McAfee Vulnerability Manager Replacement

REQUEST FOR INFORMATION This Request for Information (RFI) is for Market Research, information and planning purposes only; does not constitute a solicitation for bids, proposals or quotations; and is not to be construed as a commitment by the Department of State (DOS) to issue a request for proposal or quote as a result of this RFI. In accordance with FAR 15.201, responses to this RFI are not considered offers and cannot be accepted by the Department to form a binding contract. The Department does not intend to award a contract based solely on the submissions of this RFI nor does it intend to pay any costs incurred in the response to this announcement. Respondents are solely responsible for expenses associated with this RFI. The Department will not accept unsolicited proposals for this effort. Contractors who submit information in response to this RFI do so with the understanding that U.S. Government personnel, as well as their supporting contractors, may review their materials and/or data. The Department reserves the right to use information provided by respondents for any purpose deemed necessary and legally appropriate. The Department does not intend to rank RFI submittals or provide any reply to interested firms. TECHNICAL DESCRIPTION The DOS, Bureau of Diplomatic Security, is in need of a next generation enterprise vulnerability scanning tool to replace McAfee Vulnerability Manager (MVM) which is reaching end-of-life in January of 2018. The Department is requesting information from industry for products that provide the next generation replacement to the MVM. The proposed solution must be entirely on-premises, provide centralized command and control of up to 400 globally distributed scanners covering up to 170,000 enterprise endpoints on multiple networks. Additionally, scanners must be able to operate on virtual machines or as virtual appliances - not dedicated hardware. Finally, the proposed scanning solution must be able to integrate with multiple Active Directory domains for user and scan credential management as well as interface with the enterprise dashboard for scan reporting. SUBMISSION DETAILS: Responses should include: 1) Business name, address, DUNS number and CAGE code. 2) Name of company representative and their business title, phone number and email address; 3) Do you currently have a solution in place for the next generation enterprise vulnerability scanning tool to replace McAfee Vulnerability Manager? What is the lead time to deliver this type of product? Briefly describe the types of clients you have successfully supported with the next generation enterprise vulnerability scanning tool, in terms of capacity, users, devices, facilities, geographical scope and criticality of services. Describe the life span of your product and how the company would maintain and sustain the product throughout its lifecycle. Is commercial pricing data available from other US Government entities for solutions already in place? Do these items meet the definition of FAR 2.1 Commercial Items? If not, identify the Key Required Components that preclude this as Commercial Item products and services. 4) List the contract vehicles available to the DOS for the next generation enterprise vulnerability scanning tool to replace McAfee Vulnerability Manager products/services, e.g., list the GSA FSS IT Schedule 70 contract number and SIN, or other government-wide acquisition contract vehicle, agency and numbers such as, NASA SEWP. 5) Briefly describe your innovative price model you can provide to DOS for enterprise license, on-site support and training. What pricing methodology would you propose? Be sure to include the types of contracts, discounts, and strategies to lower the costs and acquire efficient and effective key required components. 6) Is your company foreign owned or foreign controlled firm and do you intend to use foreign national employees on this effort? All interested firms shall submit email responses, with "SAQMMA16L0061" in the subject line, to the Points of Contact listed, addressing the SUBMISSION DETAILS, to meet the TECHNICAL DESCRIPTION and provide the equipment and related services. Submissions shall not exceed 20 pages, single spaced, 12-point type with at least one-inch margins on 8 " X 11" page size. No phone calls related to this RFI will be accepted. All correspondence shall be sent via email only. Please be advised that all submissions become Government property and will not be returned.