1.0 Statement of Work - Bid4Michigan Web viewMCCA – Michigan Colleges Online – Cisco...

Michigan Community College Association

Michigan Colleges Online

Request for ProposalCISCO NGFW 5500-CX Firewalls

Including security bundles

July 31st, 2014

MCCA – Michigan Colleges Online – Cisco NGFW firewall RFP

Michigan Community Colleges Association

Request for Proposal for CISCO NGFW 5500-CX FirewallsIncluding CISCO Bundle 1 (AVC, IPS+WSE)

Or CISCO Bundle 2 (AVC+IPS)

RFP ID No.: MCO 07

Proposal Due Date: 5:00pm EST August 7th, 2014

Contact/Submit To: Randy MeltonMichigan Community Colleges Association222 North Chestnut Street,Lansing, Michigan 48933-1000

Phone: (517) 372-4350Fax: (517) 372-0905Email: [email protected]

PLEASE NOTE THE ITEMS IN YELLOW.

In most cases these are the Actions Items required for this Bid.

2Michigan Colleges Online


Table of Contents

1.0 STATEMENT OF WORK.......................................................................................................................4

1.1 PURPOSE..........................................................................................................................................41.2 COVERAGE & PARTICIPATION.........................................................................................................4

2.0 GENERAL INFORMATION..................................................................................................................5

1.3 ORIGINAL RFP DOCUMENT.............................................................................................................51.4 THE ORGANIZATION........................................................................................................................51.5 VENDOR’S UNDERSTANDING OF THE RFP......................................................................................61.6 GOOD FAITH STATEMENT................................................................................................................61.7 BID RESTRICTIONS...........................................................................................................................61.8 BID RESPONSE INSTRUCTIONS.........................................................................................................61.9 COMMUNICATION............................................................................................................................71.10 BID REGISTRATION..........................................................................................................................71.10.1 MICHIGAN SERVICE LOCATION REQUIRED......................................................................................71.11 PROPOSAL SUBMISSION...................................................................................................................71.12 METHOD OF AWARD........................................................................................................................81.13 SELECTION AND NOTIFICATION.......................................................................................................8

3. DIGITAL ASSETS & SERVICES TO SECURE..................................................................................9

3.1 HOSTING ENVIRONMENT.................................................................................................................93.2 TARGETED APPLICATIONS FOR HOSTED ENVIRONMENT...............................................................103.4 REST SERVICES............................................................................................................................113.5 CISCO NGFW FIREWALL REQUIREMENTS..................................................................................123.6 COST AND TCO CISCO NGFW FIREWALL..................................................................................133.7 IMPLEMENTATION..........................................................................................................................143.8 LONG-TERM MANAGED SERVICES................................................................................................163.9 ENGAGEMENT METHODOLOGY.....................................................................................................173.10 PLEASE SHARE ANY DETAILS ON IMPLEMENTATION:....................................................................17

4. VENDOR QUALIFICATIONS & REFERENCES.............................................................................18

4.1 DEBARRED VENDORS AND EXCLUDED PARTIES SCREENING....................................184.2 VENDOR CERTIFICATION...............................................................................................................20



1.0 Statement of Work

1.1 PurposeThe purpose of this Request for Proposal (RFP) is to invite prospective vendors to submit a proposal to supply a CISCO NGFW Firewall for the Michigan Community College’s Association, Michigan Colleges Online operating unit. This RFP provides vendors with the relevant operational, performance, application, and architectural requirements of the system.

Preference will be given to suppliers who have demonstrated a clear understanding of the requirements and that have core competencies and practices for providing Co-location services. Suppliers are required to propose a solution that best meets MCCA/MCO ’s stated requirements using industry best practices.

1.2 Coverage & ParticipationMCCA/MCO reserves the right not to enter into any contract, to add and/or delete elements, or to change any element of the coverage and participation at any time without prior notification and without any liability or obligation of any kind or amount.

1. Bid Group 1:

A proposal covering each of the following devices with different configurations:

CISCO NGFW Firewall - NGFW ASA 5515-CX



High Availability Options

Implementation

Includes Bundle 1 (AVC, IPS+WSE) or Bundle 2 (AVC+IPS) in each option.

Long-term managed services



2.0 General Information

1.3 Original RFP DocumentMCCA/MCO shall retain the RFP, and all related terms and conditions, exhibits and other attachments, in original form in an archival copy. Any modification of these, in the vendor’s submission, is grounds for immediate disqualification.

1.4 The OrganizationThe Michigan Community College Association is a network-centric organization that provides leadership on issues affecting member colleges. In addition to providing core legislative and government advocacy for its members, MCCA members benefit from the activities of four Centers of Excellence including the Center for Student Success, Michigan Community College Virtual Learning Collaborative, Michigan New Jobs Training Program, and the new Center for Global Initiatives.

Industry: Higher Education Member Support Services

Public Sector


Author, 01/03/-1,

Too many spaces after this. It doesn’t match the other heading spacing.


Schedule of EventsThe following is a tentative schedule that will apply to this RFP, but may change in accordance with the organization’s needs or unforeseen circumstances. Changes will be communicated by e-mail to all invited bidders.

Issuance of RFP July 31st, 2014 RFP Closes August 7th, 2014 - 5 pm

(Email Submission to: [email protected])

UPON FINAL SELECTION, MCCA/MCO RESERVES THE RIGHT TO EXTEND THE REWARD NOTIFICATION DATE IF NEEDED TO NEOGIGATE FINAL TERMS OR TUNE REQUIREMENTS.

1.5 Vendor’s Understanding of the RFPIn responding to this RFP, the vendor fully accepts the responsibility to understand the RFP in its entirety, and in detail, including making any inquiries to MCCA/MCO as necessary to gain such understanding. MCCA/MCO reserves the right to disqualify any vendor who demonstrates less than such understanding. Further, MCCA/MCO reserves the right to determine, at its sole discretion, whether the vendor has demonstrated such understanding. That right extends to cancellation of award if award has been made. Such disqualification and/or cancellation shall be at no fault, cost, or liability whatsoever to MCCA/MCO .

1. Rights to Reject Bid MCO reserves the right to reject or cancel a Bid on several conditions which are not limited to the following list:

TCO does not align within operating cost parameters (too expensive). Solution does not fully satisfy MCO Use Case due to architecture changes or service model changes post

bid. Performance concerns with Professional Services. Limited skill sets within the state for supporting the solution. Alignment concerns. Business Office Location.

1.6 Good Faith StatementAll information provided by MCCA/MCO in this RFP is offered in good faith. Individual items are subject to change at any time. MCCA/MCO makes no certification that any item is without error. MCCA/MCO is not responsible or liable for any use of the information or for any claims asserted therefrom.

1.7 Bid Restrictions

Any vendor subject to usage restrictions by the Department of Defense or State Department are prohibited from bidding.

Vendors that do not have a physical service presence within the state of Michigan are prohibited from bidding. Managed services can be provided by resources outside the state but not outside the country.

Co-location and hosting space must be provide within the state of Michigan.

1.8 Bid Response Instructions

Complete the Items Highlighted in Yellow within this Word Document. Save your Word Document as a PDF and email to [email protected].

Complete the Bid-Response Spreadsheet for each proposed solution. Email the updated spreadsheet and a PDF version to [email protected]. Please send as an unlocked spreadsheet for edits.


mailto:[email protected]



1.9 CommunicationVerbal communication shall not be effective unless formally confirmed in writing by a specified procurement official in charge of managing this RFP process. In no case shall verbal communication govern over written communication.

1.9.1 Vendors’ Inquiries. Applicable terms and conditions herein shall govern communications and inquiries between MCCA/MCO and vendors as they relate to this RFP. Inquiries, questions, and requests for clarification related to this RFP are to be directed by email to:

Email: [email protected]

1.9.2 Informal Communications. Inquiries for clarifications and information that will not require addenda may be submitted verbally to Randy Melton subject to the availability of time.

1.9.3 Formal Communications that are not clarifications shall include, but are not limited to:

Errors and omissions in this RFP and enhancements. Vendors shall recommend to MCCA/MCO any discrepancies, errors, or omissions that may exist within this RFP. With respect to this RFP, vendors shall recommend to MCCA/MCO any enhancements, which might be in MCCA/MCO ’s best interests.

Inquiries about technical interpretations, which must be submitted in writing and be received prior deadline data published above. Inquiries for clarifications/information that will not require addenda may be submitted verbally to the buyer named above at any time during this process.

Addenda to this RFP.

1.9.4 Addenda. MCCA/MCO will make a good-faith effort to provide a response to each question or request for clarification that requires addenda within two business days.

1.10 Bid Registration Please register your participation intention by email: [email protected].

1.10.1 Michigan Service Location required.

This bid requires professional services in the state of Michigan. This Bid is limited to firms that reside in Michigan, have a branch office in Michigan or adjacent states that border with Michigan. MCO will not pay for more than 2 hours of travel each way to our data center in Southfield Michigan.

1.11 Proposal SubmissionProposals must be delivered by email: [email protected]. on or prior the deadline date stated above within the schedule of events. MCCA/MCO shall not accept proposals received by fax. Vendors are to submit one electronic PDF copy of proposal marked “Original”.





1.12 Method of AwardThe evaluation of each response to this RFP will be based on its demonstrated competence, compliance, format, and organization. The purpose of this RFP is to identify those suppliers that have the interest, capability, and financial strength to supply MCCA/MCO with a Hosting and Managed Services identified in the Scope of Work.Evaluation Criteria:

1. Cost and TCO (Device and Professional Services)

2. Implementation (Skills and knowledge of Cisco Solution and Layer 7 Controls)

3. Engagement methodology

4. Vendor’s qualifications and references.

1.13 Selection and NotificationVendors determined by MCCA/MCO to possess the capacity to compete for this contract will be selected to move into the negotiation phase of this process. Written notification will be sent to these vendors via e-mail. Those vendors not selected for the negotiation phase will not be notified.

3. Digital Assets & Services to Secure

3.1 Hosting Environment

The following sections provide a brief overview of the hosting environment planned for MCO. This is subject to change based upon the final architected solution.

MCO has selected a virtualization strategy utilizing VMware as the virtual host manager for three physical servers.


Author, 01/03/-1,

Is this page left intentionally blank?-+


3.2 Targeted Applications for Hosted Environment

Targeted Applications for Virtual Infrastructure(This list is subject to change and is a draft list of services)

ApplicationLayer

Application Presentation Instances Memory Storage Within Scope of this RFP

CMS ColdFusion10.x based

Instance 1

< 20 Gigs per

instance

NoInstance 2 NoInstance 3 NoInstance 4 No

Core Application Services

Inventory System Up to 4 medium VM Instances

2 Gigs No

Custom Service – DOL Services

Multiple 1 Gig No

Custom Service – Integration Services

Up to 60 small VM Instances

1 Gig No

Data Services Up to 4 small VM instances

4 Gigs No

Enterprise BUS

TBD Two 2 Gigs 100 Gigs

No

Data Layer

MS SQL Server Data Warehouse

One 16 GigsApprox. of 25 Gigs (SSD) per instance

No

MongoDB Two 16 Gigs NoData warehouse Two 16 Gigs NoPostgre SQL Two 16 Gigs No

SecurityLayer

Security Application Firewall One 1 Gigs Throughput No

OS Layer

Windows Enterprise

Two Instances Yes

Red Hat Linux

Three Host Physical Servers

Yes

Hypervisor VMWare Three Host Physical Servers

Yes

3.3



3.4 REST Services

MCO needs to protect REST and HTTP based services that provide JSON data payloads for various consumers. We need to know “how” the Cisco solution can be used to protect HTTP based REST services.



3.5 CISCO NGFW Firewall Requirements

The MCO has selected the Cisco 5500x Series firewall as the preferred solution for an edge base firewall for its Virutal datacenter. The various security options and layer 7 security controls provides additional capacity provide by a next-generation firewall. MCO desires to select the right sized configuration and understand how this device could work within a layered security framework.

Requirements

Bid must provide cost for each model below along with a High Availability option IF AVAILABLE. If HA is not quoted (Single), 24 hour warranty replacement is required, or a warm fall-over method to VM is desired if there is an option for this.

All features, subscriptions, warranties, etc. must be quoted for 3 years. This includes the RIGHT level of Smartnet and which version of Smartnet.

All proposals will either contain CISCO bundle 1 (AVC, IPS+WSE) 3 year or bundle 2 (AVS+IPS) 3 year option. May include other bundles or modules that align with objectives.

Include any rails or rack mounting hardware.

Device Implementation will be in Southfield, Michigan.

MCO requires a proactive security appliance/service protecting information assets

Vendor most provide the initials of the engineer(s) assigned to the duration of the project and outline their experience in layer 7 controls. We are requesting that this project is not assigned to a non-senior engineer due to the complexities of layer 7 controls.

ModelHigh Availability (2x2 configuration)

AVC+IPS AVC+IPS+WSE OtherCisco ASA 5515-CX Proposal 1 Proposal 2 Proposal 7Cisco ASA 5525-CX Proposal 3 Proposal 4 Proposal 8Cisco ASA 5545-CX Proposal 5 Proposal 6



3.6 Cost and TCO CISCO NGFW FirewallBid Instructions:

Please attached quotes for supporting the following configurations:

Please complete the grid below:

Proposal Configuration Purchase Cost

Warranty Period (3 years

minimum)

Implementation

3 YearMaintenance

3 YearTCO

1. 5515-CX, HA, IVC+IPS2. 5515-CX, HA, IVC+IPS+WSE

3. 5525-CX, HA, IVC+IPS4. 5525-CX, HA, IVC+IPS+WSE

5. 5545-CX, HA, IVC+IPS6. 5545-CX, HA, IVC+IPS+WSE7. Other Configuration (Recommendation 1)8. Other Configuration(Recommendation 2)



3.7 Implementation MCO needs to validate that the implementation engineer(s) have the rights skills and knowledge for implementing the advanced functionality of the CISCO NGFW Firewall. This alignment is critical to ensure that we have the right security model implemented and that the engineer is not learning a new system as part of the paid services by the MCO. MCO desires clarity on how this device can be used in conjunction with an Application Firewall and load balancer that creates a layered security solution that supports the following:

Desired Functionality Cisco NGFM Firewall

Dell Force 10 S-60-44T Switch (Layer 2 and 3)

Load Balancer Application Firewall

Deep Packet Inspection support with customization for filtersInjection detectionSignature BasedThrottle detection for abnormal traffic patternsVirus Detection (Optional)AlertingDetection techniquesProtection techniquesTraffic processingConnection handling.SSL Management

MCO desires a design plan for how the NGFW firewall will work with the various components outlined above. Ideally, this plan would identify the policies\functionality for the Cisco device that would work in tandem with the policies\functionality of the other devices.

MCO is in the process of finalizing an Application Firewall solution.

Policy Example

MCO will provide REST services over IPSEC to specific MI colleges over a VPN connection. REST services (HTTP GET, PUT, DEL) would only be allowed between a specific IP range. We would limit these ranges at the Edge Firewall which would also include an IPSEC configuration between WANs. MCO would use this as a template to implement for all community colleges in the state. This policy would include a static IP route, IPSEC configuration, a port number, and only HTTP traffic would be allowed.

CISCO NGFW Firewall Configuration within the MCO Virutal Data Center



3.7.1 Bid Submission Briefing Call

MCO desires a one hour call with selected vendors to discuss the following:

Discuss experience with implementing Cisco NGFW device and Layer 7 Experience.

Understand how the baseline services are provision (IPS, signatures, etc.). Understand how alarms are reported and can be feed to What’s Up Gold. SSL Management functionality SIO Services Recommended device Enforce differentiated policies based on the user, device, role, application

type, and threat profile.

Vendor may include a Cisco SME on the call.

3.7.2 Implementation Estimates The MCO has identified 4 key areas (A1-A4) for implementation of the Cisco NGFW. Please identify the resources (their initials) that would be assigned to this engagement by area. This is not a fixed fee engagement; however, if awarded the bid you will need to provide an SOW that aligns with your bid proposal based on a time and materials basis with a not to exceed clause. Also, please identify any additional services that may have been missed.

Bid Instructions: Please complete the A1-A5 questions below and the hourly rate section.

Ref Implementation Please provide the initials of the engineer(s) that that will be assigned to these tasks.

Estimated Hours

A1 Firewall design plan for integration with Dell Force10 Switch, Load Balancer and Application Firewall. This would include policy mapping

A2 Baseline Firewall Implementation

This would include all of the baseline modules included in the unit such as IPS, etc.

This should include integration with two Dell Force 10 S-60-44T Layer 2 and Layer 3 Top of Rack Switch. This will include at least two hours working with another vendor who is configuring the Dell Switch.

A3 Layer 7 Implementation - This may be applicable more to the application firewall, however; MCO desires to know what functionality could be implemented in the Cisco Firewall.

A4 Sys Logging – LMC desires to ship log files to a Sys Log Server.



A5 Other Areas (please define)

3.7.3 Implementation Cost

Resource Initials of Resource

Hourly Rate Total Hours Costs

Engineer # 1Engineer #2Other #3Other #4Total Cost

Please note that any resource reassignments must be agreed to in writing with the MCO once the bid has been approved. It would be a breach of contract to reassign professional services to a junior resource or an unapproved resource. Vendor agrees that any service performed by an unapproved resource would be at the vendor’s expense and would be non-billable time to the MCO for this engagement. The only except to this is an employee separation, however MCO reserves the right to find another vendor for implementation.; Initial _____

3.8 Long-term Managed Services

MCO is considering a long-term (three years) Managed services support model for the firewall. Please provide estimations for the following activities on a monthly cost basis:

Ref Implementation Estimated Hours Time Frame ModelM1 IPSEC change /adds Break/FixM2 Patch Management Monthly/Quarterly ProjectM3 Upgrades Annual ProjectM4 Security Review Biannual ProjectM5 Security Incident and

ResponseBreak/fix

Please provide cost summaries on a one year basis and on three year terms. Please express your discount level against your published rates.



3.9 Engagement Methodology

Please describe your engagement methodology for how you manage customer relationships:

Ref Service Please explain your practices in this area1. Account Relationship Management

2. Project management Practices

3. Service Level Agreements

3.10 Please share any details on implementation:



4. Vendor Qualifications & References

All vendors must provide the following information in order for their proposal to be considered:

1. A brief outline of the vendor company and services offered, including:

a. Full legal name of the company.

b. Year business was established.

2. Contact information for three references (if possible) from projects similar in size, application, and scope, and a brief description of their implementation.

Relevant Client List:Reference 1

Organization Name

Industry

Contact Name and Title

Phone Number

Email Address

Relevant Client List:Reference 2

Organization Name

Industry

Contact Name and Title

Phone Number

Email Address

4.1 DEBARRED VENDORS AND EXCLUDED PARTIES SCREENING

DEBARRED VENDORS AND EXCLUDED PARTIES SCREENING(Fill out completely and return with RFP)

CERTIFICATE OF COMPLIANCE

I certify, buy submission of this offer, that neither __________________________________, (name of vendor, independent contractor, or offering party)

nor any of its principals, or sub-contractors that are a part of this offer is presently debarred, suspended,

proposed for disbarment, declared ineligible, or voluntarily excluded from participation in Federal assistance

programs or activities, and neither ____________________________________, nor any of its principals or (name of vendor, independent contractor, or offering party)

sub-contractors, is listed on the General Services Administration’s list of Parties Excluded from Federal Programs and



the HHS/OIG List of Excluded Individuals/Entities (available through the internet at: www.sam.gov).

Where the party is unable to certify to any of the statements in this certification, such party shall attach an

explanation to this offer.

Where a party fails to submit and complete this certification, such party’s offer shall be determined to be an

incomplete submission.



4.2 Vendor CertificationThis certification attests to the vendor’s awareness and agreement to the content of this RFP and all accompanying calendar schedules and provisions contained herein.The vendor must ensure that the following certificate is duly completed and correctly executed by an authorized officer of your company.This proposal is submitted in response to Request for Proposal for Collaboration Solution(s) issued by MCCA/MCO .

The undersigned, who is a duly authorized officer, hereby certifies that:

(Vendor Name)

agrees to be bound by the content of this proposal and agrees to comply with the terms, conditions, and provisions of the referenced RFP and any addenda thereto in the event of an award. Exceptions are to be noted as stated in the RFP. The proposal shall remain in effect for a period of [ Please Define ] calendar days as of the Due Date of the RFP.

The undersigned further certify that their firm (check one): IS IS NOT

currently debarred, suspended, or proposed for debarment by any federal entity. The undersigned agree to notify MCCA/MCO of any change in this status, should one occur, until such time as an award has been made under this procurement action.

Person(s) authorized to negotiate on behalf of this firm for the purposes of this RFP are:Name: Title:

Signature: Date:

Name: Title:

Signature: Date:

Signature of Authorized Officer:Name: Title:

Signature: Date:

_____________________________________________________


1.0 Statement of Work - Bid4Michigan Web viewMCCA – Michigan Colleges Online – Cisco...

Documents

Transcript of 1.0 Statement of Work - Bid4Michigan Web viewMCCA – Michigan Colleges Online – Cisco...