70--Honey Pot

Request for Information In accordance with FAR 10.001(a)(2), the Social Security Administration (SSA) is conducting market research to identify vendors capable of providing a hardware or software based solution capable of providing production, malware and high interaction honeypots. Any responding vendors must be able to offer a honeypot gateway or alternative solution meeting the following requirements: - Provide a method for either an automated response or manual interventions - Provide at least two layers of protection to protect against failure and comprise of agency systems - Provide the ability to fail to a closed state. In cases of a failure, the system should automatically prevent all accesses to and from the honeypot - Maintain state of all inbound and outbound connections - Provide a method to configure and enforce role-based access - Provide remote administration capability - Control connections in a manner that is difficult for detection by attackers - Provide automated alerting of when activity is occurring on the honeypots solution - Captured data should not be stored locally on the honeypot - Provide the ability to log interactions with the honeypot to a remote location - Provide the capability for capturing the following activity o Inbound/Outbound connections (firewall logs) o Network activity (full packet captures) o System activity o Full keystroke and commands run logging - Provide the capability to view activity in real time from a remote system - Provide the capability to archive of data captured by the honeypot for future analysis - Maintain a standardized log of every honeypot deployed - Maintain a standardized, detailed report of a honeypot compromise - Provide a means for transmitting this captured data from sensors to the collector in a secure fashion, ensuring the confidentiality, integrity, and authenticity of the data - Provide logging for troubleshooting capability - Provide support services to assist in resolving and remediating issues related to solution - Upgrades and software revision included in maintenance and support This is not a solicitation announcement for proposals. The Government will not award a contract from this announcement nor reimburse vendors for any costs associated with providing information in response to this announcement or any follow-up information requests. The Government will not accept any telephone calls requesting a bid package or solicitation since there is no bid package or solicitation. In order to protect the procurement integrity of any future procurement, if any, that may arise from this announcement; the Government will not provide a technical point of contact. In addition, the Government will not make appointments for presentations. This is a request for planning purposes only, not a commitment by the Government. Detailed responses to the above requirements (with substantiating documentation) are required. We will not consider simple marketing information (Capability Statements) or incomplete responses. We will not consider reference to vendor web sites as a valid response. Respondents should indicate whether their services are available on GSA FSS or SEWP. Interested sources that believe they have the ability to provide the solution and services required MUST submit responses via email (compatible with MS Office 2003) to Madeline.Bryant@ssa.gov no later than October 21, 2014 by 2:00 PM. Please reference SSA-RFI-15-0008 in the subject line. Faxed information will not be considered. The file size limitation for e-mail attachments is 5 megabytes. Questions concerning this notice must be received in writing via email to Madeline.Bryant@ssa.gov no later than October 14, 2014 1:00 PM.