2.10.1 Sep17 Questions and Answers RFQ 70CTD024Q00000107.xlsx
XLSX spreadsheet 13 KB Posted
- Attached to
- ICE/HSI Hosting Support Services
- Solicitation number
- 70CTD024Q00000107
- Issued by
-
Immigration and Customs Enforcement
About this file
This document is a set of Questions and Answers related to RFQ 70CTD024Q00000107 for ICE/HSI Hosting Support Services. The RFQ is for a 12-month base period with two 12-month option periods to provide hosting support services for the Intellectual Property Rights (IPR) Center. The services include maintaining the seizedservers.com website which displays criminal seizure banners, an anti-counterfeiting and piracy banner, and a public service announcement for seized domain names. The contractor will be required to develop reporting functionality to track visitor IP addresses, timestamps, referring URLs, and user agent information. The current incumbent is NATIONAL CYBER-FORENSICS AND TRAINING ALLIANCE under contract 70CTD021P00000012. The RFQ response is due on September 17, 2024 at 12:00pm EST.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Amendment0001.pdf | ||
| 2.10.1 Questions and Answers RFQ 70CTD024Q00000107.xlsx | XLSX spreadsheet | |
| 2.2.1 Attachment A SOW Hosting Support Services .pdf | ||
| 2.2.1_Attachment B Terms and Conditions.pdf | ||
| 2.2.1 Combined Synopsis and RFQ Letter.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| RFQ# 70CTD024Q00000107 Hosting Support Services - Questions and Answers | ||
| Question | Answer | |
| 1 | Is there an incumbent on this contract? If so, please provide the incumbent name, current contract number, Period of performance , value of the contract. | 70CTD021P00000012, NATIONAL CYBER-FORENSICS AND TRAINING ALLIANCE, POP: June 1, 2021 - May 31, 2024, $37,000.00 |
| 2 | Is there any incumbent/recompete or is this a brand-new project? If yes, could you please provide us with their award number or even if the customer bought similar services in the past? | Recompete, 70CTD021P00000012 |
| 3 | We would like to know if this is a brand new contract OR if there is (was) an incumbent performing these services. |
| If not brand new, could you please provide the current / previous contract number? | Recompete, 70CTD021P00000012 | ||
| 4 | Is there any chance that the due date of 9/17 can be extended? | Yes, extended to Wednesday, September 18, 2024 | |
| 5 | Domain seizedservers.com | ||
| Are we expected to develop a website for this domain? | |||
| How is it being used today? | Vendor shall take over domain name www.seizedservers.com which contains the websites seized by ICE, HSI, the IPR Center’s seizure banners, ACP banner and list of websites seized by rights holders. |
When ICE/HSI criminally seizes a website domain, the court order directs the Registry to redirect hits to the domain to the specific IP Address that is affiliated with the vendor’s server. Using instructions provided by the IPR Center, the vendor shall display one of the criminal seizure banners or redirect again to a Public Service Announcement regarding the dangers of counterfeiting.
Previously, the IPR Center has used IOS Stats Updater 2015.xlsm and Statsdownloader_v7.4.exe (FileZilla files) to retrieve the hits information for each seized website and saved to a csv file.
The contractor will create a program that will provide a report that lists each website directed to the IPR Center’s seizure banner, recording the visitor’s IP address with time stamp, referring URL and user agent information. Contractor will create specific rules to ensure that overlapping domain names (e.g. FakeGucci.com and Fake_Gucci.com) are properly separated so the data pertaining to each domain name are properly captured.
| 6 | Regarding the three different splash pages | ||
| Is the conduit for the public to report IPR violations just a simple form that needs to be added to the splash pages? | Yes | ||
| 7 | Maintenance pertaining to seized websites and/or shut down websites. |
We need additional clarifications on what this means.
| What type of maintenance will be required? | Creating and maintaining the banners as needed. | |
| 8 | DNS |
How many sites are we expected to migrate over that they have currently seized?
On average, how many new sites do they seize per month?
Can we leverage a 3rd party services such as Cloudflare to help with Security and protection of DNS services and web services?
Are there any metrics reporting against DNS traffic? According to internal reporting, in fiscal year 2020, the IPR Center shut down 19,026 websites.
The contractor will coordinate with the previous contractor in the transfer of data from the previous contractor’s server to the new contractor’s server. New programs created by the contractor in fulfillment of this contract along with the source codes will become property of ICE, HSI and the IPR Center. The contractor will provide instruction to ICE, HSI and IPR Center personnel in the operation, maintenance and updating of the programs.
9 How are they currently collecting traffic, IP address, user, and user agents?
What is your current process of data collection?
| Can we mirror that or is there an expectation of a new process? | In the past, the IPR Center has used IOS Stats Updater 2015.xlsm and Statsdownloader_v7.4.exe (FileZilla files) to retrieve the hits information for each seized website | |
| 10 | Reporting |
Does Seizedservers.com currently have user visit metadata tracking nor reports? If so, do they want to build this on top of existing functionality, code and database?
| Can a 3rd party tool be utilized for data collection? | The contractor will coordinate with the previous contractor in transfer of data from the previous contractor’s server to the new contractor’s server. Vendor should develop compatible functionality in order to preserve historical data. | |
| 11 | SLA |
What are the uptime requirements?
| 99.999% is industry standard | |||
| 12 | What is the RTO and RPO of this service? | Report outages and establish correction within 24 hours. | |
| 13 | Once the domain is seized, what is the expected turnaround time for completion of redirection to the Seizedservers.com? | Not specified. | |
| 14 | Is the technology stack already decided? | No | |
| 15 | We are reading this as you will be transferring hosting of an existing application and database from another vendor that’s already in production + add some tracking and reporting. Is this correct? | Tracking and reporting information should carry over from previous vendor and transfer to new vendor’s server. | |
| 16 | What technology the current system is using? Code? Database? | Code | |
| 17 | Does the current vendor know this is being transferred? | Yes | |
| 18 | Does the client have full access to full source code (not compiled version) and data? | Yes | |
| 19 | Are they open to suggestions on security measures, technology, number of servers, etc.? | Yes | |
| 20 | Any applications or software that is required to be used? | No | |
| 21 | Is the SFTP application settled? | Yes | |
| 22 | Can we use "allow lists" for access to the SFTP server blocking public traffic, non-authorized IP address? | Not sure | |
| 23 | Logging Requirements | ||
| What data is stored on the SFTP server that requires 2TB? | Contains a running count of the total number of hits to the IPR Center’s seizure banner since the operation’s inception in 2010. The domain name www.seizedservers.com contains the websites seized by ICE, HSI, the IPR Center’s seizure banners, ACP banner and list of websites seized by rights holders. Contained therein are: |
Criminal seizure banners
| o | Includes name server; |
| o | Includes web server; and |
| o | Includes Secure File Transfer Protocol (SFTP) server (secured by user name and password). |
| • | The lists of seized domain names are directed to this banner, as instructed by the IPR Center. |
| • | To include domain names that have been seized previously, as well as ones that may be seized in the future. |
Anti-Counterfeiting and Piracy (ACP) banner
| • | includes name server; |
| • | includes web server, |
| • | Includes SFTP server. |
| • | Includes Secure File Transfer Protocol (SFTP) server (secured by user name and password). |
| • | The current (and future) lists of shutdown domain names are directed to this banner, including domain names that have been shut down previously. |
Public Service Announcement (PSA)
• Current lists of seized domain names and/or shutdown domain names are directed to the PSA, as directed by the IPR Center.
Registries and Registrars
• Interaction with Registries (e.g. VeriSign) and other registrars as originally outlined by the IPR Center in delineated format;
Data
• Collect data regarding domain names, banner hits, PSA hits and use [previously Apache program] format access log to capture the visitors’ IP address, time stamp, referring URL and user agent information, as instructed by the IPR Center
File details come from the government source that posted it. Updated .