Arbor Networks: Security to the Core

Thanks for the comments Tom. I can’t say that I’ve read any books on the subject but I have spent a lot of time over the last few years answering RFP questions. Ironically enough, a few days after I wrote the post, I was handed an 87-page goliath RFP that’s going to consume most of my next week. You’re right, vendors hate them more.

Regarding the remainder of your post, I don’t think that RFPs really do need a replacement. At the risk of saying exactly what you told me not to say: RFPs really are unnecessary when replaced by straight research and a few pointed inquiries.

With a fair amount of due diligence, an enterprise should be very capable of short-listing solutions to go to trial without having to go through an arduous RFP process. Your arguments about the individual research points have some validity; however collectively, they certainly provide ample reference from which to produce a short list of candidates. From that point, one could set up meetings with the potential vendors and based on the results, short list to 2-3 trial candidates. Why waste the next few months on an RFP?

My biggest problem with RFPs is that they don’t generally do what you stated was their main purpose: reduce the number of solutions to a manageable number before going to trial. Most RFPs that I’ve run across seem to be put together with a short list of vendors in mind and reflect that in some of the very vendor specific requirements.

I think that I would come around to your way of thinking if RFPs were much simpler “let the experts solve my problems for me” documents. For instance, I have a pesky DDoS issue that I want to resolve. I have no idea what technologies are out there and who sells them. I put some general network information, problem description and a list of goals in the document – things like “Reduce the response time to DDoS events in my network.” I would then distribute this to different vendors and ask them to come up with a technology proposal including what products, how they would be deployed, how they would solve my problems, how they would be operationalized, how they would be supported and list pricing for everything.

I do realize that RFPs are not going to go away despite any ground root efforts. They do have a number of ulterior motives for the customers including getting contract concessions, better pricing, and securing promises on some future technologies. I don’t see customer procurement groups giving these up regardless of the opinion of the technical personnel.

I’d like at this point to clarify that my opinions don’t necessary reflect those of Arbor or its affiliates… Arbor absolutely (as Tom well knows) wants your RFPs.

Despite the title of my original post, my point is that I feel that RFPs are more often than not a waste of time for everyone involved because they usually exhibit the bad traits that we’ve already been over. My opinion would certainly come around if I ran across a few that were more legitimate tell me what I should use and why documents.

I think that too much of our discussion has been directed on the fact that vendors don’t like RFPs. That’s definitely true and yes, my original question about who dislikes them more has definitely been addressed.

However, I submit that while vendors probably feel stronger about it, most customers, or at least most people involved in them within those customers, don’t like them much either.

I’ve personally been in conversations with engineers who’ve said things like “I know what I want and I know whom I want to buy it from but I still have to go through this RFP process.” I’ve also been on the buying end of technology where I had to choose between multiple competitive solutions. I did my research, I justified my choice and I lived with the consequences of my choice. I can truthfully say that I would have been very annoyed if had been made to do an RFP for that situation. It may even have brought another solution to the table that I hadn’t considered but I don’t think it would have been worth a month of my time to find out.

This is just a discussion about a topic most people I know have an opinion about. I hold no illusions that RFPs will ever go away. I wouldn’t mind though if they got a whole lot shorter though.

Very nice. We created a post today about RFP’s. Though our angle is slightly different from this post, I think we are all responsibly looking at this practice and hopefully can shed some light on the topic for both the creator and recpient of any RFP.