NG SIS RFI Requirements - LTL.pdf
PDF 203 KB Posted
- Attached to
- Security Intercom System (SIS)
- Solicitation number
- 19AQMM26XXXXX
About this file
This is a Requirements document from the United States Department of State for a Secure Integrated System (SIS). The document outlines mandatory requirements and target capabilities for the system, organized into multiple requirement categories.
The mandatory requirements establish that the system must comply with prohibitions on hardware and software from named countries and manufacturers, and must be manufactured or substantially transformed in the United States or a Trade Agreements Act-designated country. The system must include at least one master control station communicating with at least one subordinate station, maintain configuration after power loss and reboot, and operate on a non-internet-facing network if networkable. Hardware requirements mandate an integrated microphone and speaker system, hardwired communications medium, vandal-resistant housing for subordinate stations, and prohibition on wireless communication. The master control station must not exhibit intrinsic microphone behavior while in standby mode and must prohibit unrestricted monitoring. Physical interaction is required to activate two-way communication. If the system interfaces with an Ethernet network, it must support secure communications protocols (HTTPS, TLS 1.2, AES encryption), IPv4 addressing with static IP capability, minimum 100 Mbps network interface, current approved operating systems (Windows 10/11 or REHL), user access controls, and ability to disable non-secure protocols. The system must accept universal AC power (100-240 VAC ± 10%) or DC power (5-48 VDC ± 10%) or Power over Ethernet capability. Vendor support requirements include minimum one-year warranty covering repairs and parts, customer technical support during product lifecycle, backup software copies including firmware and update tools, internal distribution rights for manuals and documentation, software/security updates with cyber incident communication, training for DOS personnel, and no required certifications for end users.
Target capabilities identified as desired but non-mandatory features include external configuration and monitoring from a workstation, fiber optic or hardwired communication extension options, minimum five subordinate stations, EIA RS-310C 19-inch rack-mount standard compliance, native support for 1,000 feet distance without signal loss, visual capabilities at the master station, unrestricted subordinate station monitoring, unnotified monitoring capability, API for application integration, and IPv6 support.
View the file
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
UNCLASSIFIED
REQUIREMENTS
MANDATORY REQUIREMENTS
The system must meet the requirements below.
Req. # General Requirements (GR)
GR1
Must comply with prohibitions on using hardware, software, and services from named countries and manufacturers.
GR2
Must be manufactured or substantially transformed in the United
States or a Trade Agreements Act (TAA)-designated country.
Req. # System Operational (SO) Requirements
M-SO1
Must have a minimum of one master control station that can communicate with a minimum of one subordinate station.
M-SO2 Must maintain its configuration after power loss and reboot.
M-SO3
If networkable, it must operate and be maintained on a non-internet-facing network.
Req. # Hardware (HR) Requirements
M-HR1 Must include an integrated microphone and speaker system.
M-HR2 Must implement a hardwired communications medium.
M-HR3 Must prohibit unrestricted monitoring of the master control stations.
M-HR4
Must require physical interaction with the system to activate two-way communication.
M-HR5 Must have vandal-resistant housing for subordinate stations.
M-HR6
Must not use wireless communication; wireless option shall be disabled.
M-HR7
Master control station must not exhibit intrinsic microphone behavior with respect to wires leaving its location while in standby mode.
UNCLASSIFIED
The “Network (NT) Requirements” section is only applicable if the SIS is designed to function on, or interface with an Ethernet network.
Req. # Network (NT) Requirements
M-N1
Must use a secure communications protocol (Hypertext Transfer
Protocol Secure [HTTPS], Transport Layer Security [TLS] 1.2, AES encryption, etc.).
M-N2 The networkable components must support Internet Protocol version
4 (IPv4).
M-N3 All networkable system components must support static IP addressing scheme.
M-N4 Network interface must support minimum of 100 Megabits Per
Second (Mbps).
M-N5
Any software applications must support the use of the current approved Operating System at the time the system is being considered
(e.g., Windows 10/11, Red Hat Enterprise Linux [REHL]).
M-N6 The system must provide the capability to control user access and permissions.
M-N7 System must have the ability to turn off non-secure protocols and settings.
M-N8 Must not require any recurring software licenses to continue operating.
Req. # Power (PR) Requirement
M-PR1
The system must accept full range of universal AC power (100 VAC to 240 VAC ± 10%, 50 Hz/60 Hz) or DC power (5 VDC to 48 VDC ±
10%) or Power over Ethernet (POE) capable.
Req. # Vendor Support (VS) Requirements
M-VS1
Must provide a minimum of one-year warranty that includes repairs, parts, and labor for the duration of the product’s warranty coverage.
M-VS2 Must provide customer technical support during product’s lifecycle.
M-VS3
Must provide backup copies of all software needed to restore a system, to include firmware and tools necessary for updates.
UNCLASSIFIED
Req. # Vendor Support (VS) Requirements
M-VS4
Must grant internal distribution rights of all necessary manuals and technical documentation in both print and electronic formats.
M-VS5
Must provide software/security updates and communicate any cyber incidents that affect procured systems.
M-VS6
Must make training available to DOS personnel for the operation and support of the system
M-VS7
Must not require any certifications for DOS end users in either user, installer or support roles.
TARGET SYSTEM CAPABILITIES
Target capabilities are not mandatory requirements for the system, but desired features.
Req. # System Operational Capabilities
T-SO1
Should have the ability to be configured and monitored from an external system such as a workstation.
T-SO2
System components should have the capability to use fiber optics, or another means of hardwired communication to extend the system coverage.
T-SO3 Should have a minimum of five subordinate stations.
Req. # Target Hardware Capabilities
T-H1 If rack-mounted, should adhere to Electronic Industries Alliance
(EIA) RS-310C 19” rack-mount standard.
T-H2 Should natively support a minimum distance of 1,000 feet without any signal loss and distortion.
T-H3 Should have visual capabilities at the master station allowing it to see only footage from the subordinate stations.
T-H4 Should allow unrestricted monitoring of the subordinate stations from the master control station.
UNCLASSIFIED
Req. # Target Hardware Capabilities
T-H5
If unrestricted monitoring of the subordinate stations from the master control station exists, the subordinate stations should not be notified that they are being monitored.
Req. # Target Interface, Network and Software Capabilities
T-IS1
Should have an Application Programmable Interface (API) to facilitate application-to-application integration.
T-IS2
Hardware with network interface should be capable of supporting
IPv6.
File details come from the government source that posted it. Updated .