Attachment 2_SOW_Cisco Call Manager.pdf

STATEMENT OF WORK

Dated: 12 June 24

Secure VoIP Call Manager – Bldg 4307

28 Communications Squadron (28 CS) Ellsworth AFB, South Dakota

1. Description of Work. The contractor shall provide all necessary labor, personnel, supervision, management, tools, equipment, transportation, materials and any other items necessary to install a new Voice over Internet Protocol (VoIP) Call Manager solution in building 4307 at Ellsworth AFB, South Dakota in accordance with this statement of work, equipment must function as indicated in the attached salient characteristics document to be provided as well as any attached appendices, manufacturer standards, applicable US laws, commercial standards and business practices. Security doctrines for this statement of work includes, but are not limited to: International Standards Organization (ISO) Document: 33.040.35: Telephone networks, Joint Interoperability Test Center Approved Product List (JITC APL) 2020, Defense Information Systems Agency (DISA) Defense Switched Network (DSN) Operational Procedures and Standards, Applicable Air Force Technical Orders including installation grounding/ electrostatic discharge (ESD), and Current DoD-DISA Security Technical Implementation Guide (STIG) and DoD-DISA Military Unique Deployment Guide (MUDG). Copies of all guidance will be provided upon electronic written request. This solution must support VoIP Sectra vIPer secure phone endpoints /utilizing the SCCP and SIP Protocol Standards and maintain full redundancy while connecting to Existing Base Infrastructure through up to 4 Primary Rate Interface (PRI) circuits. All equipment must be compliant with the Trade Agreements Act (TAA).

1.1. Installation. This requirement is for a call manager to support multiple facilities that use the Sectra vIPer secure telephones. The Call Manager will be connected to the base Private Branch Exchange (PBX) telephone switch. Call manager must support the GD US National Sectera vIPer Universal Secure Phone, Product # VIPF1000XAPTMDM, with an initial connection of 39 vIPer secure phones with expansion to 200 vIPer phones. All equipment shall be new, non-refurbished, made in the United States of America, no Wi-Fi or Bluetooth capability, and must utilize fiber (as required) or copper cabling for network or equipment connection purposes. If copper is utilized it is permissible to use up to a 3-meter patch cable.

Use of copper includes CAT6 shielded or unshielded. The overall vital capabilities and voice services required upon completion must include:

Licensing to cover at least 200 IP Endpoints with Voice mailboxes Integration of New TDM Voice Gateway to Existing Base PBX Phone system utilizing at least four PRI Circuits connections.

Install and Configure a minimum of three Call Manager Virtual Machines within the two physical servers for redundancy.

Contractor must provide at least two Cisco Certified Network Professional (CCNP) to complete installation and provide training.

Ensure that the Gateways and Servers are secured from cyber threats in accordance with all current Military unique Deployment Guide (MUDG) and DoD STIG criteria.

Route Plan configuration to ensure calls can be routed to/From the PBX, local/long-distance carriers, and Defense Services Network (DSN).

Contractor personnel must be familiar with, and have knowledge of Air Force Information Technology Systems, vIPer phones, and basic knowledge of controlled and secure area operating guidelines.

1.1.2 VoIP Call manager Servers with the following minimum requirements:

2.2 GHz, 10 Core, 12.75MB Cache, 24000MHZ Bus Speed

(4) 1Gb Network connections Dual 770W AC Power Supplies 64GB DDR4 2666MHz Memory JITC Approved Hypervisor with minimum 36 months support

2.4 TB of total HDD capacity

Listed on the DoDIN Approved Products List (APL) -https://aplits.disa.mil/processAPList.action Listed on the NIAP List - https://www.niap-ccevs.org/Product/PCL.cfm

1.1.3. Redundant TDM Voice gateways that must meet the following minimum requirements:

Aggregate Throughput of 500Mbps Total onboard WAN or LAN ports: 4 Minimum of 4GB DDR3 ECC DRAM between Control/services plane 8GB of Flash Memory Redundant 250-watt power supplies At Least 4 SFP Ports 1 Rack Unit (RU) or less Mean Time Between Failures (MTBF) greater than 500000 Hrs.

Support for the following Traffic Management Protocols: QoS, Class-Based

Weighted Fair Queuing (CBWFQ), Weighted Random Early Detection (WRED), Hierarchical QoS, Policy-Based Routing (PBR), Performance Routing, and NBAR.

Cryptographic Algorithm support: Encryption: DES, 3DES, AES-128 or AES- 256 (in CBC and GCM modes); Authentication: RSA (748/1024/2048 bit), ECDSA (256/384 bit); Integrity: MD5, SHA, SHA-256, SHA-384, SHA-512

Support for (4) PRI Circuits across multiple interface modules with the expansion capability to support up to (12) PRI Circuits.

Support for the following Security Technologies: Zone Based Firewall, IPSec VPN, EZVPN, DMVPN, FlexVPN

Listed on the DoDIN Approved Products List (APL) -https://aplits.disa.mil/processAPList.action

Listed on the NIAP List - https://www.niap-ccevs.org/Product/PCL.cfm

1.1.4. NIAP. All servers, networking, and other applicable equipment must be listed on the NIAP list: https://www.niap-ccevs.org/Product/PCL.cfm and the DoDIN APL:

https://aplits.disa.mil/processAPList.

1.1.5. Drawings. The Contractor shall provide shop High-Level Design (HLD) Low-Level Design (LLD) in PDF and Visio format; As-Built Documentation; and a security layover with placement of all necessary components on government provided facility blueprint at a minimum upon completion of this project.

1.5.1.1. Installation & Project Plans. Approved installation and project plans that are generated by the contractor on their IT systems must be made available to the government formats include PDF, Excel, Word and Power point. Hard copies and soft copies are property of the US Government and shall be turned over when requested by the Government or at the conclusion of the contract.

1.1.6. Operational Test. The contractor shall conduct operation test in accordance with manufacturer’s standard to meet commercial practice and to ensure the system is functional.

Upon completion of this project, provide results of Test and Acceptance from the generated Acceptance and Test Procedures (ATP) to be developed on-site between the contractor and government. A preliminary ATP checklist is available for review of what the document will look like.

1.2. Work Schedule & Location. All work is to be conducted on Ellsworth AFB; remote work is not authorized. Work shall not commence prior to 16 September 2024. Desired completion date is 22 November 2024. The contractor shall coordinate with the Government Representative (GR) for the establishment of performance schedule and submit a work schedule to GR no later than (NLT) 15 calendar days prior to commencement of work. The contractor shall not deviate from the approved schedule without obtaining prior approval from the GR. The Contractor shall notify the Contracting Officer (CO) of any delays or problems impacting task completion including nature of the delay and expected completion date.

1.2.1. Site Visit. Contractor shall conduct site survey to gather data to fulfill this SOW and provide improvement recommendations where necessary. Contractor shall provide an itemized breakdown of equipment and services. Contractor is responsible for providing a comprehensive installation plan, and schematics to the government.

1.3. Operation and Maintenance Manual: The contractor shall provide Operating and Maintenance manuals describing system components, operation, and function to the GR.

1.4. Warranty. The contractor shall provide the Government with their standard commercial 1-year warranty. The contractor shall provide the proper contact information and documentation for warranty request.

1.5. 1.5 Training. The contractor shall provide official authorized training on newly installed equipment for up to 10 Ellsworth AFB technicians. The duration of the training shall be a minimum of at least one week. Training will be a combination of over-the-shoulder and classroom training. Classroom training to be conducted in the communications facility 1007 room 7 (classroom). Training to take place after the initial installation, and before system acceptance.

2.0. Hours of Service. The contractor shall routinely work during normal duty hours 0700- 1600 of the site. However, mission requirements may necessitate work outside normal hours (nights and/or weekends). Any site work requested by the contractor to be performed outside of normal duty hours shall be coordinated with the 28 CONS and 28 CS/SCXP at least five calendar days in advance and in writing; electronic messaging is acceptable.

2.1. U.S. Recognized Holidays. The Contractor shall not perform under this contract on federal holidays or site-unique down-days unless expressly authorized by the 28CONS and coordinated with the 28 CS/SCXP.

1 January* New Year’s Days 3rd Monday in January Martin Luther King Jr.’s Birthday 3rd Monday in February President’s Day Last Monday in May Memorial Day 19 June Juneteenth Day 4th of July* Independence Day 1st Monday in September Labor Day 2nd Monday in October Columbus Day 11 November* Veterans Day 4th Thursday in November Thanksgiving Day 25 December* Christmas Day

*American holidays falling on a Saturday will be observed on the preceding Friday, and holidays falling on a Sunday will be observed on the following Monday.

* Site unique down days for the remainder of calendar year 2024 are:

30 August (AFGSC Family Day) 11 October (AFGSC Family Day) 8 November (AFGSC Family Day) 29 November (AFGSC Family Day) 26 December (AFGSC Family Day)

2.2. Temporary Work Stoppage. In the event the U.S. Government requests a temporary shutdown of the facility, the contractor will be notified in writing by the CO. Any Government caused delays as a result of a temporary shutdown that may require an adjustment to the contract will be coordinated through the CO.

3. Disposal of Materials. All debris and unserviceable materials generated under this contract such as scrap, salvage material, industrial waste, non-recyclable materials, and equipment/material not listed shall be disposed of off-base by the contractor in accordance with all applicable federal, state, and local regulations.

4. Inspection/Acceptance. Upon completion of above work, acceptance inspections shall be conducted by the contractor and the GR. If any deficiencies are found during the inspection, the contractor must correct all deficiencies to meet the needs of a functional systems to be provided to the government. All details of workmanship shall be in accordance with the highest industry standards and best practices for Call Manager installation in accordance with manufacturer’s specifications.

5. Responsibility for Damages. Any damages caused to U.S. Government property during the course of performing this contract shall be restored, replaced and/or repaired to its original condition at no additional cost to the U.S. Government.

6. Government Furnished Properties and Services. The Government will provide reasonable utilities and workspace for the contractor to perform the requested duties. The government will provide all support equipment (desks, maintenance laptops. patch cords etc.) and storage space for the Call Manager necessary for the contractor to perform all work. No covered or secure storage areas will be required or made available to the contractor.

6.1 Telephones. The Government will not provide telephone services. If available, the Contractor may use government phones in a case of emergencies or during field and site work.

No long-distance telephone calls will be authorized.

7. Restricted Area/Access Coordination. The GR is responsible for coordinating with the facility manager/user/occupant/requester to provide access, escorts, or temporary visitor access badges for contractor personnel while performing SOW duties. The 28 CS/SCXP shall be responsible for scheduling access/escorts/badges by contacting the facility manager/requester at the Entry Control Point of the restricted/controlled area.

7.1 Restricted/Controlled Areas. Contractor performance within restricted/controlled areas will be required. If contractor work is required in a restricted/controlled area the contractor will be escorted by a 28 CS member as well as a government individual authorized to escort within said areas. Ellsworth AFB security may be viewed as being one of three broad levels, the level in effect being dependent on the location or AREA of Ellsworth AFB in question.

The lowest level of security exists in “GENERAL ACCESS” areas. These areas are all of Ellsworth AFB outside of the "USAF Controlled" and "USAF Restricted" areas.

“USAF Controlled” access areas are the mid-level security areas. Presence within the CONTROLLED ACCESS AREA is by authorization; however, the movement of authorized personnel in and out of these AREAS is generally not impeded.

The highest level of security on Ellsworth AFB is that within the “USAF RESTRICTED AREAS”. These areas are subdivided to be known as Protection Level 1, 2 or 3 AREAS. Work schedule requests or changes to existing schedules for work to be performed in a “USAF RESTRICTED AREA” shall be submitted at least 7 calendar days in advance for approval and coordination of Ellsworth AFB Security Forces.

8. Installation Access. Ellsworth AFB is considered a closed base. All personnel entering must have specific permission of the installation commander for entry. This permission is granted when a Contractor employee is sponsored onto Ellsworth AFB by Active Duty military or civilian government personnel The Government Representative will obtain contractor information necessary to submit and Entry Access Letter to the Visitor Control Center (VCC).

The contractor shall be responsible to ensure that all of its employees obtain and keep on their person at all times while working on the base, the pass issued to them by the VCC. Upon completion of the work or termination of an employee, the contractor shall be responsible for turn in of all passes to the Government Representative or to the VCC of the 28 Security Forces.

NOTE: Failure to turn in passes will result in WITHHOLDING OF FINAL PAYMENT and revocation of any future badges issued by Pass and Registration Office to the employee and the contractor.

8.1 Entry Access Letter. A completed signed original EAL must be delivered to VCC no later than 5 working days prior to the desired day of entry onto Ellsworth AFB. The Visitor Control Center will issue a temporary pass to the contractor personnel listed on the EA.

Personal information provided on the EAL will be cross-referenced against state and federal criminal databases to identify those individuals possessing outstanding warrants. Those individuals with outstanding warrants will be detained at the Visitor Control Center on the desired day of entry and turned over to Box Elder Police Department.

8.2 Identification of Contractor Vehicles. Contractor vehicles must be marked on each side with company name with either permanent or semi-permanent/magnetic signage.

8.3 Other Vehicle and Licensing Requirements:

8.3.1. All Contractor employees who will be driving a vehicle on Ellsworth AFB shall have a current driver’s license with them at all times while on Ellsworth AFB.

8.3.2. All Contractor vehicles to be operated on Ellsworth AFB will have a valid state registration, vehicle inspection, and insurance. Proof of registration and vehicle insurance must be physically available at all times while the vehicle is on Ellsworth AFB.

8.3.3. Any Contractor employee who will be operating heavy equipment or specialized equipment that requires a license or certification shall be so licensed and/or certified with proof presented to the contracting officer prior to work start.

9. Security Danger Warning, Accident Prevention, Fire Prevention and Fire Protection Requirements. All Contractor operations shall be conducted and performed in accordance with the Department of Labor, OSHA requirements found in 29 CFR 1910 and 29 CFR 1926, project identified national standards, military manuals, instructions, pamphlets, standards and handbooks, and the US Army Corps of Engineers’ Safety and Health Requirements Manual 385- 1-1, dated 03 Sep 96 at https://www.publications.usace.army.mil/USACE-Publications/Engineer- Manuals/. The Contractor shall keep the work site clean and clear of any work debris, materials, supplies, tools, or equipment when work is not taking place

9.1 Welding, Cutting, and Brazing. The Contractor shall obtain required advance approval for any process that includes welding, soldering, brazing, cutting with or use of a torch, or any other operation that involves a flame or equipment that produces a high degree of heat. Approval must be requested 24 hours in advance via an AF Form 592. Assigned GR will assist in filling out and processing the AF Form 592 when/if required. Operations shall not commence until the Dyess Fire Department approves the AF Form 592 and assigns a control number. The Contractor shall put a fire watch in place and shall have appropriate fire extinguishers on-site at the location of the work. The Contractor shall coordinate work start to allow an on-site inspection by Dyess Fire Prevention personnel prior to any portion of the work that requires the AF Form 592.

9.2. Security Police and Fire Protection. The Government will provide general on-base security police and fire protection service. Security police phone extension is (605) 385-6444 for emergencies, and (605) 385-2671 for routine calls. Fire protection emergency phone is 911 (from on-base phone only), or 911 from a cell phone which is routed off base back to Ellsworth EAFB emergency services.

9.3. Hazardous Conditions. During the course of performing work under this contract, should the contractor find existing hazardous conditions that create an unsafe working environment preventing him or her from completing the outlined work, the CO shall be immediately notified.

9.4. Off Limit Signs. The contractor shall provide warning and/or ”OFF LIMITS” signs at the entrances of jobsite, and barricades around the jobsite while the equipment and/or systems are being serviced. The contractor shall control all personnel desiring access into jobsite areas when work is in progress.

10. Contractor Employees. All contract personnel working in situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor personnel shall be easily recognizable as contractor employees. This may be accomplished by wearing distinctive clothing bearing the name of the company or by wearing appropriate badges which contain the contractor’s company name and the employee’s name. Contractors and sub-contractors must be US Citizens and meet all prerequisites established by U.S. employment laws in order to access 28 CS computer/LAN/WAN network.

10.1. Contract Manager. The contractor shall provide a contract manager who shall be responsible for all requirements in this SOW. The name of this person and an alternate(s) who shall act for the contractor when the manager is absent, shall be designated in writing to the Contracting Officer (CO). The contract manager or alternate shall have full authority to act for the contractor on all matters relating to this contract. The contractor shall provide the contract manager’s names, addresses, and telephone numbers. The contractor shall maintain a current listing of employees, providing updates as changes occur. The contract manager or alternate shall be available during duty days from 0800 to 1630. The contract manager or alternate shall have a good understanding of the requirements pertaining to this contract for interpretation and implementation of directives (written and oral) issued in English by the CO or GR. The Government requires all correspondence to be in either Microsoft Excel or Microsoft Word

10.2 Removal of Contractor Employees. The contractor shall utilize only experienced, responsible and capable employees in the performance of this contract. The CO may require that the contractor remove any of his/her employees who endanger persons or property, or whose continued employment under this contract is inconsistent with the interests of the U.S.

Government.