Sealed tenders with 2% of the total quoted value as call
deposit in the form of bank draft in favor of Accounts
Officer, Ministry of Science and Technology (MoST)
Islamabad are invited from the firms registered with sales
tax department for GST for the purchase of IT
Equipments. Detail Specifications as Under
TECHNICAL SPECIFICATIONS OF IT EQUIPMENT
Item
Specifications
QTY
Processor: : Two Quad -Core Processors Intel®
Xeon® X5687 (3.60GHz/4-core/12MB/130W,
DDR3-1333, HT, Turbo NA/NA/1/1/2/2) G7 or
Higher
Cache Memory: 4MB Level 3 cache
(Upgradeable)
Servers
Memory Protection: Advanced memory
protection, Mirroring Mode, Lockstep Mode
Memory Type: DDR3 Registered (RDIMM)
or Un buffered (UDIMM)
12x4=48 GB or Higher
Network Controller: Integrated Dual Port
Gigabit Server Adapter or higher
Storage Controller: : Hot Plug SATA/SAS
Models Smart Array P410 Controller (RAID
0/1/1+0)
Internal Storage Devices: Diskette Drives
Via USB only 5x300 GB 15k SAS
Optical Drives Optional SATA 9.5mm DVDROM DVD RW
Graphics: 32MB shared supporting all
display resolutions up to 1600x1200
16bpp@75Hz
Security: Power-on password
Setup password
Diskette boot control
Secure Sockets Layer (SSL)
Secure Shell (SSH)
3 year comprehensive warrantee
original manufacturer training for technical
staff
3
Layer 2
Switch
Stackable fixed-configuration Layer 2 Gigabit
Ethernet switch
Hardware Specifications
Flash memory 64 MB
DRAM 128 MB
Performance and Scalability
Forwarding bandwidth 50Gbps or better
Switching bandwidth 100Gbps or better
Maximum active VLANs 200
VLAN IDs available 4000
Ethernet Interfaces
48 Ports Fast Ethernet
10BASE-T ports: RJ-45 connectors, 2-pair
Category 3, 4,
or 5 unshielded twisted-pair (UTP)
cabling
100BASE-TX ports: RJ-45 connectors, 2-pair
Category 5 UTP cabling
1000BASE-T ports: RJ-45 connectors, 4-pair
Category 5 UTP cabling
1000BASE-T SFP-based ports: RJ-45
connectors, 4-pair Category 5 UTP cabling
Indicator LEDs
Per-port status: Link integrity, disabled, activity, speed,
and full duplex
• System status: System, RPS, Stack link status, link
duplex, PoE, and link speed
Power
The internal power supply is an auto-ranging unit and
supports input voltages between 100 and 240V AC
• Use the supplied AC power cord to connect the AC
power connector to an AC power outlet




Firewall





Firewall performance (large packets) 1+
Gbps
Firewall performance (IMIX) 1 Gbps
Firewall packets per second (64 byte)
600,000 PPS
AES256+SHA-1 VPN performance 500
Mbps
3DES+SHA-1 VPN performance 500 Mbps
Maximum concurrent sessions 256,000
New sessions/second 15,000
Maximum security policies 4000
Maximum users supported Unrestricted
Network Connectivity




Fixed I/O 4x10/100/1000
Physical Interface Module (PIM) slots 6 (4
ePIM/uPIM/PIM + 2 uPIM/PIM)
WAN interface options (PIMS) Serial, T1,
E1, DS3, E3, ADSL/ADSL2/ADSL2+,
G.SHDSL
LAN interface options (ePIMS and uPIMS)
10/100, 10/100/1000, and SFP
4
1
Firewall
Network attack detection Yes
DoS and DDoS protection Yes
TCP reassembly for fragmented packet
protection Yes
Brute force attack mitigation Yes
SYN cookie protection Yes
Zone-based IP spoofing Yes
Malformed packet protection Yes
IPS (Deep Inspection firewall) Yes
Protocol anomaly detection Yes
Stateful protocol signatures Yes
IPS/DI attack pattern obfuscation Yes
Antivirus Yes
Signature database 200,000+
Protocols scanned, IM POP3, HTTP, SMTP,
IMAP, FTP
Antispyware Yes
Anti-adware Yes
Anti-keylogger Yes
Instant message AV Yes
Antispam Yes
Integrated URL filtering Yes
External URL filtering (4)Yes
H.323 ALG Yes
SIP ALG Yes
MGCP ALG Yes
SCCP ALG Yes
NAT for VoIP protocols Yes
Concurrent VPN tunnels 1,000
Tunnel interfaces 300
DES (56-bit), 3DES (168-bit) and AES (256bit) Yes
MD-5 and SHA-1 authentication Yes
Manual key, IKE, IKEv2 with EAP, PKI
(X.509) Yes
Perfect forward secrecy (DH Groups) 1,2,5
Prevent replay attack Yes
Remote access VPN Yes
L2TP within IPsec Yes
IPsec NAT traversal Yes
Auto-Connect VPN Yes
Redundant VPN gateways Yes
User Authentication and Access Control
Built-in (internal) database - user limit
1,500
Third-party user authentication RADIUS,
RSA SecureID, LDAP
RADIUS Accounting Yes – start/stop
XAUTH VPN authentication Yes
Web-based authentication Yes
802.1X authentication Yes
Unified access control enforcement point
Yes
PKI Support
PKI Certificate requests (PKCS 7 and PKCS
10) Yes
Automated certificate enrollment (SCEP)
Yes
Online Certificate Status Protocol (OCSP)
Yes
Certificate Authorities supported VeriSign,
Entrust, Microsoft, RSA Keon, iPlanet
(Netscape) Baltimore, DoD PKI
Self-signed certificates Yes
Virtualization
Routing
BGP instances 10 15
BGP peers 128
BGP routes 250,000
OSPF instances 8
OSPF routes 250,000
RIP v1/v2 instances 256
RIP v2 routes 250,000
Static routes 250,000
Source-based routing Yes
Policy-based routing Yes
ECMP Yes
IP Address Assignment
Static Yes
DHCP, PPPoE client Yes
Internal DHCP server Yes
DHCP relay Yes
Traffic Management Quality of Service
(QoS)
Guaranteed bandwidth Yes
Maximum bandwidth Yes
Ingress traffic policing Yes
Priority-bandwidth utilization Yes
DiffServ marking Yes
Power supply (AC) 350 watts 100 to 240
VAC, 420 watts
Power supply (DC) 420 watts -48 to -72
VDC, 420 watts
Redundant power supply (hot swappable)
Yes
Maximum thermal output,145 BTU/hour (W)
Rack
Note. Training for technical staff
Rack ( LCD 17” + 8 or higher Port KVM Switch with
allied accessories)
1