Amendment 0001 Govt Responses to Industry Questions.pdf

Government Responses to Industry Questions Access Control Server

H92421-24-Q-3004

Industry Questions Government Responses Q-1: Is the new ACS required to be CCURE? It is recommended the new system is CCURE since the additional components for the electronic security system (ESS) is already wired and configured on the CCURE network. However, if an upgraded system would work based on the current wiring configuration, our unit would gladly get an upgraded system.

Q-2: Required to be connected to the DOD CAC Data base?

Yes, unit requires an integrated system that will support DOD CAC and proxy cards, which means the current PIV readers will need to support DOD CAC and proxy card access for all personnel entering the facility.

Q-3: Are the Card Readers required to read CAC’s? Yes, that’s the preferred option. But unit also want proxy card reader access as an alternative.

Q-4: Can the wiring be reused? Potentially, this will require further assessment from vendor. But based on initial survey, the current wiring is at least 65% reusable. We assume all related equipment is in good working order. However, if those parts need to be replaced as well, we understand that the cost for those parts will be separate.

Q-5: Is there only one gate? There two gates. The main gate is for vehicle entry, which is inoperable since it needs a gate motor. There is also a side pedestrian gate for personnel entry which is inoperable since the PIV reader is not connecting to the ACS right now. See attached for layout and photos.

Q-6: Is there only seven card readers? No, there are 28 PIV readers that are inoperable. See diagram attached.

Q-7: Are the locks in working order? The cypher locks are operable, the PIV readers are all offline so there are inoperable.

Q-8: Are the door contacts in working order? Yes, the physical doors are operable.

Q-9: Are all the other parts and pieces of the ACS system in working order?

Yes, we assume all related equipment is in good working order.

However, if those parts need to be replaced as well, we understand that the cost for those parts will be separate.

Q-10: Is the CCURE also the IDS for the SCIF? No, there are no IDS or SCIF associated with this ACS. There are no SCIF installed at this facility. There is an Arms room IDS which runs on a separate system on the first floor.

Q-11: What type of gate is currently installed? (Arm, Fence, Ect)

A fence gate is currently installed. We do not have the actual model number but see attached for photos.

Q-12: Can the Government provide Gate manufacture?

We will submit request to DPW but won’t have a turn around until two weeks due to the holidays.

Q-13: Can the Government provide the Gate model?

We will submit request to DPW but won’t have a turn around until two weeks due to the holidays.

Q-14: If the questions above are unable to be answered can a picture be provided?

Refer to attached bldg. layout and photos

Q-15: Is the ACS Server Rack mounted or desktop? Mounted in an inverted position within a small 3-4 server rack stack.

Q-16: What is the total number of people who must be reentered into the ACS system?

A total of 80-120 personnel.

Q-17: Can you provide photos of the gate in question to allow us to see what is in place currently and provide the manufacture label showing the model currently in place?

Refer to attached bldg. layout and photos

Q-18: Can you provide info on what damage is done to the gate that requires replacement?

The vehicle gate just needs a motor, everything else is intact.

However, it is barely holding up since individuals have to manually pull the gate to open and close. Refer to attached photos.

Q-19: What kind of sensors does the gate have now and how many?

There are no sensors on the gate. It’s a fence gate with a motor.

See photo attached.

Q-20: How far is the gate from the building? About 110 ft distance, see photos attached.

Q-21: Can you provide the gate control panel images and boxes so we can see the existing controls?

See photo attached of vehicle gate.

Q-22: Can you provide images of the gate pedestals? See photo attached.

Q-23: Can we use a GSA approved PACS or is there justification for the name brand Software House CCure 9000?

The original install was CCURE 9000. An approved GSA approved ACS will work since the supporting parts for the CCURE 9000 are no longer available for purchase.

Q-24: What readers are in place now? HID PIV card reader

Q-25: What wire type is used for the readers Wiegand or OSDP currently?

Unknown since that wiring was done during original install, which is over 10 years.

Q-26: Will an ATO be required for network access? Unknown, what is an ATO?

Q-27: Will the access system be networked on the DOD network or use isolated fiber?

No, the system works independently on its own server. We don’t think the system runs on the DoD network.

Q-28: Is there fiber to the gate and where is the box? Unknown, the gate works with a motor. However, there is a HID

PIV card reader next to vehicle and pedestrian gate, which are connected to the gate.

Q-29: Will any wire be needing replacement at the gate or to any doors?

Unknown, once ACS is replaced, we believe the HID PIV card readers will become operable

Q-30: Will CAC cards be used or will this require both CAC and Prox?

Require both CAC and proxy card entry. The current system is designed to operate both CAC and proxy card

Q-31: Is the ceiling all acoustical tile and accessible? Unknown, we will submit request to gather additional info from

DPW regarding the ceiling tiles.

Q-32: Are any ceilings over 12ft tall and where? Unknown, the ceilings are normal height, at least 12 ft tall. We will submit request to gather additional info from DPW regarding the ceiling tiles.

Q-33: Will any conduits to the gate need to be replaced in the ground?

Unknown, we don’t have an assessment for those conduits.

Q-34: In the PWS it states, “1.4.1 Mandatory Compliance and Security System Requirement: Unit will require to have new appropriate system component (ACS) as needed to ensure the electronic security systems are in compliance with AR 380-5 and DoD 5200.08-R.”

Question 1: Do these facilities need to address FIPS 201, HSPD-12, FICAM access control standards?

Yes, these facilities must be in compliance with those guidelines based initial Google search. The original install for these facilities were on or around 2016, so unit does not have the specific verbiage on what was included from those standards.

Q-35: In the PWS it states, “1.2. Background:” “The 528th SB (SO)(A) requires the use of a proximity card access control servers for each of its three operations buildings (E-4268, X-4047, and D-2719) located on Fort Liberty, NC.”

Do these facilities need (or would they prefer) to utilize PIV cards for access?

For E-4268, based on original install, the PIV card readers currently installed are compatible with proxy cards and CAC (preferred options and historically used at this facility). Significant issue: The Access Control Server (ACS) is damaged so the HID PIV class readers are inoperable since the readers cannot connect to the ACS. See attached for photo of PIV card reader.

For bldg. X-4047 CAC access (preferred option for this facility) is the primary access control since this facility do not have a badge reader and proxy cards. Facility does not have capability for proxy card access ONLY CAC. This facility just needs quarterly maintenance of the ACS.

For D-2719, this facility has an active access control with proxy cards (preferred option and historically used at this facility) and NOT CAC. No significant issues with current readers or proxy cards. This facility just needs quarterly maintenance of the ACS.

Q-36: Please list and show the existing access control panels. The “footprint” of the existing control panels may alter which access control panels are used to replace existing.

For E-4268, see attached for control panel.

For X-4047 this facility uses the same ACS (CCURE 9000, currently operable) as E-4268. However, the ACS at X-4047 is NOT connected to E-4268. These systems operate independently.

For D-2719 this facility uses Lenel access control system, which is separate from E-268 and X-4047.

Q-37: Please list and show the existing card readers.

The form factor and authentication level of each card reader is important when determining compliance, integration, and replacement cost factors.

For E-4268, see attached photos of the HID PIV card reader that is currently installed. Unfortunately, unit cannot access the ACS to obtain the form factor and authentication credentials since the ACS is damaged.

Q-38: In the PWS it states that the 389th MI BN (D- 2719) “is a Sensitive Compartmented Information Facility (SCIF),” One important element of a SCIF is the intrusion detection/duress system (IDS).

Is the IDS a part of the ongoing maintenance package?

No, that system does not have an ongoing maintenance package. Therefore, if there is an emergency repair, unit has to pay up to $2,500 for diagnostics and if additional parts are required that price could increase exponentially.

Q-39: Please describe the existing integration network for the access control system? (LAN, Fiber, type of switches)

For E-4268, based on the original install it appears that the integration network system is fiber.

The main switch we’ve identified is a Catalyst 2960-X series switch. Also, there is a Uniprise CAT5E (24 port). See attached for photos.

Q-40: Please describe/list the existing access control system, current licenses, level of the system (number of doors it can control).

Refer to answer for Q-37. Also see attached for photos of the number of PIV card readers installed at E-4268.

Q-41: Are the intercoms from the gate linked to the front desk of the building?

No

Q-42: Is there a release button for the gate at the front desk of the building?

Q-43: Is the security system on a government network or a private network?

Private Network

Q-44: How is the security system accessed? User name and password

Q-45: How often are cameras monitored? 24/7 if they are online

Q-46: Is the panic button in the server room connected to the access control server security system?

The panic button is not connected to the ACS system.

Q-47: Are there other venders that service the system?

Q-48: What version of C-Cure software is utilized? Version 2.5 and Version 2.7

Q-49: What kind of motor is on gate? unknown

Q-50: Does the system have to be C-Cure? No, it does not

Q-51: Must the buildings Badge Card Readers only take CAC?

Q-52: Must the selected vendor have access to C- Cure and Lenel?

Yes, must be an authorized for C-Cure and Lenel

Q-53: Are the servers for all the buildings on one network?

No, they are all on separate servers and license