419 FLTS CISP SOR.pdf

STATEMENT OF REQUIREMENTS

FOR

COMMERCIAL INTERNET SERVICE PROVIDERS (CISP)

DESCRIPTION OF SERVICE

1.0 Scope:

1.1 Commercial Internet Service (CIS) installation

1.1.1 CISP Service Delivery Point: 118 E. Jones Road, Edwards AFB, California

93524

1.2 Internet equipment installation location(s)

1.2.1 Building location: 145, 130A, 130C

1.2.2 Room location: 142 (in 145), 125 (in 130A), 131 (in 130C)

1.2.3 Primary POC: Jason Williams

1.2.4 POC phone: 661-275-1432

1.2.5 POC email: jason.williams.127@us.af.mil

2.0 Requirements:

2.1 Adding wireless (WiFi) capabilities to installed CIS

2.1.1 CISP shall provide WiFi capabilities to location(s) requested.

2.1.2 Specific WiFi equipment configuration requirements may apply based on location and final placement.

2.1.3 Final equipment installation and/or shall be authorized by TEMPEST, Information

Protection, and Frequency Management. (approvals required via eSSS)

2.1.4 CISP shall provide associated wireless equipment (i.e., router, access points, etc.) to location(s) requested.

2.1.5 CISP shall provide a vendor managed services for relocations, additions, changes, and deletions of equipment and/or services for site personnel.

2.1.5.1 This is a security compliance requirement by AFMC/ACC

2.1.6 CISP shall provide the necessary configuration for installation (i.e., frequency and channel checks, power output checks, signal encroachment checks, software updates, etc.).

2.2 CISP shall provide the necessary configuration support for the following line items set forth by AFMC/ACC to meet AF security compliance:

Product Vendor Gov Comments

1.

Shall support a Wi-Fi Guest Network (unless no Wi-Fi service is requested).

X

Configured by vendor at time of installation. Vendor to standardize their specific configuration across all Edwards installations.

2.

Support a captive portal/splash screen that shall include a user agreement and password.

X X

Configured by vendor at time of installation. Government shall provide to vendor standardized image, user agreement, and associated documentation.

3. Must not touch NIPRNet (device isolation) X X

Device isolation configured by vendor at time of installation.

Government to confirm.

4.

Wireless Access Points shall be configured to prevent rogue connections.

X

Configured by vendor at time of installation. Vendor to standardize their specific configuration across all Edwards installations.

5. Wi-Fi shall support WPA2 or greater security. X

Configured by vendor at time of installation. Vendor to standardize their specific configuration across all Edwards installations.

6.

Equipment shall be configured to support monitoring for wireless intrusion and notification.

X

Configured by vendor at time of installation. Vendor to standardize their specific configuration across all Edwards installations.

Configuration information shall be provided to government representative.

7.

Equipment shall be configured to support changes to Wi-Fi signal strength as necessary.

X X

Configured by vendor at time of installation. Vendor to change configuration as needed based upon government provisions for frequency interference mitigation efforts. Government shall provide signal variations based on TEMPEST and/or Spectrum Management guidance/direction.

8.

Equipment shall be configured to support changes to Wi-Fi channels as necessary.

X X

Configured by vendor at time of installation. Vendor to change configuration as needed based upon government provisions for frequency interference mitigation efforts. Government shall provide channel block(s) variations based on Spectrum Management guidance/direction.

9.

An Intrusion detection systems (IDS) and/or intrusion prevention systems (IPS) should be installed if available.

X

Highly Recommended – Not Required.

If available, Configured by vendor at time of installation. Vendor to standardize their specific configuration across all Edwards installations. Configuration information shall be provided to government representative.

2.3 Period of Performance:

2.3.1 Estimated Start date: A u g u s t 1 , 2 0 2 4

2.3.2 Estimated Completion date: August 16, 2024

3.0 Inspection/Acceptance:

3.1 Checklist for final installation verification

3.1.1 To be completed by Contractor and Requestor or the Organization’s Primary Point of Contact

Product Yes/No Date Signature Comments

1. Fiber path identified

Fiber path identified from bldg. 2600 to bldg.

comm room to end location

2. Commercial Internet Router Installed

Model #:

Serial #:

Bldg.:

Room:

3. Wireless Access Point(s) installed

Count:

Model #(‘s):

Serial #(’s):

Bldg.:

4. Equipment installed as approved

5.

Configuration installed as approved

6.

Captive portal and/or splash screen configured and operational as required

7.

User Agreement and Password configured and operational as

8.

Device isolation configured and verified as required

9.

Wireless Access Points configured to prevent rogue connections as

10.

WPA2 or greater security configured and verified as

11.

Monitoring for wireless intrusion and notification

12.

Wi-Fi signal strength change capability

13.

Wi-Fi channel change capability is

14.

Intrusion detection systems (IDS) and/or intrusion prevention systems (IPS) configured and verified (if available)

15.

Internet router, Wi- Fi equipment, and configuration is at Full Operating Capability and has been accepted by the Requestor

3.2 Authority to Operate (ATO) and final installation approval:

3.2.1 TEMPEST Office must be contacted (by Requestor) to validate final installation of the wireless Access Points to allow for full operating capability.

3.2.2 AFMC PMO must receive final screenshots of the following (by Requestor) to validate final installation and receive ATO allowing for full operating capability.

3.2.2.1 Capture Portal and/or Splash Screen that shows User Agreement and

Consent to Monitoring

3.2.2.2 Firewall screen shots that show settings; port forwarding turned off and device isolation.

3.2.2.3 Network Management console setting screen shot that show device isolation.

4.0 Security Requirements

4.1 All Contractor employees will be subject to a criminal history background check

IAW DoDM 5200.08V3_AFMAN 31-101V3, Installation Perimeter Access Control, and 412th Test Wing Integrated Defense Plan (IDP) 31, Volume I (the AFMAN and IDP are both limited access documents but more details on the requirements/process in terms of background checks can be provided by the Contracting Office upon request). Vehicle registration, proof of insurance, and a valid driver's license must be presented for vehicles. Installation Commanders may deny access and credentials based on information obtained during identity vetting that indicates the individual may present a threat to the good order, discipline, and morale of the installation.

4.2 Base Access. For Contractor personnel requiring base access to perform work at Edwards AFB will be granted through written request on company letterhead to the CO with the following information: 1) contract number, 2) location of work, 3) contract start and stop date (must be on or before contract’s expiration date), and 4) names of employees/ subcontractor employees needing access to the base, to include each employee’s company name.

4.3 Base passes will be limited to the length of the contract period of performance, unless otherwise approved by the requesting organization and contracting.

4.4 The contractor shall comply with all base security regulations. Additionally, the contractor shall comply with actions dictated by force protection condition (FPCON) changes/measures and/or health protection condition (HPCON) changes/measures. For real-world situations/exercises, changes to force/health protection conditions could impact contractor performance of work and can include denial of access to the installation to perform work.

4.5 The Contractor shall comply with all security requirements imposed by the Installation. Specific security considerations will be handled on an individual Task Order/contract basis as required.

4.6 The Contractor and its employees shall comply with all base traffic regulations.

4.7 The Contractor shall be responsible for safeguarding all government property, equipment and materials provided for Contractor use. At the end of each work period, all government facilities, equipment, and materials shall be secured.

4.8 The Contractor shall be responsible for prompt return of credentials and vehicle passes for: 1) any employee who no longer requires access to the work site; 2) upon request by a Contracting Officer; and 3) upon completion or termination of the contract. Failure to comply with these requirements may result in withholding of payment.

4.9 Contractor employees are prohibited from possessing weapons, firearms or ammunition, on themselves or within Contractor-owned or privately owned vehicle while on Edwards AFB.

5.0 Safety and Health Standards

5.1 The contractor shall perform work in a safe manner as required by OSHA Safety and Health Requirements. Provide a verbal report to the CO as soon as possible of each occurrence of damage to Government property or an accident resulting in death, injury, occupational disease, or adverse environmental impact. Provide a completed copy of required Accident Investigation Reports to the CO within five calendar days of each occurrence.

5.2 It is the Contractor’s sole responsibility for compliance with all OSHA standards.

6.0 Environmental Protection

6.1 The Contractor shall comply with all applicable Federal, state and local laws, regulations and standards that are or may become applicable to the Contractor’s activities in performance of this SOW.