RFI -Next Generation Firewall Ruggedized

Quick Summary

The Department of the Air Force, specifically the Air Force Life Cycle Management Center (AFLCMC) Control and Reporting Center (CRC) Program Management Office (PMO), is conducting market research through a Sources Sought notice for a ruggedized, field-deployable Next-Generation Firewall (NGFW). This RFI aims to identify vendors capable of providing a comprehensive security solution for the Starshield project, enabling a Zero Trust security architecture. Responses are due by April 30, 2026, 1pm MST.

Purpose & Scope

This is a Sources Sought notice for information and planning purposes only, not a solicitation. The AFLCMC seeks to identify potential sources for a NGFW solution that can be integrated into a transit case, operate in contested environments, and meet demanding cybersecurity requirements. The solution must support a Zero Trust security model, requiring strict identity verification for all network access. An additional NAICS code of 334111 (Electronic Computer Manufacturing) is welcomed, alongside the primary R425 (Engineering And Technical Services).

Key Requirements

Vendors should provide detailed information on:

• Solution Overview: A complete, ruggedized NGFW solution (preferably COTS), including integration, features, and estimated costs.
• Licensing: Models for subscription, perpetual options, and activation/renewal in air-gapped/DIL environments.
• Performance: Metrics for firewall, threat prevention, and VPN throughput; concurrent sessions; new connections per second; and physical specifications, with conditions detailed.
• Advanced Security: Capabilities for application-level visibility (App-ID), user-based policy (User-ID), advanced threat prevention (IPS, sandboxing, URL filtering), encrypted traffic inspection, Zero Trust enablement (micro-segmentation, granular policy), and attack detection/mitigation.
• Environmental Ruggedization: Compliance with MIL-STD-810H (temperature, shock, vibration, humidity, altitude) and MIL-STD-461G (EMC).
• Management & Integration: Details on local/central management, API capabilities for SIEM/SOAR, autonomous operation, local logging, and high availability (HA).
• Power Architecture: Compatibility with standard AC (90-264 VAC) and tactical DC (28 VDC, MIL-STD-1275E compliant) sources, including power management and failover.
• Compliance: Listing on DISA APLITS and NIAP, FIPS 140-2/3 validation, TAA compliance, and a detailed Supply Chain Risk Management (SCRM) plan.

Submission Details

• Response Deadline: April 30, 2026, 1pm MST.
• Questions Deadline: April 17, 2026.
• Submission Format: Microsoft Word or searchable Adobe Acrobat PDF, 8.5 x 11-inch pages, limited to 15 pages (excluding commercial documentation). Unclassified, with proprietary information marked.
• Submission Method: Email responses to Ms. Wendy Farley (wendy.farley@us.af.mil) and Mr. Carlos Michel (carlos.michel@us.af.mil).
• Document Access: A current DD2345 form is required to access the RFI document and the recently added Questions and Responses 1 document. Email your DD2345 to the POCs; only the Data Custodian identified on the DD2345 will be granted access.

Contract & Timeline

• Type: Sources Sought / Request for Information (RFI)
• Set-Aside: None specified
• Response Due: April 30, 2026, 1pm MST
• Published: April 2, 2026 (latest amendment)

Disclaimer

This is not a Request for Proposal (RFP) or an Invitation for Bid. The Air Force is not obligated to make an award or pay for information submitted. Submitted information may be used to develop a future RFP.