Attachment A.pdf
PDF 92 KB Posted
- Attached to
- GISD Erate Cybersecurity Pilot RFP
- Solicitation number
- RFP-GIS-250000002883-3
- Issued by
- Genesee County, Michigan
About this file
This document is a Project Requirements attachment for the Genesee Intermediate School District participating in the Erate Cybersecurity Pilot Program. The district is seeking a three-year contract for end user device patch management software and network access control solutions, with vendors required to have an E-Rate SPIN to bid. The project encompasses approximately 2,100 Windows devices, 3,000 ChromeOS devices, and 150 MacOS devices, serving a total student population of 3,500 and staff count of 1,800 using Microsoft 365 as their email provider.
The requirements specify detailed technical needs for patch management and network access control, including centralized device management, software update capabilities for vendors like Adobe and Zoom, comprehensive reporting features, integration with existing systems like Microsoft Configuration Manager (SCCM) and Intune, and network authentication options. The solution must support granular device targeting, allow different technician access levels, provide identity-based segmentation, work with Cisco and Ruckus network infrastructure, and enable authentication through Microsoft 365/Active Directory. Vendors are asked to provide three-year pricing and optional additional services, with the district open to both on-premise and cloud-based solutions.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Attachment A
Project Requirements
The district is participating in the Erate Cybersecurity Pilot Program. The district is looking for three-year pricing on end user device patch management software and network access control solutions. Vendors must have an E-Rate SPIN to bid on this project. Vendors can bid on any or all sections listed below.
Any questions can be submitted in writing to Scott Hartman (shartman@geneseeisd.org).
1. Current Environment
a. Staff primarily use Windows devices. The district has approximately 2,100
Windows devices.
b. Students primarily use Chrome devices. The district has approximately 3,000 chromeOS devices.
c. There are approximately 150 MacOS devices.
d. Windows devices are enrolled in Microsoft Configuration Manager (SCCM). The district also utilizes WSUS and Intune.
e. Student Count – 3,500
f. Staff Count 1,800
g. Email Provider – Microsoft 365
2. Patch Management Requirements
a. Must support Windows devices and Mac devices.
b. Must be able to update software from the following vendors:
i. Adobe
ii. Zoom
iii. Chrome
iv. Firefox
c. Must have centralized management for all devices.
i. Prefer ability to provide different levels of technician access for different device groups.
d. Must have the ability to schedule patches and to also automatically roll out patches for specific software.
e. The solution must include reporting.
i. Successful deployments
ii. Patch status
iii. Any device vulnerabilities
f. Must have the ability to granularly target devices or device groups.
g. Must integrate with SCCM and prefer the ability to also integrate with Intune.
h. We will consider both on-premise and cloud based options.
i. Please provide 3-year costs.
j. Please provide any additional services offered.
k. Optional Patch Management Items mailto:shartman@geneseeisd.org
i. Providing Microsoft Windows and Microsoft Office updates are optional.
These are currently handled through on-premise SCCM/WSUS servers.
ii. Prefer the ability to push out individual files, applications, and application settings to devices as well.
3. Network Access Control Requirements
a. Must have a single dashboard for configuration and maintenance.
b. Must work with Cisco and Ruckus network switches.
c. Must work with Cisco and Ruckus wireless technology.
d. Must allow end users to authenticate via a portal or certificate.
i. Must authenticate using Microsoft 365 (M365)/Active Directory for district employees.
ii. Guests can authenticate with an email address.
e. Must provide identity-based segmentation with access tied to user and device identity.
f. Must be able to restrict access to specific days and/or duration.
g. Prefer ability to monitor device health, including Operating System, anti-virus/anti-malware status, and other compliance checks.
h. Must allow granular access by user and/or device.
i. Must allow dynamic policies based on M365/AD groups.
j. All traffic must be encrypted end-to-end.
File details come from the government source that posted it. Updated .