The subject of this invitation to tender is the renewal of the firewall system at Deutschlandradio in Cologne and Berlin.

The new firewall system is intended to replace the existing Checkpoint Firewall-1 system, which currently consists of the following components per Funkhaus (Cologne and Berlin):

- 2 x redundant Checkpoint 12600 appliances as clusters in active standby mode,

- the firewall and the IPS blade are currently being actively used,

- of the 16 1 Gbit / s interfaces each, 12 are actively used,

- 1 x Checkpoint Logserver Smart-1 25,

- 1 x Checkpoint Security Management Server on VMWare basis,

- All systems run with the Gaia operating system version R77.30.

It is important to map the existing functionalities in the new system as well as to be prepared for new current and future requirements, both of the hardware and of the software.

A current and urgent requirement is the network connection to the new ARD-CN interface with a bandwidth of 10 Gb / s and the most redundant connection of the DMZ networks to 2 internal routing instances (in-house: "quadrants") with different IP addresses. Called nets.