Home Affairs tenders for new internet gateway security system

The Department of Home Affairs has released a request for tender seeking a modern internet gateway security system to replace its aging infrastructure.

A new system is sought, one with enhanced security capabilities to protect the department's network which currently hosts up to 18,000 users worldwide.

Home Affairs is seeking to modernise its perimeter security services with the adoption of Secure Service Edge (SSE) technology.

The department requires a solution that is "resilient, robust, and focused on ensuring minimal impact" on its 24-hour, 365-day business operations.

"The current on-premises Secure Web Gateway is approaching end of extended support," the tender document states.

"The solution will not only need to meet existing gateway cyber security requirements but also have the capacity to evolve to counter new and emerging threats," it continues.

The system must provide web caching, virus scanning, content filtering, instant messaging control and bandwidth management while stopping traditional spam, malware, and advanced persistent threats.

According to the tender documentation, the solution should include a cloud-based secure web gateway with deployed on-premises capability.

The gateway must include web proxy functionality and some Cloud Access Security Broker and Data Loss Prevention functions.

The department has specified very stringent cybersecurity requirements, including the ability to decrypt, scan, detect and block malware in all web traffic, provide advanced threat protection, and implement sandbox verification of unknown files and URLs.

Other key requirements include the ability to block advertising from websites, detect malicious command and control traffic, and provide visibility into sanctioned and unsanctioned cloud services.

All information must be processed onshore and comply with Australian data sovereignty laws and regulations. 

The Department of Home Affairs requires implementation by the end of the 2025 calendar year, with vendor discovery and departmental staff training will begin in October 2025.

A final cutover to the new solution is expected by May 2026.

Home Affairs specifies 24-hour, seven-days-per-week support for the solution once implemented.

Closing date for the tender is April 30.