Cisco_Gigamon_Brand_Name_Spec_FBO_Redacted.pdf

SOLE SOURCE JUSTIFICATION / BRAND NAME SPECIFICATION

Cisco and Gigamon Network Intrusion Detection System

PR 1300719426

BACKGROUND:

The Research, Development, Test, & Evaluation (RDT&E) Infrastructure of the Naval Undersea

Warfare Center Division, Newport (NUWCDIVNPT) is designed to meet the research and development needs to support both the Division's mission and its associated functions. The RDT&E Infrastructure provides the command with internal network services and supports external network connectivity via the

Defense Research and Engineering Network (DREN). NUWCDIVNPT’s infrastructure is comprised of

Core Infrastructure (routers and switches), shared high performance computing cluster, Information

Assurance (IA) Suite and Scanners (Hercules, HBSS, IDS, Firewall and Retina Security Scanner), and an RDT&E Server Farm. NUWCDIVNPT must adhere to Network Infrastructure Security Technical

Implementation Guide (STIG) and Network Policy STIG when maintaining and replacing equipment for

IA compliance. This requisition is for the purchase of equipment to replace and upgrade existing hardware utilized in the NUWCDIVNPT RDT&E Unclassified Network Infrastructure (Lab ) which has reached End-of-Support (EoS).

The estimated total cost of this order is .

REQUIREMENT:

The Government’s minimum requirement is provided in the following table.

Parts List:

Manufacturer

Part # Manufacturer Description Qty

FMC4500-K9

CISCO

SYSTEMS

Cisco Firepower Management Center 4500

Chassis

FP7110-TAMC-

3Y

CISCO

SYSTEMS

Cisco FirePOWER 7110 IPS, Apps, AMP and URL 3YR Service Subs

FP7120-K9 CISCO

SYSTEMS

Cisco FirePOWER 7120 Chassis 1U 8 Port

Copper 2

FP7120-TAC-

3Y

CISCO

SYSTEMS

Cisco FirePOWER 7120 IPS, Apps and URL

3YR Service Subs

GTP-ATX01 GIGAMON

G-TAP A Series, Always On copper TAP, AC Power (US Plug)

SFP-533 GIGAMON 10 GIG SFP+, SINGLE MODE 1310NM LR 4

GTP-ASF01 GIGAMON

G-TAP A Series, Always On SFP/SFP+

TAP, AC Power (US Plug)

PST-GTA01 GIGAMON

Power Supply Tray, powers up to 8 RMT-

GTA03 trays, AC Power

GSS-FYS-ELT-

PSS

GIGAMON

Initial Gigamon Pass-through Support Type with ELITE Support Level (24x7/AHR), bought with product or within 1 year of original purchase of product

CBL-205 GIGAMON

SFP+ to SFP+ Direct Attach Copper cable, 5 meters

RMT-GTA03 GIGAMON Rack Mount Tray, 3-bay G-TAP A Series 4

SFP-501 GIGAMON 1 Gig SFP, Copper, UTP with RJ45 interface 4

All equipment must be brand new, not gray market and in original packaging.

BRAND NAME SPECIFICATION:

Product Comparison Matrix:

Description of Requirement/Specifications

Brands

Cisco/Gigamon*

Cabling Type: 10/100/1000 Mb or 10 Gb yes yes yes

Central Management:

Managed switches may be centrally configured and support advanced network topologies. yes yes yes

Uplink Port:

Copper or Fiber -Single Mode, Multi-Mode yes yes yes

Compliant Standards:

IEEE 802.1x yes yes yes

IEEE 802.1Q yes yes yes

Features:

Rack Mountable yes yes yes

Access Control List (ACL) support yes yes yes

ARP support yes yes yes

Auto-uplink (auto MDI/MDI-X) yes yes yes

DHCP support yes yes yes

IGMP snooping yes yes yes

Quality of Service (QoS) yes yes yes

VLAN support yes yes yes

NIAP compliant yes yes yes

Authenticates administrators, authorizes commands, and provides an audit trail yes yes yes

Allows device restrictions and time of day restrictions yes yes yes

High availability failover yes yes yes

Collect syslog messages and SNMP traps yes yes yes

Per-VLAN Spanning Tree Plus (PVST+) yes no no

Produce performance monitoring reports and statistics yes yes yes

Send out alerts when network devices or services are down yes yes yes

Promiscuous Only sensor Mode yes yes yes

Single Manufacturing Source for Devices yes yes yes

EIGRP yes no no

Supports both RADIUS and TACACS+ yes yes yes

Monitor network devices such as switches and routers yes yes yes

Rapid Spanning Tree Protocol (RSTP) support yes yes yes

MAC Authentication Bypass yes no no

NUWC RDT&E

policy:

Replacement spares in stock yes no no

Maintenance for IOS support yes yes yes

Personnel have requisite device training yes no no

Devices can be monitored with current software yes no no

Personnel have requisite IA technical certifications yes no no

Ease of incorporation with current network infrastructure yes no no

The network infrastructure is currently comprised of Cisco and Gigamon brand name equipment, which is STIG compliant. Purchasing the required Cisco and Gigamon brand equipment listed in the parts list table above will extend the lifespan of the current equipment, ensure there is no compatibility or inoperability issues with the existing infrastructure, significantly reduce the cost and time of integrating the new equipment into the network infrastructure, and reduce the cost of management and maintenance.

As indicated in the Product Comparison Matrix above, other brands do not meet the minimum specifications for compatibility and interoperability with the existing network infrastructure.

DISSIMILAR MAKE/MODEL IMPLICATIONS AND OTHER IMPACTS:

The equipment will be used to replace and upgrade the infrastructure for scientists and engineers that depend on the network for research and development to perform their work. If the current EoS hardware is not replaced with Cisco and Gigamon brand name equipment, maintenance, internet operating system, IOS upgrades, and troubleshooting issues associated with the RDT&E Unclassified Network

Infrastructure will not be possible. This will result in a non-IA compliant network and potential shutdown. Consequently, scientists and engineers depending on the network infrastructure for research and development will be unable to perform their work.

The network infrastructure, currently utilizing Cisco brand hardware, contains network TAPs (test access points) manufactured by Gigamon. A TAP is a hardware device that is inserted between two network devices to monitor all data flow between the devices. Network TAPs provide the visibility required to secure, monitor and manage the network infrastructure continuously and efficiently.

Gigamon is the only authorized network TAP partner of Cisco. Cisco will not support networks tapped by other manufacturers. If another TAP manufacturer were to be used, the Government would be at risk for compatibility issues and would not be able to utilize Cisco support. To ensure compatibility with existing infrastructure and continued support, Cisco and Gigamon brand hardware are required.

RESELLERS:

Cisco products can be sourced from a Cisco authorized/certified resellers, such as

. Reseller must be a Premier, Select or Gold

Certified Cisco Partner. Sourcing the equipment from a Cisco authorized/certified resellers ensures full

Cisco warranties will be provided and none of the equipment will have a negative impact on the warranties of associated system components.

Gigamon products can be sourced from a Gigamon authorized/certified resellers. Sourcing the equipment from a Gigamon authorized/certified resellers ensures full Gigamon warranties will be provided and none of the equipment will have a negative impact on the warranties of associated system components.