Network Strategy SD-WAN & Security Service Edge (SSE)

Background information The current WAN solution is coming to the end of the contract and GMC are looking to move to a new provider and a new WAN Solution across all GMC sites. We have approx. 1,800 staff who work in a remote working hybrid model with only 20% of these are onsite at any one-time. Remote workers connect via VPN into the Manchester and London Datacentres. We are therefore inviting bids from suppliers who can meet the requirements outlined in the sections detailed in the required Lots below. The current GMC WAN adopts point to point ethernet technology and the strategic roadmap is to move to a more flexible Cloud based SD-WAN model. GMC locations: - London - Regent’s Place, 350 Euston Road, London, NW1 3JN - Manchester – 3 Hardman Street, Manchester, M3 3AW - Manchester – 3 Hardman Square, Manchester, M3 3EB - Manchester – St James's Buildings, 79 Oxford Street Manchester, M1 6FQ - Edinburgh – The Tun, 4 Jackson's Entry, Edinburgh EH8 8PJ - Cardiff – Caspian Point 2, Caspian Way, Cardiff Bay, CF10 4DQ - Belfast - Bedford House, 16–22 Bedford Street, Belfast, BT2 7FD. Current Wide Area & Internet Networks The GMC operates from 7 main site in the UK and N. Ireland, namely Manchester (x3), London, Belfast, Edinburgh and Cardiff. - All sites operate on structured cabling systems, the standard being Cat 6. - The current GMC WAN is comprised of 7 sites connected together using Ethernet point to point services. This is a manged WAN with service provider Customer Premises Equipment (CPE) at each site. - 4 of sites have secondary backup circuits (Manchester 3HS, Manchester 3HSQ, Manchester SJB and London) - 2 of the sites provide direct internet connectivity (Manchester 3HS and London). Deployment, support and management of the site LAN is not included within the scope. The GMC will perform this function, but the supplier(s) may be required to provide advice and guidance on end-to-end performance as needed. This may involve liaison activities, advice and guidance on network development e.g. traffic prioritisation and shaping, implementation of Quality of Service for the transport of Voice, Video and Unified Comms traffic across the LAN/WAN. For information, the components in the LAN are Cisco Catalyst 9600 and 9300 switches providing core, distribution, and access. We are looking to procure: - A customer managed SD-WAN/SSE solution with accompanying Professional Services. - The scope includes the licensing, supply, implementation and support of software, virtual appliances and physical edge appliances that enable the GMC to manage all WAN and security policies centrally via a single pane of glass. The Tenderers shall provide a phased professional services engagement designed to transform the current network architecture. The engagement is divided into two distinct milestones: - Phase 1 (SD-WAN Foundations). Implementation of an application aware network overlay to optimise connectivity and site reliability - Phase 2 (SSE integration): The subsequent overlay of cloud-delivered security services to achieve a complete SASE architecture.