FDIC's Palo Alto Subscription & Hardware Maintenance

The Federal Deposit Insurance Corporation (FDIC) is soliciting quotes under RFQ CORHQ-26-Q-0067 for a three-year Enterprise Agreement covering Palo Alto Networks hardware maintenance and subscription services, with an initial performance period from July 1, 2026, to June 30, 2027, and two optional one-year periods extending through June 30, 2029. The contract requires vendors to submit a fully compliant three-volume proposal: Volume I must include completed pricing using the official Price Schedule (Attachment B-1), Volume II must contain all required representations, certifications, and software license agreements including EULAs or MSAs, and Volume III must demonstrate compliance with Supply Chain Risk Management (SCRM) requirements under clause 7.1.2-03. Submissions must be transmitted electronically to the Contracting Officer by the extended deadline of May 4, 2026, at 12:00 PM EST, and all offerors must maintain an active SAM.gov registration prior to award. Contracts will be awarded on a Lowest Price Technically Acceptable basis, where technical acceptability and strict compliance with all solicitation terms are mandatory prerequisites; no credit is given for superior performance, and any proposal falling short of minimum requirements will be rejected outright. Pricing must reflect reasonable and complete costs, evaluated against GSA Schedule rates, commercial listings, and internal estimates, with failure to provide full pricing or to include mandated documentation leading to non-responsiveness. The contract requires the use of the FDIC’s Invoice Processing Platform (IPP) for all invoicing and prohibits payment through WAWF, while delivery is FOB Destination to the FDIC’s distribution center in Arlington, Virginia. All hardware, including PAN-PA-3220-USG-BND-LAB4 and associated digital licenses, must be accompanied by proper identification via model numbers, OEM, and manufacturer part numbers, and must conform to U.S. government support standards. Contractors are prohibited from using Kaspersky Lab products or covered telecommunications and video surveillance equipment and are restricted from publicizing the award without prior written consent. The FDIC retains full inspection and acceptance authority, with a 15-business-day window following delivery to verify compliance. Compliance with whistleblower protections, prompt payment terms, and the right to offset against delinquent obligations is required, and all submitted legal agreements will become binding contract terms. Any non-compliant proposal, including those lacking SAM.gov registration or failing to