RFB-758-2700000066-4 | Network Security Software, Hardware, and Services

The Commonwealth of Kentucky is establishing a Master Agreement for network security software, hardware, and services to protect its network and server environments from unauthorized intrusion. This all-state agency contract encompasses a broad scope of deliverables, including firewall management, endpoint security, web gateways, SSL certificates, and the physical deployment and maintenance of firewall infrastructure, unified threat management, and intrusion protection systems. Vendors are required to provide full lifecycle management, including installation and hourly-based maintenance and support, while ensuring interoperability with KITS standards. The contract mandates strict data security protocols, requiring all Commonwealth data to remain within the contiguous United States, the use of NIST 800-53 moderate level controls, and encryption for sensitive data both in-transit and at rest. The solicitation follows a Best Value Ranking Approach for award, with scoring heavily weighted toward the highest minimum percentage discount off MSRP for software and the lowest fully loaded hourly rate for services. Bidders must submit responses electronically via the Kentucky eProcurement system, entering a nominal value of $.01 in the electronic unit price field and providing actual pricing on a separate bid sheet. Mandatory requirements for award include a notarized affidavit regarding campaign finance and resident status, proof of authorized reseller status from manufacturers or distributors, and compliance with various Kentucky Revised Statutes concerning tax and labor laws. The final response deadline was extended to October 2, 2026.