ESBD_486331_1771428661160_Addendum 1 - RFP 26-093 for NAC.pdf
PDF 275 KB Posted
- Solicitation number
- 26-093
- Issued by
- Texas
About this file
This is Addendum No. 1 to Request for Proposal 26-093 issued by Alvin Community College in Texas for a complete Network Access Control (NAC) solution based on Aruba ClearPass. The addendum provides clarifications to questions submitted during the RFP process regarding system requirements, authentication protocols, and implementation scope. The college requires user (Active Directory) and machine (EAP-TLS) authentication for institution-owned devices and needs assistance establishing a Public Key Infrastructure (PKI) environment, with the college providing the Windows server license and resources. The solution will be a complete turnkey implementation integrating ClearPass with the existing Cisco and Meraki environment across all switches and wireless devices. Current network usage includes approximately 2,500 wired endpoints and 8,023 unique wireless clients with an average of 1,472 daily unique users. The college projects student headcount growth from 6,377 to 8,000 by 2030. Laptops require authentication on both wired and wireless networks, counting as two sessions each, resulting in estimated concurrent connections of 2,500 wired devices plus 2,944 laptop sessions (1,472 devices × 2 sessions) plus 1,472 other wireless unique clients. ClearPass OnBoard for BYOD devices is not required, and only college-owned or authorized devices may connect to the internal wireless network or VPN.
The college prefers 10Gbps SFP+ network interface connections for the ClearPass hardware appliances. User acceptance pages are utilized for guest SSID access rather than guest sponsorship. The college currently uses user acceptance pages for guest network access and does not have existing MDM configurations relevant to this implementation. No remote or non-campus users will be authenticating against the system via VPN for internal network access, as only college-owned devices are permitted on the internal wireless network.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| ESBD_486331_1770047597144_RFP 26-093, Network Access Control Replacement.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
REQUEST FOR PROPOSAL
ACC 26-093
Addendum No. 1
Alvin College provides the following responses to questions posed for AC RFP 26-093 for the provision of a complete Network Access Control (NAC) solution based on Aruba ClearPass.
1. Does ACC require user (AD) and machine (EAP-TLS) authentication for institution-owned devices?
a. Yes.
2. Does ACC currently have a PKI environment? If not, do we require to setup a windows PKI environment to manage the certificate?
a. We will need help setting up a PKI environment
3. Is Alvin Community College going to provide the windows server license and resource for the
PKI environment?
4. Does Alvin Community College prefer User Acceptance Page only or Guest Sponsorship for
Guest SSID?
a. We use a user acceptance page right now.
5. Will Clearpass be utilized under the existing Cisco and Meraki environment?
6. Is this a complete turnkey solution to roll out Clearpass on all switches and wireless devices?
Yes.
7. How does ACC utilize Microsoft Intunes or any MDM solution?
a. This question is too vague. We don't have any MDM configurations that would be relevant to this.
8. Since the college is asking for license quantities to be based on concurrent usage (which is the correct approach), we must have complete clarity on what will be the maximum concurrent connections to the network 90% of the time. [ClearPass can support surges but they need to happen very infrequently to prevent admin lockout.] Please include projected growth numbers in these clarifications to help us better define the solution and prevent it from being over or under-spec’ed.
i. -Current wired connections are approximately 2,500 endpoints. This includes workstations, printers, WAPs, IP Cameras, IP Phones, AccessControl panels, wired CC readers, and Env Control panels.
ii. -Current wireless device usage over the last month is 8,023 unique clients.
Unique clients per day over the last month averages to 1,472.
iii. -Our current student headcount is 6,377. Our goal is to grow that number to
8,000 by 2030.
9. In accounting for the quantities referenced in our question #1 above, please account for whether wired devices will also need to be wirelessly authenticated since this would equal 2 sessions, not just one. [If these wired connections will only ever be wired connections then we don’t need to worry about it.]
i. -Yes, the laptops need to be authenticated on both wired and wireless networks.
10. It is not outlined in the RFP but is ClearPass OnBoard being spec’d for the BYOD devices? If so, we’ll need a BYOD user count, not device count as OnBoard licenses are based on BYOD users.
[Devices are accounted for in the Access license count, which acts as the foundation.]
i. -ClearPass OnBoard is not required.
11. Are remote and non-home/campus users VPN’ing into the network, thereby authenticating against the total? If so, please detail how exactly this consequently affects the total counts.
i. -No. Only college owned devices are allowed on the internal wireless network.
Non-College owned devices are allowed internet only access. Only college owned devices or authorized devices are allowed to connect to the VPN.
12. Does the college prefer/need 10Gbps or 1Gbps network interface connections from the ClearPass hardware appliances?
i. -10Gbps SFP+ required.
File details come from the government source that posted it. Updated .