Part 1) - Acquisition of technologies for server rooms The subject of this part of the public contract is a comprehensive delivery, professional implementation and subsequent implementation into full operation of a comprehensive technological solution to extend and complement the existing infrastructure of the data center, both in the physical and technological level. Specifically, this involves the installation and integration of physical infrastructure elements, a modern air-conditioning system, a backup power source, a camera system for monitoring and security purposes, fire safety systems and the building of an optical connection with a dedicated backup server room, which will ensure high availability and continuity of operation. Part 2) – Acquisition of network technologies The subject of this part of the public contract is the supply, implementation and commissioning of a comprehensive solution to increase the security of access to the LAN network and to modernise the backbone and access network infrastructure. It includes the exchange of active elements in the access and backbone layers, the deployment of a network access control (NAC) system with IEEE 802.1X support and the delivery of central switch management in the form of on-premise or cloud management. New switches (2 backbone switches and 7 access switches) will be deployed within the access layer to ensure secure connection of end devices using authentication and authorization based on IEEE 802.1X. This part forms the basic communication and authentication layer of the infrastructure and is designed in direct relation to the security, monitoring and logging systems specified in the technical specification - part 3, with which it must be fully interoperable at the level of access control, security events, logging and automatic response. Part 3) – Supply and implementation of security and monitoring software The subject of this part of the contract is the supply, implementation and commissioning of powerful servers to increase the availability of systems, enhance the computing performance of operations by supplying two powerful rack servers and an enterprise disk array of the All Flash type. The goal is to expand the computing and storage capacity of hospital infrastructure with an emphasis on high performance, redundancy, scalability, advanced management and security features, including support for virtualization, high availability and data services. Furthermore, the delivery, implementation and commissioning of a comprehensive solution for securing the perimeter of the organization, managing security policies and detecting cyber threats. This includes deploying a high-availability firewall cluster, a central security event management system, and training responsible personnel. Last but not least, delivery and installation of a system for central log collection and delivery and installation of hardware and software equipment, which form a comprehensive solution for long-term and detailed monitoring and evaluation of network traffic using data flows (NetFlow, IPFIX, sFlow, etc.). The solution specified in this section is designed as a superior security, analytical and control layer, which builds on the network and authentication infrastructure defined in the technical specification - part 2 and uses it as the primary source of network data, identities, events and telemetry.
Text automatically translated in your browsing language
