RFP 74330224R0048 Questions and Answers (Round 2).pdf

May 21, 2025 Second Round of Questions RFP # 74330225R0048 Fiber Dedicated Internet Access Services

RFP Reference Document Question Questions italicized were asked during the Pre-Proposal

Conference

ABMC Response

1 Are contractors required to bid on all locations or can the locations be bid a la carte?

While it is preferred to award 1 contract for all sites, ABMC acknowledges that may not be possible. Therefore, please bid on any sites your company is capable of serving.

2 Can contractors propose and attach their Master Service Agreement and Customer Schedules (SLAs)?

Please provide any and all information your company believes would be helpful to ABMC in review of your proposal.

3 Can contractors take exception to the terms & conditions in the PWS or does ABMC anticipate contract negotiations to take place post award?

Contractors can take exception to T&Cs. Please clearly make note of these specific exceptions as part of your cover letter.

4 When do you anticipate answering Round 1 and Round 2 questions.?

Round 1 questions were answered prior to the Pre-Proposal conference on 20 May 2025. ABMC anticipates providing answers to Round 2 questions no later than 30 May 2025.

5 Is this a small business set aside or unrestricted? This is an unrestricted competition.

6 Do you have a proposed network topology that includes the two additional sites; Montfaucon & Montsec?

Each site is independently connected to the Internet. ABMC currently uses ZscalerGov for its Secure Access Service Edge.

7 Is the expectation that each carrier will need to provide its own DDoS service or does it need to be a single provider. centralized"

ABMC requires DDoS but leaves it to each proposer to make its best offer using its capabilities.

8 Where did you attach answers to Round 1 answers? Round 1 questions/answers are posted to the solicitation on SAM.gov and ABMC.gov.

9 What is the estimated magnitude cost range of this contract? (FAR allows for $1M - $5M , $5M - $10M, $10M to $25M)

ABMC is not at liberty to disclose that information. Please provide your company's best realistic and competitive pricing as part of your proposal.

10 can you clarify the network hardware. ABMC is to provide all hardware.

ABMC provides and manages its own firewall routers and switches.The contractor is expected to deliver, install and manage all hardware necessary to hand off network to ABMC Local Area Network devices.

11 Please provide the link to SAM for the effort. Link to RFP posted to the ABMC website: https://www.abmc.gov/about-us/contracting-rfp/

12 CLIN 007 PWS Distributed Denial of Service (DDoS) Mitigation Services (Optional)

How many and what type of routers (make and model per location) will be used for the GRE tunnels? Devices must support GRE RFC 1701, 2784.

ABMC has a total of 60 routers at 30 locations, which is 2 routers per site.

These devices do support GRE RFC.

13 CLIN 007 PWS Distributed Denial of Service (DDoS) Mitigation Services (Optional)

What is the physical port capacity (1G, 10G 100G) per router? Existing routers' physical port capacity is at 1G.

14 CLIN 007 PWS Distributed Denial of Service (DDoS) Mitigation Services (Optional)

Are you able to adjust TCP maximum segment size (MSS)? Yes.

15 CLIN 007 PWS Distributed Denial of Service (DDoS) Mitigation Services (Optional)

Are you currently advertising prefixes to the internet via BGP and/or are you statically routing prefixes to/from your ISP?

IP addresses are statically defined.

16 CLIN 007 PWS Distributed Denial of Service (DDoS) Mitigation Services (Optional)

Is your IP space IPv4 /24, IPv6 /48, or larger? No. Please see the PWS sections on TCP IPv4 (CLIN 0004) and IPv6 (CLIN 0005).

17 CLIN 007 PWS Distributed Denial of Service (DDoS) Mitigation Services (Optional)

What is your total inbound Mbps usage per location (95th percentile)?

The data exists but basing solution design on current usage information will underestimate required performance. ABMC is not a typical organization with fixed desktop needs. Sites should have at the minimum the bandwidth specified in Appendix 1B of the PWS.

18 CLIN 007 PWS Distributed Denial of Service (DDoS) Mitigation Services (Optional)

What is the public or private ASN we will be peering with? ABMC does not have private or public ASNs.

19 CLIN 007 PWS Distributed Denial of Service (DDoS) Mitigation Services (Optional)

Please provide the city/state/province/country for each data center location and a description of the facility. (For example, Ashburn — Equinix, Chicago — Rackspace, AWS East, etc.)

Microsoft 365 and Azure East and West regions.

20 4. PROPOSAL PREPARATION INSTRUCTIONS

(SECTION L)

After the receipt of the NDA how will ABMC release the CUI information via encrypted email or post it in a CMMC enclave?

ABMC will share CUI information via secure file shares.

21 CONDITIONAL ACCESS TO SENSITIVE BUT

UNCLASSIFIED INFORMATION NDA

How will the contractor know that the information being provided to them in considered AMBC confidential information. Will it be stamped confidenital?

Yes.

22 CONDITIONAL ACCESS TO SENSITIVE BUT

UNCLASSIFIED INFORMATION NDA

Can the NDA be modified to add Scope or Limit? Please use document's Track Changes to propose your changes and ABMC can consider these changes.

23 CONDITIONAL ACCESS TO SENSITIVE BUT

UNCLASSIFIED INFORMATION NDA

Can the NDA be modified to include any information from contractor to AMBC be bound by mutual terms?

Please use document's Track Changes to propose your changes and ABMC can consider these changes.

24 A-1 PWS What is the required IP port hand-off to the ABMC 1G Router/Firewall ? 1000BASE-T or 1000Base-LX?

1000BASE-T.

25 ABMC | Pre-Proposal Conference - May 20, 2025 @

11AM EST

During the conference, GSM coverage was described for the 2 new sites in France (Montfaucon + Monsec).

Is the fibre installation for these 2 sites medium-term projects? ie 2027 or later?

These are optional sites to be installed as part of the project if it's economically feasible.

26 CLIN 0002 of PWS Can we reuse trenches etc for the external works as I would have thought this is in situ already as they have connectivity already ?

Yes, ABMC has existing fiber and anticipates that all fiber infrastructure can be reused. We have performed site pre-assessments in May 2025 and visually confirm the fiber demarcation boxes and LAN fiber cabling to the network racks.

27 CLIN 0001 of PWS Can we reuse cabinets if in site Yes, existing onsite's server rack can be used.

CLIN 0007 of PWS

How many /32 hosts would need cloud redirection with DNS;

that is, /32 hosts that do not fall within a /24 for BGP redirection?

All hosts should be within the firewalls, so DNS redirection is not needed.

However, ABMC is already using a Secure Access Service Edge solution, and this will need to be taken into account in the design of the DDoS solution to ensure maximum performance while superposing systems security layers.

CLIN 0007 of PWS What is the maximum bandwidth of traffic (in Mbps) that a single site or a single /24 will have?

Duplicate question (already responded in Question #33).

PWS

What are traffic volumes at agency largest sites and how many sites

Highest volume of traffic will be data uploads to Azure storage accounts.

Also during high-level/high publicity events, ABMC will conduct high-resolution media streaming and support future Camera to Cloud workflows.

CLIN 0007 of PWS

Where would Akamai/Cloudflare be in the overall architecture?

o Would Akam/CF cloud mitigation be in parallel to but separate from Arbor Cloud?

o Would Akam/CF cloud mitigation be upstream from Arbor Cloud?

o Would Akam/CF cloud mitigation be downstream from Arbor Cloud?

o Is Akam/CF needed if on-prem (AED) and Arbor Cloud protection are both provided by DDos Provider?

Not applicable to this project.

CLIN 0007 of PWS Can we confirm that all locations are operating at 200Mbps of typical throughput?

No. Please see the Appendix 1B for current bandwidth. Several sites require higher bandwidth than was available on the current contract.

CLIN 0007 of PWS What is the maximum bandwidth of traffic (in Mbps) that a single site or a single /24 will have?

The maximum theoretical bandwidth of traffic that a single site or a single /24 is 10 Gbps or at least 9 Gbps effective usable bandwidth. Please refer to the "Current Bandwidth" column in Appendix 1B of the PWS for the current 30 sites.