Awarded Tender: Sasseta northern cape RFP: ICT infrastructure panel appointment

Tender source analysis

What the tender required and what the award supports

Source material and existing AI analysis appear first. Supplier conclusions remain qualified by the evidence Tenders-SA holds.

Summary

This tender is for the appointment of a panel of two service providers to supply, deliver, configure, support, and maintain sasseta's ICT infrastructure, including servers, switches, firewalls, and UPS systems. The contract will run until march 2030 with an option to extend. IT is issued by the safety and security sector education and training authority.

AI Document AnalysisMethodology2 documents

Document being processed

Review in progress

The information shown on this card is preliminary. Our procurement team is currently finalising the submission guidelines, evaluation criteria, technical specifications, financial requirements, and compliance sections so you have a clean, bid-ready summary to work from. Documents being finalised: ANNEXURE B SASSETA ICT INFRSATRUCTURE TECHNICAL SPECIFICATIONS.docx, Annexture A - GCC.pdf. You don’t need to refresh — this page will pick up the updated review automatically.

DocumentANNEXURE B SASSETA ICT INFRSATRUCTURE TECHNICAL SPECIFICATIONS.docxCompliance review in progress

Award analysis coverage

0 of 4 source documents fully reviewed. Unstated details are identified only after complete source review.

technical scope

36 sourced criteria

financial capacity

1 sourced criteria

pricing

Source analysis requires completion or review

compliance returnables

4 sourced criteria

evaluation

16 sourced criteria

experience

Source analysis requires completion or review

personnel

1 sourced criteria

equipment capacity

7 sourced criteria

delivery contract

1 sourced criteria

equity registrations

3 sourced criteria

What the buyer was looking for

1Inferred operational need

The tender is a Request for Proposal (RFP) with reference RFP/SASSETA/25261128.

Why it matters: This is a qualified operational interpretation of the stored scope, not a stated mandatory or scored criterion.

Inferred from stored analysis; verify against the source document. No source document identifier is stored for this item.

Source: AI key requirements · requirements

Known supplier evidence

The linked award records PYTHAGORAS INFRASTRUCTURE GROUP as appointed for this tender. Recorded contract value: 1 ZAR.

Qualified inference

An award confirms appointment. It does not prove why a supplier was selected, that every qualification remains current, or that delivery was completed successfully.

Technical Specifications

Source: ANNEXURE B SASSETA ICT INFRSATRUCTURE TECHNICAL SPECIFICATIONS.docx

Scope: Supply, deliver, configure, support, and maintain SASSETA’s ICT infrastructure across multiple sites (Head Office: Waterfall; Regional Offices: Newcastle, Durban; DR Site: Auckland Park; and any future sites).

Equipment Requirements:

All equipment must be brand new, sourced directly from reputable OEMs, and compliant with South African ICT standards and global best practices.
Deliver to designated SASSETA locations per agreed schedules and handling requirements.
Supply all necessary licenses, accessories, mounting kits, power supplies, and additional hardware/software for complete deployment.

Detailed Specifications:

Servers: HPE ProLiant DL380 Gen11 (4x Head Office, 1x Newcastle, 1x Durban, 1x DR Site). Specs: 2x Intel Xeon Silver 4410Y CPU, 128 GB DDR5 ECC RAM, 2x 480 GB SAS SSDs (RAID 1), HPE Smart Array P408i-a SR Gen11 controller, dual-port 10GbE NIC, dual 800W Titanium power supplies, 2U rack form factor, HPE iLO 6 Advanced management, 3-year NBD onsite warranty (extendable to 5 years).
Core Network Switch: HPE Aruba CX 6100 24G 4SFP+ (JL678A) (1x Head Office). Specs: 24x 10/100/1000BASE-T ports, 4x 1G/10G SFP ports, 128 Gbps switching capacity, 95.2 Mpps throughput, dual-core ARM Cortex A9, 4 GB DDR3, 16 GB eMMC, Aruba Central/CLI/REST API/SNMP management, ACLs/802.1X/MACsec security, internal AC PSU, limited lifetime warranty.
Network Switches: HPE Aruba CX 6100 48G Class4 PoE 4SFP+ 370W (JL675A) (10x Head Office, 2x Newcastle/Durban). Specs: 48x 10/100/1000BASE-T ports, 4x 1G/10G SFP ports, 176 Gbps switching capacity, 98.6 Mpps throughput, dual-core ARM Cortex A9, 4 GB DDR3, 16 GB eMMC, PoE support, same management/security as core switch, internal AC PSU, limited lifetime warranty.
Firewalls: FortiGate 120G (1x Head Office) and FortiGate 70G (1x Newcastle, 1x Durban, 1x DR Site). Specs: FortiGate 120G: 18x GE RJ45, 8x GE SFP, 4x 10GE SFP+, 39 Gbps firewall throughput, 2.8 Gbps threat protection, 1.5 Gbps SSL VPN, 3M concurrent sessions, dual AC PSU, 1U rackmount, FortiGuard AI-powered security services, 3-year FortiCare. FortiGate 70G: 10x GE RJ45, ~5 Gbps firewall throughput, ~1.3 Gbps threat protection, ~1.4 Gbps SSL inspection, ~3 Gbps IPSec VPN, desktop/rackmount, same management/security, 3-year FortiCare.
Mobile UPS: APC Smart-UPS RT 10 kVA (SRTG10KXLI) (1x Newcastle, 1x Durban). Specs: 10 kVA/10 kW, 230V input/output, online double-conversion topology, pure sine wave, <2% THD, ~93.5% efficiency, 160–285V input range, ~3.5 min runtime at full load, ~11 min at half load, rack/tower convertible, 81 kg, hard-wire input, 2x IEC C13 + 1x IEC C19 outlets, lead-acid batteries, RS-232/SmartSlot/network management.
Access Points: FortiAP 431G (FAP-431G-A) (24x Head Office, 2x Newcastle, 5x Durban). Specs: Wi-Fi 6E tri-radio, 4x4 MU-MIMO, 2.4/5/6 GHz bands, 2x 5GbE RJ45 ports, WPA3/802.1X security, OFDMA/MU-MIMO, FortiGate/FortiAP Cloud management, ceiling/wall mount.

Configuration and Installation:

End-to-end configuration and installation of all components, ensuring seamless integration into SASSETA’s existing ICT environment.
Servers: Assess server room suitability (rack space, power, cooling, cabling), document configurations, install/configure for directory services/storage/VMs/applications, integrate with backups/cloud, implement secure configurations (RBAC, hardening, logging), perform migrations with no data loss/minimal downtime.
Firewalls: Site readiness assessments, install/configure next-gen firewalls, define zoning/policies, apply secure baselines, disable insecure defaults, enforce logging/IPS, validate rules for secure access.
Mobile UPS: Electrical assessments, install/configure UPS for critical infrastructure, test load capacity/runtime/failover, integrate monitoring, provide configuration docs (battery runtime, maintenance schedules).
Switches: Assess distribution points (space, ventilation, cabling), install/configure core/access switches, implement VLANs/security/QoS, ensure redundant paths/loop protection, document port mapping/topology.
Network Cables: Assess existing cabling, install CAT6/CAT6A as needed, label cables, update schematics, test performance/reliability.
SFPs: Install compatible SFP modules, test connectivity (fiber/copper), document specifications/slot allocation/endpoints.
Fiber Lids: Install fiber lids/trays, ensure compliance with fiber standards, route/secure cables, label/document connections.
Access Points: Wireless site survey, install/configure APs, apply WPA3/802.1X/VLAN segregation, enable monitoring/logging, test signal strength/coverage/load handling.
Workload Migration: System/data migration from old to new infrastructure with no data loss, minimal downtime, and validation.

Performance and Security Requirements:

Firewalls: High throughput/low latency, IPS/DPI/load balancing, automated traffic analysis, next-gen features (DPI, IPS, content filtering), secure baselines, SSL/TLS encryption, vulnerability scanning/patch management, RBAC, audit logging.
Servers: Optimal performance for batch/real-time apps, sufficient CPU/RAM/storage for growth, auto-scaling for virtualized environments, server hardening, file encryption, secure backups/replication, patch management, MFA/RBAC.
Mobile UPS: Sufficient battery life/load capacity, real-time battery monitoring, centralized management integration, power surge protection, secure access controls, data logging.
Switches: High-speed data transfer (10GbE/40GbE), low latency, QoS for critical traffic, PoE support, port security, 802.1X, VLAN segmentation, secure management (SSH/SNMPv3).
Network Cables: High-quality (CAT6A/fiber), proper routing/shielding, post-installation testing, cable management, labeling.
SFPs: Support required bandwidth/distance, validate compatibility, secure physical access, encryption support for sensitive areas.
Fiber Lids: High-performance fiber cables/connectors, proper fiber management, secure installation, fiber surveillance/monitoring.
Access Points: Wi-Fi 6/6E support, load balancing, band steering, WPA3 encryption, 802.1X, SSID hiding/dynamic VLAN, rogue AP detection.

Testing and Validation:

Pre- and post-implementation testing (unit, integration, performance).
Validate systems meet specification/performance benchmarks.
Interoperability testing with existing hardware/software/cloud.
Validate security features: firewall rules/policies, VPN access, VLAN/segmentation.
Produce comprehensive test/acceptance report (tests conducted, results, issues, resolutions, final sign-off).

Training and Documentation:

Targeted technical training for ICT staff (server/storage admin, switch/firewall config, network troubleshooting).
Provide OEM manuals, initial/final configurations, logical/physical network diagrams, security policies/access matrices, licensing info, warranty docs, escalation matrix, configuration backups, final close-out report (deliverables, deviations, outstanding issues, recommendations).

Support and Maintenance (Until 31 March 2030):

Post-installation support (on-site/remote, business hours + optional after-hours emergency).
Preventative maintenance: hardware inspections, firmware/software updates, cleaning/re-cabling.
Corrective maintenance: troubleshooting, warranty replacements, incident response within SLAs.
Performance/capacity monitoring, security patch management, optimal configurations (hardening, encryption, access controls, secure protocols, continuous monitoring).
Fault monitoring/alerting: detect anomalies/failures, auto-generate alerts, escalate unresolved issues.
Quarterly reports: incident summaries, support logs, recommendations, infrastructure health dashboards.

Contract Awarded

Award Information

Winning Supplier

Supply, deliver, configure, support and maintain sasseta’s ICT infrastructure...

Award Details

Safety and Security Sector Education and Training Authority (Sasseta)

Organization Directors

Awards Won: PYTHAGORAS INFRASTRUCTURE GROUP

View Supplier Intelligence

What the tender required and what the award supports

The tender is a Request for Proposal (RFP) with reference RFP/SASSETA/25261128.

The tender seeks to appoint a panel of two (2) service providers.

Scope: Supply, deliver, configure, support, and maintain SASSETA’s ICT infrastructure across multiple sites (Head Office: Waterfall; Regional Offices: Newcastle, Durban; DR Site: Auckland Park; and any future sites).

Deliver to designated SASSETA locations per agreed schedules and handling requirements.

Supply all necessary licenses, accessories, mounting kits, power supplies, and additional hardware/software for complete deployment.

Detailed Specifications:

Configuration and Installation:

End-to-end configuration and installation of all components, ensuring seamless integration into SASSETA’s existing ICT environment.

Firewalls: Site readiness assessments, install/configure next-gen firewalls, define zoning/policies, apply secure baselines, disable insecure defaults, enforce logging/IPS, validate rules for secure access.

Network Cables: Assess existing cabling, install CAT6/CAT6A as needed, label cables, update schematics, test performance/reliability.

Workload Migration: System/data migration from old to new infrastructure with no data loss, minimal downtime, and validation.

Performance and Security Requirements:

Firewalls: High throughput/low latency, IPS/DPI/load balancing, automated traffic analysis, next-gen features (DPI, IPS, content filtering), secure baselines, SSL/TLS encryption, vulnerability scanning/patch management, RBAC, audit logging.

Servers: Optimal performance for batch/real-time apps, sufficient CPU/RAM/storage for growth, auto-scaling for virtualized environments, server hardening, file encryption, secure backups/replication, patch management, MFA/RBAC.

Switches: High-speed data transfer (10GbE/40GbE), low latency, QoS for critical traffic, PoE support, port security, 802.1X, VLAN segmentation, secure management (SSH/SNMPv3).

Network Cables: High-quality (CAT6A/fiber), proper routing/shielding, post-installation testing, cable management, labeling.

SFPs: Support required bandwidth/distance, validate compatibility, secure physical access, encryption support for sensitive areas.

Fiber Lids: High-performance fiber cables/connectors, proper fiber management, secure installation, fiber surveillance/monitoring.

Testing and Validation:

Pre- and post-implementation testing (unit, integration, performance).

Validate systems meet specification/performance benchmarks.

Interoperability testing with existing hardware/software/cloud.

Validate security features: firewall rules/policies, VPN access, VLAN/segmentation.

Produce comprehensive test/acceptance report (tests conducted, results, issues, resolutions, final sign-off).

Training and Documentation:

Provide OEM manuals, initial/final configurations, logical/physical network diagrams, security policies/access matrices, licensing info, warranty docs, escalation matrix, configuration backups, final close-out report (deliverables, deviations, outstanding issues, recommendations).

Support and Maintenance (Until 31 March 2030):

Post-installation support (on-site/remote, business hours + optional after-hours emergency).

Preventative maintenance: hardware inspections, firmware/software updates, cleaning/re-cabling.

Corrective maintenance: troubleshooting, warranty replacements, incident response within SLAs.

Fault monitoring/alerting: detect anomalies/failures, auto-generate alerts, escalate unresolved issues.

Quarterly reports: incident summaries, support logs, recommendations, infrastructure health dashboards.

Financial stability and capacity to fulfill long-term obligations (until 2030+).

The closing date for submissions is 15 June 2026 at 11:00.

Bidders must submit all mandatory returnable documents or face disqualification.

Returnable Documents: The bidder must submit all required returnable documents as specified in the tender. Failure to submit any mandatory returnable document will lead to disqualification.

Fiber Lids: Install fiber lids/trays, ensure compliance with fiber standards, route/secure cables, label/document connections.

General Requirements:

Must be a legally registered entity in South Africa.

Proven experience in large-scale ICT infrastructure deployment and support.

Technical Requirements:

Certifications or partnerships with OEMs (HPE, Fortinet, APC/Schneider Electric).

Demonstrated expertise in enterprise servers, networking, firewalls, UPS, and Wi-Fi 6E.

Experience with secure configurations, migration, and integration in multi-site environments.

Ability to provide 24/7 support or after-hours emergency support if required.

Compliance Requirements:

Adherence to SASSETA’s ICT policies, security standards, and procurement regulations.

Willingness to sign NDAs, SLAs, and compliance agreements.

Access Points: FortiAP 431G (FAP-431G-A) (24x Head Office, 2x Newcastle, 5x Durban). Specs: Wi-Fi 6E tri-radio, 4x4 MU-MIMO, 2.4/5/6 GHz bands, 2x 5GbE RJ45 ports, WPA3/802.1X security, OFDMA/MU-MIMO, FortiGate/FortiAP Cloud management, ceiling/wall mount.

Switches: Assess distribution points (space, ventilation, cabling), install/configure core/access switches, implement VLANs/security/QoS, ensure redundant paths/loop protection, document port mapping/topology.

SFPs: Install compatible SFP modules, test connectivity (fiber/copper), document specifications/slot allocation/endpoints.

Access Points: Wireless site survey, install/configure APs, apply WPA3/802.1X/VLAN segregation, enable monitoring/logging, test signal strength/coverage/load handling.

Access Points: Wi-Fi 6/6E support, load balancing, band steering, WPA3 encryption, 802.1X, SSID hiding/dynamic VLAN, rogue AP detection.

Targeted technical training for ICT staff (server/storage admin, switch/firewall config, network troubleshooting).

Equipment Requirements:

All equipment must be brand new, sourced directly from reputable OEMs, and compliant with South African ICT standards and global best practices.

Mobile UPS: Electrical assessments, install/configure UPS for critical infrastructure, test load capacity/runtime/failover, integrate monitoring, provide configuration docs (battery runtime, maintenance schedules).

Mobile UPS: Sufficient battery life/load capacity, real-time battery monitoring, centralized management integration, power surge protection, secure access controls, data logging.

Performance/capacity monitoring, security patch management, optimal configurations (hardening, encryption, access controls, secure protocols, continuous monitoring).

The scope includes supply, delivery, configuration, support, and maintenance of ICT infrastructure.

Bidders must verify all compliance requirements (e.g., CSD, tax, B-BBEE) from the tender document.

Insufficient searchable text - AI extraction recommended. Bidders must verify all compliance requirements (e.g., CSD, tax, B-BBEE, CIDB, CIPC, professional registrations, local content) directly from the tender document.

Compliance with South African ICT standards, B-BBEE requirements (if applicable), and tax clearance.

Related opportunities

Related active categories

Active provinces

Active buying organisations

Intelligence and resources

Guide to Professional Services Tenders in South Africa

How to Join IITPSA: IT Professionals Guide 2026