Data Base Consolidation QA 11 Oct 2011 - Answers.doc

Solicitation No.: DOL111RQ21376

DATA CONSOLIDATION PARTS

Questions/Answers

11 Oct 2011

1. Design – what are we designing here? Are we simply installing hardware/software? For example: designing and configuring NAS/Block storage is not the same as simply installing hardware/software.

A – The goal is to install the hardware at both Data Center locations.

2. Are we going to replicate 3+25 à 28 TB of data from source to target OR more or less?

A- Yes, more than 28 TB will be replicated.

3. Knowledge transfer – for how many resources and can it be done remotely? If it must be done in person, at what physical locations must it be done?

A – Knowledge transfer must be onsite. The location is Austin TX USA.

4. NAS data to be migrated –Windows/UNIX or combination?

A- No NAS data to be migrated.

5. Block data to be migrated – Host based migration or array based? If it is array based what is the current array(s) configuration?

A- Current configuration is software/host based replication. Moving to array based replication.

6. Does Job Corps have required SAN/LAN/WAN infrastructure, racks and power requirements? If it is not available, lead time to have these ready? Will that impact the implementation schedule? What is the WAN infrastructure and bandwidth available for replication?

A- The storage system must use 30 amp L6-30P receptacles. Power is currently available. Rack space is also available. Approx 50 MB of available bandwidth for replication.

7. Where are the physical locations where the work must be performed?

A- Austin Texas USA

8. Is there a defined statement of work for this solicitation from EMC?

A - No

9. What storage array or system is in place today?

A – HP EVA

10. Is this solicitation for storage only?

A- No

11. Why does the solicitation ask for the following?

A- These are salient characteristics for security appliances/products that we would like to purchase.

FIREWALL and VPN APPLIANCE Require a modular device that supports both firewall and VPN capability. The proposed system must have at least one slot and the capability to add an IPS module.

The proposed security appliance must have the following capabilities:

1. Support for a minimum of 5,000 IPSEC VPN peers

2. Support for a minimum of 375,000 concurrent VPN sessions

3. Support for a minimum VPN throughput of 300 Mbps

4. Support for a minimum of four (4) Gb ports

5. Minimum firewall throughput of 600 Mbps

6. Capability to support a minimum of 600 Mbps of IPS throughput

7. Must support a minimum of 25 security contexts.

8. Must support the following scalability features:

a. Shared VPN licenses between multiple appliances

b. Clustering capability

c. Load Balancing

d. Active-Active Configuration

9. Must support the following Authentication features:

a. RADIUS with Password Expiry (MSCHAPv2) to NT LAN Manager (NTLM)

b. RADIUS one-time password (OTP) support (state/reply message attributes)

c. RSA SecurID

d. Double authentication

e. Active Directory/Kerberos

f. Embedded Certificate Authority (CA)

g. Digital Certificate / Smartcard

h. LDAP with password expiry and aging

i. Generic LDAP support

j. Combined certificate and username/password multifactor authentication

k. Internal domain password prompting for simplified single sign-on (SSO)

l. SSL VPN virtual keyboard authentication for additional protection against keystroke loggers

m. Policy mapping from RADIUS and LDAP

n. Dynamic access policies directly use domain membership and posture status for creation of user policy.

o. Computer Associates Siteminder

p. RSA Access Manager (ClearTrust)

6. Data Center Consolidation Performance Requirements

SECURITY QTY

Firewall/VPN Appliance with all required software, High Availability license, 4GE+1FE, 3DES/AES License 1 Premium Shared VPN Server License - 2500 users 1 Firewall/VPN Appliance with all required software, High Availability license, 4GE+1FE, 3DES/AES License 3 OS Software for Firewall/VPN appliance 3 Premium Shared VPN Participant License 3 Maintenance 8X5XNBD with High Availability for Firewall/VPN Appliance 4 2GB Memory 4 Manager Software with - 50 Device License to include Crypto 1 Appropriate OS software for Security Management System 1 Base IPS Chassis with Redundant Power and 1 4-port NIC with Bypass Capability 1 8X5 NBD Maintenance for IPS Sensor 1 Appropriate Software for IPS Sensor 1

PAGE