Apriva MESA VPN Sole Source Notice of Intent Sources Sought.pdf

NOTICE OF INTENT - SOURCES SOUGHT

The Defense Information Systems Agency (DISA) Defense Information Technology Contracting Organization intends to negotiate a sole source contract with Apriva Information Security Systems, Limited Liability Corporation (Apriva) for their Mobile Endpoint Security Architecture (MESA) Virtual Private Network (VPN). A sole source Justification & Approval document is being coordinated and, upon approval, a copy of it will be posted here on SAM.gov to comply with the public display requirements of FAR 6.305.

The proposed contract action is for Apriva MESA VPN License Agreement and Engineering Support Services for the Department of Defense Mobility Classified Capability (DMCC) – Secret end user devices (EUDs), consisting of the legacy Samsung Galaxy S20 custom read only memory (CROM), S7 Tablet CROM, Windows Data-at-Rest (WINDAR) Dell 7320, WINDAR Dell 7210, Hewlett Packard (HP) ProBook G4 and HP ProBook G5. Apriva’s unique VPN design supporting the DMCC-Secret effort is currently the only VPN compliant with the National Security Agency (NSA) Commercial Solutions for Classified (CSfC) program and proven compatible with the current DMCC-S Secure Mobile Device Gateways (SMDG) architecture and these legacy EUDs. At inception, the Apriva MESA VPN was the only NSA CSfC approved standards-based Internet Protocol Security VPN available. As such, the Government requires the Apriva MESA VPN license agreement, which authorizes use of gateway operations and associated SMDG testing facilities.

The Apriva MESA VPN design solution cannot be replaced without significant disruption of service to the DMCC infrastructure and its end users, as well as potentially disturbing NSA CSfC Mobile Access Capability Package compliance of the current architecture. Replacing the existing infrastructure is beyond the scope of the Government’s current needs and would result in a loss of DISA's $43M investment in the existing infrastructure. Awarding to a source other than Apriva would result in substantial duplication of cost to the Government that is not expected to be recovered through competition. Also, attempts to prematurely transition services would result in critical mission failure due to the dependencies listed above. Currently, there is no alternative to support the legacy EUDs as the Apriva MESA VPN is the only compatible solution. The next generation EUDs will transition to the NSA CSfC Aruba VPN by December 31, 2025.

Currently, the incumbent contractor, Apriva, is the only source capable of providing all necessary services to support the legacy EUDs for the DMCC outer VPN and the Command, Control, and Services as they are the sole provider for this current solution.

The statutory authority for other than full and open competition, 10 USC 2304 (c) (1), as implemented by FAR 6.302-1(a)(2)(iii), only one responsible source and no other supplies or services will satisfy agency requirements. Companies who believe they can provide this service must indicate their interest in writing within 5 days of this notification and include a detailed capability statement. No reimbursement for any cost connected with providing capability information will be provided. All responsible sources will be considered in evaluating the determination to issue a sole-source contract. Quotations or proposals received in response to this notice cannot be accepted since this synopsis cannot be considered a request for quote or a request for proposal.

The North American Classification System (NAICS) code 541511 will be used for determining company size status.

CONTRACT/PROGRAM BACKGROUND: The MESA VPN requirement was executed under the following contracts:

Contractor: Apriva Business Size: Small Contract Number: HC108421C0006 Period of performance: July 20, 2024 - July 19, 2025 Type of Acquisition: Sole Source

Contractor: Booz Allen Hamilton Business Size: Other than Small Contract Number: HC108420D0004, Mobility Enterprise Services - Classified Period of performance: March 9, 2020 - March 8, 2024 Type of Acquisition: Full and Open Competition

Contractor: Apriva Business Size: Small Contract Number: HC101317C0003, SMDG follow-on Period of performance: February 01, 2017 - July 31, 2020 Type of Acquisition: Sole Source

Contractor: Apriva Business Size: Small Contract Number: HC101315C0008, SMDG Period of performance: August 01, 2015 - January 31, 2017 Type of Acquisition: Sole Source

Contractor: Apriva Business Size: Small Contract Number: HC101309C2002, Multi-Carrier Entry Point Period of performance: August 01, 2009 - July 31, 2015 Type of Acquisition: Sole Source

SPECIAL REQUIREMENTS: N/A

Points of Contact: angela.k.zang.civ@mail.mil and joseph.l.santel2.civ@mail.mil mailto:angela.k.zang.civ@mail.mil mailto:joseph.l.santel2.civ@mail.mil