{"resourceId":"jordan-school-district-palo-alto-firewall-award-jatc-south-20261013","versions":[{"version":"external-ec21175b18fc743067a484c1436ce0fc2f36fadd383467b403d7d799894b2546","resource":{"id":"jordan-school-district-palo-alto-firewall-award-jatc-south-20261013","title":"Jordan School District (Utah) summary of award: Palo Alto network security firewall replacement at JATC South to lowest responsive bidder at $268,232, with nine bids ranging to $548,136","organization":"Jordan School District Purchasing","sector":"K-12 public education / network security procurement","geography":"West Jordan, Utah, United States","publishedAt":"Summary of Award dated Oct. 13, 2026","publicationDate":"2026-10-13","eventDate":"2026-10-13","sourceName":"Jordan School District Purchasing","sourceLabel":"Summary of Award 27TH07 Palo Alto Firewall for JATC South","sourceUrl":"https://purchasing.jordandistrict.org/wp-content/uploads/sites/16/Summary-of-Award-27TH07-Palo-Alto-Firewall-for-JATC-South-Info-Systems-Revised.pdf","evidenceClass":"government-audit","outcomeClass":"emerging","topics":["governance-procurement","infrastructure"],"finding":"Jordan School District’s Information Systems department recommended awarding contract 27TH07 for a Palo Alto network security firewall at the JATC South data server room to CompuNet at $268,232.30, the lowest responsive and responsible of nine bids. Other bids ranged from $401,389.44 to $548,136.20. The purchase is funded from the Information Systems equipment budget, and bid pricing expires Nov. 30, 2026.","sledRelevance":"A current, primary K-12 record showing Palo Alto firewall refreshes are bought brand-specified through competitive low bid, with wide reseller price spreads that matter to district budgets.","evidence":"Opened the one-page Summary of Award PDF and read it in full.","architectureImplications":"A brand-specified data-center firewall replacement; no AI-specific features are stated.","governanceImplications":"Board award on lowest responsive bid; the large spread (about 2x between lowest and highest) shows value in competitive bidding even for a named brand.","securityPrivacyImplications":"New hardware should be configured with management restricted to trusted networks, given October’s exploited PAN-OS management flaws.","caveats":"Award summary only: no model, quantity, subscription, term or AI feature detail; board approval outcome not shown in this document.","streamIds":["palo-alto-networks"],"roles":{"sales":"Sales framing: Jordan School District is replacing a Palo Alto firewall through a brand-specified low bid, and nine resellers bid from $268,232 to $548,136. The customer problem is getting fair pricing and a secure deployment for a named product. A bounded engagement could be bid specification and post-award configuration review. The record cannot support claims about AI features, total contract scope or board approval, and price spreads say nothing about service quality.","engineering":"Engineering framing: this is a data-center firewall replacement at a single site with no technical detail in the award. Any new PAN-OS deployment this month should start on a fixed build and with management access restricted to trusted internal addresses, given the PHP2Shell and CVE-2026-0322 exploitation. Proof of value for the district would be a configuration baseline review and an external exposure check after cutover.","delivery":"Delivery framing: after award, the work is staging, migration and cutover at JATC South, owned by the district information systems team with the reseller. Acceptance could include migrated policy parity, management restricted to internal networks and a documented build version. Risks are schedule pressure from the Nov. 30 pricing window, inherited legacy rules, and default management exposure during staging."},"roleDetails":{"sales":{"customerProblem":"District needs a fairly priced, securely configured firewall replacement at one data center.","stakeholders":["District CIO or IS director","Purchasing director","Business administrator","Board of education"],"discoveryQuestions":["What subscriptions and support terms are included?","Who configures and validates the new firewall?","What management-access standard applies?"],"valueHypothesis":"Interpretation: competitive bidding on a named brand produced a large price spread; configuration quality is a separate question.","potentialEngagement":"A post-award configuration and exposure review for the new firewall.","unsupportedClaims":["AI features or outcomes","Board approval status","Service quality of the low bidder"]},"engineering":{"fit":"Single-site K-12 data-center firewall replacement.","architectureIntegration":"Replacement in an existing server room; integration with district network not described.","prerequisites":["Fixed PAN-OS build at deployment","Policy migration plan"],"constraints":["No technical scope in the award document","Pricing valid only to Nov. 30, 2026"],"security":"Deploy with management restricted to trusted internal addresses from day one.","proofOfValue":["External exposure check after cutover","Build version recorded"]},"delivery":{"work":"Stage, migrate and cut over the replacement firewall.","dependencies":["Reseller delivery","Maintenance window","Policy export from old device"],"ownership":"District information systems team.","skillsAdoption":"Staff need current PAN-OS administration skills.","governanceCheckpoints":["Board award","Cutover approval","Post-cutover security review"],"acceptanceCriteria":["Proposed: policy parity verified","Proposed: no management interface reachable externally"],"risks":["Default exposure during staging","Rushed cutover","Legacy rules carried over"]}},"retrievedAt":"2026-10-30T03:06:53Z","enrichedAt":"2026-10-30T03:12:42Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Not addressed.","procurementImplications":"Brand-name specification with reseller competition; pricing validity window ends Nov. 30, 2026.","operatingModelImplications":"District information systems team owns deployment; post-award configuration standards are not described.","sourceVerification":{"openedUrl":"https://purchasing.jordandistrict.org/wp-content/uploads/sites/16/Summary-of-Award-27TH07-Palo-Alto-Firewall-for-JATC-South-Info-Systems-Revised.pdf","referenceExcerpt":"Information Systems recommends awarding the contract, with this vendor as they are the lowest responsive and responsible bidder","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}