MOBILITY_RFI_Devices_Question_and_Answers.pdf

Mobility RFI Apps Questions

Line ID Question, Comment or Other Observations Government Response

Will DISA ever look to do a service capability RFI for mobile and fixed networks around the world? I.e.: Allow a company like us to present our overall capabilities for our footprint?

This is out of scope of the classified device RFI at this time.

This is hardware specific.

We are looking for hardware and software solution that follow the NSA Mobility Capability Package and specifically NIAP Protection Profiles. If not currently listed on the NIAP Product Compliant List, when will complance with CNSSP #11 be achieved is a key requirement for the hardware/software on device.

3 I am wondering if this RFI is related to another RFI released on June 20 - DoD Mobility Project Office Mobile Applications Support (MOBILITY-RFI-APPS). Are they a part of the same program?

The Requests for Information (RFI) posted on Friday, June 20, 2014 for MOBILITY-RFI-APPS and MOBILITY-RFI-DEVICES are part of DISA's on-going support to the DoD Mobile Device Strategy.

Also, are these related to contract HC101313C0002 awarded to Digital Management Inc.? If so and depending on the results of the RFIs, is this work being split in two separate requirements?

These are new requirements are separate from Contract HC101313C0002 awarded to Digital Management, Inc., also in support of the DoD Mobile Device Strategy

5 If not related to the Digital contract, are you able to provide incumbent information for this effort?

The information obtained in response to the RFIs from interested contractors, will determine DISA's acquisition strategy for these two new requirements.

Question #1 - Is this RFI open to businesses both large and small in other NAICS codes outside of the 517210 NAICS Code that have relevant mobile technologies and solutions that support the customer need.

Without additional information concerning the relevant NAICS Code we can not answer this question. Responses can recommend additional NAICS codes.

7 Is the RFI relevant to classified and unclassified communication? Both are referenced; however, the objective appears to relate to classified communication? Yes, it is correct. The questions are targeted for Classified Mobility devices.

8 Does DISA envision the resulting handsets and solution made available to all of DoD as a standard use/issue handset or will its use be specific to classified communication? Device will be used for handling classified communications.

9 For classified traffic, is DISA planning on relying on the DMCC model whereby only secret is covered initially? Yes initially for SECRET. But DISA intends to support all classifications up to TS/SCI (Voice and Data).

For the mobile handset it’s mentioned in question one regarding NSA published ‘Mobility Capability Packages’ but in the DMCC, it says that DISA is responsible for ‘testing and approval of classified mobility devices’; is it DISA’s plans to leverage the NSA CSfC certification and validation process instead of DMCC or is this a two-step process?

Yes, DISA intends to use the NSA CSfC process to build a secure solution.

11 DMCC calls out specifically other areas of certification / integration including: Outlook Web Access (OWA) capabilities and PKI but they are not mentioned in the RFI; are those still considered requirements for certifying a classified device?

Device needs to be integrated with both enterprise and DoD Customer capabilities, including applications, OWA and leverage PKI where appropriate.

12 The DMCC calls out Limited International Roaming capabilities via VPN, however are there any other international reach and coverage requirements? Device must work with international connectivity and capable of roaming if needed.

13 How would DISA integrate or ensure its devices are compatible with the Mobility Carrier Entry Point Gateways and support Carrier Access Point Names or Private Networks? Is global support needed for custom APNs?

DISA is not defining the solution but APN is one of the solutions currently available. DISA is open for technical suggestions and industry solutions for future implementations.

14 Are there any Wi-Fi or Mi-Fi requirements? Are the VoIP classified calls intended to route only over Gov't provided Wi-Fi APs or are other resources to be included? Are the MNO RANs also to be used? 3G / 4G – HSPA/LTE?

Mi-fi Hotspot solution is currently utilized. But DISA is open for other technical suggestions and solutions on how Wi-FI/MI-FI could be better served for the DoD Mobility classified users.

15 Regarding the reference of devices being “transitioned between carriers”? What is transitioned? Contacts, APNs, and phone number? DISA needs industry suggestions where single device can be leveraged between different carriers.

16 What level of battery life is expected? Estimated at 12-24 hours, but looking to what industry can provide given a persistent VPN connection.

17 Do the devices require CAC-enablement (common access card) for S/MIME or secure web access? CAC is not required.

18 What level of support and warranty is required? Does DISA want immediate replacement for damaged devices? DISA seeks Industry inputs to answer what can be done to better support devices in terms and conditions. This shall include supports and warranty rendered by Industry.

19 What level of VPN is required? SSL, IPSec? VPN requirements are defined by current Capability Package(CP), future CP, and DISA security requirements.

IPSec/TLS is currently implemented but this requirement is defined by the NSA CP.

20 Is CAC required for VPN? No, no CAC card use is required for the classified solution.

21 Is DISA considering a future BYOD environment or supporting contractors/volunteers/outside agencies who are not on the GIG and may not have MDM support but need access to applications? DISA is considering BYOD for Unclassified environment but it is outside of the scope of the classified device RFI.

Mobility RFI Devices