Network Access Security PS Bid Specs v2.pdf

Network Access Security Products and Services 1

1 General Information

1.1 Objective

The State of Alabama Office of Information Technology (OIT) through the Alabama Department of Finance, Division of Procurement desires to establish contracts to be used by State agencies, political subdivisions, and local government agencies to purchase Network Access Security Products and Services and Maintenance offered in the original equipment manufacturer (OEM) product and services catalog to include software, core security devices, firewalls, appliances, licenses, subscriptions and other enterprise grade appropriate equipment only and technical services offered by Supplier’s technical services catalog for each of the following OEM:

1. Palo Alto Networks®, Inc.;

2. Gigamon®, Inc.; and

3. Fortinet®, Inc.

OEM is defined as the parent company and subsidiaries supplying products or services. Catalog is defined as all OEM products or services offered within the ITB scope.

The following exclusion applies to this ITB:

• The Contract must not offer nor quote Network Transport Services, other connectivity services, or Premise Distribution Systems services for purchase in this award.

2 Supplier’s Bid Terms and Conditions

2.1 Terms and References

Throughout this document, the following terms and titles may be used interchangeably:

• Unless noted otherwise, references to State, OIT, Contract User, or User equate to a qualified State of Alabama contract purchaser.

• Unless noted otherwise, references to Supplier, Bidder, Contractor, or Sub-contractor equate to a bidding or awarded entity of the contract.

2.2 Purchases Authority and Exclusions

OIT has oversight approval for the life of this contract in accordance with the statutory authority in Section 41-4-280, et seq., and Section 41-28-1, et seq. of the Code of Alabama 1975. Political subdivisions, local government agencies, and public educational institutions may, at their discretion, purchase products, or services via the contract(s) that are executed because of this ITB. If the discretionary entities purchase from this contract, then Supplier must interface with those organizations directly, and the purchasing entity will be responsible for ensuring all governing laws and regulations of the competitive bid law are met. All qualified entities must receive awarded contract pricing.

2.3 Pricing Terms, Conditions, and Scoring Criteria

Bids that meet all ITB terms and conditions will be evaluated based upon the total percentage of discount off a manufacturer’s suggested retail price (MSRP) or Supplier’s published catalog prices for the categories bid using a weighted scoring matrix. The weighted scoring matrix will be released at bid opening. The evaluation will determine if the Supplier’s bid is eligible for award recommendation.

2.3.1 Evaluation & Pricing Criteria

For each line item, Suppliers must bid a single minimum percentage discount off MSRP or Supplier’s published catalog prices (e.g., 0, 10, 20%). Suppliers may bid on one or more OEM. Supplier must bid on all lines for a single manufacturer to be considered for award.

Network Access Security Products and Services 2

Line item one (1) is for OEM Hardware and OEM compatible products. (e.g., core security devices, appliances, firewalls, parts, accessories, bundles) For OEM Compatible Parts only, Supplier may offer only products that do not void the OEM’s warranty.

Line item two (2) is for OEM Software products. (e.g., licenses, subscription services, product software)

Line item three (3) is for OEM maintenance and product support. (e.g., standard, renewal, premium, upgrade services)

Line item four (4) of the bid is for Supplier’s Support and Technical Services. (e.g., installation, training, staging, deployment). Suppliers may use OEM-badged resources or their own supplier OEM certified resources (supplier-badged or subcontractor) to fulfill technical services.

Statement of Work (SOW) for Supplier’s Support and Technical Services may require in-state travel.

However, the State will not reimburse Supplier travel expenses. Supplier’s hourly rates should include all applicable travel expenses.

Supplier’s bid response must provide as an attachment a list of which catalog technical services are equivalent to the following:

1. OEM Trained Senior Security Engineer – Senior level professional, project leader, plans, designs, enables, implements, and maintains products, implementation enterprise statewide system including installation, configuration, and troubleshooting.

2. OEM Trained Security Engineer – Plans, designs, enables, implements, and maintains products, including installation, configuration, and troubleshooting.

3. OEM Trained Security Administrator – Configure, monitor, tune security event detection and alerts, analyze network traffic for security threats and respond appropriately to incidents.

4. OEM Trained Entry Security Technician – Deliver, distribute, set-up, replace and service OEM general network equipment.

2.4 Bid Questions and Answers

Supplier is not permitted, or any entity working on Supplier’s behalf, to solicit information regarding this ITB from any government source (federal or State) other than from the Buyer. Any reported unauthorized solicitations for information are grounds for disqualification of the bid.

2.5 Certification Requirement

Suppliers must include as a part of the bid response a Letter of Authorization (LOA) signed by a manufacturer’s representative, on the manufacturer’s letterhead, certifying Supplier is an authorized partner. Awarded Suppliers, for the life of the contract, must maintain its good standing as an authorized OEM partner and retain the certification status. Upon State request, Supplier must provide satisfaction of the certification requirement herein. If an awarded Supplier fails to satisfy or sustain the certification requirement, awarded Supplier must immediately notify the State in writing of the specific failure.

3 Post Award Criteria

3.1 Warranty Requirements

During all manufacturer standard warranty periods, the standard warranty and software upgrades must pass to User at no additional cost. A standard warranty will begin upon acknowledgement of product delivery.

The State will not incur shipping or additional costs for the return and replacement of warranted products or services.

Network Access Security Products and Services 3

3.2 Supplier Employee Conduct and Security Requirements

Awarded Suppliers are responsible for the legal and professional conduct of its employees. Failure to adhere to all local, State, and federal laws may subject the employee and Supplier to contract cancellation and other remedies as determined by the State and legal authorities. All Supplier employees and representatives will abide by all current and future State security policies. Suppliers may review current State security policies at https://oit.alabama.gov/governance-library. Exceptions to the policies must be obtained in writing from the State. Supplier employees must speak and understand the English language at a level of proficiency necessary to perform the assigned functions and services associated with any part of this ITB. Supplier must ensure that personnel involved with any State project are advised of and acknowledge the confidential nature of information contained in the State files, the safeguards required, and the criminal and civil sanctions for noncompliance in federal and State statutes. A Contract User may require Supplier personnel to execute additional agreements to protect the confidentiality and security of the Contract User.

3.3 Equipment Terms and Conditions

Used, like-new, or refurbished equipment (with warranty) may be accepted for new installations or additions to existing systems, with written approval from State. Refurbished or remanufactured equipment may be used to repair defective equipment that is under a warranty or maintenance agreement, provided that new equivalent equipment is no longer available.

3.4 Supplier Installation, Maintenance, and Certified Technical Support Upon award, Supplier must provide or make available certified technical services and maintenance support.

Services and support must be accessible via a toll-free telephone number or Internet (Web link) during the State's normal working hours (8 a.m. to 5 p.m. Central Time, excluding weekends and State holidays) for the life of the contract. Supplier is responsible for maintaining current numbers and links to the Supplier supplied support personnel. All service requests resulting from the use of this contract must be given the highest priority and take immediate action to respond within one (1) hour and provide hourly updates until resolved.

If a contract user determines, requires, and orders certified technical support, with said effort to be conducted on contract user’s premise, then Supplier’s certified personnel must be on site within 24 hours or such later time as specified by the State.

Warranty support will include manufacturer’s warranty information, manufacturer’s authorized warranty service provider(s), and use of manufacturer’s authorized and warranted replacement parts. All products supplied from the contract must be received with all applicable interface cables, power cords, installation manuals (electronic or hardcopy), driver software, and any other items required for installation or operation.

Supplier will be responsible for providing missing components at its expense. All warranty coverage shall be provided at Supplier’s or manufacturer’s expense.

Failure to provide certified technical services and support per the terms of this contract may result in cancellation of the contract with the awarded Supplier.

Service requests may exceed the OEM’s warranty levels. Therefore, Supplier must list as part of the service catalog, options for supplemental support to the contract user. The contract user’s SOW will determine the need for supplemental support options.

Supplier must provide all items ordered according to the following delivery terms and conditions:

New Network Equipment, or Services

Order (including installation)

Installation / Delivery Interval (Calendar Days)

Network Access Security Products and Services 4

1 to 100 Items 30 Days 101 to 500 Items 60 Days Over 500 Items Individually negotiated

Other Systems, Equipment, Software and Other Items (no installation)

Order Size Non-Installation / Delivery Interval (Calendar Days)

1 to 100 Items 30 Days 101 to 500 Items 60 Days 501 to 1,000 Items 90 Days Over 1,000 Items Individually negotiated

3.5 Special Supplier Offers

Awarded Suppliers, for life of the contract, must notify and offer to the State any manufacturer’s Buying programs, periodic special or seasonal offers, specific to this contract. All qualified buyers may access the special purchase offers per the terms of the special program or offer.

3.6 Catalog Updates and Access

Awarded Suppliers must provide and maintain access to the catalog(s) used to bid this contract. During the contract period, Suppliers must maintain access to the current catalog(s) for pricing of their respective manufacturer’s resources. The catalogs must be available via electronic media from the manufacturer’s Website or via the Supplier. For any discontinued item, Suppliers must, if available from the manufacturer, offer an equivalent or superior substitute at or below the original price subject to the review and approval of the Contract User.

3.7 Version Control of Product

All pre-installed software products installed must include the most current version supported and maintained by the software manufacturer and any previous versions of software which are still supported and maintained by the software manufacturer. Software must be new, with all applicable software licenses provided by the original software manufacturer. No trial, bloatware, or other non-essential software may be installed by manufacturer or Supplier, unless approved by State.

3.8 Manufacturer’s Representative

Awarded Suppliers must email contracts@oit.alabama.gov up to date manufacturer’s representative contact information (including name, title, phone number, e-mail address, and Alabama Buys contract responsible) that can validate the MSRP bid or provide manufacturer information upon State request.

3.9 Force Majeure

Neither party shall be liable or deemed to be in default for any Force Majeure delay in shipment or performance occasioned by unforeseeable causes beyond the control and without the fault or negligence of either party, including, but not restricted to, acts of God or the public enemy, fires, floods, riots, civil disorder, epidemics, quarantine, restrictions, strikes, freight embargoes, legal injunctions, or unusually severe weather, provided that in all cases Supplier must notify the State promptly in writing of any cause for delay and the State concurs that the delay was beyond the control and without the fault or negligence of Supplier. The period for the performance may, at the State’s discretion, be extended for a period equivalent to the period of the Force Majeure delay.

As defined, Force Majeure shall not include the following:

mailto:contracts@oit.alabama.gov

Network Access Security Products and Services 5

1. Late delivery of equipment or materials caused by congestion at the manufacturer’s plant or elsewhere, or oversold condition of the market;

2. Late performance by a subcontractor;

3. Inability to keep or acquire required licenses, bonds, insurance or permits;

4. Inability to retain or employ qualified personnel to perform the work in satisfying ITB requirements;

5. Any responsibilities or obligations with regard to data backup or disaster recovery plans; or

6. Any hostile action by a foreign state, a terrorist entity, a group, or an individual which manifests as a cyber attack.

3.10 Meetings

Suppliers may be required to have meetings with Contract User at no cost to State.

3.11 Special Project Proposals

Upon request, a Supplier will provide OIT with special project proposals for solutions using the items listed in the manufacturer’s catalog and under the terms of the contract. OIT shall provide a description of the project and desired solution results. If applicable, the description will include, but not be limited to, solutions at sites throughout Alabama. At a minimum, pricing shall reflect discounts under the terms of the bid. Special projects must include comprehensive pricing for everything necessary to ensure the success of the solution described.

Accordingly, a special project proposal may include any or all of the following specifications:

• Engineering, equipment, network configurations, and changes;

• Coordination and interface with telecommunication carriers and infrastructure providers;

• Interfacing to the existing data and telephone network software;

• Strategically developed training based on state provided curriculum;

• Installation;

• De-installing and proper salvaging of aging hardware and systems;

• Delivering the retired equipment to Alabama Surplus Property;

• Standard and specialized services;

• Training as determined by State; or

• Third party add-ons needed to complete the special project.

Special project proposals should include a project schedule, milestones, project manager name, contact details, and escalation procedures. Supplier shall provide OIT with details regarding any infrastructure upgrades required to deploy the special project solution.

Upon OIT’s acceptance of the proposal, a Purchase Requisition will be issued. Following issuance of the Purchase Requisition, the Supplier will be responsible for the complete installation of the new system and the conversion of existing services in accordance with the Purchase Requisition and SOW. After installation is complete, the Supplier must provide OIT with written notification confirming project completion, along with a detailed inventory of all installed items. Equipment with a purchase price of $500.00 or more must include serial numbers in the inventory documentation.

Prior to payment for the Special Project, OIT must verify and accept the project as complete and fully operational. Ownership and risk of loss for the equipment will remain with the Supplier until final project acceptance by OIT.

Network Access Security Products and Services 6

End of Specifications