Philippine Commission On Women Tender

Description Procurement Of End-point Security Solution Licenses For Endpoints And Servers For One (1) Year End-point Security Solution - Role Management - Microsoft Ad Synchronization - Microsoft Azure Ad Authentication - Enhanced Tamper Protection - Threat Protection - Anti-rootkit Detection - Malicious Traffic Detection (mtd) - Peripheral Control - Application Control - Web Control - Xdr Detections - Must Have A Unified Console For Managing Multiple Products Such As Advanced Endpoint Protection, Email Gateway, Server Security, Mobile Control Etc. - All Settings For These Products Must Be Configured From A Central Dashboard Without The Need To Access Additional Consoles. - Multi-factor Authentication - Multi-platform Management - Suspicious Behavior Detection - Advanced Deep Learning Mechanism - Siem Integration - Updating Bandwidth Consumption - Intrusion Prevention System (ips) - Anti-ransomware Protection - Amsi Protection - Data Loss Prevention (dlp) - Root Cause Analysis - Data Lake - Threat Hunting - Block Applications - On-demand Threat Intelligence - Endpoint Isolation - Forensic Data Export - Live Query - Remote Access - Synchronized Security O Must Be Able To Work With Other Security Products Of The Vendor To Share Information And Respond To Incidents. O Endpoint + Email Gateway - Must Be Able To Automatically Isolate Compromised Mailboxes, And Clean Up Infected Computers Sending Outbound Spam And Malware. O Endpoint + Firewall ▪ Must Be Able To Automatically Isolate Infected Endpoints On The Public And Local Area Networks. ▪ Must Be Able To Identify All Apps On The Network. ▪ Must Be Able To Link Threats To Individual Users And Computers. O Endpoint + Wireless Access Point - Must Be Able To Restrict Internet Access For Infected Endpoints Connected To Wi-fi Automatically. Features For End-point For Workstations (250 Units): ● Endpoint Agent: (windows/macos) Anti-malware, Live Protection, Web Security, Web Control, Malware Removal, Peripheral Control, Application Control, Synchronized Security Heartbeat (windows Only) Behaviour Analysis/hips, Data Loss Prevention, Download Reputation, Malicious Traffic Detection, Exploit Prevention (windows Only), Cryptoguard Anti- Ransomware, Threat Cases. Endpoint Detection And Response (windows Only) Including Threat Searches, Threat Intelligence, On-demand Isolation, Clean And Block, And Malware Analysis. Light Agent Off-board Scanning: (windows Desktop Vms) Anti-malware, Live Protection, Malware Removal * Security Heartbeat Features For End-point For Servers (15 Units): ● Windows Server Agent- Deep Learning Anti-malware, Exploit Prevention, Active Adversary Protection, Cryptoguard And Wipeguard Anti-ransomware, Root Cause Analysis, Application Whitelisting [server Lockdown], Live Protection, Malicious Traffic Detection, Behaviour Analysis/hips, File Integrity Monitoring, Web Security, Download Reputation, Web Control, Peripheral Control, Application Control, Data Loss Prevention, Windows Firewall Control, Synchronized Security, Clean Malware Removal, Automatic Scanning Exclusions, Aws/azure Cloud Workload Discovery Linux Server Agent- Anti-malware, Live Protection, Malicious Traffic Detection, Synchronized Security, Aws/azure Cloud Workload Discover. Endpoint For Virtual Environments (alternative To Full Server Agent)- For Windows Servers On Vmware Esxi And Microsoft Hyper-v, A Light Guest Vm Agent Off-loads Malware Scanning To A Centralized Security Vm. Features For Phish Threat Solution (20 Units): ● Must Have A Unified Console For Managing Multiple Products Such As Advanced Endpoint Protection, Email Gateway, Server Security, Mobile Control Etc. ● All Settings For These Products Must Be Configured From A Central Dashboard Without The Need To Access Additional Consoles. ● Multi-factor Authentication ○ Mfa Must Be Enabled By Default Upon Creation Of Central Management Account. ○ Must Have The Option To Set Mfa: All Admins Need Mfa, Select Admins Who Will Need Mfa, Or No Mfa Needed. ○ Must Have An Option To Have Mfa Using Email, Sms, Google Authenticator, And Native Authenticator (by Proposed Solution) ● Multi-platform Management - Windows, Mac, And Linux Machines Must Be Managed From One Management Console. ● Updating Bandwidth Consumption - Updating Of Endpoints Should Have The Ability To Set Pre- Configured Available Bandwidth Used For Both Software Updating And Threat Definition Updates ● Must Have The Option To Set Up A Local Cache Updating Server Within The On-premise Network Environment To Minimize Large Software Engine Update. Relay Must Communicate All Policy And Reporting Data To The Central. ● Must Have The Option To Set Up A Relay On The Same Server As The Local Cache For Devices That Are Not Internet Facing. ● Must Have An Option For Update Management Policy To Customize The Day And Time When Product Updates Become Available To All Or Selected Devices. Scheduled Must Not Affect Security Updates, Such As Identities Used To Protect Devices Against New Threats. ● Deployment Options ○ Email Setup Link ○ Via Ad Startup/shutdown Script ○ Ad Login Script ○ Sccm ○ Include The Endpoint Agent Installation To A Gold Image ● Api For Endpoint Management - Must Have Apis Offered As Restful Http Endpoints Over The Public Internet. Apis Must Have The Capability To Query Tenants, Enumerate And Manage Endpoints And Servers, And Query Alerts And Manage Them Programmatically. ● Policies ○ Selected Policies Should Be Able To Be Applied To Either Users Or Devices. ○ Policies Must Have The Capability To Be Disabled Automatically Or Expire Based On A Scheduled Time And Date. ● Enhanced Tamper Protection ○ Must Have The Capability To Prevent Local Administrative Users Or Malicious Processes From Disabling The Endpoint Protection. ○ Must Be Able To Export Tamper Protection Passwords In Csv Or Pdf Formats. ● Advance System Clean Other Conditions: ● Integration Compatibility With Pcw’s Existing Firewall Central Management ● Product Assessment, Consultation And Recommendation For The Implementation. ● Regular Daily Pattern Updates And Firmware Updates Within The Subscription Period. ● Includes 8 X 5 Technical Support Service As Well As On-site Technical Support Within The Subscription Period. ● Minimum Of Two (2) Hours Response Time For Email Support Assistance. ● Minimum Of Four (4) Hours Response Time Within Metro Manila For Technical Problems That Cannot Be Resolved Remotely ● Customized One (1) Day Online Technical Training. Total Abc: 632,500.00