Approve the renewal of Palo Alto Networks firewall subscriptions and support services through High Point Networks, LLC, in an amount not to exceed $31,627, utilizing NASPO cooperative purchasing.

The City relies on Palo Alto Networks firewalls as a cybersecurity control protecting City networks, systems, and data. These firewalls provide advanced threat prevention, web filtering, DNS security, and secure remote access capabilities across the enterprise.

The proposed renewal ensures continued protection and support for the City’s firewall infrastructure. While the annual renewal cost is not to exceed $31,627, this represents a recurring, cumulative operational expense tied to essential cybersecurity infrastructure. In accordance with City purchasing policy, cumulative and ongoing expenditures must be presented to Council for approval.

The renewal is being procured through a NASPO cooperative purchasing contract, which satisfies competitive procurement requirements while ensuring best value.

Palo Alto Networks firewalls are deployed across the City’s network environment and serve as a security control between internal systems and external networks. These systems enable the City to implement advanced network security capabilities, including:

• Advanced Threat Prevention to detect and block known and emerging threats such as malware, exploits, and ransomware
• URL Filtering to manage and control web access based on content and risk categories
• WildFire analysis to identify and mitigate previously unknown (zero-day) threats through sandboxing
• DNS Security to prevent access to malicious domains and enhance threat visibility
• Secure remote access capabilities to support authorized users connecting from outside the network
• Centralized logging, monitoring, and analysis through Panorama and associated logging services

These capabilities support the City’s broader cybersecurity strategy.

Total Yearly Renewal Cost: $31,627
Term: Annual subscriptions
Funding Source: Approved 2026 IT operating budget

1. Do Not Approve the Renewal
   • Result: Loss of firewall security subscriptions and vendor support
   • Impact: Increased exposure to cyber threats, loss of threat intelligence updates, and inability to maintain compliance with cybersecurity standards