Attachment 1 - Statement of Objectives.pdf

STATEMENT OF OBJECTIVES

18 AUGUST 2024

TRUSTED THIN CLIENT® SYSTEM UPGRADE

SHAW AIR FORCE BASE

SOUTH CAROLINA

Statement of Objective Trusted Thin Client

A. Purpose Statement of Objective (SOO) defines the scope of work to be performed in support of a Trusted Thin Client® (TTC) implementation for the United States Air Forces Central (AFCENT).

B. Background AFCENT currently maintains a production TTC® multilevel access solution encompassing eighteen (18) TTC® Servers at two

(2) locations to support access to Secret and Below Interoperability (SABI) networks for production enterprise users. AFCENT is seeking to upgrade the existing enterprise system to TTC® 3.x. All upgrades and work must remain compatible with the current Forcepoint/Everfox TTC® software that is in place.

1. Technical Summary:

Vendor will provide installation, training, and assessment and authorization (A&A) services for eighteen (18) TTC® servers across two (2) locations in Shaw AFB, SC and Al Udeid Air Base, Qatar.

2. Hardware/Software Summary:

There are eighteen (18) Distribution Console (DC) servers to be upgraded in place with this effort. No new server hardware is expected to be required to operate TTC® version 3.x.

The customer implementation may need to upgrade or replace a portion of HW thin clients to ensure compatibility with TTC® version 3.x.

C. Scope of Work

1. Pre-Onsite Engineering Services:

Perform system architecture/design and technical risk mitigation for TTC® upgrade to 3.x

Develop the appropriate configuration for the deployment for version 3.x based off requirements and analysis of version 2.x configuration

Update System Design Document (SDD) to include new TTC® design and configuration information

2. Pre-Onsite A&A Services

Support A&A Customer discussions on coordination, schedule, and Body of Evidence (BoE) expectations.

Provide input to a Cross Domain Services Element (CDSE) Questionnaire, Cross Domain Enterprise Services (CDES)

Questionnaire, Cross Domain Validation Approval Request (CDVAR) and a Cross Domain Appendix (CDA) for

TTC®.

Update/modify Site-Based Security Assessment (SBSA) tests for TTC®.

Statement of Objective Trusted Thin Client

3. Onsite Implementation Services – at Shaw AFB, SC

Deployment of the TTC solution

Update and configure nine (9) TTC® Distribution Consoles (DCs) Integrate the TTC® solution with existing customer provided enterprise services that may include

NTP, SSH, SMTP

Integrate the TTC® solution with network infrastructure Integrate the TTC® cluster with VDI system on each network enclave

Support the deployment of five (5) TTC® endpoints for functional testing purposes

Configure TTC® to transfer log and audit files to external log servers

Perform functional end-to-end testing

Provide TTC® over-the-shoulder system administrator training

Onsite Implementation Services – at Al Udeid Air Base, Qatar.

4. Onsite A&A Test Services – at Shaw AFB, SC

Assist site in performing TTC® SBSA dry-runs and conducting TTC® SBSA testing

Assist site in creating TTC® SBSA Report and Plan of Action and Milestones (POA&M) findings, if necessary

This event is to support SBSA on-site testing for Al Udeid Air Base, Qatar DCs.

5. TTC 3.x Training Services

Provide TTC® Privileged User training session for up to five (5) planned TTC® Administrators