IDEA Public Schools is seeking a provider to offer a Next Generation Firewall (NGFW) solution to replace and enhance its existing perimeter firewall infrastructure. The selected solution should reflect industry's best practices, support advanced threat protection, and integrate into IDEA's broader Zero Trust and layered defense strategy. Key requirements include: • Palo Alto Networks 5410 firewall appliance (or equivalent) for two main data centers • Palo Alto Networks 1410 appliance (or equivalent) for one location • Full turnkey delivery, including configuration and replication of the current firewall architecture • Advanced training for two IDEA IT staff members • Minimal disruption during the cutover process Some of the key features required in the proposed solution include: • Application-layer (L7) inspection and control • TLS/SSL decryption • Active/Active HA or clustering • Policy-based and bidirectional forwarding • Interface and path monitoring • Integrated DLP capabilities • DoS/DDoS protection • Real-time traffic visibility • IDS/IPS and deep packet inspection • Threat prevention (malware, spam, APTs) • VPN (client-based and IPSec) • Centralized management (cloud or on-prem) • Integration with Azure AD, LDAP, and SAML • User-ID and 802.1X support • Logging and reporting with a minimum 30-day retention • Content filtering and URL categorization • High availability and failover configuration • Detailed reporting on all traffic • Multi-gig throughput support (20–40 Gbps+)