QUESTIONS ANSWERS SHEET - PUBLIC WiFi 36C24525Q0069.docx

RFQ 36C24525Q0069

PUBLIC/GUEST WiFi QUESTIONS & ANSWERS SHEET

1. Have Cisco devices been registered in the Meraki dashboard?

ANSWER: I have recently received access to the Meraki and have limited experience with it. At this point I have only seen one device listed but may not be looking in the correct location.

1. GFE includes switches and APs. Does vendor provide firewall, wireless controller, and streaming server?

ANSWER: Not sure about firewall/wireless controller. System is currently in operation. Streaming server is not part of the public WiFi.

1. What is the role of the Streaming Server?

ANSWER: The Streaming Server is not managed by the Public WiFi contract. It is part of the Outcome Media program.

1. Is any call volume history available?

ANSWER: This is not a requirement for phone calls. This is a requirement for Gues WiFi services.

1. Is any onsite volume history available?

ANSWER: See end of document for quarterly, vulnerability, monthly ticket, and monthly usage reports.

1. Does the SEWP Q & A indicate this was first offered on SEWP and if so, why was that not successful?

ANSWER: We are required by federal acquisition regulations (FAR) to list on SAM.gov. That is why it has been relisted on SAM.gov.

1. Which internal systems are envisioned to be deployed on the Guest Wi-Fi network?

ANSWER:

1. What is the current cost model/methodology—FFP, T & M, fixed labor rates

ANSWER: This is going to be a fixed-price award.

1. Is sufficient design documentation available to satisfy B.3 background: “background in how this network was designed with Wi-Fi and Outcome Health system elements is a must for efficiency and continuity.” Or is this a limiting factor in source selection?

ANSWER: Previous contractor is to provide the current network configuration information. Currently do not have the information in hand.

1. Does the pen test require attempting access from every visible SSID (possible rogue SSIDs and IoT devices like TVs or printers)?

ANSWER: Pen testing must comply with regulations put forth by the OFFICE OF INSPECTOR GENERAL.

1. From how many different vantage points should the Wi-Fi network be tested (Waiting room, parking lot, clinical, etc.)?

ANSWER: The entire coverage area would need testing. All patient/guest locations must have coverage. ** Attached to this email is the quarterly report that the vendor provided for usage and types of sites visited by ranking.

1. During Pen Testing, should we leverage findings on exploited systems to attempt to gain access to more critical assets?

1. What cadence of pen testing is preferred (monthly, quarterly, annually)?

1. Is the focus of the Pen test to assess risk to users (rogue APs, wireless evil twin, man in the middle) or assess risk to corporate network?

ANSWER: Pen testing must comply with regulations put forth by the OFFICE OF INSPECTOR GENERAL.

1. Can you share any performance challenges/failures of the previous or incumbent contractors in meeting the project expectation of the government?

ANSWER: No failures in services provided by previous contractor.

1. Can you share a list of expected Wi-Fi devices and applications that will be supported, e.g. Wi-Fi voice support on mobile devices and RFID devices.

ANSWER: There currently are no plans to change the current configuration/operation of the network. The current network only provides a pathway to the internet. Currently the system is set to offer Guest internet services for visitors, one hidden SSID for Outcome Media which provides Videos/Movies using tablets in our Oncology Dept., and a second hidden SSID for special department access. The hidden SSID’s offer a little larger bandwidth.

1. Documentations indicate that the Cisco Access Points are equipped with full Cisco Digital Network Architecture (DNA) and Prime Infrastructure (PI) software licenses, is any of the actual software applications deployed on the network.

ANSWER: Previous contractor provided a Surveillant Server which I believe was used to monitor the network. All devices on the network were monitored 24/7 and we were notified when any device was offline. The Surveillant Server has been removed from service, hard drives removed and returned to previous contractor.

1. Can you share the notice ID for the previous contract on this project.

ANSWER: 36C24520C0050

1. Is this under simplified acquisition procedure (SAP) and are you looking for a firm fixed price on the contract quotes.

ANSWER: Depending on the circumstances and if the vendor has a national contract that we could cut an order off of it could qualify as FAR part 8 or 16. If the vendor does not have a national contract to cut an order off of, then we will use FAR part 13 procedures.

VA Beckley Summary report for network 'VA Beckley WV' | March 2024

· Distinct clients: 2 (Daily average: 2)

· Data transferred: Total: 5.1 TB (↓ 4.65 TB ↑ 461.11 GB) Usage

Top applications by usage

Clients per day

Top clients by usage

Top operating systems by usage

Top client device manufacturers by usage

Top blocked sites by URL

Top blocked sites by category

CAPACITY PLANNING METRICS:

HIGH

Low

Low

Low image2.jpeg image3.png image4.jpeg image5.png image6.png image7.png image8.png image9.png image10.png image11.png image12.png image13.png image14.png image15.png image16.png image17.png image18.png image1.png