FAR_Part__13_5_-_Justification_for_Brand_Name_-_Forescout_-_Redacted.pdf

JUSTIFICATION FOR SOLE SOURCE/BRAND NAME UNDER THE PROCEDURES OF FAR SUBPART 13.5

SIMPLIFIED ACQUISITION PROCEDURES FOR CERTAIN COMMERCIAL ITEMS

1. Agency/Contracting Activity: Department of Defense Education Activity (DoDEA), Headquarters Procurement Division, 4800 Mark Center Drive Alexandria, VA 22350.

2. Description of Supplies and Services:

DoDEA requires the following supplies and services to support efforts to ensure its network is secured, monitored, and remediated in a timely fashion and in accordance with DoD IT security policy:

BASE YEAR

ForeScout VM CounterAct License (PN: VCT-10000) QTY: 10 ForeScout ActivCare Advanced Annual Maintenance for VM CounterAct (PN: FC-ACV-VCT-10000) QTY:

ForeScout Vulnerability Assessment Integration Module (VA-10000) QTY: 10 ForeScout ActivCare Advanced Annual Maintenance for Vulnerability Assessment Module (FN-ACV-VA-

1000) QTY: 10

ForeScout CounterAct Enterprise Manager License (PN: VCEM-25) QTY: 1 ForeScout ActivCare Advanced Annual Maintenance for Enterprise Manager (PN: FC-ACV-VCEM-25)

QTY: 1

ForeScout Advanced Threat Integration Module (ADT-1000) QTY: 10 ForeScout ActivCare Advanced Annual Maintenance for Advanced Threat Integration Module (FC-ACV-

ADT-10000) QTY: 10

On-site (Peachtree City, GA) technical engineering services to assist DoDEA IT staff with license, appliance, and module installation (FC-PS20);

On-site (split between Peachtree City, GA and Alexandria, VA) program manager oversight to coordinate with license, appliance, and module installation (FC-PS-PM20);

Remote architecture support services – one half day up to four hours (FC-PS-80); and Facilitation of two on-site (one session at Peachtree City, GA and one session in Alexandria, VA) ForeScout Certified Administrator course for up to 10 individuals per session (FC-T30) QTY:2

OPTION YR (1-4)

Annual renewal for FC-ACV-VCT-10000, FN-ACV-VA-1000, FC-ACV-VCEM-25, and FC-ACV-ADT-10000

3. Description of Action: A firm fixed price contract is planned with a total estimated value of $3,681,483.00. The period of performance is for a 12-month base period and four 12-month option periods. FY15 Operating and Maintenance (O&M) funds are available for the in the estimated amount of $1,985,365.53

4. Authority: 41 U.S.C. 1901

5. Discussion on the Use of the Authority Cited: DoDEA requires a continuous security monitoring and mitigation solution for DoDEA’s network, security, and identity infrastructure in order to (1) assure the right users and their devices gain appropriate access, and (2) provide real-time intelligence and policy-based control so that threats are foiled and problems remediated without disrupting business productivity.

The solution must be certified on the Department of Defense Unified Capabilities Products List (UCPL) and have the following 16 characteristics:

1) Real-time visibility

2) Network access control

3) Endpoint compliance

4) Rapid threat response

5) Agentless operation

6) Open interoperability

7) Faster risk operations

8) Automated remediation

9) Quarantine

10) Vendor & infrastructure agnostic

11) Blocking malicious network traffic

12) More timely vulnerability assessments

13) Effective on unmanaged/unknown endpoints

14) Non-desktop operating system device support

15) Track changes of endpoint software or configuration

16) Real-time inventory of applications, services, users, devices, and vulnerabilities

Based on DoDEA IT staff professional experience, market research, and evaluation of other open market network security monitoring products on the DoD UCPL, the ForeScout solution is the only product that meets all of the following DoDEA IT requirements:

1) Open interoperability functionality that supports the ability to work with other DoDEA security solutions: McAfee Host Based Security System, and Assured Compliance Assessment Solution (ACAS) scanning;

2) Visibility and control capabilities over managed and unmanaged devices to block and/or isolate computer systems that are not compliant with DoDEA network security policies;

3) Ability to provide faster risk operations; and,

4) Automated remediation.

Using another product will negatively impact the security of DoDEA’s network operations because the agency will need to manage and secure its network using different protocols for each security solution installed. Securing and managing data in such a manner will make DoDEA’s network and data more vulnerable to a breach or attack, since the opportunity for gaps and inconsistencies grows with each variable that needs to be managed or considered.

6. Efforts to Obtain Competition: DoDEA subject matter experts reviewed, researched, and tested several commercial network security monitoring products. This requirement will also be synopsize on the Federal Business Opportunities website.

7. Effort to remove barriers to/increase competition: DoDEA will continually monitor the IT market for new developments and software applications for the organization. As new solutions for meeting this need enter the marketplace, all interested parties will be given the opportunity to compete for any additional requirements of this type.

8. Market Research: Market research indicated that there are at several authorized resellers that provide ForeScout products. As such, this requirement will be competed on the Federal Business Opportunities website amongst all ForeScout authorized resellers.

9. Interested Sources: Any authorized reseller of ForeScout products and services is an interested source.

10. Other Supporting Facts: None

CERTIFICATION

Technical Certification (required): I certify that the supporting data under my cognizance and which forms a basis for this justification is accurate and complete to the best of my knowledge and belief.

JACKS.YVETTE.R.15130 Digitally signed by JACKS.YVETTE.R.1513080774 DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=DODEA, cn=JACKS.YVETTE.R.1513080774

Signature: 80774 Date: 2015.09.18 15:10:50 -04'00'

Print Name: Yvette Jacks Office: DoDEA IT HQ

APPROVAL

Approval is granted subject to the availability of funds and provided that the products/services described herein have otherwise been authorized for acquisition.

Contracting Officer (required): I certify that the justification is accurate and complete to the best of my knowledge and belief, and hereby determine that the anticipated costs to the Government for this requirement will be fair and reasonable.

Digitally signed by

TOWNSEND.JENNIFER.A.1231462160

DN: c=US, o=U.S. Government, ou=DoD, ou=PKI, ou=DODEA, cn=TOWNSEND.JENNIFER.A.1231462160 Date: 2015.09.18 15:35:41 -04'00' _

Print Name: Office: DoDEA HQ Procurement Division

Legal Review: (required)

Based on the foregoing, this justification is legally sufficient.

Digitally signed by

CHOI.CHRISTINE.MOON.1169210345

DN: c=US, o=U.S. Government, ou=DoD, Signature: OON.1169210345 ou=PKI, ou=DODEA, cn=CHOI.CHRISTINE.MOON.1169210345 Date: 2015.09.18 17:01:49 -04'00'

Print Name: Office: DoDEA HQ, Office of General Counsel

Competition Advocate (required > $650,000, but < $12.5M, or as “one level above the approval authority for the previous justification” when the planned actions to remove any barriers to competition cited on the previous justification were not completed)

Signature: _

Print Name:

TOWNSEND.JENNI

Signature: FER.A.1231

462160

CHOI.CHRISTINE.M

Head of Procuring Activity (required > $12.5 million, but < $85.5M; or as “one level above the approval authority for the previous justification” when the planned actions to remove any barriers to competition cited on the previous justification were not completed)

Signature: _ Date:

Print Name: Office:

Head of Agency (required as “one level above the approval authority for the previous justification” when the planned actions to remove any barriers to competition cited on the previous justification were not completed)

Senior Procurement Executive, DoD (required > $85.5M; or as “one level above the approval authority for the previous justification” when the planned actions to remove any barriers to competition cited on the previous justification were not completed)