8-QA 5.pdf
PDF 120 KB Posted
- Attached to
- 26-005 Erate - SEIM/SOC/XDR solution
- Solicitation number
- 26-005 - RFP - SEIM/SOC/XDR solution
- Issued by
- Bibb County, Georgia
About this file
This document is a Question and Answer (Q&A) file for an ERATE SEIM_SOC_XDR Solution (Project 26-005), detailing technical specifications and requirements for a cybersecurity solution. The project involves implementing a comprehensive security platform with endpoint protection across multiple device types, including 100 Linux, 6000 Windows, 200 macOS, 22000 Chromebooks, and 6000 iPads. The organization requires virtualization hosting capabilities through VMware, SOAR (Security Orchestration Automated Response) capabilities, and network sensors to monitor traffic across 42 network segments with 10Gbps WAN connections.
The current technology environment includes 2400 access points, 950 Meraki switches, 70 Cisco switches, 2 Palo Alto firewalls, and 4 Active Directory domain servers. The organization is interested in deploying Deception Technology (Honeypots) to assess attacker behavior but does not require proactive threat hunting, internal vulnerability scans, cloud service monitoring, or monthly/quarterly security reviews. They seek to retain security data according to industry standards and have the capability to host hardware or virtualized network sensors across their infrastructure. The solution will focus on endpoint protection, network traffic monitoring, and potential threat detection without extensive additional scanning or reporting requirements.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 1-Bid Forms EMW.pdf | ||
| 6-QA 3.pdf | ||
| 7-QA 4.pdf | ||
| 2-Final Contract Procurement 2023 FINAL SampleFILE.pdf | ||
| 5-QA 2.pdf | ||
| 3-RFP 26-005 SEIM-SOC-XDR solution.pdf | ||
| 4-QA.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Q & A_5 26-005
ERATE SEIM_SOC_XDR Solution
What are the Endpoint counts for laptops, desktops, server, etc...? (please list count by device type linux=100, windows=6000 macOS=200, Chromebooks=22000, iPads=6000, android tablets=0, etc.)?
Do they have virtualization hosting capabilities, (e.g. VMWare OR for on-premises components such as Log Collector, Honeypot, Orchestrator, Vulnerability Scanner VMs)? VMware
Do they require SOAR (Security Orchestration Automated Response) capabilities? Yes
Do they require proactive Threat Hunting by SOC Analysts? No
Do they require internal Vulnerability Scans to assess and prioritize critical vulnerabilities for remediation of non-endpoint systems (IoT devices, network infrastructure, network appliances)? No
How many IP addresses to scan?
Do they need to retain security data for longer than 60 days (up to 365 days)?
Whatever industry standard is
Do they need monthly or quarterly security reviews & briefings of their network’s security posture? No
To assess potential security log sources to monitor with the platform, Can they provide a basic summary of their network device types (routers, switches, firewalls, UTMs, VPNs, Active Directory servers, LDAPs, DHCP, DNS, syslog-capable systems, etc)? APs: 2400, Meraki Switches: 950, Cisco Switches: 70, Palo Alto Firewalls: 2 - PA5220, 4 AD Domain server
Are they interested in deploying Deception Technology (Honeypots) to assess attacker behavior & intent? Yes
Do they need to monitor cloud-based SaaS services? No
Please list cloud-based services
Do they need network sensors to monitor network traffic between endpoints and network infrastructure? Yes
Characterize expected traffic (network segment count, volume GB/TB, rate Gbps) 42 network segments with 10gbps connections to the wan can they host hardware or virtualized network sensors at these locations Yes
File details come from the government source that posted it. Updated .