Attachment A - Statement of Work.pdf

Solicitation 19GE5025Q0125

Call Center in Quito, Ecuador

Statement of Work

The requirement is the installation of IT infrastructure for a contact center to manage external calls nationwide. The contact center will have 16 agents and two supervisors. This contact center will be in Quito, serving 24 hours a day, 365 days a year. Its availability will be permanent throughout the country. This contact center platform will have a new generation platform adaptable over time that will be able to receive calls from users in accordance to their needs.

The Contact Center platform will have an IVR that allows the implementation of a service center with agents; calls will be received through an IVR, which handles the many options offered to the end user. Each option will have an associated set of agents attending to the user's needs.

The platform must have an online reporting system to review the operation and monitoring of agents. It is also desired to have a module for recording calls and the history of documents sent by users who the contact center attended to have a backup for future requirements.

Its main features are:

● Receive incoming calls using multi-level IVR.

● Support for different types of breaks for agents.

● Support for forms where agents can record customer responses.

● Support for uploading different databases independent of the campaigns.

The module for supervisors will allow the following:

● Know which agents are busy and which are free.

● Listen to or intervene in calls that agents are answering.

● Know how many calls are being answered and how many are not.

● Download reports and call recordings.

Agents may:

● See which phone number the system connected them to.

● Pause your connection if you don't want to receive calls for a certain amount of time.

The reports that the tool has are:

Download call recordings with search filters.

● Start and end time of agent activities.

● Agent pauses time.

● Calls made, received, and duration time.

● All reports can be exported as text files.

● Real-time monitoring of the contact center, its agents, and their calls.

COMPUTERS FOR AGENTS

Agents computers will connect to the network, enter the contact center servers, and carry out daily activities. Equipment with the following characteristics is contemplated:

COMPUTER

● Processor: INTEL CORE I7 - latest generation

● Memory: 16GB DDR4

● Hard Drive: 512GB SSD

● Operating System: Windows 11 PRO

● 23.8" screen

● Noise cancelling, operator style headsets with boom microphone

● Office 365

● 3 Years Warranty.

STRUCTURED WIRING AND CABINETS

The project is considered integrable from the part of structured cabling to provide housing for active equipment to the connectivity of users with their computing devices.

The need is for a pre-engineered, factory-configured, and factory-tested stand-alone cabinet solution that includes benefits such as:

• Space optimization

• Integrated cooling system

• Integrated backup power

• Quick implementation with 1-day go-live

• Predefined path for hot and cold air circulation

• Remote or local management through a touch screen.

• Intelligent control and monitoring with RDU-M

Additionally, network points are needed for data cabling, so end devices can access the internal network and contact center services. Below is a general scheme of structured cabling

HYPERCONVERGED SYSTEM

The contact center platform is virtual, so it must be housed in a hyper-converged architecture that provides all the characteristics so that the contact center has adequate Performance and has 24 x 7 availability every day of the year.

The hyper-converged system must have the following compute characteristics:

● A hyper-converged cluster for Data Center:

o 3 DELLEMC P670F Hyperconverged nodes, each with:

▪ 1 x Intel 4316 (Gold, 20C, 2.3GHz)

▪ 8 memories of 16 GB DIMMs

▪ 8 memories of 32 GB DIMMs

▪ Two 800GB SAS SSD drives for Cache

▪ 6 disks 4TB 7.2K RPM 3.5in Hard Drive o the cluster delivers the following capabilities:

▪ 60 Physical Cores Installed

▪ 138GHZ

▪ 1.1 TB of RAM ▪ 30 TB of Useful Storage or 2 S4128 LAN Switches o Unity XT380 130TB useful storage system o Support and Warranty for 3 years, 24x7 parts and pieces

For the cluster, the licensing is considered:

● VMware vSphere Standard for all processors

● VMware vSAN Standard for all processors

● VMware vCenter Standard

COMMUNICATIONS EQUIPMENT SECURITY AND CONNECTIVITY

Telecommunications communication equipment for perimeter security and connectivity of the business network where the agents will be operating.

For this, a high availability firewall has been contemplated to provide perimeter security, protecting the network from external services such as signature services, malware, application control, and web filtering.

Communications equipment with aggregation switches with the highest industry standards is contemplated so that users can connect at high speeds and thus be able to manage services continuously.

The proposal must be contain a 3-year manufacturer's warranty.

The proposal should include the installation, configuration, commissioning, and testing services of all the equipment mentioned in this project.

TECHNICAL SPECIFICATIONS

CONTACT CENTER PLATFORM

SPECIFICATION

• Brand: Specify

• Number of Agents: 16

• Number of Supervisors: 2

• The platform must be of the virtualized type.

• This platform must be able to create unlimited users.

• The platform must be able to have at least 3 user types: Agent, Administrator, and Reporter

• The platform must support SIP trunks to integrate it with other exchanges and telephone or PSTN providers.

• The platform must support integrations through APIs.

• The platform must support growth and be modular.

• The platform must support connections from phones or headsets.

• The platform must support the supervisor to listen to all the agents' conversations with their clients and intervene in the discussions.

• The platform must support that the supervisor can monitor the clients and with whom they talk.

The platform must deliver more than 30 reports to analyze agents' management and all the call metadata.

• The platform must support an answering machine that guides the customer through a menu of options.

• The platform must support that the agent can select from several pauses when they must stop answering calls.

• The platform must support recordings with mp3 y wav formats.

• The platform must support codecs G711a, G711u, G722, iLBC, G729A, slin.

• The platform must support the WebRTC agent console.

• The platform must allow the agent to use a softphone or virtual phone embedded in the internet browser when answering a call and can also use a softphone app for agents who wish to do so.

• The platform must support that agents authenticate based on the list of agents created by the supervisor from the contact center graphical interface.

• The platform must support allowing the agent to make outgoing calls from the graphical interface of the contact center.

The platform must allow an agent to perform the following actions:

• Agents can pause their work.

• An agent can place a call on hold.

• An agent can conference with the customer.

• An agent can pass a call to their supervisor.

• An agent can chat with the customer through a web chatbot.

• An agent can assign a status to the call with a customer.

• The platform must support that the supervisor can chat with all the agents or only a select group.

• The platform must support being backed up to protect against disasters.

• The platform must be composed of an architecture to provide high availability through its virtual machines.

The platform must have at least the following virtual servers:

• -A database server.

• -A server for the telephone dialer.

• -A server for the Web server and call recording.

The platform must be configured, commissioned, and tested for proper operation.

END USER COMPUTERS

• Number of Agents: 16

• Computer

• Must have Processor: INTEL CORE I7 - latest generation

• Must have Memory: 16GB DDR4.

• Must have Hard Disk: 512GB SSD.

• Must have Operating System: Windows 11 PRO

• Must have a 23.8" screen.

• Must have a network card.

• Noise cancelling, operator style headsets with boom microphone

• Office 365

• Must have USB ports.

• Must have HDMI ports.

• Must have audio ports.

• Must include mouse and keyboard.

• The equipment must be configured, commissioned, and tested for proper operation.

• The equipment must be supported for 3 years.

STRUCTURED CABLING AND CABINETS

• Quantity: 40

• Brand: Specify

• Must meet or exceed ANSI/TIA-568 and ISO11801 class EA edition 2.2 specifications to support 10GBASE-T.

• The cabling shall be U/UTP category 6ª type.

• Flammability classification: IEC 60332-3 (LSZH-3), IEC 60754-2, and IEC 601034-2

• The diameter of the conductors must be 23AWG.

• The cable shall have a discontinuous metallic tape shield which shall minimize the effect of alien crosstalk (PSANEXT and PSAACRF) presented in 10Gbps transmissions while retaining UTP EMI immunity, with a bandwidth of up to 650 Mhz exceeding the minimum specification for Cat6A and allowing to have a smaller cable diameter and its Performance not directly dependent on the telecommunications ground system as shielded systems.

• The maximum outer diameter of the cable should be 6.6mm nominal.

The cable jacket must have printed on it, at a minimum, the following information:

manufacturer's name, part number, cable type, number of pairs, listing type (e.g., LSZH), and sequential measurement marks for visual length verification.

• The cable must comply with the minimum operating temperature range between - 20 ºC and + 75 ºC.

• It must be suitable for PoE, PoE+, and PoE++ applications.

• The cable must be ETL certified in channel mode with tests and curves per ANSI/TIA Category 6A or ISO

11801 Class EA. ETL test reports must be attached to the bid. Certificates must not be dated before January 2019.

• A physical and/or digital memory of the certification tests, connection diagrams, and location of points in DWG or Visio format must be submitted.

• Structured cabling shall be labeled following ANSI/TIA/EIA 606A, Category 6A F/UTP. The nomenclature of the labels for each data point shall be agreed between the parties. At least 4 labels shall be made for each data point:

-Label 1: on the patch panel (1 label)

-Label 2: on both ends of the patch cord between the patch panel and the Switch (2 labels).

-Label 3: in the box (1 label).

- All badges must be printed by laser or thermal transfer printer; no inkjet, dot matrix, or hand printing will be accepted.

COPPER UTP CATEGORY 6A COPPER CABLE BETWEEN CABINETS

• Quantity: 24

• Brand: Specify

• Must meet or exceed ANSI/TIA-568 and ISO11801 class EA edition 2.2 specifications to support 10GBASE-T.

• The cabling shall be U/UTP category 6ª type.

• Flammability classification: IEC 60332-3 (LSZH-3), IEC 60754-2, and IEC 601034-2

• The diameter of the conductors must be 23AWG.

• The cable shall have a discontinuous metallic tape shield which shall minimize the effect of alien crosstalk (PSANEXT and PSAACRF) presented in 10Gbps transmissions while retaining UTP EMI immunity, with a bandwidth of up to 650 Mhz exceeding the minimum specification for Cat6A and allowing to have a smaller cable diameter and its Performance not directly dependent on the telecommunications ground system as shielded systems.

• The maximum outer diameter of the cable should be 6.6mm nominal.

• The cable jacket must be printed with, at a minimum, the following information: manufacturer's name, part number, cable type, number of pairs, listing type (e.g., LSZH), and sequential measurement marks for visual length verification.

• The cable must comply with the minimum operating temperature range between - 20 ºC and + 75 ºC.

• It must be suitable for PoE, PoE+, and PoE++ applications.

• The cable must be ETL certified in channel mode with tests and curves following ANSI/TIA Category 6A or ISO 11801 Class EA. ETL test reports must be attached to the bid. Certificates must not be dated before January 2019.

• A physical and/or digital memory of the certification tests, connection diagrams, and location of points in DWG or Visio format must be submitted.

• Structured cabling shall be labeled following ANSI/TIA/EIA 606A, Category 6A F/UTP. The nomenclature of the labels for each data point shall be agreed between the parties. At least 4 labels shall be made for each data point:

-Label 1: on the patch panel (1 label)

-Label 2: on both ends of the patch cord between the patch panel and the Switch (2 labels). - Label 3: in the box (1 label).

- All badges must be printed by laser or thermal transfer printer; no inkjet, dot matrix, or hand printing will be accepted.

PATCH PANEL

• They must have port-by-port modular outputs (mini-com) to accommodate different connectors (UTP, shielded, A/V). Patch panels using 110-type punch-down tools are not preferred.

• The patch panels must be black and flat in format.

• Patch panels shall have a faceplate mounting system with 4 jack modules on the hardware to allow front and rear access for easy installation of jacks and accessibility to installed jacks.

• It must consist of UTP hardware that can accommodate up to 24 connectors in 1RU.

Additionally, it must come with screw kits for mounting on the rack.

• The installation of the patch panels should be done in such a way as to minimize the length of the patch cords.

• A strain relief bar for rear wiring management must be additionally installed on each patch panel.

The same manufacturer must make these of the connectivity.

• All modules that do not have a jack installed shall have black RJ45 blanking caps to achieve a superior aesthetic finish of the rack, to allow future installation of new jacks, and to avoid the passage of hot air from the back of the frame to the front of the rack.

WALLPLATES

• Modular two-port wall plate to accommodate different types of connectors (UTP, shielded, fiber optic, and A/V)

Plates must be UL listed. The logo of these laboratories must be printed directly on each element.

• The material of these plates must be ABS, and their color must be international white (IW).

• Shall be available in 1, 2, 4, and 6 port configurations in presentation or single format.

• It must include the labels and their respective protections for port identification, complying with the TIA-606 standard.

• The boards must be assembled in the work areas with at least two data jacks (mini-com) and two 3meter patch cords according to TIA-569 and TIA-568.

• The boards must be made by the same manufacturer as the connectivity.

PATCH CORD UTP CATEGORY 6A

• Must have Performance that exceeds the requirements of ANSI/TIA-568 for Category 6A, ISO 11801 Class EA and IEEE 802.3ae-2006 standard channel requirements to support 10GBASE-T applications.

• They must comply with IEC 60603-7 and be UL 1863 certified.

• It must be constructed of solid U/UTP copper cable, 28AWG, and modular plugs at each end.

• The maximum diameter of the patch cord should be 4.7mm nominal, and its jacket should be blue.

• Plug contacts should have a gold plating of 50 microinch gold and be rated for 2500 mating cycles.

• Patch cords should have a boot system to control the stresses they are subjected to in the installation process and be thin for high-density applications.

• Patch cords should typically be used in lengths between 1 to 3 meters.

• They shall be factory built, pre-certified as stipulated by TIA, and come in their original packaging bag. Locally manufactured patch cords will not be accepted.

• Must be suitable for PoE, PoE+, and PoE++ type 3 and 4 applications up to 100 watts.

• Their flammability rating shall be CM or LSZH only. No CMR-rated patch cords will be allowed.

• The same manufacturer of the elements that make up the copper communications channel must make the patch cord.

RJ45 UTP CATEGORY 6A JACK

• Must be UTP type and have certified Performance that exceeds ANSI/TIA-568, ISO 11801 Class EA channel requirements to support 10GBASE-T applications.

• Comply with IEC 60603-7 and be UL 1863 and UL 2043 approved.

• Must be able to terminate four-pair U/UTP cable between 22 and 26 AWG. Must support both T568A and T568B wiring maps which must be identified in a visible location on the connector.

It should have two parts: the connector and the cable protective cap. The cable protective cap must have a system that mechanically secures the cable jacket to prevent it from coming off due to excessive tension. The connector must guarantee that the pairs are separated, so it will have a cross in the cable protective cap that allows the entry of the pairs individually.

• The connector must have the option of reinstallation (reassembly) at least 20 times without deteriorating its physical behavior.

• Must accept 8-position plug connectors up to 2500 times insertion and removal of plugs into the jack without damage to the plugs.

• Jacks using 110-type punching tools will not be allowed. The punching tool must ensure that the connectors are terminated with a smooth movement without impact on their internal elements guaranteeing high reliability and Performance.

• Must be suitable for PoE, PoE+, and PoE++ types 3 and 4 applications up to 100 watts. 3rd party compliance test certificate by Intertek must be attached to ensure compliance with IEC 60512- 99-002.

• The jack's operating temperature should be from -10°C to 65°C (-4°F to 140°F).

• The jack must be manufactured by the same manufacturer of the elements that make up the copper communications channel.

FIBER OPTICS

• Quantity: 12-wire OM4 fiber between server and communications cabinets.

• Brand: Specify

• The OM4 multimode fiber optic cabling system shall support at least 100 Gb/s transmissions on links less than 100 meters. The fiber ODF of the assembly shall ensure the network's reliability by housing, organizing, managing, and protecting the fiber optic cable. Fiber optic patch cords shall be multimode OM4 DE 50/125mm and have LC-type duplex connectors at the ends, with a typical insertion loss per standard connection of 0.1dB according to ANSI/TIA/EIA 568B.

• 100% tested and inspected for optimum Performance.

• In typical A-B configuration, shall allow polarity field in place (rear pivot latch).

• They should be 1, 2, and 3 meters long, depending on their duplex LC connectors' required length and configuration.

• Patch cords must be 2-fiber OM4 with connectors at both ends, have an outer diameter of 1.6mm, and be of the zip cord type.

FIBER OPTIC TRAY

• The trays must be made of steel, sliding, and modular, allowing trunk cables, connectors, patch cords, and adapter panels to be accommodated.

All fiber optic trays must have their respective accessories to manage both the clearance of each fiber and provide management of the bending radius of the fiber.

• The dimensions should be 1UR.

• It must have multiple cable entry options laterally and at the rear and removable access covers at the back and front.

• They must allow full connection of the fiber optic outlets, properly identify the tray, and with all the requirements to facilitate the administration and management of the network, according to ANSI/TIA606 standards.

• They must be capable of accommodating up to 4 fiber adapter panels for 6 or 12 duplex LC connectors (up to 96 strands in 1RU).

CABINET FOR COMMUNICATIONS

• Quantity: 1

• Brand: Specify

• The cabinet must be self-contained with 29U usable.

• Cabinet Size 2000x800x1200 mm

• The condensing unit must be an outdoor split type.

• It must have 2 vertical units for cable management.

• The cooling capacity should be 900W - 3500W of variable speed going directly to the IT equipment.

• Must have front and rear lighting.

• The cabinet shall include a 6KVA online double conversion UPS unit with 9.5 minutes autonomy at full load.

• Must have 2 PDUs with 12 C13 + 4 C19.

• The cabinet should have emergency fans at the lower front and one at the upper rear.

• The unit must manage UPS, the cooling system, and PDU.

• The noise level of operating components must be less than 59dB.

• The cooling unit should not be larger than 6U, and the power management unit should not be larger than 2U.

• It must have a comprehensive management tool for monitoring and managing power, temperature, environment, and security ecosystem through an interactive LCD touch screen, allowing remote management, notifications, and sending emails.

• The cabinets' grounding will be done using the grounding kit with #6AWG jumper to #6AWG green wiring according to ANSI/TIA-607-D standards.

• They shall be properly anchored to the floor utilizing a 1/2" hardware kit recommended by the manufacturer.

• The enclosure must comply with safety standards EN 60950-1:2006+A11:2009 +A1:2010+A12:2011+A2:2013 and EMC standards EN 55022:2010 EN 61000-3-11:2000.

SERVER CABINET

• Quantity: 1

• Brand: Specify

• The cabinet must be self-contained with 29U usable.

• Cabinet size 2000x600x1200 mm

• The condensing unit must be an outdoor split type.

• The cooling capacity should be 900W - 3500W of variable speed going directly to the IT equipment.

• Must have front and rear lighting.

• The cabinet shall include a 6KVA online double conversion UPS unit with 9.5 minutes autonomy at full load.

• Must have 2 PDUs with 12 C13 + 4 C19.

• The cabinet should have emergency fans at the lower front and one at the upper rear.

• The unit must manage UPS, the cooling system, and PDU.

• The noise level of operating components must be less than 59dB.

• The cooling unit should not be larger than 6U, and the power management unit should not be larger than 2U.

• It must have a comprehensive management tool for monitoring and managing power, temperature, environment, and security ecosystem through an interactive LCD touch screen, allowing remote management, notifications, and sending emails.

• The grounding of the cabinets will be done using the grounding kit with #6AWG jumper to #6AWG green wiring according to ANSI/TIA-607-D standards.

• They shall be properly anchored to the floor utilizing a 1/2" hardware kit recommended by the manufacturer.

• The enclosure must comply with safety standards EN 60950-1:2006+A11:2009 +A1:2010+A12:2011+A2:2013 and EMC standards EN 55022:2010 EN 61000-3-11:2000.

DETAIL OF TECHNICAL SPECIFICATIONS

1. HYPERCONVERGED

SYSTEM

1.1 GENERAL CHARACTERISTICS

General Descriptions:

In the technical specifications, the HYPERCONVERGENT System will refer to the following subcomponents:

• HYPERCONVERGING nodes

• Virtualization Computing

• Virtualization Storage

• Virtualization Management.

• All equipment parts of the solution must be new from the factory, not remanufactured or repaired in any of its features. Its year of manufacture must be 2023; this includes each of the components; the supplier must support with a certificate issued by the manufacturer.

• The HYPERCONVERGENT SYSTEM must be installed by the supplier's certified technical personnel following the manufacturer's best practices for all its components. It shall be installed in the Data Center of the National Police Forensic Unit.

• The support of the HYPERCONVERGENT System must be delivered in a unified way:

hardware of the nodes, computation virtualization, storage virtualization, and management systems through an integral and unified support service. Attach the certificate issued by the manufacturer.

• Hyperconverged equipment must have access to software and firmware upgrades for the duration of the technical warranty (3 years).

• The system must have a support application that automatically or similarly reports the equipment's status to the manufacturer.

• The HYPERCONVERGENT infrastructure shall include all licensing and installation of the hypervisor software required to operate the solution for the duration of the technical warranty (3 years).

• The growth of the solution can be done with nodes that are not identical to the initial nodes or in a granular way, i.e., adding memory and disk according to the availability of the initial nodes.

• The support of the HYPERCONVERGENT System must be delivered in a unified way:

hardware of the nodes, computation virtualization, storage virtualization, and management systems through an integral and unified support service. Attach the certificate issued by the manufacturer in the offer.

• The Software Manufacturer shall have a public website to check that the components of such servers are compatible to be integrated as a node of the solution.

• Hardware manufacturer's technical warranty for 3 years, 24 x 7 factory technical support, with 4 hours response time.

1.2 HYPER-CONVERGED NODES

• Number of nodes: 3

• HYPERCONVERGENT Nodes must be housed in standard server racks.

• The HYPERCONVERGENT System must have scalability of up to 64 nodes.

• The manufacturer of the HYPERCONVERGENT System Software shall be in the Leaders quadrant in the Gartner Magic Quadrant for Hyperconverged Infrastructure or Hyperconverged Infrastructure Software in at least one of the reports in the last 2 years.

• Each Node must have at least the following network ports:

• Four (4) 10GbE ports, including transceivers.

• One (1) 1GbE Ethernet port - Management

• Each Node must have at least the following computing capacity:

Processors:

• Quantity: One (1).

• Minimum 20 Cores per processor

• Minimum 2.3 GHz

• Minimum 30 MB of Cache

• Minimum 384 GB RAM per node

• Each Node must have at least the following storage capacity:

• Cache: minimum 1.6 TB SAS SSD distributed over two disks.

• Storage: 6 x 4TB 7.2K RPM

• Each Node must have two dedicated power supply units and withstand individual power supply failures; the solution should use something other than a micro-server architecture with shared power supply units or other components.

• Nodes must include at least one dedicated port for administration, including lifecycle management and control software.

• The solution will allow it to grow horizontally (Add more disks, more memory) to each Node and vertically (Add new nodes).

• Manufacturer's technical warranty for 3 years, factory technical support 24 x 7, with 4 hours response time.

• It must have at least:

• Management software.

• Monitoring software.

• Reporting software

1.3. SWITCHES FOR HYPER-CONVERGENCE

• Quantity: 2

• Brand, some as the hyper-converged system, offered.

• Size: 1 Rack Unit

• Number of Ports: At least twenty-eight (28) SFP+ and 2 QSFP28 ports.

• Redundant power supplies and fans

• Each Switch will have a minimum switching capacity of 960Gbps.

• Each Switch shall have a minimum throughput of 720Mpps.

• Each Switch shall have a minimum buffer size of 12MB.

• It must support at least the following:

• SNMPv1/2

• SSHv2

• FTP

• TFTP

• SCP

• Quality of Service L2 and L3

• At least the following number of SFP modules must be included for each Switch:

• 12 10GbE SFP+ 10GbE modules

• Manufacturer's technical warranty for 3 years, factory technical support 24 x 7, with 4 hours response time.

1.4 COMPUTER VIRTUALIZATION (Hypervisor)

• The HYPERCONVERGENT System shall include and come factory preloaded with the Hypervisor. The bidder shall include all necessary licensing for the three (3) hyper-converged nodes for a minimum of three years - including upgrades for the duration of the warranty in 24x7 mode.

• Virtualization software must include the licenses for all processors of the hyper-converged nodes offered for a minimum of three years - including upgrades for the duration of the warranty.

• The manufacturer of the HYPERCONVERGENT System Software shall be in the Leaders quadrant in the Gartner Magic Quadrant for Hyperconverged Infrastructure or Hyperconverged Infrastructure Software in at least one of the reports in the last 2 years.

• The Hypervisor must have automatic high-availability functionalities and hot migration of virtual machines between nodes.

• The solution must include a management and control tool with a Web interface and the same brand of Hypervisor; this tool must support the increase of hosts in the future.

• The HYPERCONVERGENT solution shall include a centralized administration console for managing the virtualization cluster, which allows managing the Hypervisor included with the offered solution.

• Manufacturer's technical warranty for 3 years, 24 x 7 technical support, with 4 hours response time.

1.5 STORAGE VIRTUALIZATION

• The hyper-converged system must include integrated storage virtualization software. The supplier shall detail the specifications of the embedded software.

• The manufacturer of the HYPERCONVERGENT System must provide integrated support for the storage virtualization layer.

• The storage virtualization layer must run on the same Kernel as the Hypervisor to optimize resource usage and ensure Performance.

• The storage virtualization system must provide block resources to systems outside the HYPERCONVERGENT System through standard protocols such as iSCSI.

• Storage virtualization management should be integrated with virtual server management, not a separate console.

• The storage system should manage minimum policy features such as:

• Performance

• Level of protection

• Quality of Service

These features must have a virtual disk or virtual machine granularity.

• Technical warranty, validity, and support for three (3) years in 7x24x4 mode (7 days a week, 24 hours, and 4 hours to ensure the platform's operability) according to the SLA.

1.6 STORAGE SERVICES

• The offered HYPERCONVERGENT System must support replication as a storage service.

• These storage services applications must be preloaded from the factory or installed through an integrated portal.

• The manufacturer of the HYPERCONVERGENT System must provide integrated support according to the SLA of these storage services applications for the duration of the technical warranty of the solution. The supplier in the offer must include a certificate issued by the manufacturer to verify compliance with this requirement.

• The HYPERCONVERGENT System must support the functionality of replication of virtual machines to an external system based on the same Hypervisor. The external system may be a HYPERCONVERGING System from the same manufacturer or a third party.

1.7 MANAGEMENT SYSTEM

• Virtualized computing and storage management functions should be integrated into a single console.

• An integrated GUI-type console must be provided to perform management functions. At least all the following must be provided:

• Provisioning of new nodes.

• Updating system software patches.

• Visualize resource utilization.

• Visualize the health status of the system.

• Must provide remote monitoring capability for diagnosis and repair.

• Technical warranty, validity, and support for three (3) years in 7x24x4 mode (7 days a week, 24 hours, and 4 hours to ensure the platform's operability) according to the SLA.

1.8 HYPERCONVERGED SYSTEM ADMINISTRATION

1.8.1 GENERAL REQUIREMENTS

• It must provide the functionality of preventive and automatic alarms in case of failure of system components via email.

• The HYPERCONVERGENT system must have management software that at least complies with the following functionalities:

• Automatically discover and maintain the inventory of the entire system infrastructure.

• Check the software versions installed on the system versus the software versions certified by the manufacturer.

• System HYPERCONVERGENT log.

• Infrastructure health monitoring.

1.8.2 HYPER-CONVERGED SYSTEM MANAGEMENT SOFTWARE

• The proposed solution must incorporate the management software layer of the hyper-convergence infrastructure installed on the nodes that make up the solution, maintaining a high availability architecture and ensuring consistency and availability of information.

• The solution must allow us to graphically analyze an event's impact on the behavior of the global platform and/or on the behavior of a virtual machine at the CPU, memory, disk, and network level.

• The administration service must be managed from a console allowing at least the following:

• Manage all components of the hyper-converged solution.

• Manage all resource clusters centrally.

• Support for centralized hypervisor monitoring.

• Provisioning resources.

• Assign user roles based on profiles so the solution will support integration with Active Directory or LDAP systems for authentication using the tool.

• It must have a graphical administration interface based on an intuitive, user-friendly WEB environment.

• It must allow for determining in real-time the CPU, RAM, and storage resources consumption per Node, virtual machine, cluster, and globally.

• The graphical interface must deliver at least complete statistics about the virtual machines, such as CPU, RAM, and disk consumption, and read IOPS, write IOPS, and network metrics.

1.8.3 HYPER-CONVERGED SYSTEM MONITORING SOFTWARE

• The proposed solution should incorporate monitoring software to visualize the current state of the cluster and predict the future consumption growth through a machine learning algorithm for at least memory, processing, and storage.

• The solution should include functionality for maintenance, changes, or modifications to the cluster based on current usage, such as removing virtual machines that are not in use and identifying overprovisioning.

• The monitoring software must be able to recommend specific hardware models to address future resource shortfalls by anticipating insufficient resources for new services, i.e., to manage resource Capacity Planning schemes.

1.9. EXTERNAL STORAGE SYSTEM

MINIMUM SPECIFICATION

• The bidder must specify the brand of the storage equipment offered, which must be a brand of worldwide prestige located in the quadrant of Gartner leaders.

• The system shall be MIDRANGE type and offer a 99.999% Uptime certification from the factory by public engineering documents (Data Sheet, etc.).

• The system controllers must have Intel processors with a minimum of 1.7 GHz and at least 12 cores.

• The model of the equipment offered must be guaranteed to reach a minimum of 20,000 IOPS measured in the Front End.

• The storage system shall have a minimum of 2 redundant controllers that operate in active/active mode.

• The storage shall natively support the APIs for the virtualization platform, referred to as array integration, to reduce the load on the virtualization nodes.

• Unified SAN / NAS storage device for blocks and files in a single system and with a single management console.

• It must include a storage capacity of at least 130TB usable after RAID, with the following configuration:

• 15 TB usable with SSD Disks on RAID 5

• 35 TB usable with SAS Disks of at least 1.8 TB at 10k rpm in RAID 5.

• 84 TB usable with NL-SAS Disks of at least 12 TB at 7.2k rpm in RAID 6.

Consideration should be given to the number of hot spare disks required for each type proposed, according to the manufacturer's best practices, at least 1 per type of disk offered.

• Protocols supported: File, Block, Vvols (VMWARE VIRTUAL VOLUMES); NFS (v3, v4, 4.1); CIFS (SMB 1, 2 and 3); FTP and SFTP; FC, ISCSI

• Other Protocols and Services Supported: NDMP; LDAP SSL, Kerberos; NTLM; RSVD v1; SMTP, NTP; LDAP; ARP; ICMP; NIS; NLM v1-4; NSM; DFS; ABE for SMB;

NDMP v1-4; DAC; SNMP v3.

• Modular architecture at SAN and NAS level. With storage software operating environment to take advantage of the capabilities of the controllers' cores in all storage system functionalities.

• It must be able to move data between different disk technologies in an automated fashion.

• It must have a cache memory of 128 GB between the two controllers.

• Must provide volumes to servers: Solaris, Linux, Windows, VMware, VMware vSphere, VMware ESX, and VMware vCenter Server.

• Redundancy in components such as controllers, disks, power supplies, fans, and batteries, with no single point of failure.

• File-sharing components (CIFS and NFS) in the same cabinet.

• 2 LAN management ports at 10/100/1000 GbE for management redundancy.

• Cache with sufficient battery support to send data to disk in case of power failure.

• System configuration for RAID 1/0,5,6 support.

• 12Gbps disk interface for backend disk connectivity.

• The scope of supply includes all software licensing required to meet the following requirements:

• Local volume replication capability at the block level and file level. Asynchronous, unidirectional, and bidirectional modes. And synchronous at the block level.

• Ability to perform data movement within the same system according to performance requirements and/or using policies at different disk tiers.

• Ability to support mixed NAS volumes (CIFS and NFS) for Windows and Linux environments.

• Ability to perform performance trend analysis and reporting on data.

• Compatible software to enable antivirus solutions and quotas.

• Dedicated management software for system upgrade and diagnostics (OS download, Disk Firmware download, NAS and SAN-OS upgrade, and system diagnostics)

• For all system components, local and remote administration and monitoring system, graphical and command line.

• The following views must be guaranteed:

• System alerts

• Capacity alerts

• System information

• Arrangements by capacity

• Storage status

• Tiering management

• Server operating systems

• Servers

• Connectivity problems

• Virtualization

• Status of replica

• Snapshots

• Discs

• Cache

• Connectivity modules

• Proprietary operating system developed under the same brand name as the hardware manufacturer with the ability to directly deliver SAN/NAS services.

• Storage equipment shall include power supplies and 100-200 VAC fans. Redundant and hot-switching ventilation direction should be front-to-rear.

• Connectivity to the chassis connectivity modules must be 10Gb SFP. All devices, licensing, and cables necessary for connection between the storage offered must be included.

WARRANTY AND TECHNICAL SUPPORT

• Technical warranty of a minimum of 3 years on the equipment and parts provided. It includes replacing parts, pieces, or the complete equipment if necessary. Right, to update the software versions of the equipment during the validity period of the technical warranty.

• The supplier will be responsible for the entire process of opening and resolving open cases with the manufacturer.

SERVICES

INFRASTRUCTURE INSTALLATION

• Electrical installation:

The National Police will provide electrical connections (PDU) and rack space.

• Installation and configuration of the solution:

The manufacturer shall install the HYPERCONVERGENT SYSTEM in conjunction with the contractor, following best practices for all components.

• Installation and Configuration of Hyperconverged Systems:

The following installation and configuration tasks of the Hyperconverged System shall be accomplished:

• Powering up the hyper-converged equipment.

• Initialization of hyperconverged equipment.

• Assignment of IP addressing according to the customer's network topology.

• Allocation of network names and identifiers according to the customer's topology.

• Configuration of LAN network parameters to integrate the solution to the switches offered.

• Change of default passwords.

• Review of the state of health of the infrastructure.

• Registration of the equipment in the manufacturer's portal.

• Access tests to the hyper-converged platform.

• Operational and functional testing of the migrated virtual machines.

• The following installation and configuration tasks must be performed on the LAN Switches:

• Switching on the equipment

• Initialization of equipment

• IP addressing assignment for administration according to the customer's network topology.

• Integration of the LAN switches offered with the institution's current LAN network.

• Configuration of the connections of the hyperconvergence solution and the other components of the offered solution.

• Functional tests.

EDGE FIREWALL

• Number of Teams: 2 FG 100F Compliant

• The equipment must be specific purpose equipment configured in High Availability in Active/Passive or Active/Active Modes.

• The equipment must have all the necessary hardware, software, and licensing to provide the following functionalities:

• IPS (Enterprise Mix)

• Application control

• Advanced malware threat protection.

• Equipment must have all the necessary hardware, software, and licensing to provide the following advanced functionalities:

• Virus Outbreak Protection

• Sandboxing cloud security protection against zero-day threats.

• SSL inspection

• The equipment must have Secure Processing Units processors that guarantee to detect malicious content at high speeds.

• Equipment must deliver superior firewall performance for IPv4 / IPv6, SCTP, and multicast traffic with ultra-low latency.

• The equipment must support VPN, CAPWAP, and IP tunnel acceleration.

• The equipment must support traffic shaping and priority queuing.

• Devices must have IPv4 Firewall Throughput (1518 / 512 byte, UDP) minimum of 20/18/10Gbps.

• Equipment must support at least 1.5 million Concurrent Sessions (TCP).

• Equipment must support at least 56,000 new sessions per second (TCP).

• Equipment must support at least 11.5 Gbps IPSec VPN throughput.

• Equipment must support at least 1 Gbps SSL-VPN throughput.

• Equipment must support at least 2.2 Gbps Application Control Throughput (HTTP 64K).

• The equipment must support at least one Performance of the following:

• IPS Throughput: 2.6 Gbps

• NGFW Throughput: 1.6 Gbps

• Threat Protection Throughput:1 Gbps

• Computers must support at least 10000 Firewall Policies.

• Equipment must support at least 1 Gbps SSL Inspection Throughput (IPS, HTTPS).

• Equipment must have at least 4 GE SFP interfaces.

• Equipment must have at least 12 GE RJ45 interfaces.

• The equipment must have at least 1 GE RJ45 Management Ports.

• The equipment must have at least 1 USB port.

• Equipment must have at least one console port.

• Equipment must support full visibility of users, equipment, and applications across the attack surface and consistent security policy enforcement regardless of asset location.

• Equipment must support protection against exploitable network vulnerabilities with industry validated IPS that should offer low latency and optimized network performance.

• Devices must support automatic threat blocking on decrypted traffic using the industry's highest SSL inspection performance, including the latest TLS 1.3 standard with mandatory encryptions.

• Equipment must support network protection, Policy-based routing, and policy-based forwarding.

• Equipment must support sFlow or similar.

• Equipment must have power supplies of 100-240V AC, 50/60Hz.

• The equipment must support dynamic NAT (many-to-many).

• Equipment must support static NAT (1-to-1).

• Equipment must support SNMP of any version to monitor alarms or events.

• The equipment must support static and dynamic routing (RIPv2, OSPFv2, and BGP) for

IPV4.

• The equipment must be certified:

• USGv6/IPv6

• The equipment must withstand operating temperatures from 32 - 104 F (0-40 C).

• The equipment must meet the following standards:

• FCC Part 15 Class A,

• RCM

• VCCI

• CE

• UL/cUL

• CB

• All equipment provided must be suitable for 19" rack mounting, including a rail kit (if required) and power cables.

• Equipment must include full 8x5 support for 3 years of firmware updates and general upgrade services.

• In addition to the following security features:

• Application Control

• IPS

• Antivirus

• IP/Domain Botnet

• Mobile Malware Service

• Web Filtering

• Antispam

• Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Services.

SWITCH CONNECTIVITY

Brand: (Specify)

Model: (Specify)

Quantity: 2

• Access Switch 48 Ports RJ 45 L2

• FortiSwitch-148F General Specifications:

• Number of GbE RJ45 Ports [1 GbE RJ45] greater than or equal to 48 • Number of 10 GE SFP+ uplink ports [10 GE SFP+] greater or equal to 4

• At least 24 POE ports [1 Gbe RJ45].

• PoE budget [Watts] greater than or equal to 370 W

• At least 1 RJ-45 serial console port

• Form factor: 1 RU

• Switching capacity greater than or equal to 176 Gbps

• Transmission capacity greater than or equal to 260 Mpps

• MAC Address storage capacity greater than or equal to 32k • The Switch must have a latency of less than or equal to 1μs.

• Link Aggregation group size: 8

• MTBF greater than 10 years

• Operating temperature from 0°-40°C

• Syslog shall be supported.

• It must have an internal temperature sensor.

• It must allow monitoring of the device's temperature.

• Energy-Efficient Ethernet (EEE) must be supported.

Management features

• The Switch shall be able to accept firmware upgrades.

• Switches with PoE shall be able to turn the PoE function on or off.

• Shall support the detection and notification of IP address conflicts.

• Shall support cloud management.

• Shall support IPv4 and IPv6 management.

• You must support Telnet / SSH for console access.

• Must support HTTP / HTTPS

• SNMP v1/v2c/v3 shall be supported.

• You must be able to configure your clock using an NTP Server.

• It shall have a standard command line and interface for configuration via the Web.

• It shall support software updates via TFTP/FTP/GUI.

• Shall support HTTP REST APIs for Configuration and Monitoring

High availability features

• Shall support Multi-Chassis LAG (MCLAG)

• Shall support STP over Multi-Chassis LAG (MCLAG)

Layer 2 characteristics

• Static Link Aggregation shall be supported.

• Shall support LACP.

• Spanning Tree shall be supported.

• Shall support Jumbo Frames

• Shall support Auto-negotiation for port speed and Duplex.

• Shall support IEEE 802.1D MAC Bridging/STP standard.

• Shall support the IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) standard.

• Shall support the IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) standard.

• STP Root Guard functionality shall be supported.

• Shall support STP BPDU Guard

• Shall support Edge Port / Port Fast

• Shall support IEEE 802.1Q VLAN Tagging standard.

• Shall support Private VLAN

• Shall support IEEE 802.3ad Link Aggregation standard with LACP.

• Shall be able to balance Unicast/Multicast traffic on a trunk port (dst-ip, dst-mac, src-dst-ip, src-dst-mac, src-ip, src-mac).

• Shall support the IEEE 802.1AX Link Aggregation standard.

• Spanning Tree (MSTP/CST) instances shall be supported.

• Shall support IEEE 802.3x Flow Control standard with Back-pressure.

• Shall support IEEE 802.3 10Base-T standard.

• Shall support IEEE 802.3u 100Base-TX standard.

• Shall support the IEEE 802.3z 1000Base-SX/LX standard.

• Shall support IEEE 802.3ab 1000Base-T standard.

• Shall support IEEE 802.3 CSMA/CD as access method and physical layer specifications.

Safety and visibility features

• Must support Port Mirroring

• Shall support Admin Authentication Via RFC 2865 RADIUS

• Shall support the IEEE 802.1x Port-based authentication standard.

• Shall support the IEEE 802.1x Authentication MAC-based standard.

• Shall support the IEEE 802.1x Guest and Fallback VLAN standard.

• Shall support the IEEE 802.1x MAC Access Bypass (MAB) standard.

• Shall support the IEEE 802.1x Dynamic VLAN Assignment standard.

• Shall support scheduling of ACLs.

• Shall support DHCP Snooping

• Shall support lists of allowed DHCP servers.

• Shall support DHCP blocking.

• Dynamic ARP Inspection (DAI) shall be enabled.

• You must allow Access to VLANs

• Shall allow tagging of traffic with VLAN ID by ACLs

Manufacturer's warranty

• Must include manufacturer's warranty for 3 years.

[END OF STATEMENT OF WORK]

1.9. EXTERNAL STORAGE SYSTEM