy and Modernization office aims to replace FireMon Security Manager with Tufin Enterprise Suite. - Supports Common Communications Gateway (CCG) and CSRIC/Cybersecurity teams for policy review, audit, and implementation. - Products & Quantities: - 3 Tufin T-1220 hardware appliances with 1-year support and warranty - 1 Tufin T-820 hardware appliance with 1-year support and warranty - 85 Tufin Enterprise per Firewall Unit licenses (enterprise licensing) - Professional services for customized deployment and integration - Deployment packages for new enterprise deployment, additional firewall units, ServiceNow integration, and extension applications - Appliance support and warranty for Tufin hardware - Technical & Integration Features: - Tufin platform integrates with firewalls, routers, cloud accounts, and SASE services via API/CLI - Enables live configuration retrieval, network mapping, policy optimization, compliance, audit, and segmentation management - Integrates with ServiceNow for ITSM change management automation - Period of Performance: - 12-month base period (9/30/2026–9/29/2027) with four 12-month option periods (through 9/29/2030) - Requirements & Compliance: - Solution must support federal cybersecurity requirements and enhance network security automation - OEM & Competition: - Tufin is the specified OEM; FireMon is the incumbent platform being replaced - Other potential competitors include Palo Alto Networks, Cisco, and Check Point, which offer similar firewall management solutions - No specific contract value is provided, but based on scope, estimated range is $500,000–$2,000,000

Description

The primary purpose of this request is to procure the Tufin Enterprise Suite. Tufin will support the Common Communications Gateway (CCG) and CSRIC/Cybersecurity teams in reviewing,analyzing, auditing, and implementing firewall policy changes. It will replace the FireMon Security Manager, streamlining policy management and change workflows.

The platform integrates with enforcement points—including firewalls, routers, cloud accounts, and SASE services—via API and CLI access to retrieve live configurations and routing data. This capability enables Tufin to generate an interactive, unified map that consolidates traffic flows, endpoints, and connectivity paths across hybrid environments.

Tufin provides comprehensive Security Policy Management capabilities, including change tracking, policy optimization and cleanup, device configuration compliance and audit, and network segmentation management. It enhances network visibility through detailed mapping, visualization, and path analysis to support efficient troubleshooting and operational insight. Additionally, Tufin integrates with ServiceNow to support ITSM change management processes. This integration enables automation of key functions such as proactive risk assessment, change request verification, change design and path identification, and target selection, streamlining workflow efficiency and reducing manual intervention.

View original listing