Delivery and implementation of security technologies for the Faculty Hospital in Plzeň

The subject of the performance of the contract is delivery, implementation and operating support:

1. Web application firewall including API protection - also WAF. Two virtual applications for the Hyper---platform will be used to protect the web application of the procuring entity and must be involved in high availability mode, i.e. as a non-outage cluster.
2. Load balancer with application proxy and security protection. Two specialized hardware applications used to manage and optimize users' access to applications by dividing incoming traffic between multiple servers, controlling their availability, relieving them from encryption of communications, protecting applications from conventional attacks from the Internet and, according to the set rules, directing requirements for the correct services, ensuring greater performance, availability and security of the systems operated. Hardware application must be involved in high availability mode.
3. Advanced Sandbox Solutions in the form of two dedicated hardware applications designed to detect unknown malware, zeroday threats and advanced attacks through a combination of static, dynamic and behavioral analysis. Hardware application must be involved in high availability mode
4. The solution of the security design platform in the form of virtual application designed for advanced detection of cyber threats in the contracting entity network. The solution must be able to detect attacks in their early stages, especially during the survey and lateral movement of the attacker, without the need (but with the possibility) to install agents on the terminal equipment.The whole delivery must contain all HW components and all necessary licences for a minimum period of 5 years, including the provision of new versions of the SW part of the delivered solution and firmware supplied by HW. None of the solutions offered shall be available at the time of the submission of the offer in the end of sales / end of support mode or at the time of the 5 years for which licences and support are purchased.All required functions must be part of a stable version of the operating system / firmware at the time the offer is submitted, the functions included on the roadmap will not be accepted.The contract also includes the implementation of the supplied solution in the contractor's environment (including the installation site start-up, connection to the sponsor's logging platform (type can be obtained after the NDA is signed), registration with the manufacturer and provision of system operating support by the manufacturer in the mode described in Chapter 2.2 of this ZD for 5 years.Before implementing the supplied solution in the contractor environment, the Supplier must process the Solution Design describing the current and future state of those parts of the contractor's security environment that will be affected by the implementation of the delivered technologies in the contractor's environment.