Procurement of WAF Firewall for Web Applications by Sindh Integrated Emergency & Health Services

Sindh Integrated Emergency & Health Services (SIEHS) invites bids electronically through EPADS for the procurement of a Web Application Firewall (WAF) to protect its internet-facing web applications from modern cyber threats. This procurement is based in Karachi, Sindh, and aims to enhance the security of SIEHS's web applications against vulnerabilities such as SQL injection, cross-site scripting, remote code execution, bot attacks, and API abuse. Items being procured: - WAF Firewall hardware and software - Professional services for installation, commissioning, and integration - Configuration of security policies including OWASP Top 10 protections - API security features including JSON and XML inspection - Bot detection and mitigation - SSL/TLS security with certificate management - Real-time threat intelligence and signature updates - Integration with LDAP/AD, existing Fortigate 100F firewall, SIEM, email alerts, SNMPv3, and syslog - Documentation including network diagrams, solution architecture, operational guides, and knowledge transfer - One year OEM subscription, software updates, TAC support, and on-site vendor support - OEM training for 2 IT personnel The scope includes supply, installation, configuration, and support for one year. Bidders must be registered with federal/provincial tax authorities and listed on the FBR Active Tax Payers list. Bid security of Rs. 42,000 is required, refundable to unsuccessful bidders. Performance security of 5% of contract value is also required from the successful bidder. Bids must be submitted via EPADS by 26th October 2026 at 11:30 AM, with bid opening at 12:00 PM the same day at SIEHS office, Karachi. Technical bids will be evaluated on compliance with specifications and financial bids will be opened for responsive bidders. Late or conditional bids, bids without prescribed security, or from blacklisted firms will be rejected. The procuring agency reserves the right to accept or reject any or all bids. A practical tip for bidders: Ensure your bid includes all required documents, including the non-refundable tender fee pay order and bid security, and monitor the EPADS portal for any amendments or clarifications before submission deadline. Timely submission and compliance with all technical and financial requirements will improve your chances of success.