Background: The government is considering the viability of an advanced malware commercial solution for detecting and quarantining malware and zero-day exploits for files in transport and at rest within a file share. The commercial solution must be able to perform analysis of a wide range of file types to include Adobe PDFs, Microsoft Office documents, archive, and multimedia files, using a virtual execution engine. The commercial solution virtual execution engine must be able to inspect each file against a range of browsers, plug-in, applications, and operating systems. In addition, the solution must also be able to provide recursive, scheduled, and on-demand scans, using a separate centralized management console. The number of files to be scanned on a daily basis is estimated to be 50,000-150,000 and can surge up to 300,000 files. The commercial solution's hardware must be highly scalable to handle the estimated range as well as additional surge capacity. The Request for Information (RFI) submission should include the following: 1. Please describe the detection and quarantining malware capabilities of your solution, using a virtual execution engine, such as the methods, periodicity, and types of malware. 2. Please characterize the performance of your solution with regard to throughput, latency, and file/size limitations. 3. Please describe the capability for scalling your solution. Specifically, how would your solution scale to support surge file requirements. 4. Please describe th ehigh availability characteristics of your solution. Characterize your approach to high availability in terms of data loss, system availability, and network partition tolerance. 5. Please describe the ongoing support that will be provided in your solution for evolving document type versions, as it applies to document formats such as Microsoft Office documents, Adobe PDF, archive, and multimedia files. 6. Please provide your support options for maintaining current software revisions of the system components and how the components are upgraded. This RFI is a search for business capability to the above only and thus, this is not to be considered/construed as a formal government requirement. As such, there is no designated period of performance to be anticipated at this juncture either. Submissions may be submitted either via the email address noted above, or physically mailed to 14800 Conference Center Drive, Suite 300, Chantilly, Virginia, 20151. If mailing, please submit two hard copies. Please ensure that RFI-070912 is clearly marked on the submitted package.
