B3_Questions__3_Set_3_amk_comments.docx

UNITED STATES DEPARTMENT OF COMMERCE

National Institute of Standards and Technology Acquisition Management Division, 164 325 Broadway Boulder, CO 80305-3328

QUESTIONS AND ANSWERS #2

Req.#: NB6710001802713 / Set 3

1. QUESTION:

What database is NIST using for the data repository?

ANSWER: NIST is using a MySQL database instance of their own development that is being used for research.

2. QUESTION:

Is a Windows based server side/centralized visualization product set acceptable to NIST ANSWER: Windows environments are acceptable

3. QUESTION:

Is there already a software piece that pushes the data from the database in place? We understand that there is an API so we are assuming yes, but are just looking for clarification.

ANSWER: Yes, the API processes the sensor data and pushes to the database.

4. QUESTION:

Is NIST on-prem hosting required? Can we host on Azure GOV Cloud given its accreditations?

ANSWER:

Gov Cloud would be acceptable, however, we would need a list of IP addresses that would be sending traffic to the NIST lab, so that we could allow the server requests through our firewall. IP address(s) must be static.

5. QUESTION:

The volume of data is fascinating. What is the duration of the transmissions? 8 hour shift?

ANSWER: This is a developmental system and data volumes must be variable. The data numbers quoted are based on maximum load given the number of responders/users. The system must be available at all times, however expected normal usage will be during core working hours 8am to 5pm.

6. QUESTION:

Are there requirements above TLS for access? Would there be a VPN if hosted off-site?

ANSWER:

Data messages will be transmitted using TLS/HTTPS protocol and access control will be permitted via access lists or firewall. The visualization product will require an authentication method using static keys (API key) or two-way, mutual certificate authentication.

As mentioned in Q4, a Gov certified cloud server is acceptable. VPN access is not expected as a mode of operation for the application.

image1.png