SD-WAN CONTROLLER AND CENTRAL MANAGEABILITY REQUIREMENTS - 15B

# Specifications Compliance Cross

(Yes/No) Reference
Solution Requirements
Proposed solution should support SD WAN Controller along
with Central Manageability Controller in single appliance and Virtual
1 Yes
it should be on premises. Appliance
Controller in cloud is not allowed.
Should support minimum 10 Virtual Secure SDWAN Secure
Servers or more, IPSec, Crypto VPN Server in single hardware SI Firewall
2
appliance and it should be 2X scalable without any extra cost Feature
or any additional hardware devices
3 Proposed hardware appliance should support maximum SI Firewall
5000 and above site to site Secured Tunnel VPNs Feature
Proposed solution should be a purpose built, appliance based
with a hardened operating system that eliminates the
security risks associated with general purpose operating Firewall
4
systems. The appliance should be an enterprise class Feature
supporting Perimeter Security, VPN & NMS features in a
single form factor and should be in a single appliance.
5 SD WAN Controller should come with built in Intelligent
Router functionality Yes
Should support control plane and data plane as part of the
6 bundle and enterprise data tunnel should not be used for Yes
monitoring and managing the branch SDWAN Edge devices
Control plane should should group management to group
7 district wise locations with group admin and role based login Yes
to monitor, manage and control the branch locations
Central Manageability should support Zero touch
provisioning, virtual console with super admin permission
8 Yes
and can able to access branch devices without static IP /
username password
9 Proposed solution should support firewall zone in all Firewall
interfaces viz., local, captive, WAN, LAN, VPN etc Feature
10 SD WAN Controller should support QoS (Quality of Service)
support per Secure VPN Tunnel Server Yes
11 Proposed solution should support Quality Based Link Firewall
Yes
Failover (Failover of ISP links based on Packet loss or RTA) Feature
12 SD WAN Controller should support Subnet based load Yes
balancer, WAN Link load Balancer and link load balancer
along with basic and advance routing policies with probe and
expert mode to detect the link quality to take necessary
action
13 Should support enterprise tunnel, local breakout tunnel and Firewall
Full tunnel with PRB along with DPO Feature
14 Should able to do air gapped SDWAN for MPLS links if
required Yes
15 Should support configuration to balance between MPLS links
Yes
or MPLS with Internet based links

BENISON TECHNOLOGIES PRIVATE LIMITED

Head Office: Address: Akshay Tech Park, Unit No. 102, First Floor, Plot No. 72 & 73 EPIP Area, Hoodi Village,
KR Puram Hobli, Whitefield, Bangalore- 560 066, Karnataka, India | Tel: +91 80 4093 9673.
Branch Office: Address: L-Square, Fourth Floor, Office No.18, Plot No.8, Survey No.187, Aundh, Sanghvi Nagar,
Pune - 411007, Maharashtra, India | Tel: +91 20 2589 7044 | +91 20 4120 9744.
 16 SD WAN Controller should support dynamic routing SI Firewall
protocols like OSPF, RIP V1/ V2, BGP EBGP etc Feature
SD WAN Controller should have a separate controller channel
17 to communicate with SD WAN branch routers and that should Yes
not intercept with enterprise traffic
18 SD WAN Controller should support ZTP for the branch SD
WAN Edge devices Yes
19 Proposed solution should support Secured Tunnel, IPSec, Firewall
Crypto VPN, GRE over IPSec, Cisco VPN and PPTP VPNs Feature
20 Proposed solution support should be bundled with Global Firewall
VPN Client Licenses for Remote Access Feature
21 should support Encryption/Authentication DES,3DES,AES-
128-CBC, AES-256- CBC, AES-128-GCM, AES-256-GCM,
CAMELLIA-128-CBC, CAMELLIA-256-CBC, CHACHA20- Firewall
POLY1305, MD5, SHA-1, SHA-256, SHA-384 & SHA-512 and Feature
Key
Exchange from DH1, DH2,DH5, DH14-DH21 and DH26-DH32
22 Key Exchange : IKE1, IKE2, Manual Key Firewall
Feature
23 Bundled License for PPTP/IPSec : Unlimited Firewall
Feature
24 Secured Tunnel Based VPN Bundled Firewall
Feature
25 Proposed solution should support DHCP & DNS Over VPN Yes
Proposed solution should support Redundant VPN Gateway,
(should be capable of crating multiple VPN Gateways created
26 Yes
in devices, if VPN server goes down, redundant VPN Gateway
should take over)
27 Proposed solution should support Global VPN Client Platform Firewall
for Windows / MAC / Linux / Android Feature
SD WAN Controller should support Two Factor
Authentication like SMS OTP, EMAIL OTP and Three Factor Firewall
28
Authentication like MAC binding of Client machine, Username Feature
/ Password and OTP
SD WAN Controller should support Two Factor
Authentication control per virtual SD WAN Controller on the Firewall
29
top level and also should have control to enable or disable on Feature
the Site to Site and client level
30 SD WAN Controller and SD WAN Edge devices should have
Yes
ability to support FQDN (Dynamic IP/ Public IP)
Secure Tunnel should have ability to support Primary and
31 minimum 2 alternate Server IP addresses for auto failover Yes
and load balancing
32 SD WAN Controller should have the ability to generate and Certificate
group the Client Key in Zip or Rar file format based Auth
33 SD WAN Controller should have the ability to generate the
Firewall
VPN Client Key file to support Android, IOS etc with a click of
Feature
a button
SD WAN Controller should support Multiple ISP with PPPoE,
34 Static IP, DHCP, MPLS, VLAN tagging on WAN and Ethernet Yes
(Link Aggregation Group) LAG on LAN

BENISON TECHNOLOGIES PRIVATE LIMITED

Head Office: Address: Akshay Tech Park, Unit No. 102, First Floor, Plot No. 72 & 73 EPIP Area, Hoodi Village,
KR Puram Hobli, Whitefield, Bangalore- 560 066, Karnataka, India | Tel: +91 80 4093 9673.
Branch Office: Address: L-Square, Fourth Floor, Office No.18, Plot No.8, Survey No.187, Aundh, Sanghvi Nagar,
Pune - 411007, Maharashtra, India | Tel: +91 20 2589 7044 | +91 20 4120 9744.
 SD WAN Controller should support policy and port based
Firewall
35 grouping of SDWAN tunnels to access selective or set of
Feature
applications servers
36 SD WAN Controller to support in HA mode in Active-Passive
Yes
and the License to be inbuilt without any extra cost
37 SD WAN Controller should have all required features to
establish a seamless failover between DC to DR without any Yes
additional license cost
38 SD WAN Controller should be scalable at least to next two
Yes
models published by the Vendor
39 SD WAN Controller basic features like Routing, Firewall &
yes
VPN should work till the renewal of AMC
40 Proposed solution should support complete Monitoring &
Yes
Reporting Framework built in at no extra cost
41 SD WAN Controller should support easy to use UI, and Rack Virtual
Yes
Mountable form factor Appliance
42 Proposed solution should have Live Traffic Analysers like Firewall
Sniffers , Real-time Network Flow of both on IP and Port Feature
43 Proposed solution should have inbuilt debugging tools as
Yes
part of the product
44 Proposed solution should have Configuration Change logs as
Yes
part of the product/solution/report generation
45 Proposed solution should be able to send Alert emails on Link
Failures / VPN Server reboot with reason / Daily Digest Yes
support etc
Proposed solution should able to send alerts Digest emails on
46 branch locations failures, Alert on branch link down for more Yes
than 24 hours, Alerts configuration per virtual VPN Server
47 Proposed solution should cowork with any other third party Supported via
NMS/SIEM tools based on SNMP, NetFlow, Remote Syslog Yes
API's
Proposed solution should be able to store logs for at least 2
48 months and archive logs for at least 6 months and should Yes
have ability to FTP the logs at defined time period
49 Proposed solution should have direct OEM support both via
Yes
Phone / Emai as part of SLA
HIGH AVAILABILTY
50 Proposed Solution/ SD WAN Controller should be configured
Yes
as Primary & Backup
51 Proposed Solution/ SD WAN Controller should be configured
Yes SI
with High Availability
52 Proposed Solution/ SD WAN Controller High Availability
License should be part of the bundle and should not be Yes SI
charged extra
53 Proposed Solution/ SD WAN Controller HA mode should Yes
support software based without wasting a dedicated port for
failover. HA mode should be configurable as a software
instead of using dedicated physical port for failover
54 Proposed Solution/ SD WAN Controller HA mode should
Yes SI
support both member of tracker and IP Migration options
55 Proposed Solution/ SD WAN Controller HA mode should
Yes SI
support minimum 200 IPs

BENISON TECHNOLOGIES PRIVATE LIMITED

Head Office: Address: Akshay Tech Park, Unit No. 102, First Floor, Plot No. 72 & 73 EPIP Area, Hoodi Village,
KR Puram Hobli, Whitefield, Bangalore- 560 066, Karnataka, India | Tel: +91 80 4093 9673.
Branch Office: Address: L-Square, Fourth Floor, Office No.18, Plot No.8, Survey No.187, Aundh, Sanghvi Nagar,
Pune - 411007, Maharashtra, India | Tel: +91 20 2589 7044 | +91 20 4120 9744.
 56 Proposed Solution/ SD WAN Controller HA mode support
Yes
Dead Peer Detection
57 Proposed Solution/ SD WAN Controller HA mode should IPv4
Yes
support both IPV4 and IPV6 Supported
58 Proposed Solution/ SD WAN Controller HA mode support to Firewall
track additional interfaces for VRRP failover. VRRP can be Feature /
done in multiple ways, if the primary device failure/interface Yes Supported
failure detection without VRRP
also
59 Proposed Solution/ SD WAN Controller HA mode should
SI
support minimum of 10 migration / Tracked interfaces
Central Manageability and Monitoring
60 Proposed solution Should have singe dashboard to do real
Yes
time monitoring of all the SD WAN Client routers
SD WAN controller management dashboard should display
61 the network status like nodes up, down and degrade Yes
information (ISP link down status)
62 Proposed solution should be capable of triggering of all
nodes critical alarm information with alert to respective Yes
email IDs (as per configuration)
63 Proposed solution should provide running nodes current
Yes
software information and details about available updates
64 Proposed solution should have the ability to provide the Yes
client node details by click of button with informations like
system uptime, ISP links SLA, network Statistics, System
status, Alarm status, System Resources and day wise
Statistics
65 Proposed solution should support event log per node level
Yes
for same day, last week, last month and custom duration
66 Logs should support network degrade information and
option to fix Yes SI
67 Proposed solution should be capable of providing event
summary support for current date, Last 24 hours, Last 48 Yes
hours, last week, last month etc
Proposed solution should be capable to separate reports for
68 system alarms with details like last logged in, changes made Yes
to the client routers, system resource alarms details etc
Proposed solution should support single click to access client
69 routers from SD WAN controller screen from HO / DC with Yes
option to allow only certain logins to access / deny
70 Proposed solution need to support separate logs even for ISP
Yes
links with uptime, downtime, jitter, packet loss etc
TECHINICAL SPECIFICATIONS
71 Proposed solution should support minimum technical
specification given below
72 Concurrent sessions: 10M Firewall
Feature
73 New Session /sec: 300K Firewall
Feature
74 Firewall Throughput : 20Gbps (with all slots populated) Firewall
Feature

BENISON TECHNOLOGIES PRIVATE LIMITED

Head Office: Address: Akshay Tech Park, Unit No. 102, First Floor, Plot No. 72 & 73 EPIP Area, Hoodi Village,
KR Puram Hobli, Whitefield, Bangalore- 560 066, Karnataka, India | Tel: +91 80 4093 9673.
Branch Office: Address: L-Square, Fourth Floor, Office No.18, Plot No.8, Survey No.187, Aundh, Sanghvi Nagar,
Pune - 411007, Maharashtra, India | Tel: +91 20 2589 7044 | +91 20 4120 9744.
 75 Secured Tunnel VPN Throughput (Mbps): 10 Gbps Firewall
Feature
76 Interfaces: 6x1GE and 2x10G SFP+ along with modules Virtual
Appliacne
77 Hot swapable dual power supply units Virtual
Appliacne
78 Firewall Policies : Unlimited Firewall
Feature
79 Maximum Connections: Unrestricted Firewall
Feature
80 Maximum UTM Connections: Unrestricted Firewall
Feature
81 Nodes Supported : 5000 (based on purchased license) Firewall
Feature
82 Inbound NAT connection : Unlimited
NETWORK MONITORING FEATURES TO BE SUPPORTED
Monitoring tools /Diagnostics like Real Time Network traffic
monitoring and Sniffing , Bandwidth monitoring &
83 SI
consumption report, Security Reports on suspicious
activities. Real time monitoring available
On appliance Logs and Reports like Extensive Graphical
reports on mail, Net usage etc. Reports types of Link,
84 SI
Bandwidth, Server and client monitoring. Monitor all
IP/SNMP capable devices.
85 Proposed solution should have support for TCP Dump on the
Yes SI
appliance for debugging
HARDWARE (MINIMUM REQUIREMENTS)
86 Processor : Intel Xeon minimum 20 core processor Virtual
Yes Appliance
87 Storage/ Memory : 480 GB SSD and 16 GB (DDR4) Virtual
Yes Appliance
Interfaces : 6x1GE Copper and 2x10G SFP+ Fiber with
modules, 1 Console Interface (VGA), 2 USB port (for2G/
88
3G/4G USB Modem), Minimum 4 expansion slot to support Virtual
4x1G SFP / 4x10G SFP / 8x1G SFP / 8x10G SFP+ Yes Appliance
Hot swapable dual power supply units Virtual
Yes Appliance
89 Mean Time Between Failures : Five Years Virtual
Yes Appliance
90 Fans : Not more than 2 Virtual
Yes Appliance
91 Power Input : 100-240Vac, 60-50Hz Virtual
Yes Appliance
92 Form Factor and Dimensions : 19" 1U rack-mountable Virtual
Yes Appliance
93 Operating Temp : 0-45 degree C Virtual
Yes Appliance
94 Humidity : 10% to 90% Virtual
Yes Appliance
95 Warranty/Support: 5 Years Yes
OEM Criteria

BENISON TECHNOLOGIES PRIVATE LIMITED

Head Office: Address: Akshay Tech Park, Unit No. 102, First Floor, Plot No. 72 & 73 EPIP Area, Hoodi Village,
KR Puram Hobli, Whitefield, Bangalore- 560 066, Karnataka, India | Tel: +91 80 4093 9673.
Branch Office: Address: L-Square, Fourth Floor, Office No.18, Plot No.8, Survey No.187, Aundh, Sanghvi Nagar,
Pune - 411007, Maharashtra, India | Tel: +91 20 2589 7044 | +91 20 4120 9744.
 96 Proposed solution should have Manufacturer Authorization
(MAF) Yes
97 Proposed solution should have MTCTE certification from
TEC Yes
98 OEM Support (TAC) Presence in India Yes
99 The bidder and its OEM should not have been banned/ de- Yes
listed/ blacklisted/ debarred from business by any PSU/
Govt. Department during last 5 years. Self-declaration in this
regard is to be submitted with the Bid by the OEM and the
bidder
100 Proposed solution should have Make In India with minimum
Yes
50% Local Content
101 ISO 27001:2022 Certification
102 Should have ISO 9001:2015 or above certificate Yes
Note: ALL THE ABOVE SPECIFICATIONS SHOULD BE READ AS EQUIVALENT OR BETTER.

VIVEK Digitally signed

by VIVEK GUPTA

GUPTA Date: 2024.12.16

11:11:58 +05'30'

BENISON TECHNOLOGIES PRIVATE LIMITED

Head Office: Address: Akshay Tech Park, Unit No. 102, First Floor, Plot No. 72 & 73 EPIP Area, Hoodi Village,
KR Puram Hobli, Whitefield, Bangalore- 560 066, Karnataka, India | Tel: +91 80 4093 9673.
Branch Office: Address: L-Square, Fourth Floor, Office No.18, Plot No.8, Survey No.187, Aundh, Sanghvi Nagar,
Pune - 411007, Maharashtra, India | Tel: +91 20 2589 7044 | +91 20 4120 9744.