80TECH24RFI0012 - Amend 1.pdf
PDF 927 KB Posted
- Attached to
- Amendment 1 - NASA Secure Socket Layer (SSL) based Virtual Private Network (VPN) Remote Access Solution
- Solicitation number
- 80TECH24RFI0012
About this file
This document is a Request for Information (RFI) issued by NASA's Information Technology Procurement Office (ITPO) regarding a Secure Socket Layer (SSL) based Virtual Private Network (VPN) Remote Access Solution.
The RFI seeks responses from interested parties to verify the reasonableness and feasibility of the requirement, as well as promote competition. NASA is not seeking proposals at this time, but rather information and strategic planning purposes as part of NASA's Chief Data Officer initiatives and potential partnerships with industry. The RFI provides details on the desired solution capabilities, including cloud-hosting, FISMA High FedRAMP authorization, ITAR compliance, and the ability to implement a Zero-Trust Architecture. NASA is also interested in understanding whether the solution would be used for remote access only or as part of establishing a Zero-Trust environment. Responses to this RFI are due by June 26, 2024, at 5:00 p.m. EST and should be limited to 10 pages in length.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| SSL VPN RFI SOW - 6.4.24.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
# Question RFI Ref. NASA Response
1 Can the SSL VPN solution be a cloud hosted solution? Yes
With authorizing a Federal Information Security Modernization Act
(FISMA) high cloud environment to support NASA's return to the
Moon and future exploration of Mars being a goal of NASA's, should FedRAMP High JAB authorized be a requirement?
fedramp HIGH is a requirement
3 Should the solution be ITAR compliant? Yes
Should the solution have the ability to avoid inbound connections to private network in order to access private applications?
Not a requirement, but would be desirable
Should the solution not require extending BGP out into the cloud to avoid security concerns on extending the network into a Public
Cloud Infrastructure?
Not a requirement, but would be desirable
Should the solution have the ability to implement a Zero‐Trust
Architecture and hide assts from the public internet?
Not a requirement, but would be desirable
Will the technology be used for remote access only or part of establishing zero‐trust while on‐premise?
Not a requirement, but would be desirable
Would the ability to monitor traffic to ensure end user experience and diagnose bottlenecks to reduce help desk times be a requirement?
If cloud‐hosted, then yes. If provided via an on‐prem appliance, then existing monitoring would suffice. We would assume that an on‐prem appliance could log to a SIEM.
80TECH24RFI0012/P00001
| 2024-06-24T10:01:28-0500 | |
| Michelle Downs |
File details come from the government source that posted it. Updated .