Redacted_J&A_FA4452-18-R-0052_Redacted.pdf

Justification and Approval (J&A) for Other Than Full and Open Competition

FOR OFFICIAL USE ONLY

FOR OFFICIAL USE ONLY

Cisco ISE Device Admin License L-ISE-TACACS= TAA EA 8 1 Prepaid Training Credits:Redeem W/Cisco Learning Partners TRN-CLC-004 EA 240 RSA SecurID Authenticator SID700 (60 months) 100 Pack- SID700-6-60-60-100 SID700-6-60-60-100 EA 1 RSA Authentication Manager v.8.0 Enterprise Edition - License - 1 User - Volume 30-100U AUT0000100E8 EA 100 1Month Enhanced Mnt for Auth Mgr Enterprise Per User for Qtys 30-100 AUT0000100EE1-8 EA 1200

Each Optional Quantitiy:

Nomenclature Mfr Part No. Unit Qty Cisco Identity Services Engine 100 EndPoint Base License L-ISE-BSE-100= TAA EA 8 Cisco ISE Device Admin License L-ISE-TACACS= TAA EA 8 RSA Authentication Manager v.8.0 Enterprise Edition - License - 1 User - Volume 30-100U AUT0000100E8 EA 100 1Month Enhanced Mnt for Auth Mgr Enterprise Per User for Qtys 30-100 AUT0000100EE1-8 EA 1200

IV. Statutory authority permitting Other than Full and Open Competition.

41 USC 1901, as implemented by FAR 13.501(a)(1)(ii), and required by FAR 13.501(a)(i)

V. Demonstration that the contractor's unique qualifications or nature of the acquisition requires the use of the authority cited above (applicability of authority).

Subsection One

It is unknown what contract was used to purchase the existing Cisco Access Control System (ACS) equipment that is being replaced. Historically, the only way the Government can purchase Cisco products is through a BNO acquisition. The 763 SCONS previously procured Cisco ACS annual maintenance and technical support through NC-2 as a BNO product. A firm-fixed price task order FA8732-14-D-0005-RL02 provided the support maintenance from 27 Apr 15 through 26 Apr 16 in the amount of . It was performed by Force 3 which was a small business at that time under 1250 employee size standard, with a cage code of 0TC84 and NAICS code 334210. Upon completion of FA8732-14-D-0005-RL02 task order, all other maintenance support for the Cisco server has been purchased via the Government Purchase Card (GPC) program.

Subsection Two

The Cisco and RSA items are unique and highly specialized to the acquisition of authentication servers and 2FA token systems. The Cisco Identity Services Engine (ISE) products are replacement products for current Cisco Access Control System (ASC). This is the only product that has the Cisco specific features used in Terminal Access Controller Access Control System (TACACS). RSA is the only product offering that works with over 400 different applications natively to provide two-factor services. This 2FA technology was developed in the 1970's. RSA has the only 2FA system still available that does not require Internet or Cloud connectivity. Therefore RSA is the only solution that is available for users that does not requires Internet / Cloud connectivity, meaning that this is the only possible option

FOR OFFICIAL USE ONLY

FOR OFFICIAL USE ONLY

for Secret Internet Protocol Router (SIPR). Since the same physical token will be usedon both Non-Classified Internet Protocol Router (NIPR) and SIPR, RSA is, the only product that meets the technical requirements.

Additionally, the Joint Interoperability Test Command, Joint Test Element (JTE) Joint Interoperability Certification of the Cisco Systems, Catalyst 3850 Series, dated 06 February 17, states the system meets all of the critical requirements of the Unified Capabilities Requirements (UCR). As a result of the testing, certification and accreditation, the Cisco Systems are the only approved system that can meet this requirement per the Infrastructure Directorate (IE) DoD Unified Capabilities (UC) Approved Product List (APL). The Unified Communications Requirement 2013 (UCR 2013) defines the UC that are the integration of voice, video, and/or data services delivered ubiquitously across a secure and highly available network infrastructure, independent of technology, to provide increased mission effectiveness to the war-fighter and business communities. The system security accreditation, which is a rigid and lengthy process, is based on the specific components selected for the system to be deployed. Use of other equipment with equivalent capabilities is not authorized by this accreditation and would result in the need to re-certify the system. This would require re-testing and additional security certification and accreditation which would have significant cost and schedule impacts, thereby reducing system reliability to less than the UC required 99.999% reliability.

Subsection Three

HQ AMC/A6O believes that award to any other source would result in unacceptable delays and substantial duplication of cost in fulfilling the Air Force's requirements. The existing network is made up of Cisco System components and replacement/upgrading requires equipment from the same manufacturers for interoperability, management, and maintenance purposes as well as continued compliance with installed information assurance (IA) requirements. In order to comply with standardization of network products, Cisco brand products are required.

Only these products meet technical, supportability, and mission support requirements for this application, notably, network hardware support as promulgated by HQ AMC/A6O.

All of the network systems installed at AMC bases are currently the Cisco brand. Therefore, in order to utilize another system, the system of another brand would have to go through a lengthy Air Force testing and approval process, additional hardware would have to be installed because it cannot be integrated into the existing system, and the Air Force would have to contract out the replacement of equipment, installation and travel, and training on new equipment and system which would result in a significant cost that would not be eliminated through competition. Utilizing any other brand would result in a delay of a minimum of 5 months which is the directly linked to the earliest date for the GovCloud migration in July 2018.

Therefore, the Contracting Officer (CO) has determined that use of the Cisco Systems and RSA brand name description in this acquisition is essential to the Government's requirements, thereby precluding consideration of products manufactured by another company. The serial numbers and product numbers of each hardware item are provided with the list above. Any replacement parts that are supplied through the contract should be for new equipment only; no refurbished or "gray market" items will be accepted.

Subsection Four

Accordingly, RSA and Cisco certified resellers are the only vendors capable of providing the BNO supply described in section three above without the United States Air Force experiencing an unacceptable delay.

FOR OFFICIAL USE ONLY

FOR OFFICIAL USE ONLY

VIII. Description of the market research conducted and the results, or a statement of the reasons market research was not conducted.

As described in Section VI above, market research, IAW FAR Part 10, was conducted.

IX. Any other facts supporting the use of Other Than Full and Open Competition.

None

X. List of sources, if any, that expressed interest in the acquisition.

See Section VI above.

XI. A statement of the actions, if any, the agency may take to remove or overcome any barriers to competition before making subsequent acquisitions for the supplies or services required.

Currently, the only way for the Government to overcome this barrier is to procure new equipment that is not limited to Cisco systems. However, as discussed in Section V above, an alternate solution creates a substantial duplication of cost of replacing the entire EACN network. The Government will continue to examine the marketplace for alternative viable solutions for future acquisitions. Currently the Government is in the process of moving to a Cloud environment, once this transition is complete it will diminish the need for purchasing BNO Cisco products and licenses.

XII. Certification by the Contracting Officer.

As evidenced by my signature above, I have determined this document to be both accurate and complete to the best of my knowledge and belief.

XIII. Certification by the technical/requirements personnel.

As evidenced by my (our) signature(s) above, I (we) certify that any supporting data contained herein, which is my (our) responsibility, is both accurate and complete.