Attachment L2 - Revised Service Category 2 Response.docx

Digital Security Solutions RFP No. 24-43230000-RFP Revised Attachment L2 – Service Category 2: Network-Based Asset Discovery

Respondent Name: Respondent Name Goes Here Solution Name: Solution Name Goes Here

Respondent Instructions:

· Respondents shall use this Attachment as provided to respond. Altering character count limits or any other restriction or control may result in a Respondent being found non-responsive.

· Names. Respondents must provide their name and the proposed Solution name in the spaces above.

· Section 1 Prompts. Section 1 of this attachment provides prompts. The Respondent shall provide a response to prompt 1 and should provide responses to prompts 2 through 8. Prompts are indicated by red text followed by a response block.

Prompt 1 has a maximum of 3000 characters. Prompts 2 through 8 have a maximum character limit of 500. Respondents who submit responses outside of the maximum character limit may be deemed non-responsive. Any additional files, links, or other information provided outside the response block will not be considered for evaluation.

Scores will be assigned by each individual evaluator in accordance with Attachment C, Evaluation Criteria. Prompt 1 is worth a total of 5 points. Prompts 2 through 8 are worth a maximum of 4 points total. An individual Evaluator’s score of the technical response for a proposed Solution will be calculated by the following:

Evaluator’s Prompt 1 score + (Sum of the Evaluator’s Scores for Prompts 2-8 / 7) = Evaluator’s Technical Response Score

· Section 2 Terms and Conditions. Section 2 of this attachment provides a space for the Respondent to include any Service Level Agreements (SLA) or additional terms and conditions that apply to the proposed Solution. Neither the SLAs nor the additional terms and conditions will be considered for evaluation.

· Definitions. Definitions contained in Attachment A, Statement of Work, are incorporated by reference.

Section 1. Prompts.

Prompt 1: A Network-Based Asset Discovery Solutions identifies devices and systems communicating within the network infrastructure without the need for software agents to be deployed to most endpoints or servers. By analyzing network traffic, the Solution should detect all connected assets, including those that do not run traditional operating systems, such as IoT devices, switches, routers, and printers.

Please describe how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 1 Response Goes Here

For the prompts below (indicated by red text followed by a response block), the Respondent should provide details on how the Solution meets the identified technical capabilities and features.

Prompt 2: Agentless Discovery – Solution should be capable of using passive network scanning techniques that observe traffic and communications, including deep packet inspection (DPI) and flow-based analysis.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 2 Response Goes Here

Prompt 3: Continuous Network Monitoring – Solution should automatically detect new devices as they are added to the network, whether they are traditional endpoints, virtual machines, or IoT devices.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 3 Response Goes Here

Prompt 4: Granular Device Identification – Solution should collect metadata such as MAC address, IP address, operating system, software versions, device make and model and open ports.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 4 Response Goes Here

Prompt 5: Network Topology Visualization – Solution should map discovered devices and displays how they connect and communicate within the network. The visualization should dynamically update as devices are added, removed, or reconfigured.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 5 Response Goes Here

Prompt 6: Customizable Device Grouping and Tagging – Solution should allow administrators to categorize assets based on network segment, physical location, or function (e.g., servers, IoT, printers).

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 6 Response Goes Here

Prompt 7: Vulnerable Detection – Solution should identify outdated software versions, unpatched firmware, or insecure configurations that could expose the network to threats.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 7 Response Goes Here

Prompt 8: Integration of CTI Data Feeds – Solution should provide real-time insights into suspicious network activity, such as communication with known malicious IP addresses or domains. Solution should flag devices that may be compromised or communicating with threat actors.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 8 Response Goes Here

Section 2. Service Level Agreement or Additional Terms and Conditions.

Respondent shall include any Service Level Agreements (SLAs) or additional terms and conditions that apply to the proposed Solution in the following text boxes. The text boxes below have a maximum character limit of 32,672 characters each. The information provided in the text boxes below will not be scored but will be incorporated into the final Term Contract documents as an exhibit.

Any Applicable SLA Goes Here Any applicable Addtional Terms and Conditons Goes Here