ISE Questions and Answers.pdf

1. PWS Section 2 – Scope of Work states: “The contractor will be required to equip and furnish two ISE servers and all supporting equipment.” However, Section 6 – Equipment Requirements lists a large number of Catalyst 9600 and 9500 switches, line cards, optics, licenses, cables, etc., in addition to two Cisco ISE appliances. Can the Government clarify whether the scope is limited to replacement of two Cisco ISE servers (together with any licenses or accessories required to run those specific devices), or if a full network infrastructure upgrade (core/distribution switches and optics) and licensing such as DNA Advantage for Catalyst switches is also required? The scope is limited to two Cisco ISE servers and all accessories required for devices specified to work.

Licensing is not needed in this requirement.

2. The solicitation (CLIN structure, selection of product-focused NAICS and PSC codes, and delivery instructions) suggests this requirement is a firm-fixed-price “product" purchase for two ISE servers, while the attached Statement of Work includes deliverables and responsibilities that suggest a services contract (e.g., as-builts, kickoff meetings, project scheduling, and site surveys). Can the Government clarify whether the contractor is expected to provide only procurement and delivery of two ISE appliances, or if services such as installation, configuration, integration, and documentation are also required? This requirement is for procurement and delivery of two ISE appliances (together with any accessories required to run those specific devices) only. Licensing is not needed in this requirement.

3. If services are required, the term “equip and furnish” is ambiguous, as it is unclear whether the Government expects the contractor to install and configure the ISE serves with software and basic settings, or to fully integrate them into the AFIN production environment including policy migration, Active Directory integration, high-availability setup, and cutover/validation. If ISE services are required, can the Government clarify the scope of configuration/integration work and which ISE features (e.g., posture, guest, profiling, TACACS+, pxGrid) must be implemented so that contractors can accurately scope labor and pricing? ISE Services are not required. This requirement is for procurement and delivery of two ISE appliances (together with any accessories required to run those specific devices) only. Licensing is not needed in this requirement.

4. Is 802.1X authentication required as part of this effort? If so, will the contractor also be expected to configure network switches to support 802.1X, and can the Government specify how many switches and approximately how many ports are in scope? Contractor is not required to provide configuration services. ISE Services are not required. This requirement is for procurement and delivery of two ISE appliances (together with any accessories required to run those specific devices) only. Licensing is not needed in this requirement.

5. PWS Sections 5 and 7 require the contractor to provide building-level as-built diagrams showing the type and number of switches and patch panels. These deliverables appear to align with a large-scale network infrastructure upgrade, rather than the stated scope of replacing two ISE servers. Can the Government clarify whether the intent is to require only logical topology and integration documentation specific to the new ISE appliances, or if a full building-by-building physical network as-built is actually expected. As-builts, network diagrams, and logical diagram integration documentation is not required as part of this effort. Only procurement and delivery of two ISE appliances (together with any accessories required to run those specific devices) only. Licensing is not needed in this requirement.

6. Instructions to Offerors paragraph 10.A and Evaluation Factors paragraph I.a reference “paragraph 4 of the SOW” as containing the required specifications for the ISE devices.

Paragraph 4, however, describes contractor responsibilities such as STIG compliance, personnel certifications, and kickoff meetings, rather than technical specifications for the equipment. Can the Government clarify whether STIG compliance (SOW ¶4.a) is the only technical requirement for the ISE appliances, or if there are additional specifications the proposed devices must meet? STIG compliance is not required as part of this effort. Only procurement and delivery of two ISE appliances (together with accessories required to run those specific devices) only.

7. The solicitation’s Instructions to Offerors and Evaluation Factors both reference technical specifications from the SOW as the sole basis for technical evaluation. Can the Government confirm whether the only requirement for the technical proposal is to demonstrate that the proposed ISE appliances meet the technical specifications (e.g., STIG compliance and other device-level specifications), or if offerors are also expected to address (and be evaluated on) areas such as corporate experience, past performance, and technical approach to services? If the latter, can the Government clarify where and how these factors should be addressed (e.g., in a separate volume, within a specific section of the proposal, and with any applicable page limits)? Though the only requirement is to demonstrate that the proposed ISE appliances meet the technical specifications, demonstrating corporate experience and past performance are encouraged shared in technical proposals. As a reminder all equipment must be TAA and 2GIT compliant as well as not be manufactured in China.

8. In regard to referenced solicitation, are there any citizenship and/or clearance requirements? All personnel delivering equipment onto JB MDL must have a REAL ID or U.S. Passport as well as pass a background check using criminal and terrorism databases.