USHMM RFI 95476724R0718 WiFi Infrastructure and Distributed Antenna Systems.pdf

Request for Information 95476724R0718

United States Holocaust Memorial Museum WiFi Infrastructure and Distributed Antenna Systems

Request for Information

This Request For Information (RFI) Notice is issued solely for information and planning purposes. This is not a solicitation. submission of information about pricing, delivery, the market, and capabilities is highly encouraged and allowed under this RFI for planning purposes in accordance with FAR 15.201(E). All information received in response to this RFI that is marked as proprietary will be handled accordingly. Responses to this notice are not offered and cannot be accepted by the Government to form a binding contract. responders are solely responsible for all expenses associated with responding to this RFI.

RFI Description: This is not a solicitation announcement. This is a RFI only. The purpose of this RFI is to gain information about potential qualified sources and their size classification relative to NAICS 517111, responses to this RFI will be used by the government to make appropriate acquisition decisions. After review of the responses to this RFI, there shall be further RFIs and/or a solicitation or other announcements may be published.

Notice to Businesses Please read this entire notice carefully as it constitutes the only notice that will be issued.

This is not a Request for Proposal (RFP). This is a RFI notice for planning purposes only and shall not be construed as a solicitation or as an obligation on the part of the Museum.

The Museum will not accept unsolicited proposals in response to this pre-solicitation notice as it is not our intent to enter into a contract based on this notice or otherwise pay for information so solicited.

RFI Instructions Respondents are advised that not responding to this RFI does not preclude participation in any future RFP solicitations.

General questions regarding this request may be submitted via email toMary Green, Contracting Officer at magreen@ushmm.org, no later than [5:00 PM on August 8, 2024] Eastern Time. Please note, during this time the government is unable to provide direct responses to any questions received. However, due consideration will be given to all feedback and any feedback received may be used to revise the requirements.

Information from this RFI will lead to one-on-one market research discussions and other recommended approaches to industry engagement. USHMM representatives may or may not choose to meet with potential offerors. Such discussions would only be intended to get further clarification of potential capability to meet the requirements.

1 | Page

Addendum A – WiFi - DAS Refresh SOO

BACKGROUND (CURRENT CONFIGURATION)

The United States Holocaust Memorial Museum ("Museum" or "USHMM") is planning to replace the current WiFi infrastructure on all of its campuses to implement a network that provides secure, reliable, and scalable WiFi coverage for the Museum’s business operations, guests, and visitors. The pending solicitation seeks to procure WiFi equipment and/or installation services throughout the Museum’s various facilities from qualified manufacturers and/or certified resellers on a best-value basis. Optional integrated DAS (Distributed Antenna System) solution that can be integrated into the WIFI infrastructure that would also be a welcome addition to replace our degraded DAS system.

OVERALL REQUIREMENTS DEFINITION

The Offeror’s proposed solution shall include:

All hardware and software needed to implement a WiFi solution that meets the requirements stated herein:

Proper mounting brackets or other accessories for installation of access points and switches (be they on walls, hard ceilings, drop ceilings, and/or exterior poles)

Dating from the newly installed WiFi system's initial online date, a minimum of one initial year's expert-level support and maintenance from the Offeror, or via the Offeror, from the hardware/software manufacturer with annually renewable options.

Site survey (the "Site Survey") across the main Museum campuses, including identification of WiFi coverage areas and to specify the installation locations of the WiFi access points. To the extent deemed applicable, details of the Museum's networking and technical infrastructure and floor plans for all these buildings except the regional offices will be made available to prospective Offerors upon request with the submission of a nondisclosure agreement signed by an authorized representative of the requestor’s company.

DAS (Distributed Antenna System) to support Wireless access throughout all museum campuses.

Technical requirements:

Access Points - all access points shall:

(1) Support 802.11n/ac/ax/be wireless LAN standards minimum, preferably 802.11a/b/n/ac/ax/be

(2) Have future compatibility for newer 802.11 environments

(3) Have an Ethernet port with a minimum 1 Gbps bandwidth

(4) Have MIMO radio

(5) Have application level bandwidth controls

(6) Have built-in capability to mitigate radio frequency interferences from cell phone signals, in-building DAS, hand-held radios, broadcast signals (TV/Radio) and other extraneous radio

2 | Page frequencies

(7) Be fully FCC certified to operate in the United States

(8) Be WiFi Alliance certified

(9) Be paintable without any degradation of signal quality or strength

(10) DAS option to be able to carry signals from the 3 main Wireless Carriers (AT&T, T-Mobile, and Verizon)

Aggregation Switches - all aggregation switches shall:

(1) Have equal Power-over-Ethernet (PoE+) capacity to power all connected access points up to a maximum distance of 100 meters over shielded CAT 6a cable

(2) Include dual power supply

(3) Have dual uplink ports

(4) Include transceivers with SFP+ compatible with 50 micron Fiber cables

(5) Have a stackable architecture for scalability

Management and Administration

(1) The proposed solution shall be fully manageable through a cloud-based portal without the requirements for any on-premise central controller(s), routers and/or management devices

(2) Access points and aggregation switches shall have the flexibility to receive upgrades/updates either manually or automatically, both can be controlled by system administrator(s),which includes but not limited to scheduling of such updates/upgrades

(3) The cloud-based management portal shall have the capability to administer the entire multi-site WiFi infrastructure regardless of their geographic location through a single web-based interface

(4) Cloud management interface shall support detection of client types and destination

(5) The management portal shall have a robust reporting capability, which includes but not limited to dashboards for instant visibility to ongoing activities, trouble spots and security-related instances

(6) The administrative portal shall have the ability for an administrator to shut down a single or a group of access points when a situation arises

(7) USHMM desires to have the flexibility of converting the cloud-based management solution to an on-premise management architecture with the addition of local equipment to accomplish this transition.

Security Requirements

(1) Access points shall have strong security built-in, including without limitation integrated stateful firewall, application filtering, content filtering and website filtering (only needs to be applied for traffic that is going directly out to the Internet)

(2) WiFi infrastructure shall integrate with enterprise networking infrastructure that contains firewalls, intrusion detection systems and other security tools

(3) WiFi infrastructure shall block clients for authentication failures or policy violations

(4) Cloud-based management shall have full support for SSL/TLS and two factor authentication

(5) Cloud-based management interface shall support role-based access control for day-today operations by technical staff of various capacity and roles

(6) The WiFi infrastructure shall have network monitoring and alerting capabilities using emails and SNMP traps

3 | Page

(7) The WiFi infrastructure shall have the capability to detect, alert and/or mitigate broadcast storms including DDoS types of attacks

(8) The administrative portal shall have the ability for an administrator to detect and group client devices of all types including unauthorized access points for rogue applications that could compromise the security and block them instantly

(9) WiFi infrastructure shall be capable of forwarding logs to a syslog server (10)The administrative portal shall be able to log and report on access to the management functions

Functional Requirements - Multiple SSID broadcast support that can be fine-tuned based on security and functional requirements. At a minimum, the following functionality is required for different SSIDs:

(1) Support for a secure WiFi for the Museum staff that integrates with Active Directorybased authentication

(2) Support for strong security implementation for connecting to PCI networks

(3) Support for Guest WiFi that requires username and password with expiration settings

(4) Support for public WiFi that does not require username or password, which can be deployed only for selected access points and locations

(5) A customizable captive portal with complete flexibility for background graphics, custom logos and text is required. The captive portal shall also have the ability to properly render on different screens including desktop computers, laptops, tablets and mobile phones

(6) The proposed solution shall have the flexibility to easily and seamlessly integrate additional access points deployed in the future

(7) The proposed solution shall have ‘hotspot’ capability, by which a temporary ad hoc WiFi coverage can be easily provided using a wired internet connection. Management of such wireless devices shall be controlled through the central cloud-based portal

Installation locations: The locations for WiFi installation are as follows:

Main Museum building - This is the largest of all the locations that houses the Museum and other operational and business units. This is a seven story building with a complex architecture consisting of steel, concrete and other solid structures that are not easily conducive to wireless signals. The scope of the project includes complete coverage of all the floors inside the building as well as nearby perimeter areas around the Museum. This building has a Distributed Antenna System (DAS) installed in all the floors (indoor only). The total square footage of this building is: 250,000.

Ross Administrative Building - It is located adjacent to the Museum that houses the Museum cafeteria and other administrative offices. This building has three levels with a mezzanine that is approximately half the size of the rest of the floors. It also has DAS installed in all the floors (indoor only).The total square footage of this building is: 45,000.

Portals III - A single level in a multi-tenant building located near the Museum for the Museum’s program area offices. The total square footage of this area is: 37,000.

Shapell Center - Located in Bowie, MD, for housing Museum’s collections. This is a large two

4 | Page level building that has offices, conference rooms and several storage areas constructed with fixed and movable metal shelves. The total square footage of this building is: 103,000.

Regional Offices - USHMM has four small regional offices around the United States. The approximate square footage of these offices range between 2,000 and 4,000.

5 | Page