Questions and Answers.pdf

1.Are you looking to implement TACACS with the hardware devices listed only or also IEEE802.1X authentication of endpoints to the network?

Yes, we have TACACS on the network and it handles all the network devices. 802.1x is implemented on every user facing port.

2. With regards to the configuring of 5 devices of each hardware type, for clarification, that is 5x switches, 5x routers, 5x ipads, 5x Firewalls, 5x Laptops/Desktops?

Applies to access points and devices connected to them if applicable.

3. How many devices that do not support IEEE802.1X authentication reside on the network?

Applies to the apple devices (5000-7500) and Apptricity i-Connect devices.

4. How many different types of endpoints will need to be profiled or have a custom profile created?

At this time only Apple i-Pads and Apprticity i-Connect devices connect to the network.

5. What MDM solution is used for the Apple devices for integration with ISE?

At this time they don’t talk to each other. MDM is cloud based and ISE is on Premise.

6. Is the MDM solution currently integrated with ISE?

No.

7. Do endpoints currently have machine or user certificates deployed?

Machine Certs for wired devices. I-Pads have cert installed.

8. Is current ISE environment fully functional?

Yes.

9. What version of ISE is currently deployed?

3.0.0.458.

10. Does Government have DNA Advantage licensing on all APs involved and will that DNA Advantage licensing be active during the implementation?

We purchased DNA Advantage licenses for AP. It’s not currently being used.

11. What version of software is the WLC running?

17.3.4.

12. Does the Government have an instance of DNA Center server installed and configured?

13. Can Government please provide a reference or document detailing the STIG Compliance that is required.

Due to security reasons, this can only be released to the awardee.

14. The RFQ seems to focus mostly on the wireless IPS/IDS (WIPS) work but then talks about ISE. Can you confirm if this is related with ISE or DNA Center. The two don't really leverage each other in any way, so making sure.

Primary focus is on WIPS/WIDS. ISE is available if applicable.

15. Any clearance requirements of the personnel?

Not required as we can access most of the equipment remotely. We will escort if necessary.

16. Can it be done remotely?