In terms of Rules 48 of Public Procurement Rules, 2004 Grievance Redressal Committee (GRC) is notified for the subject procurement and notification copy is available on the procuring agency’s website and on Authority’s website at (www.ppra.org.pk).
National Institutes of Health (NIH) (National Institutes of Health (NIH)), Assistant Director
Park Road, Islamabad Capital Territory
+92-333-855-4884
purchaseprocurement58@gmail.com
The following specific data for the procurement of Goods to be procured shall complement, supplement, or amend the provisions in the Instructions to Bidders (ITB). Whenever there is a conflict, the provisions herein shall prevail over those in ITB.
|
BDS Clause Number |
ITB Number |
Amendments of, and Supplements to, Clauses in the Instruction to Bidders |
A. Introduction |
||
|
1 |
1.1 |
Name of Procuring Agency:Â National Institutes of Health (NIH) (National Institutes of Health (NIH)) The subject of procurement is:Â Supply, Installation, Configuration, and Commissioning of Enterprise-Grade Next Generation Firewall Solution Expected commencement date: Wednesday, September 30, 2026 |
|
2. |
2.1 |
Financial year for the operations of the Procuring Agency:Â 2026-27 Name and identification number of the Contract: P66962Â |
| 3. | 3.1 | JV/Consortium or Association Allowed: No Number of JV/Consortium Members: Nil |
B. Bidding Documents |
||
|
4. |
6.2 & 6.4 |
The Bidders may seek clarifications through EPADS v2.0: Clarification Date: Friday, July 31, 2026 |
| 5. | 7.2 |
Any addendum, in case issued, shall be published on National Institutes of Health (NIH) (National Institutes of Health (NIH)) website and on EPADS v2.0. |
C. Preparation of Bids |
||
| 6. |
8.1 |
List of documents required along with the bid: No |
| 7. | 9.1 |
The qualification criteria to establish the supply / production capability of the bidder. see Eligibility Criteria |
| 8. | 11.2Â |
|
| 9. | 11.1 | Price schedule will be provided according to the format defined and acquired. see section price schedule. |
| 10. | 11.4 |
 Specifications: see section of specifications. |
|
11. |
11.5 & 13.5 |
The price shall be Fixed. |
| 12. |
14.1 |
Currency of the Bids shall be : PKR |
| 13. |
16.1 |
The Bids/Bid Validity period shall be: 180 Days |
| 14. |
17.1Â |
The amount of Bid Security shall be as defined in Bid Security Section for items and lots given in BDS 6 |
| 15. | 17.2 |
The Bid Security shall be in the form of: Pay Order, Call at Deposit, Demand Draft  |
| 16. | 15.1 |
Alternative Bids to the requirements of the bidding documents will not be permitted. |
D. Submission of Bids |
||
|
17. |
18.1 & 21.1 |
Bid shall be submitted online on EPADS v2.0 whereas hard copy of the bid security should be submitted to the following; Park Road, Islamabad Capital Territory Bids that are not submitted on EPADS v2.0 shall be disqualified. The deadline for Bids submission is: Monday, August 10, 2026 11:00 AM |
E. Opening and Evaluation of Bids |
||
|
18. |
24.1 |
The Bids opening shall take place on EPADS v2.0. Day : Monday Date:Â August 10, 2026 Time : 11:30 AM |
|
19. |
30.2 |
Selection technique adopted will be: Least Cost Based Selection (LCBS) |
F. Award of Contract |
||
|
20. |
41.1 & 41.2 |
The Performance guarantee shall: 10.00%. The Performance Guarantee shall be acceptable in the form of:Â Call at Deposit, Demand Draft |
| 21. | 45.1 |
Arbitrator shall be appointed by mutual consent of the both parties. |
G. Review of Procurement Decisions |
||
|
22. |
37 |
Grievance against this procurement shall be submitted online on EPADS v2.0. |
| Bidder's Type | Required Registration |
|---|---|
| Any | NADRA CITIZENSHIP (CNIC/NICOP) FBR (NTN) FBR (GSTN) |
| Eligibility Criteria | Document |
|---|---|
| Affidavit that the firm is not blacklisted. | Yes |
| Original Equipment Manufacturer (OEM) Authorization Letter addressed to the NIH Islamabad, authorizing the bidder to supply, install, configure, and provide support for the proposed firewall solution under this tender. | Yes |
Least Cost Based Selection (LCBS)
| Technical Marks | 70 | |
|---|---|---|
| Passing Marks | 50 | |
| Technical Evaluation Criteria | ||
| The Bidder must own or operate a Valid Tier-III Certified Data Center facility within Pakistan. Furthermore, the Bidder must have an established 24/7 Network Operations Center (NOC/CNOC) for proactive monitoring, fault management, and support services. Valid certification documents, facility details, and operational SOPs shall be provided as evidence. (Qualitative)(Doc Required) | 20 | |
| General Building has completed projects of ICT worth Rs.03 million Project Cost and above, must provide verifiable details such as Contracts, completion certificates etc. (01 x05 Points). (Qualitative)(Doc Required) | 5 | |
| The Bidder must have a minimum annual turnover of PKR 10,000,000 (Pak Rupees One Hundred Million) in each of the last three (03) financial years. The Bidder shall submit audited financial statements (duly signed by a registered auditor) for the last three years as proof of financial soundness. (Qualitative)(Doc Required) | 20 | |
| he Bidder shall provide a valid and verifiable Manufacturer Authorization Letter (MAL) from the Original Equipment Manufacturer (OEM) for all major equipment and software components proposed in the solution. The MAL must specifically authorize the Bidder to quote, supply, install, configure, and provide after-sales support for the proposed solution under this tender. (Qualitative)(Doc Required) | 10 | |
| he Bidder must be a PTA-licensed Tier-1 Internet Service Provider (ISP) operating in Pakistan with direct ownership, co-ownership, or consortium rights in an operational Submarine Cable Landing Station (CLS) within Pakistan. (Qualitative)(Doc Required) | 15 | |
Jobs Without Lots :
| Job | Delivery Schedule | Quantity | Bid Security |
|---|---|---|---|
| Supply, Installation, Configuration, and Commissioning of Enterprise-Grade Next Generation Firewall Solution | Address: Park Road, Islamabad Capital Territory Schedule: 120 Days Quantity: 1/job |
1/job | 500000 PKR |
No
Jobs Without Lots :
Job: Supply, Installation, Configuration, and Commissioning of Enterprise-Grade Next Generation Firewall Solution
Specifications / Requirements:
| Sr. No | Ref. No. | Description | Unit | Qty | Rate | Â | Amount |
|---|---|---|---|---|---|---|---|
| 1 | 1 | Enterprise Grade Firewall with 3 years license as per Technical specification | Qty | 1 | 15000000 | (Rupees fifteen million only) | 15000000 |
| 2 | 2 | Log Analyzer with 3 years support as per technical specification | Qty | 1 | 10000000 | (Rupees ten million only) | 10000000 |
| GRAND TOTAL: | Rs 25,000,000.00 |
Technical Specification
Â
Below are the technical specification for Firewall
Â
|
 |
Require Hardware based firewall with following performance specs: |
|
|
1 |
Next Generation Firewall |
Qty: 01 |
|
2 |
Firewall throughput |
39 Gbps or higher |
|
3 |
IPsec VPN throughput |
20.5 Gbps or higher |
|
4 |
IPS throughput (Ent Mix) |
7 Gbps or higher |
|
5 |
NGFW throughput (Ent Mix) |
6.3 Gbps or higher |
|
6 |
Threat Protection throughput (Ent Mix) |
5.5 Gbps or higher |
|
7 |
SSL inspection throughput |
1.45 Gbps or higher |
|
9 |
Concurrent TCP sessions |
6.5 Million or higher |
|
12 |
Power |
Dual AC |
|
13 |
Interfaces |
8 x GE copper or higher |
|
2 x GE SFP or higher |
||
|
(Minimum) 4 x SFP+ Port slot (for 10GE connectivity) |
||
|
14 |
Total Local Storage |
120 GB |
|
15 |
USB ports |
2 x USB-A 3.0 or higher |
|
16 |
Security Features |
Should be offered with IPS, Advanced Malware Protection, Application Control, URL Filtering with support for 3 years |
|
 |
General Requirements for Firewall |
Compliant Yes or No |
|
 |
Security Features |
 |
|
 |
03 Years OEM backed Warranty/Support is required with NBD RMA |
 |
|
 |
General Features |
 |
|
1 |
The proposed product shall support robust GUI configurations of both IPv4 and IPv6 firewall policies. |
 |
|
2 |
The proposed products should have onboard SSD internal storage for storage of logs, event etc. |
 |
|
3 |
The proposed product must be based on hardware architecture for Security features inspection (NG Firewalling, SSL/TLS inspection, IPS, Antimalware etc) in the hardware. |
 |
|
4 |
Must be Listed Gartner’s Magic Quadrant in last published report. |
 |
|
5 |
The proposed system shall minimally provide management access through CLI console using console port, SSHv2, telnet or from GUI console |
 |
|
7 |
The proposed product should be able to facilitate administration audits by logging detailed activities to event log - management access and also configuration changes. |
 |
|
8 |
Administrators shall be able to configure both IPv4 and IPv6 DHCP service on an interface of the proposed product. |
 |
|
9 |
Administrators shall be able to group interfaces, both physical and virtual, into zones that simplifies the creation of security policies. |
 |
|
10 |
The proposed product shall support static routing and policy-based routing |
 |
|
11 |
The proposed product shall support Open Shortest Path First (OSPF) and Border Gateway Protocol (BGP) for both IPv4 and IPv6. |
 |
|
12 |
The proposed product must support active-passive (failover HA), active-active (load balancing HA) and Clustering. |
 |
|
13 |
The proposed product shall support various QoS (quality of service) techniques, including: Traffic policing, Traffic shaping and Queuing |
 |
|
14 |
The proposed product shall support both Route based and policy-based site to site IPsec VPNs. |
 |
|
15 |
The proposed product shall provide Secure sockets layer (SSL) content scanning and inspection abilities that allow organizations to apply antivirus scanning, application control, and IPS inspection to encrypted traffic |
 |
|
16 |
The proposed product's IPS engine shall offer Signature based and Anomaly based detection |
 |
|
18 |
The proposed product shall support various logging facilities local memory, local storage and external syslog servers |
 |
|
19 |
The proposed system shall support performance SLA settings which are used to monitor WAN interfaces link quality and to detect link failures. |
 |
|
20 |
The proposed system shall allow SLA targets to be created. These are a set of constraints that are used to control the paths that traffic take. These constraints should include Latency, Jitter and Packer Loss threshold |
 |
|
21 |
The proposed system shall provide settings to the characteristic of probes, including check interval, link failure and restoration considerations. |
 |
|
22 |
The proposed system shall support per-packet load-balancing among IPSec tunnels. |
 |
|
23 |
The proposed system shall support Border Gateway Protocol (BGP) learned routes as dynamic destinations. |
 |
Â
For Individual Jobs
| # | Job Title | Quantity | Unit Price (PKR) | Total Price (PKR) | Delivery Location | Delivery Period / Year | Country of Origin |
|---|---|---|---|---|---|---|---|
| 1 | |||||||
| 2 |
| # | Lot Title | Total Lot Price (PKR) | Country of Origin |
|---|---|---|---|
| 1 | [Lot 1 Title] |
Â
Â
Â
The following Special Conditions of Contract shall supplement the General Conditions of Contract. Whenever there is a conflict, the provisions herein shall prevail over those in the Conditions of Contract. The corresponding clause number of the GCC is indicated in parentheses.
Number of GC Clause
Amendments of, and Supplements to, Clauses in the General Conditions of Contract
Number of GC Clause 1
Definitions
The Procuring Agency is: National Institutes of Health (NIH) (National Institutes of Health (NIH)), Assistant Director Park Road, Islamabad Capital Territory
The Supplier is:
The title of the subject procurement is: Supply, Installation, Configuration, and Commissioning of Enterprise-Grade Next Generation Firewall Solution
Number of GC Clause 2
Applicable/Governing Law:
The Contract shall be interpreted in accordance with the laws of Islamic Republic of Pakistan
Number of GC Clause 3
Language:
The language of the Contract, all correspondence and communications to be given, and all other documentation to be prepared and supplied under the Contract shall be in English.
Number of GC Clause 4
Notices:
The addresses for the notices are:
Procuring Agency:
National Institutes of Health (NIH) (National Institutes of Health (NIH)), Assistant Director
Park Road, Islamabad Capital Territory
+92-333-855-4884
purchaseprocurement58@gmail.com
Contractor/ Bidder:
[Name, address and telephone number]
The Contractor/ Bidder’s Representative(s)
[Name, address, telephone number and e-mail address]
Number of GC Clause 6.1
The Authorized Representatives are:
For the Procuring Agency:
National Institutes of Health (NIH) (National Institutes of Health (NIH)), Assistant Director
Park Road, Islamabad Capital Territory
+92-333-855-4884
purchaseprocurement58@gmail.com
For the Bidder:
Name: ………………………………………
Designation: ……………………..
Address: …………………………………………..
Number of GC Clause 7
Effectiveness of the contract
The Contractor/Bidder shall be effective within ….. days from the date of signature of the Contract by both parties
Number of GC Clause 8
Commencement of Contract:
The Contractor/Bidder shall provide Non-Consultancy Services from the effective date of contract.
Number of GC Clause 10.2
Expiration of Contract:
The time period shall be ……………………………
Number of GC Clause 14
Termination
In the event of termination of the contract due to any reason as already defined in the General Conditions of Contract, the Bidder shall be responsible for providing to the Authority the Goods till the time of alternate arrangements.
Number of GC Clause 16
Conflict of Interest:
The Procuring Agency reserves the right to determine on a case-by-case basis whether the Bidder should be disqualified from providing goods or services due to a conflict of a nature described in Clause GCC 17.
Number of GC Clause 20
Liquidated Damages
If the Bidder fails to provide services as required under the contract or in case of any data loss/data breach or any incident compromising the data security or other such failures related to any services, the Bidder shall pay to the Procuring Agency as Liquidated Damages at a rate of 0.01% to 1.00% of the Contract value, in accordance with the extent of performance failure & the cost of investigating such incidents as judged by the Authority.
Number of GC Clause 21
Performance Guarantee:
The amount of performance guarantee shall be 10.00% of the contract price in acceptable form of Call at Deposit, Demand Draft
Number of GC Clause 27
Currency of Payment:
All the payment to be released to the contractor/Bidder shall be in Pakistani Rupees.
Number of GC Clause 28
Payment terms:
Payment will be made to the Bidder against the procured Goods and services according to the actual invoice or running bills submitted by the Bidder against the services provided within the time given in the conditions of the contract.
Number of GC Clause 29
Identifying Defects:
The Authority reserves the right at any time to inspect the premises of the provider to inspect the goods and monitor the goods being provided.
Security Features Should be offered with Web filtering, IPS, Advanced Malware Protection, Application Control, Antispam Service, URL, DNS and Video Filtering and support for 3years 03 Years OEM backed Warranty/Support is required with NBD RMA
General Features The proposed product shall support robust GUI configurations of both IPv4 and IPv6 firewall policies. The proposed products should have onboard SSD internal storage for storage of logs, event etc.
The proposed product must be based on hardware architecture for Security features inspection (NG Firewalling, SSL/TLS inspection, IPS, Antimalware etc) in the hardware. Must be Listed Gartner’s Magic Quadrant in last published report.
The proposed system shall minimally provide management access through CLI console using console port, SSHv2, telnet or from GUI console The proposed product should be able to facilitate administration audits by logging detailed activities to event log - management access and also configuration changes. Administrators shall be able to configure both IPv4 and IPv6 DHCP service on an interface of the proposed product.
Administrators shall be able to group interfaces, both physical and virtual, into zones that simplifies the creation of security policies. The proposed product shall support static routing and policy-based routing The proposed product shall support Open Shortest Path First (OSPF) and Border Gateway Protocol (BGP) for both IPv4 and IPv6. The proposed product must support active-passive (failover HA), active-active (load balancing HA) and Clustering.
The proposed product shall support various QoS (quality of service) techniques, including: Traffic policing, Traffic shaping and Queuing The proposed product shall support both Route based and policy-based site to site IPsec VPNs. The proposed product shall provide Secure sockets layer (SSL) content scanning and inspection abilities that allow organizations to apply antivirus scanning, application control, and IPS inspection to encrypted traffic
The proposed product's IPS engine shall offer Signature based and Anomaly based detection The proposed product shall support various logging facilities local memory, local storage and external syslog servers The proposed system shall support performance SLA settings which are used to monitor WAN interfaces link quality and to detect link failures. The proposed system shall allow SLA targets to be created. These are a set of constraints that are used to control the paths that traffic take. These
The proposed system shall provide settings to the characteristic of probes, including check interval, link failure and restoration considerations. The proposed system shall support per-packet load-balancing among IPSec tunnels. The proposed system shall support Border Gateway Protocol (BGP) learned routes as dynamic destinations.
Obligation of Consultant as per Clause 7: The OEM authorized firm will be required to strictly comply with the following requirements and conditions for the supply, installation, configuration, and commissioning of an Enterprise-Grade Firewall solution including all associated hardware, software, licenses, and services.
f.All design and proposals should be compliant with NIH requirements and approval from NIH for plans/layout will be responsibility of consultant with support from client. g.The bidder must be an OEM authorized partner/reseller and must provide valid authorization from the manufacturer for supply, installation, and support of the proposed firewall solution.
h.The vendor shall conduct a pre-deployment assessment of the existing network infrastructure to understand topology, security requirements, and integration needs prior to installation and configuration of the firewall solution. i.The vendor shall supply brand-new, unused enterprise-grade firewall appliances, including all required hardware modules, power supplies, transceivers, software licenses, subscriptions, and accessories necessary for full functionality.
j.The vendor shall be responsible for complete installation and configuration including but not limited to: i.Initial hardware installation and rack mounting. ii. Basic and advanced firewall configuration. iii. Network segmentation and security zone creation. iv. Security policy configuration including access control policies. v. Configuration of intrusion prevention, anti-malware, and web filtering capabilities.
vi. Integration with existing network infrastructure including switches, routers, authentication systems, and logging systems.
k.Testing and Commissioning The vendor shall conduct complete testing and commissioning including: i. Verification of security policies and access controls. ii. Performance testing and failover validation. iii. Security feature validation including intrusion detection/prevention capabilities. i.A commissioning report shall be submitted to the client upon completion.
l. Documentation The vendor shall provide complete documentation including: i. Network security architecture diagrams. ii. Firewall configuration documentation. iii. Admin and operational manuals. iv. Backup and recovery procedures.
Number of GC Clause 31
Following is the guidance for Dispute Resolution
Notwithstanding any reference to the arbitration herein, the parties shall continue to perform their respective obligations under the Contract.
Rules of procedure for arbitration proceedings:
Any dispute between the Authority and a Bidder shall be referred to arbitration under the laws of Pakistan including Arbitration Act 1940.
Place of Arbitration and Award:
The arbitration shall be conducted in English language and place shall be Islamabad. The award shall be final and binding.
Date: [insert date (as day, month and year)]
Bid No.:P66962
To: National Institutes of Health (NIH) (National Institutes of Health (NIH)), Assistant Director Park Road, Islamabad Capital Territory
We, the undersigned, declare that:
We understand that, according to your conditions, Bids must be supported by a Bid Securing Declaration.
We accept that we will be blacklisted and henceforth cross debarred for participating in respective category of public procurement proceedings for a period of (not more than) six months, if fail to abide with a bid securing declaration, however without indulging in corrupt and fraudulent practices, if we are in breach of our obligation(s) under the Bid conditions, because we:
We understand this Bid Securing Declaration shall expire if we are not the successful
Bidder, upon the earlier of (i) our receipt of your notification to us of the name of the successful Bidder; or (ii) twenty-eight (28) days after the expiration of our Bid.
THIS AGREEMENT made the _____ day of __________ 20_____ between National Institutes of Health (NIH) (National Institutes of Health (NIH)), Assistant Director Park Road, Islamabad Capital Territory
(hereinafter called “the Procuring Agency”) of the one part and [name of Bidder] of [city and country of Bidder] (hereinafter called “the Bidder”) of the other part:
WHEREAS the Procuring Agency invited Bids for provision of goods, viz., Supply, Installation, Configuration, and Commissioning of Enterprise-Grade Next Generation Firewall Solution (P66962) and has accepted a Bids by the Bidder for the provision of Goods in the sum of [contract price in words and figures] (hereinafter called “the Contract Price”).
NOW THIS CONTRACT WITNESSETH AS FOLLOWS:
1. In this Contract words and expressions shall have the same meanings as are respectively assigned to them in the Conditions of Contract referred to.
2. The following documents shall be deemed to form and be read and construed as part of this Contract, In the event of any ambiguity or conflict between the Contract Documents listed below, the order of precedence shall be the order in which the Contract Documents are listed below:-
3. In consideration of the payments to be made by the Procuring Agency to the Bidder as hereinafter mentioned, the Bidder hereby covenants with the Procuring Agency to provide the Goods related services and to remedy defects therein in conformity in all respects with the provisions of the Contract.
4. The Procuring Agency hereby covenants to pay the Bidder in consideration of the provision of Goods and the remedying of defects therein, the Contract Price or such other sum as may become payable under the provisions of the contract at the times and in the manner prescribed by the contract.
IN WITNESS whereof the parties hereto have caused this Contract to be executed in accordance with their respective laws the day and year first above written.
Signed, sealed, delivered by __________________the ________________ (for the Procuring Agency)
Witness to the signatures of the Procuring Agency:
………………………………………………
Signed, sealed, delivered by __________________the ________________ (for the Procuring Agency)
Witness to the signatures of the Bidder: …………………………………………………
Contract Number: Contract Value: Contract Title:
Dated:
[Name of Supplier] hereby declares that it has not obtained or induced the procurement of any contract, right, interest, privilege or other obligation or benefit from Government of Pakistan or any administrative subdivision or agency thereof or any other entity owned or controlled by it (GoP) through any corrupt business practice.
Without limiting the generality of the foregoing [Name of Supplier] represents and warrants that it has fully declared the brokerage, commission, fee etc. paid or payable to anyone and not given or agreed to give and shall not give or agree to give to anyone within or outside Pakistan either directly or indirectly through any natural or juridical person, including its affiliate, agent, associate, broker, consultant, director, promoter, shareholder, sponsor or subsidiary, any commission, gratification, bribe, finder's fee or kickback, whether described as consultations fee or otherwise, with the object of obtaining or inducing the procurement of a contract, right, interest, privilege or other obligation or benefit in whatsoever form from GoP, except that which has been expressly declared pursuant hereto.
[Name of Supplier] certifies that it has made and will make full disclosure of all agreements and arrangements with all persons in respect of or related to the transaction with GoP and has not taken any action or will not take any action to circumvent the above declaration, representative or warranty.
[Name of Supplier] accepts full responsibility and strict liability for making and false declaration, not making full disclosure, misrepresenting fact or taking any action likely to defeat the purpose of this declaration, representation and warranty. It agrees that any contract, right interest, privilege or other obligation or benefit obtained or procured as aforesaid shall, without prejudice to any other right and remedies available to GoP under any law, contract or other instrument, be voidable at the option of GoP.
Notwithstanding any rights and remedies exercised by GoP in this regard, [Name of Supplier] agrees to indemnify GoP for any loss or damage incurred by it on account of its corrupt business practices and further pay compensation to GoP in an amount equivalent to ten time the sum of any commission, gratification, bribe, finder's fee or kickback given by [Name of Supplier] as aforesaid for the purpose of obtaining or inducing the procurement of any contract, right, interest, privilege or other obligation or benefit in whatsoever form from GoP.
To: National Institutes of Health (NIH) (National Institutes of Health (NIH)), Assistant Director Park Road, Islamabad Capital Territory
WHEREAS [name of Bidder] (hereinafter called “the Bidder”) has undertaken, in pursuance of Contract No. [reference number of the contract] dated [insert date] for provision of Goods(hereinafter called “the Contract”).
AND WHEREAS it has been stipulated by you in the said Contract that the Bidder shall furnish you with a Bank Guarantee by a reputable bank for the sum specified therein as security for compliance with the Bidder’s performance obligations in accordance with the Contract.
AND WHEREAS we have agreed to give the Bidders guarantee:
THEREFORE, WE hereby affirm that we are Guarantors and responsible to you, on behalf of the Bidder, up to a total of [amount of the guarantee in words and figures], and we undertake to pay you, upon your first written demand declaring the Bidder to be in default under the Contract and without cavil or argument, any sum or sums within the limits of [amount of guarantee] as aforesaid, without your needing to prove or to show grounds or reasons for your demand or the sum specified therein.
This guarantee is valid until the: [insert date]
Signature and seal of the Guarantors
_____________________________________________________________________
[name of bank or financial institution]
_____________________________________________________________________
[address]
_____________________________________________________________________
[date}