J063--Preventive Maintenance (PM) and Software Support Service for PACS and Surveillance in the San Diego VARO

RFQ ANSWERS TO QUESTIONS
Surveillance system:
1. Make and model # of all equipment needed to be maintained - American Dynamics VideoEdge NVR, Genetec NVR, Samsung SNV-6084r IP cameras, Axis M4215-LV IP cameras, Hanwha XND-6080RV IP camera, Victor v6.0 software and all associated licensing and SSA 2. System serial of NVR or VMS: Sunroad NVR - Genetec 4LZJX04, MorVall NVR American Dynamics VideoEdge NV5010820186775 (SW version) 3. Total Number of Camera - 33 IP cameras in San Diego and 10 IP cameras in Moreno Valley 4. Total Number of POE switches - 7 switch stacks (one stack in each closet - multiple switches in each stack), all with full POE wattage on all ports Access control system: 1. Make and model # of all equipment needed to be maintained - iSTAR Controllers, iSTAR Ultra Encrypted Controllers, PACS server (CCURE v3.00 CU03 software only), EntryPoint Slammer software, multiClass HID RP40 and HID pivCLASS RPK-H card readers and all associated licensing/SSA. Also, door hardware associated with the card readers (e.g., Strikes, REX sensors, door contacts, etc.). 2. System serial of CCURE - 9-19097 3. Total Number of Card Readers - San Diego and Moreno Valley locations have a total of 81 card readers. 4. Total Number of Controllers - 9 iSTAR controllers (various models) 5. Total number of Power Supplies - 7 power supplies
The Statement of Work (SOW) identifies the categories of equipment to be maintained but does not state quantities for either location. Will the Government provide an equipment inventory, by location, that includes at minimum: Total controlled openings (doors), with card reader manufacturer, model, and quantity; Software House iStar controller quantity, model (Ultra, Ultra SE, Edge, Pro, or other), and current firmware version; Power supply quantity and model, standby battery quantity, and the date of the most recent battery replacement; Request-to-exit device and door position switch quantities; IP camera quantity by manufacturer and model, and the video management system to which each camera is licensed; Network video recorder quantity, model, channel count, and storage capacity; Server and client workstation quantity, with operating system and SQL Server version; Panel enclosure quantity and location.
Surveillance system:
Make and model # of all equipment needed to be maintained - American Dynamics VideoEdge NVR, Genetec NVR, Samsung SNV-6084r IP cameras, Axis M4215-LV IP cameras, Hanwha XND-6080RV IP camera, Victor v6.0 software and all associated licensing and SSA
System serial of NVR or VMS: Sunroad NVR - Genetec 4LZJX04, MorVall NVR    American Dynamics VideoEdge NV5010820186775 (SW version)
Total Number of Camera - 33 IP cameras in San Diego and 10 IP cameras in Moreno Valley
Total Number of POE switches - 7 switch stacks (one stack in each closet - multiple switches in each stack), all with full POE wattage on all ports Access control system:
Make and model # of all equipment needed to be maintained -  iSTAR Controllers, iSTAR Ultra Encrypted Controllers, PACS server (CCURE v3.00 CU03 software only), EntryPoint Slammer software, multiClass HID RP40 and HID pivCLASS RPK-H card readers and all associated licensing/SSA. Also, door hardware associated with the card readers (e.g., Strikes, REX sensors, door contacts, etc).
System serial of CCURE - 9-19097
Total Number of Card Readers - San Diego and Moreno Valley locations have a total of 81 card readers.
Total Number of Controllers - 9 iSTAR controllers (various models)
Total number of Power Supplies - 7 power supplies The SOW names three video platforms: Genetec, victor, and VideoEdge NVR. Will the Government identify which platform or platforms are in service at each of the two locations, and confirm whether all three are actively used or whether any are legacy systems scheduled for retirement? San Diego: Genetec NVR Moreno Valley: VideoEdge NVR using Victor client for analytics (installed on PACS server). The SOW refers to an Entry Point (Slammer). Please identify the manufacturer, model, and quantity of this equipment. Clarify what the requirement to take all reasonable efforts to ensure software compatibility with security updates and patches from Microsoft on supported operating systems obligates the contractor to perform. EntryPoint Slammer is software using to integrate PIV card info directly into CCURE (PACS). Does the Moreno Valley location contain both a physical access control system and a closed-circuit television system, or only one of the two? If that space is leased, please confirm the security systems are Government-owned and Government-maintained rather than landlord-owned and landlord-maintained.
Yes, the Moreno Valley location contains both a physical access control system and a closed-circuit television system (VideoEdge NVR with 10 IP cameras). The security system is Government-owned and Government-maintained.
Will the Government provide the current license inventory for each software platform, including: C-CURE 9000 version, system ID, license tier or SKU, and number of Series P client licenses; Genetec Security Center version, and camera, door, and any module or analytic license counts; Victor and VideoEdge version or versions and associated license counts; Any additional licensed modules such as visitor management, intrusion integration, or badging.
CCURE 9000 v3.00 CU03 Series Q serial: 9-19097 (license snapshot available upon request)
Genetec Security Center v5.11.3.0, system ID: GSC-240229-899241 -33 cameras
VideoEdge NVR NV5010820186775 (SW version) -10 cameras
Victor Unified Client v6.0
Page 2 of 4
Please state the current expiration date of each manufacturer software support or maintenance agreement (C-CURE SSA, Tyco SSA, Genetec SMA, and any others). Are all agreements current and continuous through 18 September 2026? All agreements are current and continuous through September 18, 2026. If any agreement has lapsed, or will lapse prior to the start of the period of performance, will the Government bear the manufacturer s reinstatement, back-maintenance, or re-licensing charges, or is the offeror expected to include those charges in its quoted price? If the latter, please provide the lapse dates so that those charges can be quantified. No agreement lapses. Is the incumbent contractor the current dealer of record for the Genetec SMA and the C-CURE and Tyco SSAs? Transfer of dealer of record to a successor contractor requires manufacturer processing time. Please advise whether the Government will facilitate that transfer and by what date it must be complete. Yes, the incumbent contractor is the current dealer of record, and the Government will facilitate that transfer. The SOW directs the contractor to provide appropriate model and uplift information. Please clarify whether the Government intends for license version uplifts or tier upgrades to be priced within the quoted CLIN amounts, or whether uplift information is requested for informational purposes only. The Government only requires current licensing. If the installed version of C-CURE 9000, Genetec Security Center, or VideoEdge is at or beyond the manufacturer s end-of-support date, and restoring or maintaining support coverage requires a software version upgrade, is that upgrade within the scope of this contract? The software version upgrade is within the scope of this contract. Further to Question 11: if a required software version upgrade in turn requires an upgrade to the underlying server operating system, SQL Server version, or server hardware, is that infrastructure work within the scope of this contract, or will it be performed by the Government or under a separate contract action? The Government will cover the server upgrade.
The SOW procures preventive maintenance and software support agreements, and separately establishes a service level agreement requiring four-hour on-site response for security emergencies and next-business-day response for all other calls. The price schedule at Section B.2 contains no line item for corrective maintenance or service calls. Please clarify how the Government intends for such work to be ordered and priced.
Both of these items are part of the total cost of the contract. Service Level Agreement (SLA): Must provide San Diego VARO with priority service response time for both security emergencies and non-emergencies. For example, security emergencies time of four (4) hours on-site for emergency conditions and next business day response for all others (normal business hour calls). To permit responsible pricing of any included corrective service, will the Government provide the historical service call volume for the most recent 24 months, by location, distinguishing emergency from routine calls and normal-hours from after-hours calls? There have been approximately 20 normal-hours service calls (14 San Diego and 6 Moreno Valley) the last two years. The SOW requires standby battery replacement between every 24 - 36 months. Are the batteries furnished by the contractor at no additional charge within the fixed price, or furnished by the Government or separately reimbursed? Please also provide the date of the most recent battery replacement at each location so that offerors can determine whether replacement falls within the base year.
Batteries are furnished by the contractor. The batteries in Moreno Valley were replaced in May 2026 and the batteries in San Diego were installed in March 2025. PRODUCT DELIVERY states that support shall be provided Monday through Friday, 6:00 a.m. to 6:00 p.m., and potentially weekends in security emergencies situations. Are after-hours, weekend, and holiday response hours included within the fixed price, or billable at separately established rates? If included, please provide the historical after-hours call volume. Combined the San Diego and Moreno Valley location have only had two after-hours PACS calls in the past five years. Regarding the four-hour emergency on-site response requirement: does it apply to both performance locations? Moreno Valley is approximately 90 highway miles from San Diego. Please also provide the Government s definition of a security emergency as distinguished from a routine service call.
Yes, the four-hour emergency on-site response requirement is for both locations. Also, the definition of security emergency is any incident that creates an immediate threat to the safety of people, integrity of property, or security of sensitive assets within a facility. The SOW requires the contractor to ensure that reader technology and model is consistent with the VA s HSPD-12 standard. If readers that do not meet that standard are identified during preventive maintenance, is replacement within the scope of this contract, or is the contractor s obligation limited to reporting the deficiency? Highly unlikely but if a reader does not meet the standard, it could be replacement within the scope of this contract. The SOW states that preventive maintenance shall be provided through semi-annual visits, and separately lists Bi-annual Preventative Maintenance Walkthroughs as a covered item. Please confirm whether two visits per location per year are required (four visits total annually) or two visits total covering both locations. Two preventive maintenance visits (semi-annual) covering both locations will be acceptable. Please also explain why the price/cost schedule states quarterly instead of semi-annual.
Quarterly is the Contracting Standard for PACS preventative Maintenance contracts.
Under SPECIFICATIONS, the SOW states: The Government will consider the best value lease as including all equipment. The term lease does not appear elsewhere in the solicitation. Please confirm that this contract is for maintenance and software support of Government-owned equipment only, and that no equipment is being leased, furnished, or otherwise acquired under this action. This contract is for maintenance and software support of Government-owned equipment only. The SOW requires the contractor to provide written notice and report findings of the system. Please specify the required report content and format, the number of calendar days after each visit within which the report is due, the method of submission, and the intended recipient. An industry standard report confirming all components (e.g., Hardware, software, batteries, etc.) have been inspected/tested and lists deficiencies recommended repairs will be sufficient. Will the Government furnish the most recent preventive maintenance reports, system as-builts and panel schedules, current license inventories, and a list of known open deficiencies at both locations? The Government cannot provide system as-builts, panel schedules, reports, and current license inventories. However, we can confirm there are no open known open deficiencies at either location.
The Addendum to FAR 52.212-1 does not prescribe the content of the quotation. Given that Technical Capability is an evaluation factor under Section E.5, please identify what the Government requires offerors to submit in order to demonstrate Technical Capability, including any required elements, page limitation, and format. There is no set rules on Page Limit, Format, and required elements. Proof of Technical Capability, is based on the SOW. Should the following be submitted with the quotation, and if so, will they be evaluated under Technical Capability or considered only as part of the responsibility determination: Manufacturer authorized dealer or reseller documentation from Johnson Controls / Software House and from Genetec; Individual technician factory certifications (Software House, Tyco, Genetec); California contractor licensing (C-7 Low Voltage Systems).
Not Required
Will price be evaluated for reasonableness only, or also for realism? Because the solicitation does not publish equipment quantities or license counts, offerors may make materially different scope
assumptions. Please advise how the Government intends to normalize or evaluate those differences. The prices will be Evaluated for reasonableness only. Comparison of proposed prices received in response to the solicitation, will be a factor in determining Fair and Reasonable Pricing.
The Statement of Equivalent Rates for Federal Hires table at Section C.5 (FAR 52.222-42) is blank. Please provide the service employee classifications the Government expects to be employed under this contract (for example, 23181 Electronics Technician, Maintenance II), so that offerors can confirm the applicable Service Contract Labor Standards classifications and determine whether a conformance action will be required. 52.222-42 is exempt. It will be removed from the RFQ. Section D provides a single wage determination, 2015-5635, applicable to San Diego. Performance is also required at 23207 Sunnymead Blvd, Moreno Valley, which is located in Riverside County. Please provide and incorporate the wage determination applicable to Riverside County. Wage Determination No.: 2015-5629 will be added to the RFQ, via addendum. VAAR 852.219-73(d)(1) and VAAR 852.219-75(a)(1)(i) limit the amount paid to firms that are not certified SDVOSBs to 50 percent of the amount paid by the Government to the prime contractor, and permit exclusion of other direct costs to the extent they are not the principal purpose of the acquisition and small business concerns do not provide the service. Manufacturer software support agreements and license renewals (Genetec SMA, C-CURE SSA, Tyco SSA) are available only from the original equipment manufacturers, which are not small business concerns, and may constitute a substantial portion of total contract value. Will the Government confirm that the cost of manufacturer software support agreements and license renewals will be treated as excluded direct costs for purposes of the limitations on subcontracting compliance measurement under 13 CFR 125.6? From my research in the C.F.R., it appears that the material costs would be excluded. As noted in 852.219-75(i)- Services. In the case of a contract for services (except construction), the contractor will not pay more than 50% of the amount paid by the government to it to firms that are not VIP-listed SDVOSBs as set forth in 852.219-73 or VOSBs as set forth in 852.219-74. Any work that a similarly situated VIP-listed subcontractor further subcontracts will count towards the 50% subcontract amount that cannot be exceeded. Other direct costs may be excluded to the extent they are not the principal purpose of the acquisition and small business concerns do not provide the service as set forth in 13 CFR 125.6. Section B.1 requires invoices to be submitted quarterly in arrears. Manufacturer software support agreements are payable to the manufacturer annually in advance. Will the Government permit the software support portion of each contract period to be invoiced on the first quarterly invoice of that period, or must the full annual amount be recovered in four equal quarterly installments? Four equal quarterly installments.
Question 1:
Regarding the Lenel OnGuard upgrade to v8.2 mentioned in the Solicitation Overview, what is the current OS and database environment of the existing server? We need to know if the hardware meets the v8.2 requirements to ensure we don't plan for a migration that lacks the necessary compute resources. This is an incorrect system reference. San Deigo VARO does not have Lenel OnGuard deployed. We use Software House CCURE PACS. The CCURE server and SQL DB are both on Server 2019.
Question 2:
The requirement for quarterly inspections in the 36C10E22Q0149 document implies a site-specific support model. Are there documented network segmentation requirements for the security system traffic, or is the current ACS/VMS infrastructure sharing the general facility network? This impacts our risk assessment and hardening plan. Reference: 36C10E22Q0149 - Technical Specifications This is an incorrect system reference. San Deigo VARO PACS is on and SPS VLAN with space for additional devices.
Question 3:
With the requirement for 12 IP cameras and 45 card readers, what is the current authentication methodology for administrator access to the Milestone and Lenel systems? We need to know if current session management policies cause excessive MFA prompts or lockout issues during maintenance sessions. Reference: 36C10D26Q0168 Scope This is an incorrect system reference. San Deigo VARO has 31 IP cameras (with another 10 at Moreno Valley location) for a total of 41 IP cameras. We also have a total of 80 card readers. We do not currently have lockout issues.
Question 4:
Regarding the maintenance services, is the government open to a hybrid service delivery model where routine monitoring and diagnostics are performed via remote managed services, or must all service activity be physically on-site at the Boise VA?
This solicitation is for the VA Regional Office in San Diego California not Boise. Also, San Deigo VARO requires real-time on-site support or guided Teams remote call with VA OIT Technician.
Question 5:
The solicitation references Lenel OnGuard v8.2. Can the government confirm the current firmware versions on the existing Mercury panels? This is critical for assessing compatibility and potential risk during the database migration phase.
This is an incorrect system reference. San Deigo VARO uses Software House CCURE PACS system with iStar panels deployed.
Question 6:
For remote maintenance access, does the facility currently require specific VPN usage, or is there an existing path for secure remote administrative access to the security management server?
San Deigo VARO requires real-time on-site support or guided Teams remote call with VA OIT Technician depending on the situation.
Question 7:
Given the SDVOSB set-aside, can the government provide the inventory of the existing card readers? Specifically, are we looking at legacy HID iClass or are they already migrated to multi-tech readers compatible with modern encryption standards? Reference: 36C10D26Q0168 - Technical Requirements
The San Diego VARO uses HSPD-12 multi-tech readers compatible with modern encryption standards. The current card reader types are multiClass HID RP40 and HID pivCLASS RPK-H Card Reader with a PACS CCURE 9000.
Question 8:
What is the current service level agreement (SLA) expectation for emergency service calls during the maintenance period? We need to know if the government requires 24/7 on-site emergency support or if remote diagnostic capability meets the performance requirement. Reference: 36C10E22Q0149 Maintenance
San Deigo VARO requires real-time on-site support or guided Teams remote call with VA OIT Technician depending on the situation. Also, the following SLA was annotated in the SOW.
Service Level Agreement (SLA): Must provide San Diego VARO with priority service response time for both security emergencies and non-emergencies. For example, security emergencies time of four (4) hours on-site for emergency conditions and next business day response for all others (normal business hour calls).
Number of Software House iSTAR controllers, by model (Ultra, Edge, etc.) 9 iSTAR controllers of various models like iSTAR Controllers, iSTAR Ultra Encrypted Controllers
Number of card reader doors / access-controlled openings (readers, REX, door contacts) San Diego and Moreno Valley locations have a total of 81 card readers, all with REX and door contacts
Number of doors with maglocks vs. strikes, and any panic hardware in scope All doors have strikes and no panic hardware in the scope. There are 5 emergency (unlock) buttons on the vestibule doors on 7th floor (1), 8th floor (2) and 9th floor (2).
Number of power supplies with battery backup, and battery quantities/types 7 power supplies and 23 batteries (San Diego 21 and Moreno Valley 2) and type is NP712, 12V 7 Amp. Also, batteries are furnished by the contractor. The batteries in Moreno Valley were replaced in May 2026 and the batteries in San Diego were installed in March 2025.
Number of IP cameras, by fixed vs. PTZ 33 IP cameras in San Diego and 10 IP cameras in Moreno Valley, all fixed
Number and model of NVRs (VideoEdge) and Genetec servers/archivers Two NVRs - San Diego NVR - Genetec 4LZJX04, MorVall NVR and Moreno Valley NVR - American Dynamics VideoEdge NV5010820186775 (SW version)
C-CURE 9000 Series P license details (version, client count, site/system number) needed to quote the SSA renewal PACS server (CCURE v3.00 CU03 software only) 9-19097 - All agreements are current and continuous through September 18, 2026.
Genetec system ID and current Genetec Advantage expiration date Genetec Security Center v5.11.3.0, system ID: GSC-240229-899241 -33 and the expiration date is: 03/11/2027
Current Tyco/Software House SSA numbers and expiration dates, if available Software House SSA numbers 5102754720 (PM/SSA) and the expiration date is: 12/31/2026
Confirmation of the Entry Point (Slammer) server count and operating system version EntryPoint Slammer software is software using to integrate PIV card info directly into CCURE (PACS).