CITY COUNCIL STAFF REPORT
Meeting Date: August 18, 2025
TO: THE HONORABLE MAYOR AND CITY COUNCILMEMBERS
TITLE:
Adopt Resolution No.___-25 Authorizing the City Manager to Execute an Agreement with Sable Computers, Inc. (dba KIS) for the Purchase of Palo Alto Networks Firewalls, Including Five Years of Support
SYNOPSIS
The firewalls deployed across City Hall and Pleasant Hill Police Department (PHPD) are nearing their end of life and must be replaced . To ensure the City's security against cyber threats, staff is seeking to replace the existing firewalls with the latest models. This will allow for continued manufacturer support and help prevent security breaches.
DISCUSSION
Background
A firewall is a network security appliance that monitors incoming and outgoing network traffic and determines whether to allow or block specific traffic based on a defined set of security rules.
It is the security barrier between the external cyber threats that exist on the internet and the City’s internal data network.
Currently the City has firewalls deployed at City Hall and PHPD. The Public Services Center (PSC) resides on an extended branch of the PHPD data network, so the PSC is also protected by the firewall at PHPD.
The City’s existing firewalls are more than five years old and need to be replaced. Replacing the firewalls with the latest models is necessary to maintain manufacturer support and ensure the firewalls remain current with the latest security software patches and updates.
Analysis
The City’s existing firewalls and the recommended replacements are both manufactured by Palo Alto Networks, a well-known leader in the firewall industry. Gartner’s Magic Quadrant, a wellrespected technology research and advisory company, has ranked Palo Alto Networks as a top leader for network firewalls eight years in a row. Palo Alto Networks solutions can be found in many Fortune 500 companies worldwide and in many government institutions.
Palo Alto Networks do not sell their products direct; thus, the firewalls must be procured through one of their resellers, Sable Computers, Inc. (dba KIS). KIS is currently a valued technical resource for the City, consistently providing the City with a high-quality level of service. They are headquartered in Fremont, CA, and have earned a reputation in the industry for being knowledgeable, professional, and reliable. They support many of the municipalities in the Bay Area, including the cities of Pleasanton, Alameda, Martinez, and Newark.
The proposal and pricing provided by KIS for the firewalls is based on the cooperative purchasing agreement from the California Multiple Award Schedules (CMAS), which satisfies the City’s purchasing policy for competitive bidding. The proposal includes five years of licensing, support, and software updates.
FISCAL IMPACT
The cost for the replacement Palo Alto Networks firewalls, including five years of technical support, is $82,751.56. This project will be funded equally from the City Hall and PHPD technology budgets for Fiscal Year 2025 - 2026. The Finance Division has confirmed that adequate funds are available to fund this request.
PUBLIC CONTACT
Public Contact was made through posting of the City Council agenda on the City’s official notice bulletin board, at the Pleasant Hill Senior Center, and at the Pleasant Hill Police Department. The agenda and staff report are posted on the City’s web page.
RECOMMENDED CITY COUNCIL ACTION
Adopt the proposed resolution authorizing the City Manager to execute an agreement with Sable Computers, Inc. (dba KIS) for the purchase of Palo Alto Networks firewalls including five years of support.
ALTERNATIVES TO RECOMMENDED ACTION
The City Council could reject the proposed action and provide direction to staff.
ATTACHMENT(S)
Proposed Resolution
Exhibit A - KIS Agreement
Prepared by: Ling King, Chief Technology Officer
Approved by: Ethan Bindernagel, City Manager