NATO Request for Information: Design and Implementation of Centralized Encrypted Traffic Interception System

The NATO Communications and Information Agency (NCIA) is conducting market research through a Request for Information (RFI-424365-CETIS) to inform the future acquisition of a centralized Encrypted Traffic Interception (ETI) system. This RFI is strictly for planning purposes and does not constitute a solicitation, bid request, or binding obligation; it aims to gather insights on available technologies, vendor capabilities, and industry best practices to shape a future procurement strategy. Responses must come exclusively from companies based in NATO member countries and are due by 12:00 hours Central European Time on 8 July 2026. Submissions must be sent via email to RFP-CO-424365-CETIS@ncia.nato.int with a specific subject line format and are limited to 15 pages in PDF or Word format, excluding cover pages, brochures, and optional past performance references. Vendors are asked to address the detailed requirements in Annex A, including technical specifications such as support for 10 Gbps and 100 Gbps interfaces, deployment across physical appliances, containers, and cloud environments like Microsoft Azure and Amazon Web Services, scalability for large enterprise networks, and the ability to provide a unified management console. Additionally, respondents are to describe their offerings in terms of high availability, redundancy, load balancing, auditing and compliance reporting, onsite consultancy services, training delivery methods, security vulnerability disclosure protocols, and product roadmaps including end-of-life timelines. Indicative pricing and licensing models are requested but not binding, and vendors should indicate applicable regulatory or industry standards without submitting formal certifications or socioeconomic status declarations. The notice references the Bureau of Economic Analysis and the Department of Commerce as the administrative point of contact, though the procuring entity is NCIA, and all correspondence must reference the RFI number.