SOW-ForescoutRenewalv3.doc

Statement of Work Job Corps Data Center

Forescout Network Access Control Renewal Introduction The objective of this project is to acquire maintenance on Forescout network access control appliances for the Job Corps Network.

Background Through a nationwide network of campuses, Job Corps offers a comprehensive array of career development services to at-risk young women and men, ages 16 to 24, to prepare them for successful careers. Job Corps employs a holistic career development training approach which integrates the teaching of academic, vocational, employability skills and social competencies through a combination of classroom, practical and work based learning experiences to prepare youth for stable, long-term, high-paying jobs.

There are 125 Job Corps centers and satellite centers located throughout the United States including Alaska, Hawaii and Puerto Rico. The Job Corps Local Area Networks (LANs) and Wide Area Network (WAN) supports approximately 65,000 users.

The Job Corps Data Center (JCDC) is responsible for the design, development and deployment of Information Technology projects for Job Corps.

Objective

The objective of this project is to acquire licenses and maintenance service on Forescout network access control appliances for the Job Corps Network. License and Maintenance services are expired and this action will include a return to service.

Period of Performance The period of performance for this project is from date of award to 8/19/2019, with one option year.

Description and Scope of Work

OPTION YEAR 1

Special Requirements The provider of information technology shall certify applications are fully functional and operate correctly as intended on systems using the United States Government Configuration Baseline (USGCB). The purpose of the United States Government Configuration Baseline (USGCB) initiative is to create security configuration baselines for Information Technology products widely deployed across the federal agencies. The USGCB baseline evolved from the Federal Desktop Core Configuration (FDCC) mandate. While not addressed specifically as the FDCC, the process (now termed the USGCB process) for creating, vetting, and providing baseline configurations settings was originally described in a 22 March 2007 memorandum from OMB to all Federal agencies and department heads and a corresponding memorandum from OMB to all Federal agency and department Chief Information Officers (CIO).

The platforms addressed by USGCB are Microsoft's Windows 7, Windows 7 Firewall, Windows Vista, Windows Vista Firewall, Windows XP, Windows XP Firewall, Internet Explorer 7, Internet Explorer 8, and Red Hat Enterprise Linux 5. Additional platforms may be introduced at the TIS' direction. New platforms will follow the USGCB process as defined in SP800-70 Revision 2.

The standard installation, operation, maintenance, update, and/or patching of software shall not alter the configuration settings from the approved USGCB configuration. The information technology should also use the Windows Installer Service for installation to the default “program files” directory and should be able to silently install and uninstall. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges."

All systems provided under this Statement of Work must be capable of supporting IPv4 and IPv6 protocols.

All desktops, laptops, and computer monitors provided under this contract are required to have achieved Bronze registration or higher under the Electronic Products Environmental Assessment Tool (EPEAT). EPEAT is a procurement tool designed to help large volume purchasers evaluate, compare, and select desktop computers, laptops, and monitors based upon their environmental attributes as specified in the consensus-based IEEE Standard for the Environmental Assessment of Personal Computer Products (1680). Additional consideration will be provided for products that have achieved EPEAT Silver or EPEAT Gold registration. The registration criteria and a list of all registered equipment are provided at http://www.epeat.net