Secure networks for government and PSUs, from an Indian OEM

Your bid is only as strong as its weakest eligibility clause. Government and PSU bids, on GeM and outside it, repeat a familiar set of eligibility and technical clauses. Here is what you get against each one.

You may not find a GeM category that says "SD-WAN". GeM has standard categories for firewalls, including "Firewall (V4)" and "Next Generation Firewall Software". SD-WAN often has no dedicated category, so buyers have posted it as a custom bill of quantities. For those bids, you get a detailed specification and datasheet. Your BoQ lines, datasheet and bid response then match exactly.

MeitY has advised procuring bodies that some conditions can be restrictive and discriminatory against local vendors. Examples include high minimum turnover, specific global certifications or analyst-ranking requirements. Does your draft RFP include such conditions? We can share the relevant office memorandum. We can also suggest capability-based criteria: throughput, protocols, certifications that apply in India, and reference site counts.

Telecom licensees may connect only trusted products from trusted sources to their networks. If you are a telecom operator or its system integrator, we can provide the relevant documentation.

Your network often cannot depend on a management platform hosted abroad. You can self-host the Nexapp Controller and SDWAN Lite 2.0 in your own data centre and DR, with controller HA and DC–DR replication. Or you can run them hosted by us in India. Central logs help you meet CERT-In's 2022 Directions: incident reporting within 6 hours, and 180 days of ICT logs kept within India. You set log retention to your policy. NTP servers are set centrally, so your devices can sync to NIC or NPL time sources.

Your next procurement may ask for a vendor CBOM. DST's Roadmap to Quantum Resiliency (May 2026) sets phased milestones for critical information infrastructure. Foundations are due by 31 December 2027, high-priority systems by 31 December 2028, and full post-quantum adoption by 31 December 2029. Other enterprises have milestones in 2028, 2030 and 2033. The roadmap asks buyers to request vendor cryptographic bills of materials (CBOMs) from FY 2026-27. It makes them mandatory in procurement from FY 2027-28, and gives preference to indigenous quantum-safe products. It is guidance, not a legal or regulatory mandate, and its testing labs are targeted for December 2026. You can already get end-to-end post-quantum protection from us. That covers hybrid ML-KEM key exchange (FIPS 203) on SD-WAN, router, SSE and management-plane tunnels, and ML-DSA authentication (FIPS 204). It also covers post-quantum-signed firmware and configuration, post-quantum TLS 1.3, crypto-agility and a CBOM.

• Ministries, departments and PSU offices: secure SD-WAN with NGFW across your offices, with on-premises controllers.
• Utilities and DISCOMs: industrial 4G/5G routers for FRTU, RTU and SCADA backhaul with IEC 60870-5-101/104, Modbus and DNP3.
• Public-sector banks and financial institutions: branch SD-WAN and ATM connectivity, including our 2,500-ATM VSAT-to-dual-LTE migration.
• Smart-city and surveillance projects: 4G/5G connectivity for your cameras, kiosks and field devices.

• Class-I local supplier and PPP-MII for network equipment
• Is MTCTE mandatory for routers?
• Nexapp certifications and Class-I status
• How to choose an SD-WAN provider in India