JA.pdf

SBU

LIMITED SOURCES JUSTIFICATION

FOR LIMITING SOURCES ON THE FEDERAL SUPPLY SCHEDULE PROGRAM

FAR Part 8.4

1. Identification of the agency and the contracting activity:

The U.S. Department of State (DoS) Office of Acquisition Management (A/OPE/AQM) is conducting this acquisition for Proofpoint Emerging Threat (ET) Pro Ruleset brand name software annual maintenance on behalf of the Bureau of Diplomatic Security

Directorate of Cyber and Technology Security (CTS), Office of Cyber Monitoring and

Operations, Cyber Operations Division (DS/DO/CTS/CMO/CO). Request is for a base and two options years.

2. Nature and/or description of the action being approved.

The agency contemplates award of a firm-fixed delivery order for Proofpoint Emerging

Threat (ET) Pro Ruleset software and maintenance.

3. A description of the supplies or services required to meet the Department’s needs.

The Infrastructure and Platform Support (IPS) group, a branch within the Department of

State’s Bureau of Diplomatic Security and Directorate of Cyber and Technology

(DS/CTS/CMO/CO) has a requirement for the Proofpoint ET Pro software and maintenance and support. Proofpoint ET Pro is a timely and accurate rule set for detecting and blocking advanced threats using our existing network security appliances such as the

Unified Threat Management Platform (UTMP) and network intrusion detection / prevention systems (IDS/IPS).

Summary of Requirement: This is an expansion of DS/DO/CTS/CMO/CO’s existing ruleset already in production that protects the DoS network from malicious attacks. IPS request a base and two option years delivery order.

0001 Part No. PP-B-ETPR-I-A: Proofpoint ET Pro Ruleset – Quantity - 400 Base Period of Performance: 09/29/2019 – 09/28/2020 0002 Proofpoint Platium Support 1 Year – Quantity – 1 Base Period of Performance: 09/29/2019 – 09/28/2020

0003 Part No. PP-B-ETPR-I-A: Proofpoint ET Pro Ruleset – Quantity - 400 Option Year 1 Period of Performance: 09/29/2020 – 09/28/2021 0004 Proofpoint Platium Support 1 Year – Quantity – 1 Option Year 1 Period of Performance: 09/29/2020 – 09/28/2021

0005 Part No. PP-B-ETPR-I-A: Proofpoint ET Pro Ruleset – Quantity - 400 Option Year 2 Period of Performance: 09/29/2021 – 09/28/2022

SBU

0006 Proofpoint Platium Support 2 Year – Quantity – 1 Option Year 1 Period of Performance: 09/29/2021 – 09/28/2022

4. The authority and supporting rationale and, if applicable, a demonstration of the proposed contractor’s unique qualifications to provide the supply or services. This acquisition is conducted under the authority of the Multiple-Award Schedule Program (41

U.S.C. 152(3), and 40 U.S.C. 501), as implemented by FAR 8.4 and substantiated by the following:

☒ FAR 8.405-6(b) – An item peculiar to one manufacturer is required (i.e. brand name item, product, or a feature product).

5. A determination by the ordering activity Contracting Officer that the order represents the best value consistent with FAR 8.404(d) and FAR 8.405-(d).

The Contracting Officer determines that the anticipated price (s) will be fair and reasonable based on the competition being limited to GSA schedule holders and authorized resellers only. By signing the justification, the Contracting Officer make a determination that the cost /price to the

Government are expected to be fair and reasonable.

6. A description of the market survey conducted and the results or a statement of the reasons a market survey was not conducted.

The Infrastructure and Platform Support (IPS) group toolset currently utilizes the ET base signature set. IPS completed an evaluation of Open Source and Commercial sets during the first quarter of FY-17. Multiple vendors were documented and itemized. The

Emerging Threat offerings were found to be the most effective. This is an expansion of the existing deployment.

7. Any other facts supporting the use of this justification.

None

8. A statement of the actions, if any, the agency may take to remove or overcome any barriers to competition before any subsequent acquisition for the supplies or services required.

At this time the current IT infrastructure deployed by the DoS does not allow for any additional industry solutions. However, as DoS deployed infrastructure evolves, further solutions will be considered.