FDIC-Palo Alto Hardware and Professional Service Consultation.

The Federal Deposit Insurance Corporation (FDIC) is soliciting proposals under solicitation number CORHQ-26-Q-0264 for a firm-fixed-price contract to acquire Palo Alto hardware and professional service consultation to support its firewall and GlobalProtect technical refresh, including the implementation of Prisma Access and Autonomous Digital Experience Management (ADEM). The procurement will provide network appliances such as PA-3420 units and associated SFP+ transceivers, along with expert consultation to design, configure, and validate the production deployment in alignment with the FDIC’s Secure Baseline Configuration Guide (SBCG), NIST, FISMA, FIPS, and DoD STIG standards. The performance location is 3501 Fairfax Drive, Arlington, VA 22201, with hardware delivery required within five days of contract award and the full period of performance running from September 4, 2026, to September 3, 2027. The solicitation mandates compliance with strict supply chain risk management requirements, restrictions on Kaspersky and other covered entities, and reporting obligations for supply chain events. Award will be made on a Lowest Price Technically Acceptable basis, where technical proposals must meet minimum requirements as defined in the Statement of Objectives and contract clauses, with price being the sole discriminator among technically acceptable offers. Offerors must submit complete proposals electronically to the Contracting Officer by July 29, 2026, and comply with mandatory representations including Unique Entity Identifier and CAGE code registration, small business status certification, and disclosure of potential conflicts or federal tax liabilities. Contractors must ensure all personnel with unescorted access undergo FDIC Directive 1610.02 background investigations, including fingerprinting and IRS compliance verification, and be U.S. citizens if assigned to high-risk roles. Key personnel must sign FDIC confidentiality agreements, complete cybersecurity training, and are subject to quarterly reporting of their roles and onboarding dates. Subcontractors are bound by the same security and confidentiality requirements through flow-down clauses. All deliverables, including architecture designs, configuration documentation, and testing results, must be submitted electronically to [email hidden], while tangible items require shipping details sent to [email hidden]. Invoicing must be submitted via the U.S. Treasury's Invoice Processing Platform (IPP), with remittance processed by Electronic Funds Transfer to DOFAP [email hidden]. The FDIC maintains exclusive authority