Iziko Museums of Cape Town seeks a supplier to deliver wired and wireless network infrastructure, structured Cat6 and fibre cabling, a Sophos next-generation firewall, and SD-WAN integration with the main site at Nelson Mandela Prison House. The 36-month licensed solution includes testing, documentation, and an optional 100 Mbps fibre Internet service.
Iziko Museums of Cape Town has issued a Request for Quotation (RFQ ICT-21-OCT-26) for the design, supply, installation, and commissioning of a complete network infrastructure at Nelson Mandela Prison House. The mandatory scope covers reliable wired and wireless connectivity, structured Cat6 cabling and multimode fibre backbone, and switching and wireless access point deployment compatible with Iziko's existing ICT environment. A next-generation firewall/security appliance must be deployed and registered on Sophos Central, fully interoperable with the existing Sophos firewall at the main site. The firewall must provide stateful inspection, intrusion prevention, application control, web filtering, anti-malware, IPsec-encrypted site-to-site VPN/SD-WAN with policy-based path selection and failover, VLAN interfaces, static and dynamic routing, NAT, and logging. The successful bidder will design and implement SD-WAN connectivity to the main site, configure network segmentation between user, wireless, infrastructure, and other approved zones, and establish centralised monitoring, alerting, and performance reporting.
Delivery requirements include end-to-end testing of SD-WAN establishment, routing, application reachability, security enforcement, and failover, along with copper and fibre link certification. Bidders must provide complete as-built documentation covering topology, IP and VLAN schedules, port maps, rack layouts, configurations, configuration backups, serial numbers, and licence details. All Sophos and NCE licences and subscriptions must be included for a minimum of 36 months, with licence bundle, term, inclusions, expiry dates, and renewal costs clearly stated. Support obligations include business-hours phone and email support (Monday to Friday, 8 am to 5 pm), remote troubleshooting, on-site response within four hours for issues that cannot be resolved remotely, four-hour response for critical network failures, regular maintenance checks, and scheduled security updates. A compulsory site inspection is required before final quotation.
An optional requirement for a fibre Internet service with a minimum committed speed of 100 Mbps is included as a WAN underlay for the SD-WAN. This must be priced separately as a once-off installation charge and a recurring monthly charge, and it does not form part of the mandatory total. Iziko may accept the mandatory solution without the fibre service. Benefits to Iziko include a secure, scalable, and centrally managed network linking the site to the main institution, reduced long-term management complexity through a unified Sophos platform, and a fully documented handover. Bidders must submit a valid CSD registration and tax compliance status, complete the bid documents, and sign the Annexure C Confidentiality and Non-Disclosure Agreement. Closing date is 4 November 2026.
This tender suits ICT network integrators and systems houses with proven experience in Sophos firewall and SD-WAN deployments, structured cabling installers certified to test and certify copper and fibre links, and Sophos-certified partners able to provide 36-month licensing and support. Businesses must be CSD-registered, tax-compliant, and able to meet the compulsory site inspection. Telecommunications providers offering fibre Internet services in the Cape Town area may also bid on the optional requirement separately. Small and medium ICT firms with the required certifications and project capacity are encouraged to apply, though they should consider partnering with a larger integrator if they lack Sophos or fibre-testing credentials.
Create a free account to see every tender matched to your business. This tender's documents and buyer contacts unlock from R199/month.
See your matched tenders before you pay, then get their documents and buyer contacts straight away. Cancel anytime, no contract.
