Attachment A.pdf
PDF 92 KB Posted
- Attached to
- GISD Erate Cybersecurity Pilot RFP
- Solicitation number
- RFP-GIS-250000002883-2
- Issued by
- Genesee County, Michigan
About this file
This document is a Project Requirements attachment for the Genesee Intermediate School District participating in the E-Rate Cybersecurity Pilot Program. The district is seeking three-year pricing for end user device patch management software and network access control solutions, with vendors required to have an E-Rate SPIN to bid. The current technology environment includes approximately 2,100 Windows devices, 3,000 ChromeOS devices, and 150 MacOS devices, serving a student population of 3,500 and staff of 1,800 using Microsoft 365 as their email provider.
The project has two primary technology requirements: patch management and network access control. Patch management solutions must support Windows and Mac devices, update software from vendors like Adobe, Zoom, Chrome, and Firefox, provide centralized management, enable scheduled and automatic patch rollouts, and include comprehensive reporting. Network access control requirements include compatibility with Cisco and Ruckus network switches and wireless technology, user authentication through Microsoft 365/Active Directory, identity-based segmentation, granular access controls, dynamic policy management, and end-to-end traffic encryption. The district will consider both on-premise and cloud-based options and requests three-year pricing with the flexibility for vendors to bid on individual sections or the entire project.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Attachment A
Project Requirements
The district is participating in the Erate Cybersecurity Pilot Program. The district is looking for three-year pricing on end user device patch management software and network access control solutions. Vendors must have an E-Rate SPIN to bid on this project. Vendors can bid on any or all sections listed below.
Any questions can be submitted in writing to Scott Hartman (shartman@geneseeisd.org).
1. Current Environment
a. Staff primarily use Windows devices. The district has approximately 2,100
Windows devices.
b. Students primarily use Chrome devices. The district has approximately 3,000 chromeOS devices.
c. There are approximately 150 MacOS devices.
d. Windows devices are enrolled in Microsoft Configuration Manager (SCCM). The district also utilizes WSUS and Intune.
e. Student Count – 3,500
f. Staff Count 1,800
g. Email Provider – Microsoft 365
2. Patch Management Requirements
a. Must support Windows devices and Mac devices.
b. Must be able to update software from the following vendors:
i. Adobe
ii. Zoom
iii. Chrome
iv. Firefox
c. Must have centralized management for all devices.
i. Prefer ability to provide different levels of technician access for different device groups.
d. Must have the ability to schedule patches and to also automatically roll out patches for specific software.
e. The solution must include reporting.
i. Successful deployments
ii. Patch status
iii. Any device vulnerabilities
f. Must have the ability to granularly target devices or device groups.
g. Must integrate with SCCM and prefer the ability to also integrate with Intune.
h. We will consider both on-premise and cloud based options.
i. Please provide 3-year costs.
j. Please provide any additional services offered.
k. Optional Patch Management Items mailto:shartman@geneseeisd.org
i. Providing Microsoft Windows and Microsoft Office updates are optional.
These are currently handled through on-premise SCCM/WSUS servers.
ii. Prefer the ability to push out individual files, applications, and application settings to devices as well.
3. Network Access Control Requirements
a. Must have a single dashboard for configuration and maintenance.
b. Must work with Cisco and Ruckus network switches.
c. Must work with Cisco and Ruckus wireless technology.
d. Must allow end users to authenticate via a portal or certificate.
i. Must authenticate using Microsoft 365 (M365)/Active Directory for district employees.
ii. Guests can authenticate with an email address.
e. Must provide identity-based segmentation with access tied to user and device identity.
f. Must be able to restrict access to specific days and/or duration.
g. Prefer ability to monitor device health, including Operating System, anti-virus/anti-malware status, and other compliance checks.
h. Must allow granular access by user and/or device.
i. Must allow dynamic policies based on M365/AD groups.
j. All traffic must be encrypted end-to-end.
File details come from the government source that posted it. Updated .