Scope of Work (all equipment in by 1st week Feb)
IT Setup
Firewall (Install and config Site to Site VPN to Azure and Policy to open for ONC communication)
1 x FG 100F (Saigon sport Centre - ONC)
4 x FG 80F (4 other sites one each)
1 x 1 yr managed service (subjected to extension annually)
Network Switch
2 x 24 ports L2 Managed switch (Saigon Sport Centre - ONC)
1 x 1 yr managed service (subjected to extension annually)
Rack (KI ask where to mount)
4 x 12U wall mount rack with 1 x 6 gang PDU universal adaptor and 1 x tray (4 other sites one each)
1 x 42U full rack with 2 x 12 gang PDU universal adaptor and 2 x tray and 1 x Keyboard Tray (Saigon sport Centre - ONC)
5 x UPS for rack
4 x 2kva (rack Mount with SNMP card) (4 other sites one each)
1 x 10kva (rack Mount with SNMP card) (Saigon sport Centre - ONC)
PC (Include setup and hardening) 1 x 1 yr managed service (subjected to extension annually)
10 x PCs with curve Monitor (Windows 11 pro) with 3 yrs onsite NBD support (SFF with dual HDMI) (Saigon sport Centre - ONC)



I7 Gen 12
16GB Ram
512SSD
5 x edge m90q gen2 (Windows 11 pro) with 3 yrs onsite NBD support (One for each site NA for ONC)



I7 Gen 12
16GB Ram
512SSD
1 x Gaming spec PC (3080) with 3 yrs onsite NBD support ((Saigon sport Centre - ONC)




I7 Gen 12
64GB Ram
512SSD
RTX 3080
Optional item for 1 yr onsite Support
Network Cables
30 x 2m (Cat 6) (Saigon sport Centre - ONC)
AV Setup (Saigon sport Centre - ONC)
Video wall (4k) 16:9 LED (Power consumption) (Front maintenance model) (Both flat and concave model)



1. 9.2m x 1.4 m, 2k resolution, 1.2mm pitch (3 x 2k displays)
2. 10.4m X 1.9m, 4k resolution, 1.2 / 0.9mm pitch (3 x 4k displays)
Video Multiplexer (32 input / 8 output)
2 x clip on mic
4 x Ceiling Speaker
Ipad for control System with protector cover
Creston or Equivalent AV Control
- Control Video Wall
- Lighting Control (with dimmer control)
- Curtain Control
- Speaker Control
- Mic Control
- Magic Glass
- Projector
- AV equipment
Hikvision Door access (Facial)
Teams room for Meeting Room (25m2)
2 x Projector (Project to Magic Glass)
Magic Glass (size to be advice after 22/12)
Internet Setup
1 x 1Gb (low latency) to Azure with static IP
Saigon Sports City: An Phú, District 2, Ho Chi Minh City, Vietnam (Satellite ONC)
4 x 100Mb (low latency) to Azure with static IP
Saigon Centre 1 & 2: 65 Lê Lợi, Bến Nghé, Quận 1, Thành phố Hồ Chí Minh 70000, Vietnam -1x FG 80F
Estella Place: 88 Đ. Song Hành, An Phú, Quận 2, Thành phố Hồ Chí Minh, Vietnam 1 x FG 80F
Republic Plaza 1 + 2: 18E Đ. Cộng Hòa, Phường 4, Tân Bình, Thành phố Hồ Chí Minh, Vietnam 2 x FG 80F
Microsoft Azure
(South East Asia Singapore)
Site to site VPN for each site to Microsoft Azure vwan
firewall. Do note there is 2 Public IP at Azure end
Saigon Sport Centre
Saigon Centre 1 & 2
Estella Place
Republic Plaza 1
Republic Plaza 2
FG 100F
FG 80F
FG 80F
FG 80F
FG 80F
1000MBPS
100MBPS
100MBPS
100MBPS
100MBPS
Pointer to Note :
1. The site to site vpn is done from DMZ to Azure not from LAN for this case.
2. An Edge device will be hosted in DMZ zone. This PC will only have 1 nic and will act as a middle man in grabbing Data from LAN (OT BMS) and send to
AZURE to IOT VM to to DataLake in Azure via the site to site vpn (This PC need hardening and will have crowdstrike EDR install to send monitoring data to
our SIEM) This PC also middleman in sending remote control execution command to BMS in LAN
3. Default LAN to WAN, internet should be disable. LAN here will normally be the OT network where are all BMS are hosted
4. We might need user more than 1 LAN interface so please cater for it
5. Port and Direction of the traffic will be given at later stage.