JA_Redacted.pdf

Control Number: HQC007-15-31

JUSTIFICATION AND APPROVAL

FOR OTHER THAN FULL AND OPEN COMPETITION

1. Contracting Office – Defense Commissary Agency, IT Contracting Branch, Ft. Lee, VA

2. Type of Contract Action – This is a new FY15 firm-fixed price requirement for F-5 BIG IP hardware, software, maintenance and installations services; the requirement is funded using Defense Wide Working Capital funds.

3. Description of Supplies/Services – FY15 procurement for F-5 BIG IP 5250v-F Local Traffic Manager with Hardware and Software Maintenance Support and Services. Estimated value and option periods are as follows:

Estimated Value & Performance Period Base Period: 8/19/2015 - 12/2/2016

Estimated Value & Performance Period First Option: 12/3/2016 – 12/2/2017

Estimated Value & Performance Period Second Option: 12/3/2017 – 12/2/2018

Estimated Value & Performance Period Third Option: 12/3/2018 – 12/2/2019

Total Estimated Value Base and all Option Periods:

The specific F5 brand-name hardware, software, and maintenance for procurement are:

Part Description Quantity

Base Period F5-BIG-LTM-5250V-F BIG-IP Switch: Local Traffic Manager 5250v

FIPS (32G, Max SSL & Comp)

F5-SVC-BIG-PRE-HW175 BIG-IP Service: Premium CAT HW175 3 F5-ADDBIGAPM-5200V-B BIG-IP Add-on: Access Policy Manager License

(5200v Base – 500 CCU)

F5-SVC-BIG-PRE-SW22-EDI BIG-IP Service: Premium CAT SW22 3 F5-SVC-RMA-OPT Service: RMA Removable HD/ MEM 3

Three (3) Option Years – Reflects Required Quantity in Each Year F5-SVC-BIG-PRE-HW175 BIG-IP Service: Premium CAT HW175 3 F5-SVC-BIG-PRE-SW22-EDI BIG-IP Service: Premium CAT SW22 3 F5-SVC-RMA-OPT Service: RMA Removable HD/ MEM 3

Additionally, IAW the PWS in the solicitation, DeCA requires implementation of the solution, 40 hours of consultation, and three days of on-site training. DeCA requires these ancillary services be performed by an F5 GUARDIAN Professional Services Partner certified by F5.

4. Authority Cited - 41 U.S.C. 1901 as implemented by FAR 13.501(a)

5. Reason for Authority Cited – DeCA manages commissary operations worldwide for the Department of Defense (DoD). These operations are supported with various systems using commercial-off-the-shelf (COTS), government-off-the-shelf (GOTS), and in-house developed applications. The new state-of-the-art Warehouse Management System (WMS) is a COTS package that provides warehousing functions within DeCA Central Distribution Centers (CDCs).

DeCA is currently implementing high availability architecture for WMS and the WMS vendor has specified the F5 Big IP 5250v-F Local Traffic Manager as the specific brand and model that has been integrated into their WMS high availability solution for DeCA. F5 Big IP hardware and software products have already been incorporated within the new WMS system and these additional Brand Name products are necessary to continue the high availability implementation of this system at the CDC locations in DeCA. The procurement of F5 Network solutions will modernize the WMS current application delivery infrastructure with a next generation high availability solution. The procurement serves the purpose of providing a modernized, optimized and secure Layer 4-7 infrastructure. F5 is the only vendor to provide a single integrated solution with aim to support the delivery of network-based applications and the security, performance, availability of servers, data storage devices, and other network resources. The procurement of F5 will eliminate the need for multiple single point products that support the Agency’s application delivery, application security and user access in order to reduce total cost of ownership and increase operational efficiencies.

F5 has the mission-essential features for the application delivery enterprise deployment at DeCA.

The mission-essential features of this requirement that make F5 unique to the exclusion of all other solutions that serve similar purposes are described below.

F5 is the only application delivery platform that can provide integrated Layers 4 – 7 capabilities within a single platform. The integrated capabilities include local server load balancing, global server load balancing, application and WAN acceleration, access, authorization and SSL VPN, web application firewall and a purpose built Layer 3 and 4 firewall.

The F5 application delivery platform has a unique approach to end point inspection by providing a combination of automatic detection, protection, re-routing, and quarantine to establish appropriate levels of trust. This enables IT personnel the ability to determine whether a user can access all, some, or none of the Agency’s resources.

F5 can provide a completely frictionless web fraud and anti-malware solution. This is a key discriminator of the F5 application delivery platform. The solution protects web-based applications against malicious web activity such as web injections, phishing attacks, page modifications and abnormal user behavior.

The F5 Application Delivery Firewall solution combines the network firewall with anti-

DDoS, traffic management, application security user access management and DNS security. F5 is the only application delivery platform that combines these individual point solutions into a single, integrated web application centric security solution.

F5 is the only application delivery platform that provides a Policy Enforcement Manager for intelligent Layer 4–7 traffic steering, network intelligence and dynamic control of network resources. With the F5 Policy Enforcement Manager, the Agency can accurately identify the applications and services subscribers are using and analyze how they are being used.

F5 is the only application delivery platform that can provide a secure, IPv6-ready mobile and remote access capabilities to Agency resources – such as Microsoft Exchange, SharePoint, VDI, etc. – over all networks and from virtually any device. With the F5 remote access capabilities, the Agency can achieve dynamic access control through Layer 4 and Layer 7 dynamic access control lists (ACLs) that are created based on user identity group, device type and security posture, location and IP.

F5 is the only application delivery platform that uses a Federal Information Processing

System (FIPS) crypto module in firmware or hardware form with a preferred Overall Security Level of 3 and a Minimum Level of 2.

F5 is the only single platform to hold ICSA Labs certification for Network Firewall, SSL

VPN, WAF, and IPSec (physical & virtual).

F5 is the only application delivery platform that is certified on the DISA UCCO APL.

6. Efforts to Obtain Competition - The solicitation will be posted to FBO. The solicitation will request quotes from F5 GUARDIAN Professional Services Partners and companies who may team with those service providers that resell the specified F5 products.

7. Fair and Reasonable Cost Determination - Price will be determined fair and reasonable IAW FAR 13.106-3 prior to award.

8. Market Research and Interested Sources – Market research was conducted utilizing Department of Defense (DoD) multiple award contract vehicles and other Government-wide Acquisition Contracts (GWACS). Market research also included gathering data from several vendors’ websites and previous acquisitions. F5’s website shows five resellers and GUARDIAN Professional Services Partners in the USA: Accuvant Inc.; FishNet Security; Milestone Systems Inc.; Nexum, Inc.; and Trace3.

9. Actions to Increase/Foster Competition – DeCA will assess the opportunity for a competitive acquisition should future opportunities emerge. Future needs will be re-assessed when the current equipment becomes obsolete and needs to be replaced, to include consideration for use of other vendors. DeCA continually communicates and works with other DOD agencies, its business partners, and attends trade and industry shows, in an effort to stay abreast of this evolving technology. As legislation and regulatory changes mandated by DOD change and influence the DOD department’s information technology requirements, the commercial market place’s ability to stay abreast of those changes and provide viable solutions will also change.

10. Other Factors – This is a new procurement for DeCA therefore, no contract history is available. The WMS vendor has specified the F5 Big IP 5250v-F LTM as the specific brand and model that has been integrated into their WMS high availability solution for DeCA. F5 Big IP hardware and software products are necessary to continue the high availability implementation of this system at the CDC locations in DeCA. Furthermore, as stated above, there are no alternate products in the commercial market that provide the specifications, capabilities and certifications required by DeCA. Therefore, it is not possible to procure any other brand name product to integrate into the vendor’s current solution for DeCA.

Technical Certification:

I certify that the supporting data under my cognizance, which are included in this justification, are accurate and complete to the best of my knowledge and belief.

Jeff Cook Signature: _____

IT Specialist Date: _________________________

Requirements Certification:

I certify that the supporting data under my cognizance, which are included in this justification, are accurate and complete to the best of my knowledge and belief.

Andy Early Signature: ______

COR Date: _________________________

Fair and Reasonable Price Determination and Contracting Officer Certification:

I hereby determine that the price for this contract action will be fair and reasonable. I certify that this J & A is accurate and complete to the best of my knowledge and belief.

Richard A. Deiter Signature: __ __

Contracting Officer Date: _________________________

06/19/2015

6/23/2015

06/24-2015

DEITER.RICHARD

.A.

EARLY.JOSEPH.A.III.

COOK.JEFFREY.S.