Question__Answers_-_Sep_7_2018.pdf

Item No.

Date

Received

Question

Date of

Gov't

Response Government Response Amendment

1 8/16/2018 SENTRIS or Equal. Is DITCO taking offers from non SENTRIS tool providers? And why is this named for SENTRIS and not an open fair competition on the requirements. It doesn’t appear to be a brand name justification, or is it?

8/17/2018

As stated in the RFP on pages 3, 4, and 5 in the description of CLINs 0001, 1001, 2001, 3001, and 4001 ‐ "Brand Name Sentris

Subscription or Equal. See Attachment 1 for salient physical, functional, or performance characteristics that “equal” products must meet."; Page 7 of the RFP, Provision 52.211‐6, Brand name or equal;

Page 11 of the RFP, Paragraph (1)(b), "The contractor must provide a COTS single sign on brand name Sentris subscriptions or equal as set forth in Attachment 1 ‐ salient physical, functional, or performance characteristics."

AMD0001

2 8/18/2017 Is this to replace an existing implementation of SENTRIS or is this a net new implementation?

8/23/2018;

updated

08/30/2018

DoD has several contracts with the Sentris product. The Government is looking for an

Enterprise product brand name Sentris or equal. This solicitation is brand name or equal as detailed in the solicitation and

Provision 52.211‐6, Brand name or equal.

AMD0001

3 8/17/2018 What network will this solution be implemented?

8/23/2018 The scope of the effort is for all the DoD community, which includes multiple networks.

AMD0001

4 8/29/2018 Is this a new requirement or is there an incumbent vendor?

8/29/2018

This is a new requirement for an Enterprise unlimited subscription for all the DoD community to include contractor support for Brand Name Sentris or equal.

AMD0001

5 8/29/2018 If available, can you please send along the incumbent contract number?

8/29/2018 The following are Sentris contracts for similar requirements across DoD:

W904TE‐17‐M‐0710 (Garrison)

PO‐056462 (SMC)

W904TE‐17‐M‐0622 (Blue 53)

W904TE‐17‐M‐0506 (SOCOM)

07ESM986699 (Silver)

GBL17112701 (US Navy Point Magu)

MSEC0‐MAT0003903 (NAVAIR)

N41756‐16‐LM‐4202 (NAVAIR)

N68936‐16‐P‐0615 (Navy AT)

Classified (PMO 28)

Classified (PMO 37)

Classified (Richmond BOA)

Classified (Thunderbird)

AMD0001

6 8/30/2018 What is the deadline for questions? 8/30/2018 The solicitation has been updated (see

FAR 52.212‐1 section (a) in Red); Proposal

QUESTIONS due no later than 09/04/2018 at 2:00pm (CST) and should be submitted to the contract specialist at DITCO via the following email address:

carmelynanne.l.bryan.civ@mail.mil

AMD0001

7 8/30/2018 It is noted that the system being sought should be deployable and developed against open standards and standards developed by the DoD, NSA, and NIST for protection and dissemination of information.

Can you elaborate on the open standards and

DoD, NSA, and NIST standards that are to be referenced and complied with? Does this include NIAP Common Criteria Standards?

9/3/2018 The vendor proposing COTS solutions should inform the govt of the open standards that their COTS product supports and implements to allow technical evaluators to determine if proposed COTS product is an equivalent product to Sentris.

Page 7 of the RFP, Provision 52.211‐6, Brand name or equal; Page 11 of the RFP, Paragraph (1)(b), "The contractor must provide a COTS single sign on brand name

Sentris subscriptions or equal as set forth in Attachment 1 ‐ salient physical, functional, or performance characteristics."

AMD0002

8 8/30/2018 It is noted the system you desire should support “chat”, can you elaborate on what chat applications are to be supported? Does this include open source protocol support such as XMPP and services such as Spark and

Swift which are in use at the CoComs and

Services?

9/3/2018 Primary requirement is for use with

Microsoft Lync and Skype for business

AMD0002

9 8/30/2018 The solution requirements note that

“automatic redaction of data elements and content” is a requirement. Does this redaction have to be compliant with NIAP/

Common Criteria Protection Profile CC‐ 3.1 /

PP_APP_RED_EP_V2.0?

9/3/2018 No AMD0002

10 8/30/2018 Controlled Distribution is noted as a requirement. Is it the desire of the government that the service have the ability to change access in real‐time regardless of when the data was created? In essence, provide a real‐time policy control even though its been distributed already?

Additionally, is it desired that the service enable control of the data even after it has been granted initial access to the end user, thereby providing the ability to “lock” content to a user upon subsequent access requests?

9/3/2018 Yes, the requirement is to do so manually through administrator interface and tools directly or preferably to synchronize with an authoritative database, majority connect to authoritative database. Also, the tool shall prevent access upon subsequent use by virtue of sync with authoritative database should user no longer have requirements entitlements.

AMD0002

11 8/30/2018 It is noted that the subscription should

“control access to information” and provide the DOD CIO the ability “to account for the integrity of the information and the extent of its distribution”. Does this include the need to encrypt the data to ensure that unauthorized exfiltration, sharing by authorized sources ensures that the data is protected?

9/3/2018 Yes, the tool is required to encrypt using commercially available encryption tools and by setting up policy enforcement. The tool itself is not required to perform DAR encryption natively.

AMD0002

12 8/30/2018 It is noted the subscription should support

Microsoft Outlook, Microsoft Suite of Office

Automation products, Web Browsers, Document management Adobe Acrobat

Reader; WinZip and Desktop collaboration applications including chat, desktop video teleconferencing (VTC), and white boarding.

What version and builds of these applications should it support (ie: Office for Windows

2016)? What Browsers and versions should it be compatible with? (ie: Internet Explorer, Chrome, Safari)?

9/3/2018 The vendor proposing a COTS solution should inform the govt of the operating system versions supported as well as compatibility with Office, Browsers, Adobe reader, WinZip and Desktop applications for collaboration that their COTS product supports and implements to allow technical evaluators to determine if proposed COTS product is an equivalent product to Sentris. Page 7 of the RFP, Provision 52.211‐6, Brand name or equal;

Page 11 of the RFP, Paragraph (1)(b), "The contractor must provide a COTS single sign on brand name Sentris subscriptions or equal as set forth in Attachment 1 ‐ salient physical, functional, or performance characteristics."

AMD0002

13 9/6/2018 Will the Government extend the RFP response date?

9/7/2018 The Government will not be extending the response date of the RFP. The RFP responses are due NLT than September

14, 2018 11:00 a.m. CST

AMD0003

Questions & Answers Template

RFP ‐ HC108418R006

As of September 7, 2018

All questions asked have been answered and the Q&A period has closed.