NACCR_Questions_and_Answers_05_Oct_FINAL.pdf

Comment Number

Solicitation Section Document / Page / Paragraph / Line Number

Comment/ Question Government Response

INSTRUCTIONS TO

OFFERORS, 1.

Paragraph k., Page 54 Due date and time for submission of questions is identified as 1000 local Quantico VA, 12 October 2016. Would the Government entertain an extension to the due date to allow Offerors a minimum of five days after release of response to Solicitation questions to submit proposals. This will allow ample time to incoporate any necessary changes to the proposals resulting from response to questions and will take into consideration the 10 October Columbus Day federal holiday that falls just before the due date.

The proposal due date has been updated.

INSTRUCTIONS TO

OFFERORS, 2.

QUESTIONS AND

INTENT TO BID

Paragraph a., Page 54 Due date and time for submission of questions is identified as 1500 Eastern Daylight Time 28 September 2016. Would the Government entertain an extension to the due date for questions? Due to the significant number of documents for review, we respectfully request additional time to coordinate these documents with our potential small business partners to ensure that all clarification questions and concerns are adequately addressed as proposals are being prepared.

The proposal due date has been updated.

INSTRUCTIONS TO

OFFERORS, 3.

Content and Organization of Proposals

SF 1449, Page 58, Paragraph – Part I Technical Approach, Section 3. Requirements Evaluation Matrix (REM).

The instructions state “The Offeror shall complete the NACCR Requirements Evaluation Matrix (REM) provided in Attachment 4 to this solicitation.” Please verify that the REM to be completed is the file named Attachment_2_of_52.212- 1.xlsx and not Attachment 4.

The REM is named Attachment_2_of_52.212- 1.xlsx and is not Attachment 4. The RFP has been updated to reflect this correction.

The instructions state “Price proposal shall be entered on the spreadsheet file, attachment 6, readable in Microsoft Office Excel format.”

The price proposal is named Attachmnet_3_Of_52.212-1.xls

Please verify that the price proposal should be provided in the file named Attachment_3_Of_52.212-1.xls and not Attachment 6.

The REM is named Attachment_3_of_52.212- 1.xls and is not Attachment 6. The RFP has been updated to reflect this correction.

INSTRUCTIONS TO

OFFERORS 3. Content and Organization of Proposals

SF 1449, Page 60, Paragraph - Part IV: Price Proposal, Section 1. Pricing Information

Is there a Government-directed format or file preference type (Word, Excel, or PDF) for the priced Bill of Material (BOM)? The instructions state “The Offeror shall provide a priced Bill of Material (BOM).” The instructions are not clear if the BOM is the same as the information required in the price proposal (Attachment_3_Of_52.212-1.xls), a separate document or worksheet added to Attachment 3, or if the required BOM is the same as the worksheet for CLIN 0030 NAC hardware and initial warranty?

This BOM is to be included in the price proposal. The RFP has been updated for clarity.

The BOM and the CLIN 0030 information shall be provided seperately.

CDRLs and SF 1449 Continuation Sheets, Supplies/Services

NACCR_CDRLs.pdf, entire document, all pages, all box “a” and SF 1449, physical Page 19 (Continuation Sheets, Supplies/Services)

In the file named NACCR_CDRLs.pdf for each CDRL, box a. lists CLIN 0032.

However the SF1449 Continuation Sheets, Supplies/Services, CLIN 0033 is the CLIN that references the Contract Data Requirements List. Will the Government revise the NACCR_CDRLs.pdf to show CLIN 0033 instead of CLIN 0032?

The CDRLs have been updated to show the correct CLIN.

Cover, INSTRUCTIONS TO

OFFERORS

SF 1449, cover sheet, and page 54, Purpose, Paragraph k.

Can the Government verify the proposal due date and hand-carry submittal instructions, in light of the fact that 10 October is a federal holiday. The cover sheet of the SF1449 and the solicitation posting on the Federal Business Opportunities website list 11 October 2016 as the due date, whereas on page 54 paragraph k.

states “All proposals are due by: 1000 (10:00 a.m.) local time, Quantico, VA, 12 October 2016.” Will the Contracting Office be closed on 10 October, and will that affect advance notification requirements for Contracting Office personnel to recieved hand-carried proposals?

The Propsal due date and notification dates have been updated.

INSTRUCTIONS TO

OFFERORS, 2.

Questions and Intent to Bid

SF 1449, Page 55, Paragraph – 2. Questions and Intent to Bid, c.

The instructions ask offerors to “Please submit an intent to bid by 10:00 A.M. (local time, Quantico, VA) after the issuance of the Government solicitation amendment to provide responses to questions submitted. Additionally, please provide your Commercial and Government Entity (CAGE) code, Data Universal Numbering System (DUNS) number, information and point of contact (POC) information including name, phone number, street address and email address. Notice of Intent to Bid should be sent via email to Norene Jones at norene.jones@usmc.mil with a subject line of: NACCR M67854-16-R-4001 Intent to Bid.”

Would it be preferable / acceptable for offerors to submit their “intent to bid” response and information now instead of the day after an unknown date in the future when any amendment answering questions is issued?

RFP has been updated for clarity.

Please submit your intent to bid in accordance with the RFP.

INSTRUCTIONS TO

OFFERORS 3. Content and Organization of Proposals

SF 1449, Page 58, Paragraph – Part I Technical Approach, Section 4, Contractor Work Breakdown Structure (CWBS), and Page 56, Table 2 Technical Volume

In the SF 1449, the Contractor Work Breakdown Structure is identified in the Technical Volume Table 2 as a PDF file submit under the “file naming structure” column.

However, on page 57, the instructions state “the Offeror shall provide a CWBS in Microsoft Project format with appropriate level of detail to provide the Government the ability to understand how the Offeror intends to manage the proposed effort with visibility of tasks, activities, schedule, and list of deliverables.”

Does the Government want offerors to submit as a PDF, a Microsoft Project format (what version), or both?

This document must be submitted as a pdf. The RFP has been updated to be consistant.

INSTRUCTIONS TO

OFFERORS 3. Content and Organization of Proposals

SF 1449, Pages 60 and 61, Paragraph – Part V Contract Information, Section 3, Section 508 Deliverable Requirements

In the SF 1449, offerors are instructed to “...provide as part of its proposal the Government Product/Service Accessibility Template (GPAT) at Attachment XX to this RFP. Offerors may use the GSA Buy Accessible Wizard at http://www.buyaccessible.gov/ to assist with preparation of the GPAT document.”

We do not find an Attachment XX to the RFP.

We also do not find any solicitation attachments related to Section 508.

Will Government please provide the referenced Attachment XX?

RFP has been updated to remove the GPAT as an attachment to the RFP.

INSTRUCTIONS TO

OFFERORS 3. Content and Organization of Proposals

SF 1449, Page 60, Paragraph - Part IV: Price Proposal, Section 1. Pricing Information

Appendix A :

APPLICABLE

DOCUMENTS AND

STANDARDS

Mandatory Compliance Documents and Standards, pages 36-37

Will the Government provide copies of the Mandatory Compliance Documents and Standards in order to ensure the Offeror reviews and complies with the most current and intended version of the identified document and/or standard?

The documents listed in Appendix A have been updated and all documents are publically available.

INSTRUCTION TO

OFFERORS 3. Content and Organization of Proposals

Part VI: Small Business Participation, pages 61-

Please clarify whether or not material suppliers are considered as part of small business participation and plan percentages.

Suppliers are considered subcontractors.

INSTRUCTION TO

OFFERORS 3. Content and Organization of Proposals

SF 1449-PWS -Page 29-Section 3.4.1- Site Implementation -Provides "The contractor shall replace and correct equipment, software, applications, data, material, and services omitted and/or installed in error without additional cost or delay to the Government. The contractor shall EFIST and make operational any ancillary equipment, software, and services required to support this effort."

Can the Government confirm "in error" would be defined as a deliverable provided by Contractor which is not in conformance with the Government-approved Site Implementation Plan documents?

The RFP has been updated for clarity.

INSTRUCTION TO

OFFERORS 3. Content and Organization of Proposals

PWS -Page 46-FAR 52.228-5 provides a) The Contractor shall, at its own expense, provide and maintain during the entire performance of this contract, at least the kinds and minimum amounts of insurance required in the schedule or elsewhere in the contract.

Can the Government provide the kinds and minimum amounts of insurance required for this contract, which will also need to be included in all subcontracts executed herewith.

FAR 52.228-5 has been removed from the RFP.

INSTRUCTIONS TO

OFFERORS 3. Content and Organization of Proposals

SF 1449-Page 55-Paragraph b., and Attachment_2_of_52.212-1.xlsx - the Network Access Control, Compliance & Remediation (NACCR) Requirements Evaluation Matrix (REM), entire spreadsheet

The SF1449 instructs offers to use “...'Arial' or 'Times New Roman' 11 point pitch.

Tables...may use a reduced pitch not less than 8 point. Foldouts are not allowed, except for the Contractor Work Breakdown Structure (CWBS). Margins shall be one (1) inch on all sides." Do these formatting instructions apply to the Attachment 2 NACCR REM spreadsheet, which is currently formatted using Calibri font, less than one (1) inch on all sides margins, and legal sized paper (8.5 by 14 inches), which will result in foldouts in the printed copies. If the formatting instructions do apply, may offerors alter the REM spreadsheet to meet the formatting instructions and scale to print on 8.5 by 11 inches letter sized paper?

The RFP has been updated for clarity.

INSTRUCTIONS TO

OFFERORS 3. Content and Organization of Proposals

SF 1449-Page 55-Paragraph b., and Attachment_3_Of_52.212-1.xls - the pricing spreadsheet, entire spreadsheet

The SF1449 instructs offers to use “...'Arial' or 'Times New Roman' 11 point pitch.

Tables...may use a reduced pitch not less than 8 point. Foldouts are not allowed, except for the Contractor Work Breakdown Structure (CWBS). Margins shall be one (1) inch on all sides." Do these formatting instructions apply to the Attachment 2 NACCR REM spreadsheet, which is currently formatted using Calibri font, less than one (1) inch on all sides margins, and legal sized paper (8.5 by 14 inches), which will result in foldouts in the printed copies. If the formatting instructions do apply, may offerors alter the REM spreadsheet to meet the formatting instructions and scale to print on 8.5 by 11 inches letter sized paper?

The RFP has been updated for clarity.

N/A Government-provided SF 1449 solicitation attachments for completion by offerors including: Attachment_1_of_52.212-1.xlsx (Proposal Traceability Matrix);

Attachment_2_of_52.212-1.xlsx (NACCR REM), and Attachment_3_Of_52.212-1.xls (the pricing spreadsheet). All sheets/pages.

May offerors modify these solicitation attachments to add offeror name, page numbers, dates, solicitation number, titles, and other information to the headers and footers so that when printed or reviewed as soft copy it is easy to recognize the form and the applicable offeror? May offerors delete unused worksheets? Should offerors change the version of Excel (two are .xls and one is .xlsx) to most current .xlsx or leave as provided to offerors by the Government. This may conflict with the file naming structures in the SF 1449.

The RFP has been updated to reflect some requested changes in 52.212-1 Addendum, section (3)(c).

The excel format has been corrected to reflect .xls

INSTRUCTIONS TO

OFFERORS 3. Content and Organization of Proposals

SF 1449-Page 55-Paragraph b., and Attachment_1_of_52.212-1.xlsx (Proposal Traceability Matrix)

The SF1449 instructs offers to use “...'Arial' or 'Times New Roman' 11 point pitch.

Tables...may use a reduced pitch not less than 8 point. Foldouts are not allowed, except for the Contractor Work Breakdown Structure (CWBS). Margins shall be one (1) inch on all sides." Do these formatting instructions apply to the Attachment 1 Proposal Traceability Matrix, which is currently formatted using both 10 and 12 pitch font and less than one (1) inch on all sides margins. If the formatting instructions do apply, may offerors alter the Proposal Traceability Matrix spreadsheet to meet the formatting instructions and scale to print on 8.5 by 11 inches letter sized paper?

The RFP has been updated for clarity.

INSTRUCTIONS TO

OFFERORS 3. Content and Organization of Proposals

SF 1449-Page 56-Table 2, and Attachment_1_of_52.212-1.xlsx (Proposal Traceability Matrix)

The SF 1449 instructs offers to name (submit) the Proposal Traceability Matrix as an Adobe Acrobat PDF file per the File Naming Structure (ABC-PTM.pdf). The Government provided this form as MS Excel Spreadsheet. Does Government want offers to complete and submit the MS Excel spreadsheet or as an Adobe Acrobat

PDF?

RFP has been updated for clarity. This document must remain in MS Excel format.

Attachment 2 - Requirements Evaluation Matrix

(REM)

N/A How many non-EUD devices are there on the network? Table 1 of the PWS references the number of endpoints the solution will manage.

Attachment 2 - Requirements Evaluation Matrix

(REM)

SYS 135 - The NAC appliance shall be capable of open Web Post integrations to third party solutions

How will web post integration be used for the NAC solution? What third party products will be integrated?

In accordance with Attachment 2-REM, The NAC appliance shall be capable of open Web Post integrations to third party solutions.

Attachment 2 - Requirements Evaluation Matrix

(REM)

SYS137 - The NAC appliance shall be capable of integrating with third party solutions through Web Services

How will web services integration be used for the NAC solution? What third party products will be integrated?

In accordance with Attachment 2-REM, the NAC appliance shall be capable of integrating with third party solutions through Web Services

Attachment 2 - Requirements Evaluation Matrix

(REM)

SYS149 - The NAC appliance shall be capable of executing custom scripts on the NAC appliance

What would be the goal/intent/purpose of running scripts on the system? Should this read "executing custom scripts on the endpoint"?

In accordance with Attachment 2-REM, the NAC appliance shall be capable of executing custom scripts on the NAC solution.

Instructions to Offerors Section 1 paragraph k Due to the size and complexity of the response, we respectfully request a thirty (30) day extension The proposal due date has been updated.

Instructions to Offerors Part I (Pg. 58) For high availability, does the government wish to have two (2) radius servers at each location, or simply redundancy configured between locations?

The Government does not have a preference for how high availablity is provided, only that the requirement is met.

Multiple Several sections refer to capabilities for both physical and virtual appliances. Please describe the preference for physical or virtual appliances per location.

The Government does not have a preference.

Instructions to Offerors Part I (Pg. 58) Does the government intend to build remediation infrastructure in the event of client quarantine, or leverage existing remediation servers from isolated VLAN?

The Government intends to allow the Awardee to use existing servers in the event of client quarantine. In accordance with Attachment 1, SYS119-124, no hardware is required as part of this capability.

SF 1449 & Instructions of Offerors

Page 1 (SF 1449), and Page 54, Instructions to Offerors, para 1.k

What is the proposal submission deadline? SF1449 indicates 10:00 AM 11 Oct 2016, but RFP Instructions to Offerors indicates 10:00 AM 12 October 2016.

The proposal due date has been updated.

Instructions to Offerors Page 60, Instructions to Offerors, Part III. May we submit more than 4 past performance summaries, so that we may include some from our subcontractor partners?

Yes, the RFP has been updated to allow past performance submissions for subcontractors.

PWS Section 3.3.4 General Question Will the accreditation be considered a type accreditation (i.e. a single accreditation package will be developed for the NACCR solution)?

Yes, in accordance with PWS section 3.3.4, "NACCR will attain and maintain an Authority- To-Operate (ATO) as required by DoDI 8510.01" The NACCR solution will have a type accreditation.

31 PWS Section 3.3.4 General Question Will the accreditation boundary for this technical insertion include only the assets that are purchased through this solicitation?

Yes.

PWS Section 3.3.4 General Question Will continuous monitoring and annual testing of the NACCR only include the assets obtained through this solicitation?

Yes. Only the asset(s) provided by the successful offeror as part of their proposal will be required to have continous monitoring and annual testing.

PWS Section 3.3.4 Page 29, Statement 3 Will the selection of STIG checklists to be applied to NACCR assets be GFI? No, Ref Attachment 7 Section 3.4.2. The offeror shall propose applicable STIGS. The government shall approve and update the list as appropriate.

PWS Section 3.3.4 General Question There is no mention or reference to CNSSI 1253, which tailors RMF controls based on system categorization. Will the use of this tailoring method be acceptable as it is a federally approved reference?

Yes. CNSS 1253 is referenced in DoDI 8510.01, which is referenced in PWS section 3.3.4

PWS Section 3.3.4 Page 29, Statement 5 Will ACAS be GFE? Will installation and initial configuration of ACAS be considered outside of the scope of this solicitation?

Yes, Existing GFE ACAS systems will be used for these scans, therefore no install or initial configuration of ACAS will be necessary.

PWS Section 3.3.4 Page 29, Statement 13 Can you define what the expectations are for penetration testing (i.e. internal vs.

external, frequency of occurrence)?

PWS Section 3.3.4, Subparagraph 13 has been updated for clarity.

PWS Section 3.3.4 Page 30, Statement 19 Will a SCAP scanning tool be GFE? If not, what SCAP scanning solution is preferred?

Yes, SCAP scanning tool software (and DISA SCAP benchmarks) is GFE.

PWS Section 3.3.4 general, CDRL A046 Can you define the content that should be included for CDRL A046, Service Level

Agreements or Memorandum of Agreements?

PWS Section 3.3.4, Subparagraph 1 has been updated for clarity.

PWS Section 3.3.4 Page 28, 3.3.4 Para 1 Can you provide "RMF for DoD IT and MARCORSYSCOM Systems Engineering, Interoperability, Architectures and Technologies (SIAT) RMF Process Guide Version 1.0, 25 May 2016" to offerors?

Yes, this document has been added as Attachment 15.

INSTRUCTIONS TO

OFFERORS –

COMMERCIAL

ITEMS / 1. Purpose / k

PWS / Page 54 / 1 / All Section 1.k of the Instructions to Offerors section in the PWS states that all proposals are due by 10:00 am EST on October 12, 2016.

Given that physical copies will have to be mailed and the proposal’s complexity and length, contractor requests the government extend the due date of the proposal a minimum of two weeks.

The proposal due date has been updated.

Section 4.6.1 Security PWS / Page 34 / 1 / All Government indicates that the prime contractor and all subcontractors must possess Secret Facility Clearance. One of the subcontractors contractor is proposing to use does not possess a Secret Facility Clearance.

Would the government be willing to grant contractor a Letter of Compelling need to be used for our subcontractor, an OEM, to secure a needed sponsorship for Secret Facility Clearance?

PWS Section 4.6.1 has been updated to clarify that Facility Clearance is required, however, safegaurding is not. The Government does not intend to issue a letter of compelling need.

Section 3.4.6 Disposal PWS / Page 31 / 1 / All The government states that classified government equipment will be destroyed and disposed of in accordance with applicable security controls.

Please confirm that contractor will not be responsible for the disposal and destruction of this equipment. Please clarify the contractor's role in the Disposal process.

In accordance with the PWS, the vendor is reponsible for:

"identify as part of the design (CDRLs A019, and B027) system drives that store classified data."

INSTRUCTIONS TO

OFFERORS –

COMMERCIAL

ITEMS / 3. Content and Organization of Proposals / Part VI:

Small Business Participation / Section

2. Small Business Subcontracting Plan

PWS / Page 62 / All / All For the Small Business Subcontracting Plan, will the government accept contractor’s commercial plan to fulfill this requirement?

Yes, in accordance with FAR 19.701

Section 3.4.1 PWS / Page 31 / 1 / All Will the contractor(s) have full access to the site locations in order to perform the required implementation or will they need to be escorted 100% of the time?

The contractor will have access to the necessary areas, but some facilities may require escorts up to 100% of the time.

Section 3.4.1 PWS / Page 31 / 1 / All Will the implementation be a steady state effort? Meaning, once contractor begins implementation at a location, can our resources be utilized full time until the implementation is completed? For example, if contractor scopes that an implementation at a particular site will take three (3) months, will contractor have the ability to work full-time at that site for the three (3) month period without any breaks or extended downtime?

The contractor shall propose an implementation plan based on the requirements to be completed during the period of performance.

RFP 1 Solicitation cover shows a due date of 11 Oct, while pg 54 states a due date of 12

Oct. Please clarify the intended due date.

The proposal due date has been updated.

PWS 3.0 22 / Table 1 Can the Government provide additional information regarding the specific number of operator and system administrator licenses required for the NACCR solution?

PWS Table 1 references the number of endpoints the solution will manage.

PWS 3.0 22 / Table 1 Table 1 references the number of personnel per location. Can the Government provide a specific number of IP-able devices per location?

PWS Table 1 references the number of endpoints the solution will manage.

PWS 3.0 22 / Table 1 In order to better estimate the initial Bill of Materials, can the Government provide additional network metrics, including: number of subnets, size of subnets, types of devices, and numbers of devices.

Table 1 references the number of endpoints the solution will manage.

PWS 3.1.1 22 Can the Government clarify whether the 5-day PAC is to be completed within 30 days of CA, or merely commenced within 30 days of CA?

The PAC must be completed within 30 days of contract award, Ref PWS 3.1.1.

RFP / Appendix C 43 Can the Government clarify the due dates for CDRLs B0067, B0068, and B0069?

The CDRL table states 2d prior to PAC, but the description of the PAC requirements in 3.1.1 no longer includes these CDRLs.

CDRLs have been updated to reflect due dates and distribution methods.

Part 1, Section 2 - Reprensentative Configuration

58 The Government lists Cisco, Brocade, Juniper, and Tellabs for required compliance to interface the proposed NAC solution. Can the Government provide specifically what products for these vendors?

No, there is a variety of products from each of these manufactures on our network, in accordance with FAR 52.212-2 Addendum section 2-Representative Configuration.

RFP 60 Can the Government clarify whether PPI may be accepted from the Offeror's subcontractors, provided that the PPI was for work that the subcontractor completed as a Prime?

Yes, the RFP has been updated to allow past performance submissions for subcontractors

General General Will the Government require any spares to be maintained onsite for any or each

Region?

The Government does not require onsite spares;

the contractor shall propose its high availability solution.

Attachment 1 1 Please clarify which of Appendix 1 and 2 is the evaluation matrix and the traceability matrix.

Attachment 1 is the proposal traceability matrix, Attachment 2 is the requirements evaluation matrix.

Draft NACCR PWS With the amount of data that the government is requesting for this proposal, would the government consider extending the due date to 25 October 2016?

Proposal due date has been updated.

3.1.3. Project Plan M67854-16-R-4001/23/3/2-3 The plan is to fully implement the NACCR capability in accordance with the tasks contained in the PWS within 24 months of contract award date. Does the 24 months include the prototype / proof of concept time?

Yes - The Governement is expecting all activities to be completed within 24 months from Contract Award in accordance with PWS section 3.1.3.

3.2.1. Technical

Reviews: Test Readiness Review

(TRR):

M67854-16-R-4001/25/2/10-12 "TRR events will be held for each location prior to the Site Acceptance Event as identified in Section 3.3.3. The contractor shall brief site readiness and initial test results of the NACCR solution prior to the Site Acceptance Test." Do we need to be on site at each location for the TRRs?

Yes. Ref PWS Section 3.3.3 "The contractor shall present preliminary test results as part of each site-specific TRR prior to the beginning of the test event."

59 3.4.1. Site Implementation:

M67854-16-R-4001/31/1/1-10 Would it be possible to perform some of the MCEN Site locations Implementations in parallel, simultaneously to meet schedule requirements?

Yes

Section 1. Pricing Information

M67854-16-R-4001/60/2/31 "Price proposal shall be entered on the spreadsheet file, attachment 6." Has Attachment 6 been provided, we could not find it on FeBizOpps.gov

The REM is named Attachment_3_of_52.212- 1.xls and is not Attachment 6. The RFP has been updated to reflect this correction.

3.1.2. Weekly

Meetings:

M67854-16-R-4001/23/2/3 "shall participate in person," What is the on site location of the quarterly management meeting?

PWS has been updated. Weekly meetings will be held in the Quantico, VA area when meetings do not coincide with an installation site visit.

62 INSTRUCTIONS TO

OFFERORS K

M67854-16-R-4001/54/3/1 "All proposals are due by: 1000 (10:00 a.m.) local Quantico, VA, 12 October 2016."

FedBizOps.gov identifies Oct 11, can you confirm the proposal due date.

The proposal due date has been updated.

SSS / Table 3-2 – NACCR Specification

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802/33/Table

3.2/NACCR -1.17.1

The requirements calls for onsite support, what is the intended locations for the 4 identifed SME's?

PWS 3.6 section has been updated to include clarifying language.

SSS / Table 3-2 – NACCR Specification

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802/34/Table

3.2/NACCR -1.17.1

Will you accept NAC product certified third party integrators in place of product vendor consultants?

No. Ref Attachment 1, SYS183-SYS189

Attachment - 2 Attachment-2/Field Definitions Tab/Measurement Method/10

You mentioned that requirement will be measured for compliance. Can you please let us know what are specific compliances and industry standard you are going to follow for requirement analysis, inspection, demonstration and what are the domains from individual standards?

After contract award, Attachment 2 (RTM) -states methods of verification identified in cloumn "G" will be measured against column "F" thresehold values. The standard for measurement is in accordance with the criteria set forth in the RTM and PWS.

66 Attachment - 2 Attachment-2/Field Definitions Tab/Threshold/11

What is the minimum performance allowed by the government to pass to production?

PWS Section 2 has been updated for clarity.

Attachment - 2 Attachment-2/Authorative Sources/Authorative Documents/1-4

Will the government provide the following authorative documents for proposal purposes:

NGEN CPD V 1.5.7

SONIC CPD V1.0

Urgent Univeral Needs Statement Urgent Universal Statement of Need (U-SoN)

These documents are references for Government use in preparation of the requirements traceability matrix; all required information has been specifically included in the text of the RFP documentation.

8.4 Facilities and

Infrastructure

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 48 / 1

How many network ports are located at each physical location? Table 1 references the number of endpoints the solution will manage. Offerors shall propose a solution based on experience with similar network structures with the information provided.

8.4 Facilities and

Infrastructure

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 48 / 1

How many Subnets are configured at each physical location? Table 1 references the number of endpoints the solution will manage.

8.4 Facilities and

Infrastructure

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 48 / 1

What Communication lines connect all locations? (i.e., Bandwitdh size, Private lines, VPN via Internet, Site to Site VPNs etc.)

Details are not available as the communication lines at and among each location vary.

Attachment 1 Table 3-

2 – NACCR

Specification / Third- Party Integration Requirements

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 30 / table

3.2 / NACCR-1.8.5

Is McAfee Nitro SIEM centrally Managed, if so what location? Yes, in Quantico, VA

Attachment 1 Table 3-

2 – NACCR

Specification / Third- Party Integration Requirements

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 27 / table

3.2 / NACCR-1.8.1

Is McAfee ePolicy Orchestrator (ePO) centrally Managed, if so what location? Yes, in Quantico, VA

Attachment 1 Table 3-

2 – NACCR

Specification / Third- Party Integration Requirements

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 28 / table

3.2 / NACCR-1.8.2

Is BMC Remedy centrally managed? If so, what location? Yes, in Quantico, VA

Attachment 1 Table 3-

2 – NACCR

Specification / Third- Party Integration Requirements

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 28 / table

3.2 / NACCR-1.8.2.1

Is Microsoft Orchestrator (SCORCH) centrally managed? If so, what location? Yes, in Quantico, VA

Attachment 1 Table 3-

2 – NACCR

Specification / Third- Party Integration Requirements

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 29 / table

3.2 / NACCR-1.8.3

Is Microsoft System Center Configuration Manager (SCCM) centrally managed? If so, what location?

Yes, in Quantico, VA

Attachment 1 Table 3-

2 – NACCR

Specification / Third- Party Integration Requirements

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 29 / table

3.2 / NACCR-1.8.4

Is Assured Compliance Assessment Solution (ACAS) centrally managed? If so, what location?

Yes, in Quantico, VA

Attachment 1 Table 3-

2 – NACCR

Specification / Third- Party Integration Requirements

Attachment_1_FOUO_02B_SSS310271_NAC CR_Solution_FINAL_20160802 / 23 / table

3.2 / NACCR-1.5.2

Will the existing distribution switches that the [proposed solution] appliance(s) need to physically connect to have the available 1Gb ports (fiber or copper); and if not, will USMC provision new distribution switches to accommodate the [proposed solution] appliance(s)?

Yes, there are existing distribution switches.

Reference Attachment 1, SYS082

Attachment - 5 Attachment_5_Export_D400.153619_NACCR

_Solution-NoTrackChange/22/4.4 Use Cases/346

Can you please explain what kind use case you have for compliance check? Please see PWS Attachments 3, 4, and 5.

Attachment - 5 Attachment_5_Export_D400.153619_NACCR _Solution-NoTrackChange/12/2.4 Major Nonfunctional Requirements/ Line 183

What is the current USMC PKI and CAC product vendor the NAC Solution will integrate and during the integration phase how can we make sure that your current 3rd party product vendors will be available to assist during the integration phases?

The Government will not provide additional contractor support to assist the awardee with integration.

Attachment - 5 Attachment_5_Export_D400.153619_NACCR

_Solution-NoTrackChange/Page 28/ Line 577 & 579

Can you please clarify 'on the job' training during the installation and new administrator?

Reference PWS par 3.5.1 and 3.5.2

Sheet1