A4-JA_Mil_Cloud_2_FY19_F5-BIG_IP-Redacted..pdf

JUSTIFICATION FOR AN EXCEPTION TO FAIR OPPORTUNITY

Mil Cloud 2 F5-BIG IP

NITYU19RV485

1. Identification of the Requiring and Contracting Activity:

(a) Requiring Activity:

DFAS-ZTDA

ATTN: Sean Murray 317-212-7457 8899 E. 56th Street Indianapolis, IN 46249-2801 DoDAAC: HQ0358

(b) Contracting Activity DFAS Columbus Contract Services Directorate Building 21, Room 2B218 3990 E. Broad St.

Columbus, OH 43213-1152

2. Nature or Description of the action being approved:

The purpose of this document is to obtain approval for an exception of the fair opportunity acquisition in accordance with FAR 16.505(b)(2)(ii)(B), competition is limited to the following brand name product: F5 applications and endpoints.

The procurement strategy is to issue a request for quote (RFQ) on the NASA Solution for Enterprise-Wide Procurement (SEWP), and the fair opportunity procedures set up by the SEWP will be followed. According to those procedures, a RFQ will be posted and submitted to SEWP Contract Groups B, C, and D under

NAICS 541519.

3. Description of supplies/services required to meet the agency needs (including the estimated value – base and option years) This procurement is for the purchase of software, licenses and software support for the F5 BIG-IP to integrate with the milCloud 2.0 virtualized infrastructure.

The F5 BIG-IP provides load-balancing capability for the milCloud migrated applications. The F5 BIG-IP Application Security Manager (ASM) is a powerful Web application Firewall (WAF) that enables DFAS to defeat sophisticated and complex threats while also improving application performance by offloading secure sockets layer (SSL) traffic. The BIG-IP ASM stops these threats via a combination of layer 7 Distributed Denial-of-Service (DDoS) defenses, advanced detection and mitigation techniques, deep threat analysis, dynamic learning, virtual patching, and granular attack visibility. The BIG-IP ASM provides visibility into HyperText Transfer Protocol (HTTP) and WebSocket traffic to protect against attacks that blend in with normal web traffic, streaming data feeds, and chat sessions. Purchasing the virtual F5 BIG-IP devices will allow DFAS to comply with the mandate.

For a complete listing of the software and licenses see Attachment 1: Bill of Materials (BOM)

The following is a high-level Government cost estimated of this requirement is $1,770,642.18. This include a base year with two options years.

Base Year: $1,038,707.85 Opt. Year 1: $374,147.04 Opt. Year 2: $357,787.29 Estimated Total: $1,770,642.18

4. Identification of the exception to fair opportunity (see 16.505(b)(2)) and the supporting rationale, including a demonstration that the proposed contractor’s unique qualifications or the nature of the acquisition requires use of the exception cited. Justification and approval is required because this is a brand name requirement. Per FAR 16.505(a)(4):

This requirement is for the purchase of virtual F5 Web Application Firewall virtual appliances to protect the DFAS milCloud architecture. The DFAS Cyber Security Service Provider (CSSP) is required to comply with DoD mandates on Security Technical Implementation Guidelines, orders and mandates ranging to increased inspection to decryption and Web Application Firewall (WAF) capabilities, which need to be in place for connectivity to the DODIN. This purchase ensures that DFAS aligns with the JRSS requirements and meets the DoD requirements that all agencies must comply with. This specific purchase allows DFAS to align the milCloud architecture seamlessly with the current and proposed ELAN infrastructure. This allows DFAS to receive the best value on its previous purchase of F5 WAF hardware. This purchase is a virtualized version of the previously purchased hardware. Recent DFAS purchases will align seamlessly with the planned purchase of the virtual F5 WAF devices to continue getting benefits of the product even after the integration into JRSS, which eliminates the need for additional training expenditures and the redesigning of the network. The hardware purchase of the F5 brand is necessary because it has absolute compatibility with the existing DFAS environment. DFAS has standardized the enterprise by using F5 networking equipment, which is the only manufacturer that meets our stringent interoperability, security, performance requirements. Other manufacturers were found to be incapable of meeting DFAS requirements and network design efficiencies due to the lack of specific features found only in F5 products.

Introducing network infrastructure hardware into our network that is not manufactured by F5 would cause a complete network redesign, forcing the potential of unplanned outages and business line downtime. As such, this procurement is intended to integrate with the existing agency-deployed backbone and F5 components. DFAS standardized on the protocols of F5; use of any other manufacturer will incur substantial transition costs, considerable downtime time, and engineering effort. In addition, this will slide the project deployment and completion dates to the right by roughly 6 months that would not allow us to meet the required date of 31-December-2020 for Web Application Firewall implementation. This purchased is a virtualized version of the current F5 infrastructure and will integrate seamlessly with the current DFAS infrastructure without creating a need for a network redesign.

5. A determination by the Contracting Officer that the anticipated cost to the Government will be fair and reasonable.

The Contracting Officer anticipates the cost for this requirement to be fair and reasonable based on the IGCE, the market research results and the expert knowledge of the requiring activity. This requirement is for commercial products, which are available from multiple resellers. Market research conducted on MASA SEWP RFI #119666 resulted in four budgetary price quotes. This indicates adequate competition among the available vendors of the product sought on NASA SEWP. The Independent Government Cost Estimated (IGCE) of $1,770,642.18 is based on the average budgetary cost estimate from the NASA SEWP RFI. In determining a fair and reasonable price, the Contracting Officer will evaluate the Independent Government Cost Estimate (IGCE). Based on an RFQ issued against the SEWP IDIQ vehicle, it is anticipated the pricing will be fair and reasonable, as determined under the terms and conditions of the RFQ to be submitted to SEWP contract holders. Additionally, price comparisons will also be accomplished from as many other sources as possible, include, open market, and other Government-Wide Acquisition Contracts (GWAC) such as GSA Federal Supply Schedules.

These items are available from multiple Value Added Resellers on the NASA SEWP schedule. Based on market research, it is anticipated that SEWP pricing will be lower than open market pricing. The following table below shows sources who provided pricing and availability information for this requirement:

Vendor Base Opt Yr. 1 Opt Yr. 2 Total Force 3 $1,006,500.72 $338,445.12 $338,445.12 $1,683,390.96 Iron Bow $1,048,392.48 $433,266.36 $367,827.36 $1,849,486.20

WWT $1,030,404.96 $367,559.88 $367,559.88 $1,765,542.72

V3Gate $1,069,533.24 $357,316.80 $357,316.80 $1,784,166.84

Average

$1,038,707.85

$374,147.04

$357,787.29

$1,770,642.18

Leveraging DFAS’ current use of the manufacturer’s product and services, along with open market price comparison, the contracting officer is confident in obtaining the best value for DFAS.

6. Any other facts supporting the justification:

Nothing to add to this section that has not already been articulated within this justification document.

7. A statement of actions, if any, the agency may take or remove or overcome any barriers that led to the exception to fair opportunity before any subsequent acquisition for the supplies or services is made:

DFAS IPS conducted market research and found no other manufacturers were able to meet DFAS specific architecture requirements. DFAS utilizes specific features found in F5 BIG-IP such as iRules, Application Policy Manager (APM), and Application Security Manager (ASM) together in order to maintain compliance with DOD security requirements for external facing web applications. In addition, for DFAS IPS to migrate applications to milCloud 2.0 within the scheduled timeframe stated in paragraph 3, DFAS IPS is requiring F5 as the only acceptable brand.

Although these manufacturers are the sole developers and providers of the software, there are multiple manufactures and vendors with the required hardware, software, maintenance, and support available on the NASA SEWP Contracts. A Request for Information (RFI) was posted on NASA SEWP and the information obtained has indicated that these items are available from multiple authorized resellers on the NASA SEWP schedule. Market research was conducted for the purpose of seeking as many potential sources as possible. Although there are specific manufacturers for the existing equipment, there are multiple vendors that provided the hardware available on the NASA SEWP Contracts. An RFQ will be posted on NASA SEWP. Competition will be sought among all authorized resellers for the best possible pricing.

Competition will be sought amongst NASA SEWP Groups B, C, and D contract holders for the best possible pricing. Market research has shown that manufacturer products/services are available in a competitive environment under NASA SEWP.

8. Evidence that any supporting data that is the responsibility of technical or requirements personnel (e.g., verifying the Government’s minimum needs or requirements or other rationale for an exception to fair opportunity) and which form a basis for the justification have been certified as complete and accurate by the technical or requirements personnel.

I certify that part numbers included in Attachment 1: Bill Of Materials (BOM) are not included in any DoD JELA contracts.

Requiring Activity/Program Management Office Certification:

Printed Name: _Sean Murray

Title: ELAN System Manager Organization Code: ZTDA

Signature: _/____________________________________/_____ Date: __8/2/2019

9. The contracting officer’s certification that the justification is accurate and complete to the best of the contracting officer’s knowledge and belief.

I hereby determine that the anticipated cost for this contract action will be fair and reasonable. I certify that this J&A is accurate and complete to the best of my knowledge and belief.

Printed Name: Stephanie Smith

Title: Contracting Officer Organization Code: ZECAB

Signature: __/ / ___ Date: __08/02/2019__________

10. Approvals (I certify that the facts and representations under my cognizance which are included in this justification and which form a basis for this justification are complete and accurate.):

Review for Legal Sufficiency:

Printed Name: _April Breck

Title: Attorney Organization Code: HGB

Signature: __/___________________________________/ Date : 08/02/2019

11. Activity Competition Advocate ($650,000 – 12,500,000)

Printed Name: Jon Houze

Title: Chief Contract Policy and Compliance Organization Code: ZEC

Signature: / _______________________________/________ Date: 08/02/2019

Attachment 1: Bill of Materials (BOM) Base Year

Part Number Description Devices CPU Memory Hard Drive

F5-BIG-VE-BT-10G-V16 BIG-IP Virtual Edition: Best Bundle 10 Gbps (v11.6.x - v16.x) 12 8 16 139gb F5-

SVCBIGVE+PREUSGOV

BIG-IP Service: Premium Virtual Edition L1-3 by US Nationals in US For BIG-IP Virtual Edition: Best Bundle 10 Gbps (v11.6.x -v16.x) 12 n/a n/a n/a

F5-ADD-BIG-VE-F-3 BIG-IP Add-on: FIPS 140-2 Level 1 Virtual License for 1G to 10G 12 n/a n/a n/a F5-

SVCBIGVE+PREUSGOV

BIG-IP Service: Premium Virtual Edition L1-3 by US Nationals in US For BIG-IP Add-on: FIPS 140-2 Level 1 Virtual License for 1G to 10G 12 n/a n/a n/a

F5-SBS-BIGVE-IPI31YR

BIG-IP Virtual Edition IP Intelligence License (1-Year Subscription, 10 Gbps) 12 n/a n/a n/a

F5-SBS-BIG-SWG-

1B1YR

BIG-IP Virtual Edition Secure Web Gateway License (5000 Sessions, 1- Year Subscription, 3 Gbps / 5 Gbps / 10 Gbps) 12 n/a n/a n/a

Option Year1 Part Number Description Devices F5-

SVCBIGVE+PREUSGOV

BIG-IP Service: Premium Virtual Edition L1-3 by US Nationals in US For BIG-IP Virtual Edition: Best Bundle 10 Gbps (v11.6.x - v16.x) 12

F5-

SVCBIGVE+PREUSGOV

BIG-IP Service: Premium Virtual Edition L1-3 by US Nationals in US For BIG-IP Add-on: FIPS 140-2 Level 1 Virtual License for 1G to 10G 12

F5-SBS-BIGVE-IPI31YR BIG-IP Virtual Edition IP Intelligence License (1-Year Subscription, 10 Gbps) 12

F5-SBS-BIG-SWG-1B1YR

BIG-IP Virtual Edition Secure Web Gateway License (5000 Sessions, 1-Year Subscription, 3 Gbps / 5 Gbps / 10 Gbps) 12

Option Year2 Part Number Description Devices F5-

SVCBIGVE+PREUSGOV

BIG-IP Service: Premium Virtual Edition L1-3 by US Nationals in US For BIG-IP Virtual Edition: Best Bundle 10 Gbps (v11.6.x - v16.x) 12

F5-

SVCBIGVE+PREUSGOV

BIG-IP Service: Premium Virtual Edition L1-3 by US Nationals in US For BIG-IP Add-on: FIPS 140-2 Level 1 Virtual License for 1G to 10G 12

F5-SBS-BIGVE-IPI31YR BIG-IP Virtual Edition IP Intelligence License (1-Year Subscription, 10 Gbps) 12

F5-SBS-BIG-SWG-1B1YR

BIG-IP Virtual Edition Secure Web Gateway License (5000 Sessions, 1-Year Subscription, 3 Gbps / 5 Gbps / 10 Gbps) 12