Attachment 1 - Performance Work Statement.pdf

PERFORMANCE WORK STATEMENT

(PWS)

FOR

CISCO – Identity Services Engine

(ISE)

Francis E. Warren Air Force Base, Wyoming 23 Aug 23

[NOTE: table of contents populates based upon the font “Styles” feature in Word.

For example, “1” is associated with Heading 1; “1.1, 1.2, 1.3” are associated with Heading 2. When adding any paragraphs to those levels, be sur to click the

Attachment 1 - Performance Work Statement

FA461323Q1053

Table of Contents

1. Description of Services

1.1. Specific Services

1.2. Testing, Drawings, and Acceptance

2.1. General Services

2.1.4 Schedule of Work

2. Services Summary

3. Government Furnished Property and/or Services

3.1. Government Furnished Property

3.2. Government Furnished Services

3.3. Government Property Incidental to the Place of Performance

4. General Information

4.1. Quality Control

4.2 Quality Assurance

4.3. Security Requirements

4.4 Operational Security (OPSEC)

4.5. Location/Hours of Operation

4.6. Conservation of Utilities

4.7. Environmental Controls

4.8. Safety Requirements

4.9. Contractor Personnel

4.10 Records

4.11 Warranty

5. Appendices

5.1. Appendix A - Regulations

5.2. Appendix B – Deliverables

5.3. Appendix C – Equipment List (all are CISCO Systems ((CISCOPRO))

1. Description of Services.

The contractor shall provide all equipment, tools, materials, supplies, transportation, labor, management, and all other incidentals necessary for installation, configuration, functionality testing, and transfer of knowledge for a CISCSO (Brand Name) Identity Services Engine (ISE) server at F.E. Warren Air Force Base, Wyoming.

1.1. Specific Services. The Contractor shall perform an installation of a new Brand Name CISCO ISE 3.1 environment or newer, to include all Security Technical Implementation Guide (STIG) and patch requirements. Currently, there is no pre-existing CISCO ISE suite in the classified environment. Contractor shall be a Cisco Certified Network Professional, with expertise in the ISE environment. All equipment, supplies, and materials provided shall be new and not refurbished and are listed in Appendix C.

1.1.1. Installation ISE Posture Configuration.

1.1.1.1. ISE Nodes. The contractor shall install ISE and configure two (2) servers as applicable. Install appropriate licenses. Apply customer-provided Certificate Authority (CA) signed certificates if required by design. Configure and verify Domain Name Server (DNS) and Network Time Protocol (NTP) settings.

Update software on the ISE appliance, including third-party updates. Configure and test Personal Area Network (PAN) and management system (MNT) failover configurations. Configure up to twenty-nine (29) Network Access Devices (28 switches + 1 router to be configured for Terminal Access Controller Access Control System ((TACACS+)) only) and Network Device Groups. Configure relevant identity groups.

Configure relevant admin user groups and users in accordance with the specific information acquired in discovery.

1.1.1.2. ISE Nodes – PSN Servers. The contractor shall Install ISE software on two (2) PSNs and license them accordingly. Update software on the PSNs. Apply customer-provided Certificate Authority (CA) signed certificates if required by design. Join PSNs to Active Directory (AD). Configure and test PSN failover configurations. Configure and verify DNS and NTP settings. Register PSNs to the PAN and MNT appliances. Verify infrastructure changes – Virtual Local Area Network (VLAN) additions: spanning tree, Hot Standby Routing Protocol (HSRP) or other First-Hop Redundancy Protocol, routing, and Access Control Lists (ACL). Configure static routes or ACLs for authentication VLANs if applicable. Configure group, Management Information Base (MIB), remote authentication dial in user service (RADIUS) settings, etc., on the PSN appliances. Configure AD authentication and enable AD Single Sign-On (SSO). Configure syslog monitoring.

1.1.1.3. ISE Policy and Service Configuration for Wired Access. The contractor shall configure up to ten (10) authentication policies: machine/user authentication, Protected Extensible Authentication Protocol (PEAP), Extensible Authentication Protocol Transport Layer Security (EAP- TLS), and external authentication. Configure up to ten (10) authorization profiles and policies, profiling policies and actions, network authorization and Change of Authorization (CoA) policies, dynamic VLAN ACLs, and profiling sensor probes. Configure appropriate timers for re-authentication, reauthorization, success log-on screen, session timeouts, and remediation.

1.1.1.4. Monitor Only. The contractor shall collaborate with 90th Communication Squadron/Program Manager (90 CS/PM) on the implementation of a monitor-only 802.1x switch configuration template on up to six (6) identified Network Access Devices (NADs) to support the ISE environment for initial 802.1x testing.

1.1.1.4.1. Contractor shall verify profiling configuration, media access control (MAC) authentication bypass (MAB) authentication, and machine and user authentication.

1.1.1.4.2. Contractor shall verify configuration of re-authentication interval with machine and user authentication and provide a representative sample that AD computers and non-802.1x-capable devices are serviced from identified NADs.

1.1.1.4.3. Contractor shall monitor ISE logs for a period agreed upon (prior to acceptance) in workshop for authentication failures and aid as necessary to resolve these authentication/profiling/MAB issues. Contractor shall collaborate with 90 CS/PM to ensure that a representative set of workstations, users, and network devices are active on the identified NADs during monitoring.

1.1.1.5. Closed Mode. The contractor shall collaborate with 90 CS/PM on the implementation of low-impact 802.1x switch configuration template on up to six (6) identified NADs to support the ISE environment for initial 802.1x testing.

1.1.1.5.1. Contractor shall verify profiling configuration, MAB authentication, machine and user authentication, and re-authentication interval with machine and user authentication.

1.1.1.5.2. Contractor shall ensure that a representative sample of AD computers and non-802.1x-capable devices are serviced from identified NADs and that a representative set of workstations, users, and network devices are active on the identified NADs during monitoring.

1.1.1.5.3. Contractor shall monitor ISE logs for a period agreed upon in workshop (prior to acceptance) for authentication failures and aid as necessary to resolve these authentication/profiling/MAB issues.

1.1.1.6. ISE Posture Configuration.

1.1.1.6.1. Contractor shall configure and deploy client provisioning services and verify the ISE proxy configuration. Contractor shall download pre-built posture checks for access verification (AV/AS) and Microsoft Windows, configure general settings for agent behavior (to include compliance, etc.), set the location uniform resource locator (URL) and policy to download client provisioning updates, and download the agent files ((network access control (NAC), MAC, optical signal cross-connect (OSX) and Web Agents and Compliance Module and Profiles)). Contractor shall create a NAC Agent configuration profile for end user clients, define the client provisioning policy for domain users and guest users, configure the web authentication portal, and set Acceptable Use Policy (AUP) for guest users.

1.1.1.6.2. Contractor shall configure/modify authorization policies for posture and define a discretionary access control list (DACL) that restricts network access for endpoints that are not posture compliant. Contractor shall define a new authorization profile for 802.1X-authenticated/NAC Agent users, web-authenticated/Web Agent users, and update the authorization policy in order to support posture compliance.

1.1.1.7. TACACS+ Configuration. Contractor shall apply the appropriate license to the system to support TACACS+. Contractor shall configure up to ten (10) TACACS+ profiles and command sets.

Contractor shall create up to ten (10) device administration policy sets. Contractor shall build a configuration template for TACACS+/RADIUS and syslog monitoring to enable ISE and configure appropriate timers for re-authentication, reauthorization, session timeouts, and remediation.

1.2. Testing, Drawings, and Acceptance.

1.2.1 Contractor Testing.

1.2.1.1. Test and Acceptance/Installation Test Plan. Contractor shall provide a test plan to 90 CS/PM as to how the system shall be pre-tested, in-progress-tested, and post-tested to demonstrate to the Government that the system is fully operational and meets or exceeds the specified requirements and that the system is fully ready to be placed into service. The Contractor shall test the system to demonstrate to the Government quality assurance evaluation of the system. These tests shall be accomplished prior to the system being placed into service.

1.2.1.2. Contractor shall conduct on-site testing IAW original equipment manufacturer (OEM) installation manuals, practices, and the appropriate vendor’s test procedures. Contractor shall furnish all test equipment and personnel required to conduct all required testing. During any testing, the Government reserves the right to perform any of the contractor performed inspections and tests to assure solutions conform to prescribed requirements. The Contractor shall provide on-site support during the acceptance testing. The Contractor shall participate with the Government in testing the complete communications system. Contractor should have the ability to support all software revisions and hardware on equipment associated with equipment listed in Appendix C. When any system, subsystem, component or requirement test fails to meet the requirements of the test, Government acceptance and payment will be withheld until such time as the cause of the failure is corrected to the Government’s satisfaction. After appropriate corrective action has been taken, all tests including those previously completed, related to the failed test and the corrective action shall be repeated and successfully completed prior to Government acceptance.

1.2.2. Drawings.

1.2.2.1. As Build Drawings. Contractor shall submit red line drawings showing the “As-Built” configuration in a format specified by 90 CS/PM. 90 CS/PM will provide baseline drawings, no later than ten (10) days prior to start, date depicting current cable, communications containers, and conduit routing. Contractor shall provide As-Built Rack Elevation, Inside Cable Plant, and Outside Cable Plant drawings and distribute within ten (10) calendar days of project completion to 90 CS/PM.

1.2.3. Acceptance/Installation Test Report. Contractor shall provide an installation test report (in a Microsoft Office application) of the results of the testing accomplished under the installation test plan.

Contractor shall deliver all test reports to 90 CS/PM within ten (10) calendar days of completion of each test.

2.1. General Services

2.1.1. Service Outages. Contractor shall coordinate planned outages with 90 CS/PM at least ten (10) calendar days in advance of the outage if the implementation necessitates disruption of service, (e.g., communications, electrical, or other utilities). The Contractor shall be responsible for preventing any unscheduled outages (i.e. communications, electrical, or other utilities).

2.1.2. Identification/Marking. Contractor shall clearly mark all Contractor-Furnished Property and Equipment (CFP/CFE) with their company's name. The Contractor shall place an easily read, very visible, sign (minimum 8.5" x 11") on large containers, construction equipment, or un-manned rental vehicles while on the Government installation indicating the company name and both the Contractor and Site POC's names and local telephone numbers.

2.1.3. Schedule of Work. Contractor shall propose a schedule of work within seven (7) calendar days of notice of award to 90 CS/PM. 90 CS/PM will review the proposed schedule of work and will coordinate with the contractor if the proposed schedule is not feasible. The approved schedule of work will be determined within 14 calendar days of contract award.

2.1.4. Site Coordination. Contractor shall coordinate with 90 CS/PM to arrange an in-brief with other base personnel as appropriate (e.g., Base Civil Engineering [BCE], Security, Safety) prior to beginning implementation. During the in-brief, the contractor shall familiarize the Government with the contractor’s purpose and coordinate the proposed agenda.

2. Services Summary.

The contractor service delivery requirements are summarized into performance objectives that relate directly to standards of performance required to meet mission essential needs. For the Performance Objective to be met, service delivery must be in substantial compliance with applicable performance standards. The Performance Threshold describes the minimum overall levels of service delivery required for acceptable quality control. Failure to meet these Performance Thresholds means that contractor Quality Control is unacceptable. The following is a list of the key performance objectives that shall be verified as contractually compliant by Government personnel; however, inspection of any contract requirement is authorized.

Performance Objective PWS Para. Performance Threshold Method of

Surveillance

System is fully operational 1.2.1.1 System is fully ready to be placed into service

Demonstration/Test reports

Contractor has the ability to support all software revisions and hardware on equipment associated with equipment listed in Appendix C

1.2.1.2 100% coverage Demonstration

Contractor performed inspections and tests to assure solutions conform to prescribed requirements

1.2.1.2. Solutions conform to prescribed

requirement Test Reports

3. Government Furnished Property and/or Services

3.1. Government Furnished Property.

3.1.1. None

3.2. Government Furnished Services.

3.2.1. Utilities. The Government will furnish the electricity, water, and sewage services (as necessary) for the accomplishment of service IAW this PWS.

3.3. Government Property Incidental to the Place of Performance.

3.3.1. None

4. General Information.

4.1. Quality Control.

The contractor is required to control the quality of service delivery and offer to the Government for acceptance only services which conform to contract requirements. The overall control of quality must meet the specified performance thresholds for each requirement in the Services Summary.

4.2 Quality Assurance

The Government shall evaluate the contractor’s performance by monitoring the contractor’s performance to ensure services are received. The Government shall evaluate the contractor’s performance through on-site inspections, random spot checks, system acceptance tests, and receipt of customer complaints. The Government shall investigate complaints received from customers. The Government shall make final determination of the validity of customer complaint(s) in cases of disagreement with customer(s). Remedies for non-conforming services shall be resolved IAW the applicable Inspection/Acceptance clause attached within the contract.

4.2.1 The Contractor shall provide Quality Assurance Support for the entire life of the project. The Contractor’s Quality Assurance Evaluator (QAE) shall assist the Government representative in performing random spot checks and system acceptance tests. The Government shall inspect each task as completed.

Contractor shall be responsible for identifying system and outside plant deficiencies and/or discrepancies throughout the life of the project. A weekly status report (soft copy) shall be submitted to 90 CS/PM indicating progress/status and listing any deficiencies/discrepancies found and actions to correct them.

Government personnel reserve the right to perform inspections of the Contractor’s work during any and all phases of the installation.

4.2.2 The services to be performed by the contractor during the period of this contract shall (at all times and places) be subject to review by the Contracting Officer (CO) and/or authorized representative(s).

4.3. Security Requirements. The Government shall provide the contractor with access to buildings necessary to perform work under this PWS. The contractor shall be subject to all Department of Defense rules and regulations while working on this military installation. The contractor shall provide all necessary personnel information for base access to 90 CS/PM at least 14 calendar days prior to beginning work.

Stated work and associated products shall be performed at CLASSIFIED level, which requires some work to take place in secure areas where contractor employees must be escorted at all times with 90 CS/PM coordination. Access to secure areas must be coordinated with 90 CS/PM at least ten (10) working days ahead of time. It is the Government’s responsibility to provide escorts.

4.3.2. Anti-Terrorism. If the Contractor (contract employees/subcontractors) identify any suspicious activity, they shall immediately contact the Base Defense Operations Center (BDOC) at 307-773-3501 (on-installation)/Missile Security Control (MSC) at 307-773-2701 (off-installation) and notify the CO and 90 CS/PM that they contacted the BDOC and/or MSC.

4.3.2. Physical Security. The Contractor shall be responsible for all contractor property on Government property. At the close of each work period, Government facilities, Contractor property, and Contractor materials shall be secured. The Government shall not be held responsible for any loss experience by the contractor resulting from theft or vandalism.

4.4 Operational Security (OPSEC).

The contractor shall adhere to the following minimum requirements in support of this requirement:

4.4.1 Contractor personnel shall not discuss government operations in public or over unprotected or unencrypted communications. Official Business, controlled unclassified information (CUI) may only be transmitted as directed in the PWS.

4.4.2 The Contractor shall not post to company websites, publications, newsletters or other media any images, data or information that reveal sensitive government operations, personnel, equipment, and/or classified or controlled unclassified information. When in doubt, company press releases related to this contract should be coordinated through the Project Manager or Contracting Officer, as applicable.

4.4.3 Because observation of events, operations, physical changes, etc. may reveal National Security information, specific restrictions are needed to preclude unintentional release of this information to unauthorized parties. (Unauthorized disclosure and transfer of National Security Information is punishable under 18 USC § 793.) Therefore, contractor personnel shall not disclose to unauthorized third parties, post to unofficial sites (including Social Networking sites) any images, data or information, or observed events that reveal sensitive government operations, personnel, equipment, including, but not limited to:

4.4.3.1 Tactics, techniques and procedures, production or work schedules, any visible or concealed modifications, upgrades, additions to vessels, aircraft, or weapons or equipment; increases, change, or decreases in work/deployment frequency or government personnel, vehicle, vessel or aircraft movements; specialized equipment orders, deliveries, shipments, etc., Unauthorized disclosures and attempts to solicit this type of information by unauthorized third parties or others not affiliated with this contract shall be reported immediately to the 90 CS/PM and/or CO, as applicable.

4.4.3.2 Government issued badges, identification shall be removed and/or concealed from plain sight when off base and shall not be left in vehicles or unprotected. Badges and passes may not be duplicated, copied or loaned to others. Lost or stolen identification badges, vehicle passes etc. shall be immediately reported to the Project Manager, Contracting Officer, and/or installation Security Office.

4.5. Location/Hours of Operation.

4.5.1. Location. Place of performance is at F. E. Warren AFB WY. Telework shall not be permitted for this contract.

4.5.2. Normal Hours of Operation. The contractor shall perform the services required under this contract during the normal operating hours of the site. The average workweek consists of 7:00 AM and 4:00 PM (MDT), Monday through Friday, excluding holidays and base closures. Any site work requested by the contractor to be performed outside of normal duty hours shall be coordinated with 90 CS/PM and Contracting Officer (CO) at least seven (7) working days in advance.

4.5.3. Recognized Holidays. The contractor is not required to provide service on the following days:

New Year's Day (January 1).

Birthday of Martin Luther King, Jr. (Third Monday in January).

Washington's Birthday (Third Monday in February).

Memorial Day (Last Monday in May).

Juneteenth National Independence Day (June 19).

Independence Day (July 4).

Labor Day (First Monday in September).

Columbus Day (Second Monday in October).

Veterans Day (November 11).

Thanksgiving Day (Fourth Thursday in November).

Christmas Day (December 25).

If the holiday falls on Saturday, it is observed on Friday. If the holiday falls on a Sunday, it is observed on Monday.

4.6. Conservation of Utilities.

The contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions which prevent the waste of utilities which include the following:

4.6.1. Lights shall be used only in areas where and when work is actually being performed.

4.6.2. Mechanical equipment controls for heating, ventilation, and air conditioning systems shall not be adjusted by the contractor or by contractor employees unless authorized.

4.6.3. Water faucets or valves shall be turned off after the required use has been accomplished.

4.6.4. Government telephones shall be used only for official Government business.

4.7. Environmental Controls.

4.7.1. Compliance with Laws and Regulations. The contractor shall be knowledgeable of and comply with all applicable Interstate, Federal, State, and Local laws, regulations, and requirements regarding environmental protection. In the event environmental laws/regulations change during the term of this contract, the contractor is required to comply as such laws come into effect. If there is an increase or decrease in cost as a result of the change, the contractor shall inform the CO pursuant to notice requirements and negotiate a modification to the contract.

4.7.2. Notification of Environmental Spills. If the contractor spills or releases any substance contained in 40 CFR 302 into the environment, the contractor or its agent shall immediately report the incident to the F.E. Warren AFB Fire Dept at 911 (landline) or 307-773-2931 (cell phone). The liability for the spill or release of such substances rests solely with the contractor and its agent.

4.7.3. Hazardous Material (HM). In the event that hazardous materials shall be used in the execution of this contract, the contractor shall comply with all federal, state and local regulations concerning the use, storage, and reporting of HM in accordance with AFMAN 32-7002, Environmental Compliance and Pollution Prevention. The contractor shall be required to obtain authorization per the Installation Hazardous Materials Management Program before ordering or purchasing any hazardous product and may not bring a HM onto F. E. Warren AFB property, nor use a HM, until the contractor receives all required authorizations. This authorization process may take up to three weeks.

4.7.4. Green Procurement Program (GPP). In performance of this contract, contractors shall use Environmental Protection Agency (EPA) designated recycled content products, Information Technology (IT) Energy Star products/appliances, Federal Energy Management Program (FEMP) Designated Energy Efficient Low Stand By Power products/appliances, U.S. Department of Agriculture (USDA) Bio based/Bio preferred products, Environmentally preferable products, Electronic Product Environmental Assessment Tool (EPEAT) registered products, Water Sense or other water efficient products, non- or Low Ozone depleting substances under the Significant New Alternatives Policy (SNAP), non or Low toxic or hazardous constituents (e.g. non-VOC paint) and any other environmentally sustainable product/method, to the greatest extent possible.

4.7.5. Asbestos. Due to the age of the building, the contractor must test for asbestos and lead prior to drilling into real property. The government shall not provide an asbestos report and it is incumbent upon the contractor to conduct the testing and abatement if required for installation. If the contractor detects asbestos or lead, the contractor must properly abate and dispose of the asbestos/lead (released during any drilling) IAW applicable laws and regulations. When testing, abating, or disposing, the contractor must take the necessary precautions to protect their employees, the public, and building occupants. If desired by the contractor, the contractor can hire a sub-contractor to conduct the asbestos/lead testing and abatement; however, ensuring proper qualifications shall be the responsibility of the contractor.

4.8. Safety Requirements.

4.8.1. In performing work under this contract, the contractor shall:

4.8.1.1. Conform to the safety requirements contained in the contract for all activities related to the accomplishment of the work.

4.8.1.2. Record and report promptly (within one hour), to 90 CS/PM or CO, all available facts relating to each instance of damage to Government property or injury to either contractor or Government personnel.

4.8.1.3. Accident/Incident Reporting and Investigation. Contractor shall record and report all available facts relating to each instance of injury to either contractor or Government personnel to 90 CS/PM and the Base Safety Office (BSO). Contractor shall secure the scene of any accident and wreckage until released by the accident investigative authority through 90 CS/PM. If the Government elects to conduct an investigation of the incident, the contractor shall cooperate fully and assist the Government personnel until the investigation is completed.

4.8.1.4. Work area(s) shall follow OSHA CFR 29 part 1910-268 standards for safety if not covered by an applicable Air Force Standard. At day’s end, the Contractor shall remove all debris and surplus materials from the workplace. Safety barriers shall be in place to protect unfinished work site at the end of the day.

Equipment and materials required to complete the work effort may remain on site as long as they are organized and stored in a manner that does not cause a safety hazard. The contractor shall return all Government furnished lay-down and storage areas to their original condition upon completion of the project.

4.9. Contractor Personnel.

4.9.1. Personnel Information. The Contractor shall submit a written request on company letterhead to 90 CS/PM listing the following: contract number, location of work site, start and stop dates, and names of contractor personnel needing access to the base no later than 14 calendar days before beginning work.

When reporting to the registration office, the authorized Contractor personnel must provide a valid driver’s license for each individual and valid vehicle insurance certificate or rental agreement for each vehicle, to obtain access to the base.

4.9.2. Contract Manager. Contractor shall provide a Project Manager (PM) and alternate(s) responsible for contract performance and continuity ten (10) calendar days prior to project start to 90 CS/PM. The Contractor shall identify the Project Manager’s or alternate's range of authority to act for the contractor relating to daily contract operation.

4.9.2.1. The contract manager shall have full authority to act for the contractor on all contract matters relating to daily operations of this contract.

4.9.2.2. The contract manager shall be available within 24 hours of a request by the Government to meet to discuss problems.

4.9.2.3. The contract manager shall be able to read, write, speak, and understand English and shall be on site to coordinate permits, clearances, and receive shipments/material related to the contract.

4.9.3. Site Point of Contact (POC). The Contractor shall designate and provide to 90 CS/PM the Contractor's on-site team leader and alternate(s) as the Site POC for individual projects first day of project start. The Site POC or alternate(s) shall be on site during duty hours until project completion and shall oversee all facets of the installation tasks. The Site POC shall be the interface for all work site communications with the Government, including quality, safety, and discrepancy matters.

4.9.3.1. The site POC shall be able to read, write, speak, and understand English and shall be on site to coordinate permits, clearances, and receive shipments/material related to the contract.

4.9.4 Contractor Employees: The contractor shall not employ persons for work on this contract if such employee is a potential threat to the health, safety, security, general wellbeing or operational mission of the installation and its population.

4.9.4.1 The Contractor shall utilize employees who have adequate training, skills, and knowledge to perform the requirements in this PWS.

4.9.4.2 Contractor personnel shall present a neat appearance and be easily recognized as contractor employees. This may be accomplished by wearing distinctive clothing bearing the name of the company or by wearing appropriate badges, which contain the company name and employee name in English. Contractor personnel who interact with Government personnel shall be able to communicate effectively in English.

4.9.4.3 The consumption of alcoholic beverages by Contractor personnel while on duty is strictly forbidden. The use of illegal drugs by Contractor Personnel is strictly forbidden. The Contractor shall immediately remove any personnel who is under the influence of alcohol or drugs.

4.10 Records. The contractor shall be responsible for creating, maintaining, and disposing of only those government required records that are specifically cited in this PWS. If requested by 90 CS/PM or CO, the contractor shall provide the original record, or a reproducible copy of any such record within five (5) working days of receipt of the request.

4.10.1 Manuals and Practices. The Contractor shall provide the latest version of operation, installation, and maintenance manuals and practices/users guide for each system installed as provided by the original manufacturer with all new equipment to 90 CS/PM ten (10) days prior to acceptance.

4.11 Warranty.

Contractor shall provide any Original Equipment Manufacturer (OEM) pass through warranty not less than one (1) year and/or standard commercial warranties (whichever is longer) on all products/equipment being purchased at no additional cost. The warranty period shall start from the date of system and/or project acceptance. The Contractor shall provide written procedures and required information for warranty services ten (10) days prior to site acceptance.

5. Appendices

5.1. Appendix A - Regulations

The following documents are referenced within this document or are hereby recognized as a standard of good practice to be followed during the performance of all work.

DAFMAN 91-203 – Air Force Consolidated Occupational Safety Instructions OSHA CFR 29 Part 1910 268 – Telecommunications Occupational Safety and Health Standards OSHA 1941-146 and 1941-146 (a) TIA-606 Administration Standard for Telecommunications Infrastructure TIA-607 Generic Telecommunications Bonding and Grounding (Earthing) For Customer Premises Continuity and Construction Manual (TE&CM) 451.2 Unified Facilities Guide Specifications 01 35 26 90 CS TIC – Telecommunications Installation Criteria for Facility Design & Renovation Mil-HDBK-419A, Volumes 1 and II Grounding, Bonding, and Shielding for Electronic Equipment and Facilities DISN Implementation Standards, Ch. 2.7.20 to 2.7.26 EIA/ECA-310 Cabinets, Racks, Panels, and Associated Equipment J-STD-607-A-2002 Commercial Building Grounding (Earthing) And Bonding Requirements for Telecommunications NFPA 70 NEC National Fire Protection Association AFI 10-701 Operations Security

5.2. Appendix B – Deliverables

Deliverables Ref Due Gov POC Test Plan 1.2.1.1 prior to system being placed into service 90 CS/PM As Built Drawings (only if needed) 1.2.2.1 10 calendar days prior to start 90 CS/PM Installation Test Report 1.2.3 10 calendar days of completion of each test 90 CS/PM Planned Service Outages 2.1.2 10 calendar days in advance of outage 90 CS/PM Schedule of work 2.1.4 7 calendar days within notice of award 90 CS/PM Weekly Status report (only if needed) 4.2.1 Weekly during life of project 90 CS/PM Access to Secure Areas 4.3 10 working days ahead of time 90 CS/PM In-Brief 4.3.1.4 Prior to beginning service 90 CS/PM Suspicious Activity 4.3.2 Immediately BDOC & MSC Attempts to Solicit 4.4.3.1 Immediately 90 CS/PM & CO Request to work outside normal hours 4.5.2 7 working days in advance 90 CS/PM & CO Notification of Spills 4.7.2 Immediately Fire Dept Damage to Property 4.8.1.2 Within one hour 90 CS & CO

Accident/Incident Report 4.8.1.3 Immediately

90 CS/PM &

BSO

Personnel Information 4.9.1 14 calendar days prior to beginning work 90 CS/PM Project Manager 4.9.2 10 calendar days prior to start 90 CS/PM Site POC 4.9.3 First day of project 90 CS/PM Records 4.10 5 working days of request 90 CS/PM or CO Manuals/Practices 4.10.1 10 days prior to site acceptance 90 CS/PM Warranty Procedures 4.11 10 days prior to site acceptance 90 CS/PM

5.3. Appendix C – Equipment List (all are CISCO Systems ((CISCOPRO))

Description Manufacturer Part Number Qty Medium Secure Network Server for ISE Applications SNS-3755-K9 2

600GB 12G SAS 10K RPM SFF HDD SNS-HD600G10K12NM6 8

1050W power supply SNS-PSU1-1050W 4 Intel 4316 2.3GHz/150W 20C/30MB DDR4 2667MHz SNS-CPU-I4316 2 16GB RDIMM SRx4 3200 (8Gb) SNS-MR-X16G1RW 12 TPM 2.0, TCG, FIPS140-2, CC EAL4+ Certified, for M6 SNS-TPM-002C 2 Cisco ISE Software Load on SNS-36x5-K9 appliance SW-37X5-ISE-K9 2 Cisco 12G SAS RAID Controller w/4GB FBWC (16 Drv) w/1U Brkt SNS-RAID-220M6 2 Cabinet Jumper Power Cord, 250 VAC 10A, C14-C13 Connectors CAB-C13-CBN 4 Intel X710 quad-port 10G SFP+ NIC SNS-PCIE-IQ10GF 2 Cisco Identity Service Engine Subscription ISE-SEC-SUB 1 Cisco Identity Service Engine Premier Subscription - License ISE-P-LIC 200 Basic Support for Identity Service Engine Subscription - Each SVS-ISE-SUP-B 1 Cisco ISE Device Admin Node License L-ISE-TACACS-ND= 2