RFI for XML Gateways

Background
The Social Security Administration (SSA) is conducting market research to identify vendors capable of providing an XML security gateway for securing web service traffic. The goal is to find a solution that can operate as both a physical and virtual appliance, suitable for deployment on-premise and in the cloud.

Work Details
The XML security gateway must meet the following specifications:

**Physical Appliance Requirements:**
- Minimum 192 GB RAM
- 2 x 1 TB HDDs (RAID configurable)
- Minimum 10 x 1 GB or faster network ports (with at least 4 x 10 GB ports)
- Minimum 48 CPU execution threads
- Hardware-based encryption/decryption, signing/verification, and XML/XSLT processing
- Tenant isolation partitions for CPU and RAM
- Sealed, tamper-evident case with intrusion detection switch
- Redundant power supplies that are easily swappable
- Swappable fans and disk drives
- Tamper mechanism that fails the device if casing is opened or tampered with.

**Virtual Appliance Requirements:**
- Support installation on Amazon EC2, GovCloud, MS Azure
- Capable of running as a Docker container, application on RHEL, or appliance on VMware ESXi 6.x.

**Common Requirements for Both Appliances:**
- Guaranteed minimum 5-year manufacturer supported lifecycle from delivery date
- Must be an established product capable of supporting millions of transactions daily
- Platform security features including digitally signed, encrypted firmware image; no access to underlying OS; access violation alerts; role-based access control.
- Service management capabilities including real-time and historic views of service transactions, message payloads, and system logs spanning multiple gateways; view service configurations and change audit trails across multiple appliances.
- Access security protocols including TLS versions 1.0, 1.1, 1.2, and 1.3; SSL v2 & v3; SNI; PFS; ECC Ciphers; PKI standards such as RSA, 3DES, DES, AES, SHA.

Period of Performance
Delivery is expected within 1 day after award.

Place of Performance
Products will be delivered to the Social Security Administration located at Perimeter East Loading Dock, 6201 Security Blvd., Baltimore, MD 21235-2000.