36C10A-19-R-0008-025.pdf

QUESTIONS AND RESPONSES

RFP 36C10A-19-R-0008

August 14, 2019

1. Can a standalone 16 port POE switch be provided in lieu of an internal 16 port switch in the router?

Response: Yes.

2. Does the two case 50-pound limit per storage container for the FRU only count toward the antenna and transceiver components, or does it also include the ancillary network gear (routers, phones, etc.)?

Response: The 50 pound limit includes everything.

3. Is a TBU terminal classified as an MPU?

Response: No, it is a VMU, the updated Attachment A column "E" outlines this.

4. Please describe the FAK terminal archetype, it's use, it's components, and what would be required for replacement.

Response: A FAK is a FRU with a larger 1.5M antenna. Instead of a Holkirk TP-100 (FRU) it's a TP-150.

5. Would the VA be willing to bring MVUs to centralized locations for upgrades, or does the VA require that all upgrades take place at the vehicle's "home" location?

Response: No, plan on each unit being upgraded in place.

6. Does the VA intend to rate a offerer's price based on present value?

Response: The Total Evaluated Price shall be based on the total amount of the base year and all options.

7. Reference last paragraph on bottom of page 14 in the PWS:

“All Control links (data and management) to and from the Hub equipment shall be encrypted with FIPS 140-2, level 2 or better NIST certified 256-bit encryption. All satellite communications equipment will be FIPS 140-2, level 2 NIST certified or better.

All Wireless Access Points will be FIPS 140-2, level 2 NIST certified or better. Proof of certification and configuration is required.”

Referencing topography diagram, attachment 36C10A-19-R-0008-009; is it correct that this requirement is in reference to the management links between the VA Subnet; VA Network; and provider NOC locations?

Additionally, is it correct that the standard U.S. Government requirements as per DISA’s policy and Industry Best Practices for Commercial Satcom equipment regarding RF and IF interfaces, Tracking Telemetry and Control (TT&C) amplifiers and Block Up Converters are applicable and compliant?

Response: The Government has removed the FIPS 140-2, Level 2 requirement and now requires FIPS 140-2, Level 1 NIST Certified encryption. The Level 2 requirement was added due to the mistaken belief that Level 2 only required that addition of tamper proof labels. After this was discovered to be incorrect we have moved back to level 1. The PWS has been amended to reflect his. The X-5 Modem is not NIST certified and a waiver will not be given to use them past the migration period. This is a Federal Government requirement TRANSEC is not a requirement, however since it exceeds the requirement it is allowable..

8. Q&A #33 clarifies that for VMU, MPU, and Fixed terminals that the USG has a requirement for Qty 2(offeror) routers and amended n PWS 5.4.3. However, section

5.2.3.1 bullet J, mentions a single router. Would the USG please amend bullet J to reflect a requirement of two routers. Do both routers require 16 ports of PCE.

Response: The Government has edited the PWS section 5.2.3.1 in response to the statement and has clarified the number of ports needed. Sixteen is not required. Only enough to satisfy the SIP, analog phones, and Internet connectivity requirements. The number of ports required depends on the Offerors solution.

9. While the Government confirms NIST-certified FIPS 140-2 level 2 encryption is required in response to Q&A #51, it also provides Attachment B showing that iDirect X5 modems -which support only non-FIPS encryption—are currently employed. Further clouding the point, the response also directly states that TRANSEC is not required, even though link encryption for the current generation (9 series) can ONLY be applied through iDirect’s licensed TRANSEC implementation.**

Will the Government waive the FIPS 140-2 encryption requirement in order to allow solutions proposing continued use of X5 modems to be compliant? If not, then will the Government accept solutions proposing a TRANSEC-licensed implementation, since that is a prerequisite for link encryption on the current generation of modems?

**For explanation, see the Legacy Supported Features paragraph of any 9-series compatible SOFTWARE version release notes. There, the feature inheritance iDX versions(s) are listed and their own release notes provide the listing for the inherited Features Not Supported.

Response: The Government has removed the FIPS 140-2, Level 2 requirement and now requires FIPS 140-2, Level 1 NIST Certified encryption. The Level 2 requirement was added due to the mistaken belief that Level 2 only required that addition of tamper proof labels. After this was discovered to be incorrect we have moved back to level 1. The PWS has been amended to reflect his. The X-5 Modem is not NIST certified and a waiver will not be given to use them past the migration period. This is a Federal Government requirement TRANSEC is not a requirement, however since it exceeds the requirement it is allowable.

10. RFP states: (1) Services in the case of a contract for services (except construction), it will not pay more than 50% of the amount paid by the government to firms that are not VIP-listed SDVOSBs.

RFP states: 1) Services (except construction). At least 50 percent of the cost of contract performance incurred for personnel shall be expended of the concern.

The RFP section C.8 conflicts with the requirements of FAR Provision FAR 52.219-14© referenced in Q&A No. 47. Will the government please confirm the FAR 52.219-14© takes precedence?

Response: The VAAR clause is controlling, with supplemental guidance provided by SBA regulations.

11. Question 51 from the original Q&A posted last week. iDirect is the only satellite hub manufacturer with FIPS certification on their hubs, however they do not currently have a NIST-certified FIPS 140-2 modem. The e9350 is the latest DoD modem and is FIPS 140 compliant, but it is currently undergoing FIPS 140-2 certification. They expect certification to be forthcoming but cannot guarantee it will be available by any particular date. The e9350 is replacing the e8350, which did have FIPS 140 certification, but that modem is now End of Life and no longer available. Please confirm that a FIPS 140 compliant modem will meet the requirement until the e9350 receives its certification.

Response: As part of Question 51, The Government has removed the FIPS 140-1, level 2 requirement back to FIPS 140-2, level 1. If the OEM has a product that is in currently undergoing FIPS 140-2 certification testing then the Government will accept it with the proviso that the solution received FIPS 140-2, level 1 or better certification prior to end of the base year of the contact. Section 5.2 has been updated to reflect this. Sections 5.2.2, 5.2.3.1, and 5.2.3.2 have been edited to point to section 5.2.2 as well.

12. In Section C of the RFP, clause C.8 VAAR 852.219-10 includes language which states that “In the case of a contract for services (except construction), it (i.e. the SDVOSB prime) will not pay more than 50% of the amount paid by the government to firms that are not VIP-listed SDVOSBs.”

Would the Government please clarify which CLINs are subject to this rule?

Response: See response to Question 10 above. The clause is applicable to all

CLINs.

13. Can the requirement for FIPS 140-2 level 2 wireless access points be reduced to FIPS140-2 Level 1? Level 2 Doesn't makes sense for this application.

Response: This requirement has been changed to FIPS 140-2, Level 1.

14. Please describe the SLAs for what VSAT Operations and Terminal Availability are.

Nobody can meet a Ku band network availability of 99.9% end to end. Ku-Band availability is 99.5% typically for TDMA Ku Band networks end to end.

Response: The PWS sections 5.6.2 and 6.5.2.1, has been edited to make hub operations 99.9% and 99.5% for the remote terminals.

15. Section 5.3 of the PWS states that “Phase-One Operations shall consist of concurrent operations to transition the new Enterprise SATCOM system along with the existing SATCOM system (terminals and satellites).” It also states that “The new Contractor shall be responsible for operating and maintaining the existing SATCOM system.”

Q&A #43 refers to PWS Section 5.3 and asks, “Will the Government provide complete access to the existing network resources at no cost to the new contractor?” The Government’s response to this question is that “the Government would grant the same access to the same resources for no cost.”

The term “network resources” has not been defined by the solicitation and is therefore ambiguous.

Will the Government please confirm that “network resources” is limited to the Government Furnished Equipment (GFE) in the Enterprise SatCom hubs located at the CT and WA facilities, the VA-provided terrestrial circuits and the 229 VSATs identified in Attachment B – Master Inventory List, and that complete access will be provided when these resources are removed from the incumbent contractor’s network?

Response: The Government will provide access to the GFE onsite. However, the Offeror will have to negotiate on their own for teleport and satellite resources.

Additionally, the Government is not providing access to the previous contractors equipment.

Also, Section 5.2.3.2 FIRST-RESPONDER SATELLITE UNITS has been revised to state:

Part B changed to increase weight of FRU due to new requirements. Part O requirement of 2 analog phones has been removed. Part EE removes the requirement of two wireless access points and requires only 1.