Massachusetts Statewide Contract ITT72 - Massachusetts State Police RFQ 3-20-26~3.pdf

The Commonwealth of Massachusetts

Department of State Police

Massachusetts Statewide Contract ITT72 Categories 2 to 9 - Request for Quote (“RFQ”) for Network Services, Communications Services & Related

Equipment

Commbuys Bid Number: BD-26-1084-POLGH-GHQ-126965

The Massachusetts Department of State Police (“Department”) or (“MSP”) of the Commonwealth of Massachusetts hereby announces its intent to enter into an agreement to purchase services pending the results of this Request for Quotes (“RFQ”). This RFQ is restricted to Bidders awarded Categories 4, 6, 7 and 9 of Statewide Contract ITT72 Network Services, Communications Services & Related Equipment.

This RFQ does not commit the Massachusetts Department of State Police to approve a Statement of Work, pay any costs incurred in the preparation of a Bidder’s response to this RFQ or to procure or contract for products or services. The Department of State Police may select the Quotes(s) which demonstrate best value overall, including proposed alternatives that will achieve the goals of the procurement. The Department and a selected Bidder(s) may negotiate a change in any element of Contract performance or cost identified in the original Request for Quote (RFQ) or the selected Bidder’s Quote which results in lower costs or a more cost effective or better value than was presented in the selected Bidder’s original Quote.

The Department of State Police reserves the right to award bids as a whole or on an individual item basis, whichever is in the best value to the Commonwealth.

Project Description and Requirements:

Enterprise Multi-Site Network Design, Deployment, and Ongoing Support

1. Project Overview

The Commonwealth of MA is requesting quotations from qualified network engineering firms to provide on-premises network equipment and configuration services for a multi-site enterprise network consisting of a central headquarters location and approximately 9–15 branch sites.

The project includes network discovery, architecture design, firewall, routing and switching infrastructure installation, integration with existing circuits, VPN connectivity, and addition of 5G backup connectivity where available.

The selected vendor will also provide ongoing operational on-site support and security updates for hardware break/fix under a defined SLA.

Security logs to be sent to the Commonwealth of MA SOC. The selected vendor will respond to any alerts following stand operating procedure for remediation.

This RFQ is for networking gear only and does not include desktops, their support costs and circuits and their reoccurring costs.

Vendor staff must have active CORI background clearances.

2. Current Environment Discovery

The selected vendor must perform a discovery of the current environment. This includes the main campus and remote offices. Remote offices will be similar in configuration and be quoted as an incremental per office cost.

Documentation of current state

• Firewall/Switching Infrastructure

• Existing VPN tunnels

• Existing WAN circuits

• Existing IP addressing schemes

• Current DHCP implementations

Deliverables

• Detailed network topology diagrams (logical and physical)

• Telco Circuits / IPsec Tunnels / Routing Diagram /IP Schema

3. Network Requirements

Headquarters Network Requirements

The Headquarters office will support the core network infrastructure with IPsec tunnels to branch offices. Headquarters will also have a minimum 1G L3 internet connection including 5G failover.

Headquarters Requirements:

• Enterprise Firewall

• IPSec site-to-site VPN with support for 200+ Tunnels

• IPSec throughput scalable to: 2Gbps

• VPN client access for <50 users with MFA

• High availability

• Support failover connectivity

• Connectivity

• 1Gbps WAN connection scalable to 10Gbps

• Failover connection

• Enterprise Switch

• 48 port enterprise switch

• Monitoring – Integrate with existing

• Firewalls/Switches – Splunk

• Servers – Palo Alto XDR

• Optional Equipment

• UPS

• Rack

• Terminal Server

Branch Site Requirements

The vendor will deploy 9 sites initially and scale to 15+ branch sites.

Branch Site Requirements:

• Enterprise Firewall

• IPSec tunnel to headquarters

• 200Mbps circuit scalable to 1Gbps+

• Split Tunneling for internet access outbound only

• Support failover connectivity

• Enterprise Switch

• (2) 48 port enterprise switches in a cluster

• DHCP Services

• Defined VLANS

• Optional Equipment

• UPS

• Rack

• Terminal Server

4. Network Design Deliverables

Vendor to provide complete architecture in Visio format for any equipment and network services provided by vendor

5. Implementation Services

Vendor deployment includes configurations, installation, licenses, documentation and testing

• Hardware

• Configuration of firewalls and switches

• Installation and deployment of hardware

• Register, activate and maintain hardware licenses and subscriptions

• Document licensing renewal schedules

• Creation of IPSec VPN tunnels

• DHCP configuration at branch sites

• VLAN Deployment

• Integration of 5G backup connectivity at HQ and Branch sites

• Connectivity and failover testing

6. Support and SLA Requirements

The vendor must provide support services and replacements for the equipment supplied with the following SLA:

• Response Time: 15 minutes / Onsite Response 4 hours

• Support Coverage: 24x7

Support must include:

• Hardware break/fix

• VPN and IPSec Tunnels

• VLANS/DHCP

Quote Submission Method

Online Quote Submission via COMMBUYS is required. All Interested Vendors excluding the Offeror must submit Quotes online using tools available only to Sellers registered in COMMBUYS. COMMBUYS provides Seller registration functionality at no charge. To register, go to www.COMMBUYS.com and click on the “Register” link on the front page. All Interested Vendors and Offerors who are awarded a contract resulting from this Notice, if any, will be required to maintain an active account during the duration of the Contract, by reviewing their registration information regularly and maintaining its accuracy. All vendor questions/concerns must be submitted via the COMMBUYS Q&A Tab http://www.commbuys.com/

Event Calendar

All times in this RFQ are prevailing Eastern Time. Responses must be received no later than the response due date and time indicated below or they will not be evaluated. Bidders must have their responses fully loaded and accepted in COMMBUYS prior to the RFQ Response Due date and time listed below. Bidders are urged to allow sufficient time to upload their entire response.

Procurement Step Due Date Time RFQ Posted 03/20/2026

Bidder Questions Due 03/27/2026 3:00pm

EST

Commonwealth Responses posted to COMMBUYS (estimated date) 04/03/2026 3:00pm

EST

RFQ Bid Response Due 04/10/2026 3:00pm

EST

COMMBUYS Support

Technical assistance is available during the procurement process. Every effort is made to respond to inquiries within one business day.

• Website: Go to www.mass.gov/osd/commbuys for Resources

• Email: Send inquiries to the COMMBUYS Helpdesk at OSDHelpDesk@mass.gov

• Telephone: Call the OSD Help Desk at 1-888-MA-STATE (1-888-627-8283). The Help

Desk is staffed from 8:00 AM to 5:00 PM Monday through Friday Eastern Standard or Daylight time, as applicable, except on federal and state holidays.

http://www.mass.gov/osd/commbuys mailto:OSDHelpDesk@mass.gov