Attach 9 - Questionsandanswers 2 JWICS Installation.docx

Security & Clearance Requirements

1. Are all on-site contractor personnel required to hold TS/SCI clearances, or will TS-only cleared staff be acceptable for Phase I installation (e.g., for switch deployment)? TS/SCI access is required - systems will be in a SCIF for all phases of deployment. Contractor personnel must have approved visit requests in DISS to verify access. Client organization will provide security support/sponsor to contractor personnel.

1. What is the process and expected timeline for base access credentialing and badging for cleared contractor personnel? Day only passes are used with the following required: must be a US Citizen, provide SSN for background check and present a current state-issued driver’s license Real IDD endorsement. Alternatively, we would prefer to coordinate an Entry Authorization List (EAL) between base SFS, Security Management Division (SMD) and cleared prime contractor for cleared personnel with same requirements as the day pass - if used it would permit access for a designated period of time after initial Visitor Control Center (VCC) visit.

1. Will the prime contractor need to directly oversee all classified deliverables under the DD254, or can this responsibility be delegated to our cleared subcontractor? The prime contractor is responsible for ensuring DD Form 254 requirements are met by contractors. The prime contractor can delegate access to the subcontractor - the sub can only have access equal to or lesser than the prime - the prime has ultimate responsibility for the awarded contractors. Our units’ Information Protection (IP) office, Contracting office and Special Security Officer (SSO) shop will prepare the 254 with coordination with the awarded prime contractor. All individuals handing classified information or performing work inside secure spaces will have the required classification.

System Architecture and Infrastructure

1. Can you confirm the expected quantity and model class of Cisco switches for Phase I? Are there specific part numbers aligned with the GEMSS standard that should be used? Six Cisco Catalyst C9500 Layer 3 switches are indicated on List of Materials (LOM). All three paired clusters of switches will be in separate facilities with interconnection between clusters on base and to off base AFJWICS enterprise. All network equipment must be Cisco branded to meet GEMSS standards and to ensure seamless compatibility with existing infrastructure at the other location(s) we are connecting to.

1. How many server racks are expected for deployment? Should switch stacking be configured per-rack or across racks? Three server racks are required with two stacked Cisco C9500 Layer 3 switches per rack - each rack will be in a designated facility and must be capable of sustaining independent (aka “on an island”) operations in their designated facility in case network connectivity between facilities is lost.

1. Will any of the 14 virtual servers host classified workloads requiring CAC enforcement or DISA STIG overlay compliance? CAC enforcement is not currently implemented on the AFJWICS Enterprise. All devices on the network are required to be DISA STIG compliant. The awarded contractor will be responsible for ensuring that the provided solution is configured for DISA STIG compliance and written steps are provided so US Government personnel can adequately maintain STIG compliance after contract completion.

1. Is there a mandated VMware version or licensing tier (e.g., vSphere Enterprise Plus, Horizon) that must be used? Compatibility with VM Cloud currently being deployed at Air Force Global Strike Command (AFGSC), Barksdale AFB, LA, is required. Current specification in List Of Materials (LOM) is for U.S. Federal Omnissa Horizon 8 Enterprise Term with VVF for VDI Edition.

1. Should we assume integration with an existing zero client environment, or will this be a greenfield VDI deployment? We understand that the definition of “greenfield VDI deployment” means that this deployment is “from scratch.” AFJWICS is operational at our location in an Enterprise configuration. A VM Cloud-based solution is currently being fielded at Air Force Global Strike Command (AFGSC), Barksdale AFB, LA. There are NO VM Cloud-based AFJWICS currently on our site. Our cloud subnet will need to connect to AFGSC as part of a wider cloud-based capability. Our site will be the first outside AFGSC to be connected in this configuration. The two locations must be interconnected via AFJWICS Enterprise with local capability to function “on an island” at the base level and down do the local facility level in case of interrupted connectivity between the two bases or between our three facilities.

Hardware Integration and Logistics

1. Will power redundancy (e.g., dual PDUs per rack) and cooling infrastructure be provided by the government, or must we include this in our solution? The communications rooms will contain L6-30 facility UPS capability. The List of Materials (LOM) contains requirements for fans, PDU’s, racks, etc. associated with each rack/location.

1. Is there a specific SmartNet co-termination policy with the base’s GEMSS or other Cisco contracts that we must adhere to? Yes - AFJWICS security requirements mandate that we comply with GEMSS/Cisco requirements.

1. Are there specific requirements for fiber cabling types (OM3/OM4), armored jacket specs, or color-coding based on classification zones? All our current multimode (MM) Fiber is OM3 and color coded Yellow IAW AFGSC AFJWICS cabling requirements. OM3 is the current standard based on the current solution.

Training and Documentation

1. Will contractor training be expected to occur in-person on-site, or are virtual instructor-led and document-based training options acceptable? We would highly prefer in-person, on-site training but virtual instructor-led, document-based training options would be acceptable. We anticipate US Gov employees be tag-alongs during installation to and setup in order to allow OJT to occur during install.

1. Beyond the technical documentation and diagrams, are there expectations for submission of RMF artifacts, STIG baselines, or Gold Disk images? Initial preparation of RMF artifacts, STIG baselines, or Gold Disk image by contractor would be expected with sustainment to be performed by US Gov personnel upon contract completion.

Pricing and Contractual Structure

1. Will travel costs to Ellsworth AFB be reimbursed separately (e.g., as ODC or CLIN-based), or must they be factored into the fixed-price quote? Travel costs should be factored into the fixed price quote.

1. What are the government’s preferred performance timelines post-award for Phase I and Phase II? Are there any hard deadlines tied to FY25 funding? Performance dates will be established when the contract is awarded. The Performance Work Statement specifies 180 days to complete all work.