RFQ: Procurement and Implementation of a Next-Generation Firewall (NGFW)

ABOUT INKOMOKO 

Inkomoko supports entrepreneurs to grow their businesses in order to improve livelihoods, create jobs, and help communities thrive.

In 2025, Inkomoko was listed by the Financial Times as the 8th fastest-growing company in Africa, supporting entrepreneurs across East and Central Africa to grow thriving businesses and build inclusive, resilient economies. Founded in 2012, Inkomoko is a non-profit that has worked with more than 100,000 entrepreneurs, including thousands of refugee businesses. Inkomoko provides a combination of training, consulting, access to finance, and market-level systems change to drive impact for our clients. We are the largest investor to refugee entrepreneurs in Africa.

Inkomoko has 800+ staff in 50 offices across Chad, Ethiopia, Kenya, Rwanda, and South Sudan. Through Inkomoko’s 2030 strategic plan, we are adding 3 additional countries to positively impact 7M people, by serving more than 550,000 entrepreneurs and growing our $30M loan fund.

INKOMOKO VALUES

• Purpose: be solutions-oriented, produce high-quality work, and be a global leader.
• Achievement: push yourself to reach beyond what you previously thought possible. 
• Improvement: be humble, engage in continuous growth through open & accurate feedback
• Bravery: willing to take risks, create a safe space for others, be compassionate, and inclusive.
• We Eat Goat: we celebrate success and support each other in hard times. We do this work together in the spirit of turikumwe, tuko pamoja, abren nen, Kula na sawa, On est ensemble.

Introduction

Inkomoko invites qualified and experienced ICT solution providers to submit quotations for the supply, implementation, configuration, and support of a Next-Generation Firewall (NGFW) and Zero Trust Architecture (ZTA) solution.

The selected vendor will provide a comprehensive security solution capable of protecting Inkomoko's network infrastructure across its primary and disaster recovery (DR) environments while supporting secure connectivity for multiple country offices.

The assignment includes supply of equipment, implementation, migration, configuration, testing, documentation, training, and post-implementation support. 

Objective

The objective of this procurement is to secure Inkomoko's network perimeter and internal infrastructure through the implementation of a high-performance, identity-aware Next-Generation Firewall that supports:

• Zero Trust Network Access (ZTNA) 
• Multi-site orchestration 
• Advanced threat protection 
• High availability 
• Secure remote connectivity 
• Centralized management and reporting 

Scope of Work

The successful vendor shall provide the following:

• Supply of enterprise-grade Next-Generation Firewall appliances. 
• Installation and configuration at the Primary and Disaster Recovery sites. 
• High Availability deployment (Active-Active or Active-Passive). 
• Layer 7 application inspection. 
• Identity-aware access control. 
• SSL/TLS inspection. 
• Intrusion Prevention System (IPS). 
• Advanced malware protection and sandboxing. 
• Web and URL filtering. 
• Zero Trust Architecture implementation. 
• Device posture assessment. 
• Endpoint telemetry integration. 
• Micro-segmentation. 
• SD-WAN configuration. 
• Centralized cloud management. 
• Policy synchronization between sites. 
• Security logging and compliance reporting. 
• Migration from the existing firewall environment. 
• Knowledge transfer and administrator training. 
• 24/7 support and maintenance. 
• Firmware and security signature updates. 

Delivery shall be completed within 30 calendar days from issuance of the Purchase Order. 

Deliverables

The successful vendor shall provide:

• NGFW deployment and implementation plan. 
• Installed and configured firewall infrastructure. 
• Successful migration from existing firewall infrastructure. 
• Security policy documentation. 
• SD-WAN configuration documentation. 
• Administrator training. 
• Knowledge transfer documentation. 
• Acceptance testing report. 
• Warranty documentation. 
• Support and maintenance plan.