Cloud-Delivered Secure Internet Access and Security Service Edge Solution

The agency is seeking a cloud-delivered secure internet access and security service edge solution to protect its users, devices, and locations. The agency needs to solve the problem of securing on-premises users, remote workers, mobile devices, and branch locations without deploying dedicated security appliances at each site. The requested platform must provide cloud-native cybersecurity, DNS-layer threat protection, web traffic inspection, cloud application visibility, and centralized security policy enforcement. The scope of work covers cloud-based web traffic inspection and filtering for HTTP and HTTPS traffic, as well as URL and content filtering to enforce acceptable use policies. The solution must identify and block malicious websites, downloads, and web-based attacks while supporting policy enforcement based on user, group, device, and location. Additionally, the agency requires cloud-delivered firewall functionality, traffic filtering by IP address, protocol, port, user identity, application, and destination, and visibility into sanctioned and unsanctioned cloud services. The platform must utilize global threat intelligence to detect and prevent phishing, malware, ransomware, and command-and-control activity. The agency requires integration with Microsoft Entra ID, Active Directory, and other industry-standard identity providers, alongside role-based administration and capabilities to protect sensitive organizational data. All work must be performed offsite, and only onshore organizations based in the United States are eligible to participate. Bidders must submit any questions regarding this opportunity no later than June 15, 2026. Proposals and responses can be submitted digitally via email or through an online portal. The agency has not disclosed a set budget and is looking for proposals to determine the cost of the solution.