Attachment 1 - Statement of Objectives.docx

STATEMENT OF OBJECTIVES 18 AUGUST 2024

TRUSTED THIN CLIENT® SYSTEM UPGRADE SHAW AIR FORCE BASE

SOUTH CAROLINA

A. Purpose Statement of Objective (SOO) defines the scope of work to be performed in support of a Trusted Thin Client® (TTC) implementation for the United States Air Forces Central (AFCENT).

B. Background AFCENT currently maintains a production TTC® multilevel access solution encompassing eighteen (18) TTC® Servers at two

(2) locations to support access to Secret and Below Interoperability (SABI) networks for production enterprise users. AFCENT is seeking to upgrade the existing enterprise system from TTC® 2.x to TTC® 3.x. All upgrades and work must remain compatible with the current Forcepoint/Everfox TTC® software that is in place.

1. Technical Summary:

Vendor will provide installation, training, and assessment and authorization (A&A) services for eighteen (18) TTC® servers across two (2) locations in Shaw AFB, SC and Al Udeid Air Base, Qatar.

2. Hardware/Software Summary:

There are eighteen (18) Distribution Console (DC) servers to be upgraded in place with this effort. No new server hardware is expected to be required to operate TTC® version 3.x.

The customer implementation may need to upgrade or replace a portion of HW thin clients to ensure compatibility with TTC® version 3.x.

C. Scope of Work

1. Pre-Onsite Engineering Services:

Perform system architecture/design and technical risk mitigation for TTC® upgrade to 3.x Develop the appropriate configuration for the deployment for version 3.x based off requirements and analysis of version 2.x configuration Update System Design Document (SDD) to include new TTC® design and configuration information

2. Pre-Onsite A&A Services Support A&A Customer discussions on coordination, schedule, and Body of Evidence (BoE) expectations.

Provide input to a Cross Domain Services Element (CDSE) Questionnaire, Cross Domain Enterprise Services (CDES) Questionnaire, Cross Domain Validation Approval Request (CDVAR) and a Cross Domain Appendix (CDA) for TTC®.

Update/modify Site-Based Security Assessment (SBSA) tests for TTC®.

Statement of Objective Trusted Thin Client

3. Onsite Implementation Services – at Shaw AFB, SC Deployment of the TTC solution

· Update and configure nine (9) TTC® Distribution Consoles (DCs)

· Integrate the TTC® solution with existing customer provided enterprise services that may include NTP, SSH, SMTP

· Integrate the TTC® solution with network infrastructure

· Integrate the TTC® cluster with VDI system on each network enclave Support the deployment of five (5) TTC® endpoints for functional testing purposes Configure TTC® to transfer log and audit files to external log servers Perform functional end-to-end testing Provide TTC® over-the-shoulder system administrator training Onsite Implementation Services – at Al Udeid Air Base, Qatar.

4. Onsite A&A Test Services – at Shaw AFB, SC Assist site in performing TTC® SBSA dry-runs and conducting TTC® SBSA testing Assist site in creating TTC® SBSA Report and Plan of Action and Milestones (POA&M) findings, if necessary This event is to support SBSA on-site testing for Al Udeid Air Base, Qatar DCs.

5. TTC 3.x Training Services Provide TTC® Privileged User training session for up to five (5) planned TTC® Administrators