Laserfiche WebLink
1.3.2.2 Intrusion Detection/Protection and Firewall Appliances — Provide comprehensive inline <br />network firewall security from worms, Trojans, spyware, key loggers, and other malware. This includes <br />Next -Generation Firewalls (NGFW), which offer a wire -speed integrated network platform that performs <br />deep inspection of traffic and blocking of attacks. Intrusion Detection/Protection and Firewall Appliances <br />should provide: <br />• Non -disruptive in -line bump -in -the -wire configuration <br />• Standard first -generation firewall capabilities, e.g., network -address translation (NAT), stateful <br />protocol inspection (SPI) and virtual private networking (VPN), etc. <br />• Application awareness, full stack visibility and granular control <br />• Capability to incorporate information from outside the firewall, e.g., directory -based policy, <br />blacklists, white lists, etc. <br />• Upgrade path to include future information feeds and security threats <br />• SSL decryption to enable identifying undesirable encrypted applications (Optional) <br />1.3.2.3 Logging Appliances and Analysis Tools — Solutions utilized to collect, classify, analyze, and <br />securely store log messages. <br />1.3.2.4 Secure Edge and Branch Integrated Security Products — Network security, VPN, and intrusion <br />prevention for branches and the network edge. Products typically consist of appliances or routers. <br />1.3.2.5 Secure Mobility Products — Delivers secure, scalable access to corporate applications across <br />multiple mobile devices. <br />1.3.2.6 Encryption Appliances — A network security device that applies crypto services at the network <br />transfer layer - above the data link level, but below the application level. <br />1.3.2.7 On -premise and Cloud -based services for Network Communications Integrity — Solutions that <br />provide threat protection, data loss prevention, message level encryption, acceptable use and application <br />control capabilities to secure web and email communications. This could include cloud access security <br />brokers (CASBs) and DNS security. <br />1.3.2.8 Secure Access — Products that provide secure access to the network for any device, including <br />personally owned mobile devices (laptops, tablets, and smart phones). Capabilities should include: <br />• Management visibility for device access <br />• Self-service on -boarding <br />• Centralized policy enforcement <br />• Differentiated access and services <br />• Device Management <br />1.3.3 Storage Networking. <br />High-speed network of shared storage devices connecting different types of storage devices with data <br />servers. <br />1.3.3.1 Director Class SAN (Storage Area Network) Switches and Modules — A scalable, high- <br />performance, and protocol -independent designed primarily to fulfill the role of core switch in a core -edge <br />Fibre Channel (FC), FCOE or similar SAN topology. A Fibre Channel director is, by current convention, a <br />Page 4 of 11 <br />Attachment B <br />