18-Specifications and Requirements.pdf

SPECIFICATIONS AND REQUIREMENTS

Trend Micro TippingPoint Support

1. Introduction: The County seeks to procure Trend Micro Tipping Point Intrusion Prevention System (IPS) software license subscription and ongoing support and maintenance services.

This is a solicitation for Trend Micro software only. No substitutions allowed.

BCAD utilizes the TippingPoint 5600TX appliance equipped with 16x 1/10/25Gbps SFP+ dual modules for high-capacity network traffic inspection, managed by a Virtual Security Management System (vSMS). TippingPoint has been established as a core security standard for protecting the airport’s network perimeter and critical internal segments.

2. Requirements BCAD utilizes TippingPoint in efforts to maintain compliance with the following Center for Internet Security (CIS) Control Standards:

a. Network Infrastructure Management: Securing the aviation network against unauthorized traffic and lateral movement.

b. Continuous Vulnerability Management: Utilizing Digital Vaccine (DV) filters to virtually patch known vulnerabilities before they can be exploited.

c. Network Monitoring and Defense: Real-time inspection of 25Gbps-capable network links to identify and block malicious activity.

d. Data Protection: Preventing unauthorized data exfiltration through deep packet inspection and protocol analysis.

e. Security Awareness and Skills Training: Leveraging specialized threat intelligence (ThreatDV) to identify compromised internal assets.

f. High-Performance Threat Suppression: Ability to block malicious traffic at wire speed across 10GbE and 25GbE interfaces with near-zero latency.

g. Digital Vaccine Updates: Continuous delivery of security filters to protect against the latest exploits and malware.

h. Visibility into Encrypted Traffic: Inspection of SSL/TLS traffic to ensure threats are not hidden in encrypted streams.

i. Zero-Day Protection: Access to the Zero Day Initiative (ZDI) intelligence for exclusive protection against undisclosed vulnerabilities.

j. Virtual Management Efficiency: Centralized management via vSMS (Virtual Machine) for rapid policy enforcement, health monitoring, and forensic reporting.

k. Log Aggregation: Seamless integration with SIEM platforms for security information and event management.

3. Contractor Responsibilities

a. The Contractor must be an authorized Trend Micro reseller or distributor at the time of

SPECIFICATIONS AND REQUIREMENTS

bid submittal and shall remain authorized throughout the contract term.

b. Capacity/Delivery: Contractor must possess the ability to directly interface with the manufacturer for registry of all software subscriptions and maintenance support plans.

c. The Contractor shall provide the County Pre-Sales consultation on product selection by either telephone, website, or chat. Support required from Contractor includes the following:

i. Account Representative. The Contractor shall provide, an account representative able and authorized to quote, recommend, and resolve all account-related issues.

ii. Pre-Sales Support Representative. The Contractor shall provide a pre-sales solutions representative to assist the County identify required services and consult on existing production software enhancements, new offerings, and quantities required for the solution.

iii. Delivery: Electronic deliveries (licenses or maintenance) should be complete within five (5) business days; physical deliveries (if any) should be complete within twenty-one (21) calendar days after receipt of Purchase Order. The Contractor shall notify the contact listed on the Purchase Order of any delays, in writing, immediately upon determination of shipment delay.

4. Renewal Invoicing and Payments: The County will issue Purchase Orders for ongoing license subscriptions (renewals) and maintenance annually. Subsequently, payment will be made annually, after Purchase Order is issued.