RSA Secure ID Appliance Solution

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Federal Acquisition Regulation (FAR) Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotations are being requested and a written solicitation will not be issued. Solicitation No. DTRT5714Q80041 is issued as a Request for Quotation (RFQ). This solicitation is being conducted under FAR Part 12, Acquisition of Commercial Items and FAR Part 13, Simplified Acquisition Procedures. This solicitation document and the incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2005-72, effective January 20, 2014. The NAICS Code is 423430; the Small Business size standard is 100 Employees. Statement of Work (SOW) (Begin) 1. Description of Work The U.S. Department of Transportation, Volpe Center is implementing a hardware token-based two-factor authorization solution, the RSA SecurID Appliance solution, to provide two-factor authentication for systems storing or accessing sensitive information. The solution must integrate with the installed two-factor smart card authentication process. Two-factor authentication is a key component to the Volpe Center for meeting compliance and security requirements of the current Active Directory and Virtual Private Network (VPN) infrastructure. The contractor shall provide and implement the equipment and services outlined in Contract Line Items (CLINs) 0001 - 0005. As it relates to the implementation services being requested, the contractor shall provide a design document, to be approved by Volpe Center Office of Information Technology (OIT) Contracting Officer Representative (COR), to capture project detail. TheOIT COR will jointly develop an implementation and verification plan with the contractor to be used to determine the success of the project in implementing the two-factor authorization solution. TheOIT COR and the contractor will jointly implement the mutually developed verification plan. Following the implementation, the contractor will provide OIT COR with - As Built' documentation. The contractor shall provide "Over the Shoulder" knowledge transfer to OIT systems administrative personnel throughout the implementation of the product. The knowledge transfer shall be in the form of questions and answers and demonstrations. Knowledge transfer will be provided in keeping with the primary goal of the SOW. 1.1. Assumptions a) All activities shall be performed during normal working hours (Monday through Friday, 8:00 AM to 5:00 PM, excluding holidays) unless noted as "Off Hours" in this SOW. b) The Volpe Center is responsible for having active manufacturer support contracts in place for all devices that are the subject of this SOW. 1.2. Resilience-Test-Assurance (RTA) The contractor will need to utilize a Resiliency-Test-Assurance (RTA) methodology to meet the requirements identified in the SOW. This methodology will be briefed to the OIT COR to ensure the resiliency and survivability functionality provided in the products are taken full advantage of. 2. Services Specification 2.1. Tasks: The following services shall be performed by the contractor: 2.1.1 The contractor shall contact the OIT COR via a phone conference call and/or E-mail to define the following: a) Timelines - set operational date. b) Equipment Bill of Materials (BOM) c) Resources throughout life of project d) Activity/action items (Deployment, Cut-over, Test, and Handoff). e) Verify demarcation points. 2.1.2 The contractor shall review design requirements and provide recommendations based on best practices. This phase will require that both the OIT COR and the contractor are in agreement of the tasks to be performed and what constitutes project acceptance during each phase of the project prior to the contractor starting the implementation of the project. Items included in the design and acceptance plan include: a) Review of the current Client network diagram and documenting how and where Authentication Manager will be implemented into the environment. b) Review of Microsoft Active Directory (AD) user and group structures. c) Definition of the users and groups to be configured with RSA Authentication Manager. d) Review of the current Volpe Cisco ASA5500 VPN configuration. e) Definition of changes that are needed on any component of the environment including Cisco VPN, network or Active Directory. f) Development of a detailed design document to capture project detail, to be approved and signed-off by the OIT COR. g) Contractor and the OIT COR will jointly develop an implementation and verification plan to be used to determine the success of the project, to be approved and signed-off by OIT COR, prior to the contractor beginning on-site implementation. 2.1.3 The contractor will implement the product/technology at the Volpe Center to include the following activities: a) Installation of authentication manager solution on two (2) physical appliances. b) Configuration of authentication manager solution to integrate with the Volpe Center's Active Directory infrastructure. c) Configuration of Cisco VPN to connect to the authentication manager solution. If disruption of VPN connectivity is to occur during implementation a change/maintenance window is required to be sent to the Volpe user community. d) Configuration of users for physical tokens. e) Configuration of the Cisco VPN to require the users to use Two-Factor Authentication. f) Testing of failover to secondary server. g) Document the resulting configurations. 2.2 Project Handoff and Closure This phase will encompass the post implementation activities to ensure that the work performed during the build, configuration, and implementation has no outstanding issues. - The contractor shall review the project at completion to ensure that all requirements have been met. - The contractor shall request OIT COR acceptance at the completion of the project. 3. Volpe Center Responsibilities a) Provide a single point of contact with the authority and the responsibility of issue resolution and the identification, coordination and scheduling of personnel to participate in the implementation. b) Procure all appropriate hardware, software, licensing and media required for implementation of the SOW. Ensure proper number of licenses is procured for all software installed. c) Supply current equipment configuration for review. d) Schedule appropriate maintenance windows for system upgrades and installs and notify user community. e) Provide to contractor all required IP addresses, passwords, system names, and aliases as required in the implementation of the RSA product. f) Validate the site readiness prior to the dispatch of contractor personnel to perform the services being contracted. g) Provide adequate facilities for the installation of the hardware. This includes all necessary peripheral hardware (KVM ports or monitors, keyboards, mice, network access, etc.) as well as electrical and spatial needs and required Antivirus software. h) Provide high speed access to the Internet for verification of device support requirements and for software downloads. i) The OIT COR along with contractor will verify operation of the installed/upgraded equipment per the pre-defined Verification Plan. j) The OIT COR will approve and sign-off the design plan and verification plan prior to contractor beginning work on-site. k) Provide all required accounts for the Cisco VPN and all required accounts to integrate authentication manager solutions with Active Directory. l) Ensure the physical distribution of tokens to end users. m) Notify users of service disruption during implementation, if necessary. See Attachment No. 1 for Deliverables Table. Statement of Work (SOW) - End The Government intends to award one (1) purchase order on a Firm Fixed Price basis as a result of this solicitation. This RFQ is expected to result in a single purchase order award, subject to receipt of an acceptable quotation. An award will be made to the source whose quotation, conforming to the solicitation and specifications listed in the SOW, is determined to offer the best value to the Government, based on price. Items cited below are brand name only. The Offeror shall provide a firm fixed price proposal for all labor and materials (CLINs 0001 - 0006), in accordance with each CLIN listed below and the Statement of Work (SOW) above. Please enter a unit price and total price for each CLIN and a total amount for all CLINs: CLIN 0001 - RSA SecureID AM8 APPL 130 Adv. Hardware Appliance Replacement 1-3 Years, Part No. RSA-80010500, Quantity: 2 EA CLIN 0002 -RSA Secure ID APPL, APPL Base Software Licenses Per Unit MGR BASE ED, Part No. AUT0000500B8, Quantity: 400 EA CLIN 0003 - 12 MO Enhanced MNT FOR Secure Ext. SecureID Software BS ED, Part No. AUT0000500BE1-8, Quantity: 4800 EA CLIN 0004 - 3 YR SecureID Authenticator Tokens per user, Part No. SID700-6-60-36-A QUANTITY: 400 EA CLIN 0005 - RSA Installation Part No. S4INST-SPEC, Quantity: 1 LS TOTAL for CLINs 0001 and 0005: $___________________ INSTRUCTIONS TO OFFERORS: The offer should be addressed to the following: U.S. Department of Transportation, Volpe National Transportation Systems Center, Attn: Karen Marino, RVP-32, 55 Broadway, Cambridge, MA 02142. The signed offer must be submitted via e-mail to contact@example.gov. The time for receipt of offers is 3:00 PM Eastern Time on 04/24/2014. FAR 52.212-1, Instruction of Offerors-Commercial Items is hereby incorporated by reference. All Offerors must include a completed copy of the provision at FAR 52.212-3, Offeror Representations and Certifications-Commercial Items. All contractors must be registered in Central Contractor Registration (CCR) in order to receive an award from a DOT Agency. Contractors may access Central Contractor Registration (CCR) via System for Award Management (SAM.Gov) to register and/or obtain information about the registration. Additionally, solicitation Representations and Certifications are no longer provided within the solicitation and must be submitted on-line through SAM.gov. The Offeror is reminded that it must provide Certifications and Representations online at least annually via ORCA at the following website: http://orca.bpn.gov. FAR Clause 52.212-4, Contract Terms and Conditions-Commercial Items, is hereby incorporated by reference. FAR Clause 52.212-5, Contract Terms and Conditions Required to Implement Statutes or Executive Orders-Commercial Items is hereby incorporated by reference. Additional clauses cited in 52.212-5 that apply to this acquisition are: 52.203-13, 52.214-35, 52.215-12, 52.222-3, 52.222-19, 52.222-21, 52.222-26, 52.222-35, 52.222-36, 52.222-37, 52.222-40, 52.223-9, 52.223-15, 52.223-16, 52.223-18, 52.225-1, 52.225-13, 52.232-20, 52.232-33 and 52.239-1. These references may be viewed at www.acquisition.gov/far. No telephone requests will be honored. The Government will not pay for any information received. The following notice is provided for informational purposes for Minority, Women-Owned and Disadvantaged Business Enterprises. ATTENTION: Small and Disadvantaged (SDB), Women-Owned, and Disadvantaged Business Enterprises (DBEs). The Department of Transportation's (DOT) Short-Term Lending Program (STLP) offers working capital financing in the form of lines of credit to finance accounts receivable for transportation-related contracts. The Maximum line of credit is $750,000. The STLP loan has a variable rate, which is connected to the prime rate. The current rate may be found on the OSDBU website http://osdbuweb.dot.gov or call +1 (555) 000-0000.