Draft SOW SECURE64 revised.pdf

PDF 159 KB Posted Jun 21, 2024

Attached to: Notice of Intent to Sole Source Secure64 DNSSec Hardware and Services
Solicitation number: 5000187913
Issued by: Department of the Treasury Internal Revenue Service

About this file

Written by GovTribe AI · Jun 21, 2024

This document is a Statement of Work (SOW) for the Internal Revenue Service (IRS) to purchase Secure64 Domain Name System Security Extensions (DNSSec) hardware and services. The IRS requires a "bump in the wire" DNSSec zone signing capability, which can only be provided by Secure64. The SOW lists the specific Secure64 products and quantities needed, including DNS Manager, Fraud Guard, MalwareGuard Cache, DNS Signer, DNS Cache, and DNS Authority servers. The period of performance is for a 12-month base period plus two 12-month option periods. The IRS plans to issue a single-award Delivery Order through a lowest-price, technically accepted brand-name competition. The required products and services have a needed date of July 1, 2024.

The related federal contract opportunity is a pre-solicitation notice for the IRS to negotiate a sole source contract with Premier Systems, Ltd. to provide the Secure64 DNSSec hardware and services. The IRS cites FAR 13.5 and 13.501(a) as the statutory authority for the sole source acquisition. Interested parties may submit capability statements by July 1, 2024 in an effort to compete for the requirement.

View the file

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

STATEMENT OF WORK (SOW)

SECTION I

1. Overview The Users and Network Services (UNS) organization, as part of the Internal Revenue Service (IRS) Information Technology organization, is charged with the ability to communicate with internal/external partners, across a multitude of business functional areas, cloud connections, etc., all of which maintains the highest level of perimeter security to protect taxpayer data.

The IRS Domain Name System Security Extensions (DNSSec) infrastructure is a critical support system for IRS Enterprise Network. DNSSec is a suite of Internet Engineering Task Force specifications for securing information provided by the Domain Name System (DNS). The first and foremost requirement for our environment is “bump in the wire” DNSSec zone signing and the only vendor capable of this feature is Secure64.

Meaning that Secure64 is capable of signing a zone which is sent to it and able to send that signed zone onto another platform.

In addition to multiple vendors for diversity and obfuscation purposes, our environment provides two distinct DNS functions. First is a public authoritative DNS service, and second is an internal recursive service and Dynamic Host Configuration Control Protocol (DHCP). Independently and without interoperability most vendors are capable of providing the majority of both of these features, but together as a system only a combination of Infoblox and Secure64 feature sets interoperate to fulfill all of the requirements of the IRS’ DNS service.

In 2010 the IRS DNSSec project team identified two types of appliances that would need to be deployed within the new DNSSec infrastructure: a DNS Signer product and a DNS, DHCP, and IP address management (IPAM) product to implement a new DNSSec architecture and meet the OMB mandates and FISMA requirements. The Secure64 product is a network appliance that provides the DNS Signer capability. After developing strict requirements criteria and a specific testing plan, IRS invited vendors to participate in testing. This is the only product in the marketplace that meets the required functionality.

In January 2024, the technical teams evaluated all critical DNS architecture requirements and the manufacturers available to support the requirement; determining a combination of Infoblox and Secure64 feature sets remain the only products that interoperate together to fulfill all of the requirements of the IRS Enterprise DNS service.

2. Primary Objectives

The objective of this requirement is to purchase Secure64 DNSSec hardware and services to support IRS Enterprise DNS Network Architecture.

3. Description of Requirements The successful reseller shall provide the IRS with Commercial off-the-shelf (COTS) for Secure64 original equipment manufacturer (OEM) products and support in accordance with the part numbers provided below. Must be Secure64 certified Trade Adjustment Assistance (TAA) Compliant Equipment. No secondary-market sourced products refurbished, or non-Secure64 products permitted.

BASE YEAR

Product Description Product Number Qty Secure64 DNS Manager 12 months S64-MN-1Y-510-AC-MGR-STD 2 Secure64 Fraud Guard 12 months S64-SV-GUARD-FRAUD 8 Secure64 MalwareGuard Cache S64-SV-GUARD-MALW 8 Secure64 DNS_Signer Secure64 DNS Signer 8 Secure64 DNS_Cache S64-MN-1YR-6010-CACH 8 Secure64 DNS_Authority_bxb S64-MN-1YR-6010-AUTH 7 Secure64 DNS Manager Server with 3Yr Support 7/24 4-hour response S64-HW-AM-Manager-x86 - TN Site 1 Secure64 DNS Manager Server with 3Yr Support 7/24 4-hour response S64-HW-AM-Manager-x86 - WV Site 1 Secure64 DNS Signer Server with 3yr Support 7/24 4-hour response S64-HW-SIGNER-x86 - WV Site 4 Secure64 DNS Signer Server with 3Yr Support 7/24 4-hour response S64-HW-SIGNER-x86 - TN Site 4 Secure64 DNS Cache Server with 3yr Support 7/24 4-hour response S64-HW-CACHE-x86 WV SITE 3 Secure64 DNS Cache Server with 3yr Support 7/24 4-hour response S64-HW-CACHE-x86 MEM SITE 2 Secure64 DNS Authority Server with 3Yr Support 7/24 4-hour response S64-HW-AUTHORITY-x86 - WV Site 3 Secure64 DNS Authority Server with 3Yr Support 7/24 4-hour response S64-HW-AUTHORITY-x86 - MEM Site 2 FIPS 140-2 LVL 2 or LVL 3 with 1 year support NH2075-M / XC MID / Net HSM 8 NCSE Remote Training, 2 Days, Instructor-Lead Training S64-PS-TRN-NCSE-O 1 Secure64 Consulting on Site, Per Day, North America, Includes T&E/pp

S64-PS-CONSULT-US

Secure64 Consulting Training x86 DNS Cache S64-PS-CONSULT-US 1 Secure64 Consulting Training x86 DNS Authority S64-PS-CONSULT-US 1 Secure64 Consulting Training x86 DNS Signer S64-PS-CONSULT-US 1 Secure64 Consulting Training x86 DNS Manager S64-PS-CONSULT-US 1 Secure64 DNS Manager Server with 3Yr Support 7/24 4-hour response S64-HW-AM-Manager-x86 - TN Site 2 Secure64 DNS Signer Server with 3Yr Support 7/24 4-hour response S64-HW-SIGNER-x86 - TN Site 2 Secure64 DNS Cache Server with 3yr Support 7/24 4-hour response S64-HW-CACHE-x86 MEM SITE 2 Secure64 DNS Authority Server with 3Yr Support 7/24 4-hour response S64-HW-AUTHORITY-x86 - MEM Site 2 FIPS 140-2 LVL 2 or LVL 3 with 1 year support NH2075-M / XC MID / Net HSM 2 NCSE Remote Training , 2 Days, Instructor-Lead Training S64-PS-TRN-NCSE-O 2 Secure64 Consulting on Site, Per Day, North America, Includes T&E/pp

S64-PS-CONSULT-US

DNS Cache for x86, 300k qps S64-SW-CACH-300K 2 DNS Authority for x86, 10M RRs S64-SW-AUTH-10M 2 DNS Manager, 1 node license qty 2 for Cache & Authority S64-SW-MGR-1N 4 DNS Signer for x86, 100M RRs S64-SW-SIGN-100M 2 Secure64 DNS_Cache S64-MN-1YR-6010-CACH 2

Secure64 DNS_Authority_bxb S64-MN-1YR-6010-AUTH 2 DNS Manager is currently covered by Unlimited License with IRS Now.

S64-MN-1Y-510-AC-MGR-STD

Secure64 Signer Maintenance 12 Months S64CM1YSIGNP 2 Secure64 Fraud Guard 12 months S64-SV-GUARD-FRAUD 2 Secure64 MalwareGuard Cache S64-SV-GUARD-MALW 2

OPTION YEAR 1

Secure64 DNS Manager 12 months S64-MN-1Y-510-AC-MGR-STD 4 Secure64 Fraud Guard 12 months S64-SV-GUARD-FRAUD 10 Secure64 MalwareGuard Cache S64-SV-GUARD-MALW 10 Secure64 DNS_Signer S64CM1YSIGNP 10 Secure64 DNS_Cache S64-MN-1YR-6010-CACH 10 Secure64 DNS_Authority_bxb S64-MN-1YR-6010-AUTH 9 AM Premium Plus 1 year support NH2075-M / XC MID / Net HSM 10

OPTION YEAR 2

Secure64 DNS Manager 12 months S64-MN-1Y-510-AC-MGR-STD 4 Secure64 Fraud Guard 12 months S64-SV-GUARD-FRAUD 10 Secure64 MalwareGuard Cache S64-SV-GUARD-MALW 10 Secure64 DNS Signer S64CM1YSIGNP 10 Secure64 DNS Cache S64-MN-1YR-6010-CACH 10 Secure64 DNS Authority bxb S64-MN-1YR-6010-AUTH 9 AM Premium Plus 1 year support NH2075-M / XC MID / Net HSM 10

4. Deliverables

A. Maintenance Support Requirement:

A hardware/software maintenance contract based on manufacturer OEM part numbers listed in table above. (Serial numbers may change in contract if return merchandise authorization (RMA) is submitted.)

B. Premium Software Support:

Operating software upgrades, fixes and technical support will be included in the maintenance contract per manufacturer OEM part numbers listed in table above.

5. Performance Sites

IRS -ECC-MEM

Attn: Mark Jones 5333 Getwell Rd. (MS 48) Memphis, TN 38118

IRS-ECC/MTB

Attn: Patrick Jalbert 250 Murall Drive (MS 5650) Kearneysville, WV 25430

IRS -ECC-OGDEN

Attn: Chalayne Schaffner

1160 WEST 1200 S

Ogden, UT 84201

SECTION II

1. Contract Type

The IRS shall establish a single-award Delivery Order through a lowest-price, technically accepted Brand-name Competition. Delivery Order issued under the Secure64 fully burdened Firm Fixed Price (FFP) quotes using the provided products listed under Section I., 3. Description of Requirements. In accordance with the SEWP contract vehicle terms and conditions, the term “Order” shall be used in this RFQ to refer to a Delivery Order.

2. Government Point of Contact

Name: Bernadette Delia (Crenshaw) Title: IT Specialist; Contracting Officer Representative (COR) Phone: 484-955-0244 Email: Bernadette.j.delia@irs.gov

3. Contract Line-Item Number (CLIN) Structure

The CLIN structure for this Delivery Order shall be Firm Fixed Price and CLIN structure found in Section I., 3. Description of Requirements.

mailto:Bernadette.j.delia@irs.gov

4. Period of Performance:

The need date for these items is 07/01/2024. Contract Period of Performance (POP): The period of performance for this requirement is for 12-month base period, plus two option periods.

PoP Start Date End Date

Base Period 07/01/24 06/30/25 Option Period 1 07/01/25 06/30/26 Option Period 2 07/01/26 06/30/27