Web Application Firewall (WAF)

The University of North Carolina Wilmington is soliciting proposals from qualified vendors to provide a cloud-based Web Application Firewall (WAF) solution along with associated implementation services. This initiative aims to replace the university's current on-premises F5 infrastructure, which supports various web applications via reverse proxy, load balancing, TLS termination, and firewall functions. The transition to a cloud-based platform is part of UNCW’s broader technology modernization strategy, designed to enhance web application security, improve system resiliency, and reduce reliance on local hardware. The desired WAF solution must offer comprehensive protection for web applications, be compatible with both on-premises and cloud-hosted environments, integrate smoothly with existing security monitoring systems, and provide an efficient administrative interface. The selected vendor will be responsible for delivering a proof of concept, managing the full implementation process, including migration planning and testing, and providing necessary training to university staff before transitioning the operations to production. The contract is open for proposals until mid-July 2026, and the main point of contact for this solicitation is Justin Hewett. The project will be performed within North Carolina and supports UNCW’s goal of creating a more secure and scalable web application infrastructure on a cloud platform.