Application Gateway

The DIT's service portfolio includes the "Application Gateway" service. This technical infrastructure service is operated as a central component in the Security department. Basically, the Application Gateway secures all web protocol connections between clients and servers and, in addition to classic WAF functionality, also takes over specific functions such as load balancing, authentication proxy, etc. Currently, a BIG-IP f5 infrastructure is operated, and the hardware will soon reach its end of support. Accordingly, the "Application Gateway" platform is to be renewed and expanded with more consistent security profiles, more automation, and better integration into surrounding systems. The tender aims to find the most suitable solution for the current and future needs of the DIT and its partners and customers, including the procurement of the corresponding hardware/licenses, as well as a reliable and experienced partner for the introduction (project services) and support of the future solution (operational services). The goal is to procure an "Application Gateway" that roughly covers the following key points: * Replacement of on-prem hardware * Reworking of the current network integration according to specifications * Load balancing, WAF, AGW Service Profile, DDoS functionality * Authentication Proxy / Authorization * Conceptual expansion and standardization of current security profiles and their technical implementation * Automation where sensible The new Application Gateway infrastructure should be scalable, stable, easy to operate, and future-proof for new requirements, especially in the areas of public access and cloud (SaaS / IaaS). After the project (procurement of hardware/licenses, project services), the cooperation (license/maintenance fees, operational services, maintenance) will be regulated with a five-year term, which can be optionally extended twice for two years each. Composition of the procurement item * Procurement of the necessary hardware for the initial infrastructure setup - 3x Hardware Appliances for Production Data Center 1+2 (2+1 setup) - 2x Hardware Appliances for Quality, same types as production - 2x VM or Hardware Appliances for Test * Project services according to LH01 Chapter 5 * Regular operational services (support services) according to LH01 Chapter 6.1 * Licenses and maintenance fees * Option 1: Full infrastructure setup according to LH02 Chapter 3.1 * Option 2: Cloud AGW according to LH02 Chapter 4 * Option 3: Managed Services according to LH01 Chapter 6.2 Licenses and fees must be offered in such a way that they are valid from the time required by the provider and cover the period until January 31, 2032.