S06 36C10B25Q0196 0003 PN.pdf

PAGE 1 OF 48 1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. UEI: EFT:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

36C10B25Q0196 April 17, 2025

Gretchen Songer, Gretchen.Songer@va.gov 848-377-5184 See NASA SEWP EDT

Department of Veterans Affairs Office of Procurement, Acquisition, and Logistics Technology Acquisition Center 23 Christopher Way Eatontown, NJ 07724

X 100

X

541519

150 Employees

To Be Quoted (TBQ)

N/A

See Schedule

Office of Procurement, Acquisition, and Logistics Technology Acquisition Center

To Be Determined (TBD)

See website at:

http://www.fsc.va.gov/einvoice.asp

877-353-9791

Brand Name Imperva Hardware Maintenance and Technical Support with Designated Engineering Services

See Continuation Pages.

TBQ

To Be Provided at Award

Diana B. Armesto

Solicitation 36C10B25Q0196

Amendment 0003

SECTION B - CONTINUATION OF SF 1449 BLOCKS

B.1 SCHEDULE OF SUPPLIES / SERVICES

Item # Description of Supplies/Services Qty

Unit of

Issue Unit Price Total Price The Contractor shall provide Brand Name Imperva Hardware Maintenance and Technical Support with Designated Engineering Services.

The Contractor shall provide Brand Name Imperva Hardware Maintenance and Technical Support in accordance with the Product Description (PD). All work to be accomplished shall meet the specifications outlined in the PD. The PD is set forth in Section B.4 of this Order.

The Original Equipment Manufacturer (OEM) is Imperva Inc (Imperva). OEM Part Numbers are used in this schedule of supplies and services.

Base Period of Performance (PoP): April 29, 2025, through April 28, 2026. The performance dates for individual hardware products covered in the Base Period are staggered to align performance end dates for all covered Imperva hardware. See individual Item #s for each product’s performance dates.

Integrated Purchase Request (IPR): To Be Provided (TBP) at Award.

ARM No.: TBP at Award.

Product Service Code (PSC): 7J20.

Inspection/Acceptance: FOB: Destination.

Deliver To/Order Point of Contact: See Section 3.0 of the PD herein.

0001 X10K2 Web Application Firewall, Annual

Select Support

PN: SS-WAF-X10K2-R-SL3

PoP: 4/29/2025 - 4/28/2026

2 EA $To Be Quoted

(TBQ)

$TBQ

0002 10 Gigabit Ethernet Network Interface Card- PCI-E- Quad SR Fiber Bypass for X2520 / X4520 / X6520 / X8520 / X10K2, Annual Select Support

PN: SS-NIC-10G4-DSR-6GBP-R-SL3

PoP: 4/29/2025 through 4/28/2026

4 EA $TBQ $TBQ

0003 SSL Accelerator Card - High Capacity for X6520/X8520/X10K2, Annual Select Support

PN: SS-SSL-6GHC-R-SL3

2 EA $TBQ $TBQ

Unit of

Issue Unit Price Total Price PoP: 4/29/2025 through 4/28/2026

0004 Client Reputation Services for X10K, Enterprise Edition, Annual Subscription Part

PN: SB-WAF-10K-R-TREE

PoP: 4/29/2025 through 4/28/2026

2 EA $TBQ $TBQ

0005 X10K2 Web Application Firewall, Annual Select Support

PN: SS-WAF-X10K2-R-SL3

PoP: 8/12/2025 through 4/28/2026

2 EA $TBQ $TBQ

0006 10 Gigabit Ethernet Network Interface Card- PCI-E- Quad SR Fiber Bypass for X2520 / X4520 / X6520 / X8520 / X10K2, Annual Select Support

PN: SS-NIC-10G4-DSR- 6GBP-R-SL3

PoP: 8/12/2025 through 4/28/2026

4 EA $TBQ $TBQ

0007 SSL Accelerator Card - High Capacity for X6520/X8520/X10K2, Annual Select Support

PN: SS-SSL-6GHC-R-SL3

PoP: 8/12/2025 through 4/28/2026

2 EA $TBQ $TBQ

0008 Client Reputation Services for X10K, Enterprise Edition, Annual Subscription Part

PN: SB-WAF-10K-R-TREE

PoP: 8/12/2025 through 4/28/2026

2 EA $TBQ $TBQ

0009 Designated Support Engineer

PN: PS-DSE

POP: 7/2/2025 through 4/28/2026

1 EA $TBQ $TBQ

0010 Imperva VM150 Management Server Virtual Appliance, Annual Enhanced Support

PN: SS-VM15-R-SL3

PoP: 7/2/2025 through 04/28/2026

1 EA $TBQ $TBQ

Unit of

Issue Unit Price Total Price 0011 Imperva VM150 Management Server

Virtual Appliance, Annual Enhanced Support

PN: SS-VM15-R-SL3

PoP: 7/2/2025 through 4/28/2026

1 EA $TBQ $TBQ

Base Period Total: $TBQ

The following are Optional Contract Line-Item Numbers (CLIN) associated with an Option Period that the Government may unilaterally exercise at its discretion, in accordance with FAR 52.217-9, the following Option Period. The contractor shall perform Optional CLINs only if the Government issues a modification to the order exercising the option.

Option Period 1: Brand Name Imperva Hardware Maintenance and Technical Support with Designated Engineering Services.

PoP: April 29, 2026, through July 1, 2026.

IPR Number: TBD.

ARM No.: TBP at Award.

PSC: 7J20.

Inspection/Acceptance: FOB: Destination.

Deliver To/Order Point of Contact: See Section 3.0 of the PD.

1001 X10K2 Web Application Firewall, Annual Select Support

PN: SS-WAF-X10K2-R-SL3

2 EA $TBQ $TBQ

1002 10 Gigabit Ethernet Network Interface Card- PCI-E- Quad SR Fiber Bypass for X2520 / X4520 / X6520 / X8520 / X10K2, Annual Select Support

PN: SS-NIC-10G4-DSR-6GBP-R-SL3

4 EA $TBQ $TBQ

Unit of

Issue Unit Price Total Price 1003 SSL Accelerator Card - High Capacity for

X6520/X8520/X10K2, Annual Select Support

PN: SS-SSL-6GHC-R-SL3

2 EA $TBQ $TBQ

1004 Client Reputation Services for X10K, Enterprise Edition, Annual Subscription Part

PN: SB-WAF-10K-R-TREE

2 EA $TBQ $TBQ

1005 X10K2 Web Application Firewall, Annual Select Support

PN: SS-WAF-X10K2-R-SL3

2 EA $TBQ $TBQ

1006 10 Gigabit Ethernet Network Interface Card- PCI-E- Quad SR Fiber Bypass for X2520 / X4520 / X6520 / X8520 / X10K2, Annual Select Support

PN: SS-NIC-10G4-DSR- 6GBP-R-SL3

4 EA $TBQ $TBQ

1007 SSL Accelerator Card - High Capacity for X6520/X8520/X10K2, Annual Select Support

PN: SS-SSL-6GHC-R-SL3

2 EA $TBQ $TBQ

1008 Client Reputation Services for X10K, Enterprise Edition, Annual Subscription Part

PN: SB-WAF-10K-R-TREE

2 EA $TBQ $TBQ

1009 Designated Support Engineer

PN: PS-DSE

1 EA $TBQ $TBQ

1010 Imperva VM150 Management Server Virtual Appliance, Annual Enhanced Support

PN: SS-VM15-R-SL3

1 EA $TBQ $TBQ

1011 Imperva VM150 Management Server Virtual Appliance, Annual Enhanced Support

PN: SS-VM15-R-SL3

1 EA $TBQ $TBQ

Unit of

Issue Unit Price Total Price

Option Period 1 Total: $TBQ

Total Order Value (inclusive of all options): $TBQ

Governing Law (continuation of Schedule of Supplies and Services above):

Federal law and regulations, including the Federal Acquisition Regulations (FAR), shall govern this Contract/Order. Commercial license agreements may be made a part of this Contract/Order but only if both parties expressly make them an addendum hereto, as permitted by FAR 12.212. If the commercial license agreement is not made an addendum, it shall not apply, govern, be a part of or have any effect whatsoever on the Contract/Order; this includes, but is not limited to, any agreement embedded in the computer software (clickwrap), any agreement that is otherwise delivered with or provided to the Government with the commercial computer software or documentation (shrinkwrap), or any other license agreement otherwise referred to in any document. If a commercial license agreement is made an addendum, only those provisions addressing data rights regarding the Government’s use, duplication and disclosure of data (e.g., restricted computer software) are included and made a part of this Contract/Order, and only to the extent that those provisions are not duplicative or inconsistent with Federal law, Federal regulation, the incorporated FAR clauses and the provisions of this Contract/Order; those provisions in the commercial license agreement that do not address data rights regarding the Government’s use, duplication and disclosure of data shall not be included or made a part of the Contract/Order. Federal law and regulation including, without limitation, the Contract Disputes Act (41 U.S.C. § 7101 et seq.), the Anti-Deficiency Act (31 U.S.C. § 1341 et seq.), the Competition in Contracting Act (41 U.S.C. § 3301 et seq.), the Prompt Payment Act (31 U.S.C. §3901 et seq.), Contracts for Data Processing or Maintenance (38 USC § 5725), and FAR clauses 52.212-4, 52.227-14, 52.227-19 shall supersede, control, and render ineffective any inconsistent, conflicting, or duplicative provision in any commercial license agreement. In the event of conflict between this clause and any provision in the Contract/Order or the commercial license agreement or elsewhere, the terms of this clause shall prevail. The Contractor shall deliver to the Government all data first produced under this Contract/Order with unlimited rights as defined by FAR 52.227-

14. Claims of patent or copyright infringement brought against the Government as a party shall be defended by the U.S. Department of Justice (DOJ in accordance with 28 U.S.C. § 516; at the discretion of DOJ, the Contractor may be allowed reasonable participation in the defense of the litigation. Any additional changes to the Contract/Order must be made by contract/order modification (Standard Form 30) and shall only be made by a warranted Contracting Officer. Nothing in this Contract/Order or any commercial license agreement shall be construed as a waiver of sovereign immunity.

B.2 CONTRACT ADMINISTRATION DATA

1. Contract Administration: All contract administration matters will be handled by the following individuals:

a. CONTRACTOR: See SF1449, Block 17a

b. CONTRACTOR: See SF1449, Block 17a

c. GOVERNMENT: Contracting Officer 36C10B See Block 31b

Office of Procurement, Acquisition and Logistics Technology Acquisition Center

Eatontown, New Jersey, 07724

2. CONTRACTOR REMITTANCE ADDRESS: All payments by the Government to the contractor will be made in accordance with:

[X] 52.232-33, Payment by Electronic Funds Transfer—System for Award Management, or

[ ] 52.232-36, Payment by Third Party

3. INVOICES: Invoices shall be submitted in arrears:

a. Quarterly [ ]

b. Semi-Annually [ ]

c. Other [X, Upon Government Acceptance]

4. GOVERNMENT INVOICE ADDRESS: All Invoices from the contractor shall be submitted electronically in accordance with VAAR Clause 852.232-72 Electronic Submission of Payment Requests.

See website at: http://www.fsc.va.gov/einvoice.asp

ACKNOWLEDGMENT OF AMENDMENTS: The offeror acknowledges receipt of amendments to the Solicitation numbered and dated as follows:

AMENDMENT NO DATE

B.3 ACCOUNTING AND APPROPRIATION DATA

Funds in the following amount(s) are obligated for the Order based on the referenced Integrated Purchase Request (IPR) Number and Contract Line-Item Numbers (CLIN).

The contractor shall reference the appropriate Order Number, IPR Number and CLIN on each invoice submitted for payment.

Action Item # IPR Number Amount Total Obligation Basic Award TBD TBP $TBD $TBD

B.4 PRODUCT DESCRIPTION

PRODUCT DESCRIPTION

DEPARTMENT OF VETERANS AFFAIRS

Office of Information & Technology, Infrastructure Operations, Infrastructure Cybersecurity Management for

Brand Name Imperva Hardware Maintenance and Technical Support with

Designated Engineering Support

Date: January 28, 2025 PD Version Number: 1.0

1.0 PRODUCT REQUIREMENTS

The Department of Veterans Affairs (VA), Office of Information and Technology (OI&T) Information Technology (IT) Operations and Services, Infrastructure Operations (IO) has a requirement for brand name Imperva hardware maintenance and technical support for X6510 servers, VM150 virtual appliances, 10 Gigabit interface cards, and SSL accelerator cards; with designated engineer support for Imperva Web Application Firewall (WAF) hardware with embedded firmware currently used in VA’s production environment.

The existing VA owned Imperva hardware is one part of VA’s Imperva enterprise WAF solution used to ensure networks and systems in the VA are monitored, inspected, and protected from all web application activity entering the VA network. The Imperva hardware filters and monitors VA system logs and network connectivity to protect VA from information security threats.

The Contractor shall provide brand name Imperva hardware maintenance and technical support, including 24/7 telephone and email support to troubleshoot malfunctioning equipment / components, and provides replacement equipment/components as necessary to restore the Imperva hardware operation and accessibility to the original, redundant component configuration. The Contractor shall repair or replace systems equipment components to restore full operation and accessibility to the original redundant component configuration so it functions as intended The Contractor-provided maintenance and technical support shall ensure the hardware remains operational and functions as intended. The Contractor’s initial response to all requests for maintenance shall be initiated within one hour of the initial notification from VA. Additionally, hardware maintenance includes any firmware upgrades, updates to major releases, point releases, service releases and security releases for applicable firmware on a quarterly basis or within 48 hours for instances where a high-risk vulnerability fix becomes available. The Contractor shall provide all parts and labor.

All problem resolution shall be performed on a continuous effort, meaning that once the Contractor is notified a problem exists, the Contractor shall give the highest priority to resolution of the problem and work uninterrupted until the problem is resolved and the hardware is functioning as intended. Replacement components may be shipped via carrier to the VA site listed in Section 4.0 herein and the VA Information Technology System Administrator will install the replacement component. For plug-and-play failed items such as hard drives, the Contractor shall ship replacement component(s) as next day air no later than the next business day once the defective component(s) has been identified. Only VA IT System Administrators are allowed to perform keyboarding tasks, with guidance from the Contractor representatives if necessary. The Contractor representatives shall not be granted administrative privileges, control, or access to any VA systems.

In addition, VA will retain all hard disk drives and magnetic or recordable media that are defective. All maintenance performed under this Order includes the VA retention of defective hard disk drives and magnetic media. Therefore, VA shall retain all hard drives and recordable media. Under no circumstances shall the Contractor remove hard drives and magnetic tape media from a VA site. Other defective parts become property of the Contractor.

The Contractor shall provide brand name Imperva designated engineer support to provide technical expertise with assisting in troubleshooting for malfunctioning Imperva Web Application Firewall (WAF) appliances and to restore the appliances to original configuration.

Performance for the Order includes a Base Period of twelve (12) months, with performance from April 29, 2025, through April 28, 2026, with one (1) two (2)-month Option Period with performance from April 29, 2026, through July 1, 2026, should the Government choose to exercise the Option Period. The performance dates for individual hardware products in the Base Period are staggered to align performance end dates for all covered Imperva hardware.

Specifically, the Contractor shall provide the following:

Item # Description/ Part Number/ Period of

Performance Quantity BASE PERIOD: the performance dates for individual hardware products in the Base Period ARE staggered to align performance end dates for all covered Imperva hardware.

1 X10K2 Web Application Firewall, Annual Select Support

PN: SS-WAF-X10K2-R-SL3

Period of Performance (POP): 4/29/2025 through 4/28/2026

2 10 Gigabit Ethernet Network Interface Card- PCI-E- Quad SR Fiber Bypass for X2520 / X4520 / X6520 / X8520 / X10K2, Annual Select Support

PN: SS-NIC-10G4-DSR-6GBP-R-SL3

POP: 4/29/2025 through 4/28/2026

3 SSL Accelerator Card - High Capacity for X6520/X8520/X10K2, Annual Select Support

PN: SS-SSL-6GHC-R-SL3

POP: 4/29/2025 through 4/28/2026

4 Client Reputation Services for X10K, Enterprise Edition, Annual Subscription Part

PN: SB-WAF-10K-R-TREE

POP: 4/29/2025 through 4/28/2026

Performance Quantity 5 X10K2 Web Application Firewall, Annual

Select Support

PN: SS-WAF-X10K2-R-SL3

POP: 8/12/2025 through 4/28/2026

6 10 Gigabit Ethernet Network Interface Card- PCI-E- Quad SR Fiber Bypass for X2520 / X4520 / X6520 / X8520 / X10K2, Annual Select Support

PN: SS-NIC-10G4-DSR- 6GBP-R-SL3

POP: 8/12/2025 through 4/28/2026

7 SSL Accelerator Card - High Capacity for X6520/X8520/X10K2, Annual Select Support

PN: SS-SSL-6GHC-R-SL3

POP: 8/12/2025 through 4/28/2026

8 Client Reputation Services for X10K, Enterprise Edition, Annual Subscription Part

PN: SB-WAF-10K-R-TREE

POP: 8/12/2025 through 4/28/2026

9 Designated Support Engineer

PN: PS-DSE

POP: 7/2/2025 through 4/28/2026

10 Imperva VM150 Management Server Virtual Appliance, Annual Enhanced Support

PN: SS-VM15-R-SL3

POP: 7/2/2025 through 4/28/2026

11 Imperva VM150 Management Server Virtual Appliance, Annual Enhanced Support

PN: SS-VM15-R-SL3

POP: 7/2/2025 through 4/28/2026

OPTION PERIOD 1, IF EXERCISED

POP: 4/29/2026 through 7/1/2026

1 X10K2 Web Application Firewall, Annual Select Support

PN: SS-WAF-X10K2-R-SL3

Performance Quantity 2 10 Gigabit Ethernet Network Interface Card-

PCI-E- Quad SR Fiber Bypass for X2520 / X4520 / X6520 / X8520 / X10K2, Annual Select Support

PN: SS-NIC-10G4-DSR-6GBP-R-SL3

3 SSL Accelerator Card - High Capacity for X6520/X8520/X10K2, Annual Select Support

PN: SS-SSL-6GHC-R-SL3

4 Client Reputation Services for X10K, Enterprise Edition, Annual Subscription Part

PN: SB-WAF-10K-R-TREE

5 X10K2 Web Application Firewall, Annual Select Support

PN: SS-WAF-X10K2-R-SL3

6 10 Gigabit Ethernet Network Interface Card- PCI-E- Quad SR Fiber Bypass for X2520 / X4520 / X6520 / X8520 / X10K2, Annual Select Support

PN: SS-NIC-10G4-DSR- 6GBP-R-SL3

7 SSL Accelerator Card - High Capacity for X6520/X8520/X10K2, Annual Select Support

PN: SS-SSL-6GHC-R-SL3

8 Client Reputation Services for X10K, Enterprise Edition, Annual Subscription Part

PN: SB-WAF-10K-R-TREE

9 Designated Support Engineer

PN: PS-DSE

10 Imperva VM150 Management Server Virtual Appliance, Annual Enhanced Support

PN: SS-VM15-R-SL3

11 Imperva VM150 Management Server Virtual Appliance, Annual Enhanced Support

PN: SS-VM15-R-SL3

2.0 NOTICE OF THE FEDERAL ACCESSIBILITY LAW AFFECTING ALL

INFORMATION AND COMMUNICATION TECHNOLOGY (ICT)

PROCUREMENTS (SECTION 508)

On January 18, 2017, the Architectural and Transportation Barriers Compliance Board (Access Board) revised and updated, in a single rulemaking, standards for electronic and information technology developed, procured, maintained, or used by Federal agencies covered by Section 508 of the Rehabilitation Act of 1973, as well as our guidelines for telecommunications equipment and customer premises equipment covered by Section 255 of the Communications Act of 1934. The revisions and updates to the Section 508-based standards and Section 255-based guidelines are intended to ensure that information and communication technology (ICT) covered by the respective statutes is accessible to and usable by individuals with disabilities.

2.1 SECTION 508 – INFORMATION AND COMMUNICATION TECHNOLOGY (ICT)

STANDARDS

The Section 508 standards established by the Access Board are incorporated into, and made part of all VA orders, solicitations and purchase orders developed to procure ICT.

These standards are found in their entirety at: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines. A printed copy of the standards will be supplied upon request.

Federal agencies must comply with the updated Section 508 Standards beginning on January 18, 2018. The Final Rule as published in the Federal Register is available from the Access Board: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule.

The Contractor shall comply with “508 Chapter 2: Scoping Requirements” for all electronic ICT and content delivered under this contract. Specifically, as appropriate for the technology and its functionality, the Contractor shall comply with the technical standards marked here:

E205 Electronic Content – (Accessibility Standard -WCAG 2.0 Level A and AA Guidelines)

E204 Functional Performance Criteria E206 Hardware Requirements E207 Software Requirements E208 Support Documentation and Services Requirements

2.2 COMPATABILITY WITH ASSISTIVE TECHNOLOGY

The standards do not require installation of specific accessibility-related software or attachment of an assistive technology device. Section 508 requires that ICT be compatible with such software and devices so that ICT can be accessible to and usable by individuals using assistive technology, including but not limited to screen readers, screen magnifiers, and speech recognition software.

2.3 ACCEPTANCE AND ACCEPTANCE TESTING

Deliverables resulting from this solicitation will be accepted based in part on satisfaction of the Section 508 Chapter 2: Scoping Requirements standards identified above.

The Government reserves the right to test for Section 508 Compliance before delivery.

The Contractor shall be able to demonstrate Section 508 Compliance upon delivery.

3.0 SHIPMENT OF HARDWARE OR EQUIPMENT AND GOVERNMENT POINTS

OF CONTACT (POC)

Inspection: Destination Acceptance: Destination Free on Board (FOB): Destination

Ship To and Mark For / Government POCs:

Primary Government POC:

Name: To Be Provided at Award Address:

Voice/Phone:

Email:

Alternate POC:

Name: To Be Provided at Award Address:

Voice/Phone:

Email:

3.1 SPECIAL SHIPPING INSTRUCTIONS

Prior to shipping any replacement parts, the Contractor shall obtain a Site POC from the Government POCs listed in Section 3.0. The Contractor shall notify the Site POC by phone, followed by email, of all incoming deliveries including line-by-line details for review of requirements. The Contractor shall not make any changes to the delivery schedule at the request of a Site POC.

Contractors shall coordinate deliveries with Site POCs before shipment of hardware to ensure sites have adequate storage space.

All shipments, either single or multiple container deliveries, shall bear the Integrated Funds Distribution, Control Point Activity, Accounting and Procurement (IFCAP) Purchase Order (PO) or Integrated Financial and Acquisition Management Systems (iFAMS) Integrated Purchase Request (IPR) number on external shipping labels and associated manifests or packing lists. In the case of multiple container deliveries, a statement readable near the IFCAP PO or iFAMS IPR number shall indicate total number of containers for the complete shipment (e.g. “Package 1 of 2”), clearly readable on manifests and external shipping labels.

Packing Slips/Labels and Lists shall also include the following:

IFCAP PO/ iFAMS IPR #: ____________ Project Description: (e.g. Tier I Lifecycle Refresh)

Total number of Containers: Package ___ of ___. (e.g., Package 1 of 3)

4.0 GENERAL REQUIREMENTS

4.1 VA TECHNICAL REFERENCE MODEL

The Contractor shall support the VA enterprise management framework. In association with the framework, the Contractor shall comply with OIT Technical Reference Model (VA TRM). The VA TRM is one component within the overall Enterprise Architecture (EA) that establishes a common vocabulary and structure for describing the information technology used to develop, operate, and maintain enterprise applications. Moreover, the VA TRM, which includes the Standards Profile and Product List, serves as a technology roadmap and tool for supporting OIT. Architecture & Engineering Services (AES) has overall responsibility for the VA TRM.

4.2 SOCIAL SECURITY NUMBER (SSN) REDUCTION

The Contractor solution shall support the Social Security Number (SSN) Fraud Prevention Act (FPA) of 2017 which prohibits the inclusion of SSNs on any document sent by mail. The Contractor support shall also be performed in accordance with Section 240 of the Consolidated Appropriations Act (CAA) 2018, enacted March 23, 2018, which mandates VA to discontinue using SSNs to identify individuals in all VA information systems as the Primary Identifier. The Contractor shall ensure that any new IT solution discontinues the use of SSN as the Primary Identifier to replace the SSN with the Integrated Control Number (ICN) in all VA information systems for all individuals. The Contractor shall ensure that all Contractor delivered applications and systems integrate with the VA Master Person Index (MPI) for identity traits to include the use of the ICN as the Primary Identifier. The Contractor solution may only use a Social Security Number to identify an individual in an information system if and only if the use of such number is required to obtain information VA requires from an information system that is not under the jurisdiction of VA.

4.3 INTERNET PROTOCOL VERSION 6 (IPV6)

The Contractor solution shall support Internet Protocol Version 6 (IPv6) based upon the memo issued by the Office of Management and Budget (OMB) on November 19, 2020 (https://www.whitehouse.gov/wp-content/uploads/2020/11/M-21-07.pdf). IPv6 technology, in accordance with the USGv6 Program (https://www.nist.gov/programs-projects/usgv6-program/usgv6-revision-1), NIST Special Publication (SP) 500-267B Revision 1 “USGv6 Profile” (https://doi.org/10.6028/NIST.SP.500-267Br1), and NIST SP 800-119 “Guidelines for the Secure Deployment of IPv6” (https://doi.org/10.6028/NIST.SP.800-119), compliance shall be included in all IT infrastructures, application designs, application development, operational systems and sub-systems, and their integration. In addition to the above requirements, all devices shall support native IPv6 and dual stack (IPv6 / IPv4) connectivity without additional memory or other resources being provided by the Government, so that they can function in a mixed environment. All public/external facing servers and services (e.g.

web, email, DNS, ISP services, etc.) shall support native IPv6 and dual stack (IPv6 / IPv4) users and all internal infrastructure and applications shall communicate using native IPv6 and dual stack (IPv6 / IPv4) operations.

5.0 INFORMATION SECURITY CONSIDERATIONS:

The Assessment and Authorization (A&A) requirements do not apply and a Security Accreditation Package is not required.

All VA sensitive information shall be protected at all times in accordance with local security field office System Security Plans (SSP’s) and Authority to Operate (ATO)’s for all systems/LAN’s accessed while performing the tasks detailed in this Product Description.

SECTION C - CONTRACT CLAUSES

ADDENDUM to FAR 52.212-4 CONTRACT TERMS AND CONDITIONS—

COMMERCIAL ITEMS

The following clauses are incorporated into 52.212-4 as an addendum to this contract:

C.1 NASA SEWP V RFQ INTRODUCTORY LANGUAGE

All clauses and provisions from the Federal Acquisition Regulation (FAR), NASA FAR Supplement, and the Goddard Space Flight Center Regulation from the applicable NASA Solutions for Enterprise-Wide Procurement (SEWP) V Government-Wide Acquisition Contract (GWAC), and the specific NASA SEWP V contract referenced on the SF1449 in Block 2, are hereby incorporated by reference.

The full text of any FAR and NASA SEWP V clauses which are incorporated by reference may be obtained at the following URLs:

FAR: https://www.acquisition.gov/browse/index/far NASA SEWP V: http://www.sewp.nasa.gov

C.2 GWAC RFQ INTRODUCTORY LANGUAGE

The terms and conditions of the contractor's GWAC contract (including any contract modifications) apply to all task or delivery orders issued under the contract as a result of this RFQ. When a lower price has been established, or when the delivery terms, FOB terms, or ordering requirements have been modified by the task/delivery order, those modified terms will apply to all purchases made pursuant to it and take precedence over the GWAC contract. Any unique terms and conditions of an order issued under the contract that are not a part of the applicable GWAC contract will govern. In the event of an inconsistency between the terms and conditions of a task/delivery order and the Contractor's GWAC terms, other than those identified above, the terms of the GWAC contract will take precedence.

C.3 FAR 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

FAR: https://www.acquisition.gov/browse/index/far VAAR: http://www.va.gov/oal/library/vaar/

System updates may lag policy updates. The System for Award Management (SAM) may continue to require entities to complete representations based on provisions that are not included in agency solicitations. Examples include 52.222-25, Affirmative Action

Compliance, and paragraph (d) of 52.212-3, Offeror Representations and Certifications—Commercial Products and Commercial Services. Contracting officers will not consider these representations when making award decisions or enforce requirements. Entities are not required to, nor are they able to, update their entity registration to remove these representations in SAM.

FAR/VAAR

Clause Number Title Date

52.201-1 ACQUISITION 360: VOLUNTARY SURVEY SEP 2023

52.203-17 CONTRACTOR EMPLOYEE WHISTLEBLOWER RIGHTS

AND REQUIREMENT TO INFORM EMPLOYEES OF

WHISTLEBLOWER RIGHTS

NOV 2023

52.204-27 PROHIBITION ON A BYTEDANCE COVERED

APPLICATION

JUN 2023

52.227-1 AUTHORIZATION AND CONSENT JUN 2020

52.227-2 NOTICE AND ASSISTANCE REGARDING PATENT AND

COPYRIGHT INFRINGEMENT

JUN 2020

852.203-70 COMMERCIAL ADVERTISING MAY 2018

852.212-72 GRAY MARKET AND COUNTERFEIT ITEMS—

INFORMATION TECHNOLOGY MAINTENANCE

ALLOWING OTHER-THAN-NEW PARTS

FEB 2023

852.232-72 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS NOV 2018

852.239-70 SECURITY REQUIREMENTS FOR INFORMATION

TECHNOLOGY RESOURCES

FEB 2023

852.239-71 INFORMATION SYSTEM SECURITY PLAN AND

ACCREDITATION

FEB 2023

852.246-71 REJECTED GOODS OCT 2018

(End of Clause)

C.4 FAR 52.252-6 AUTHORIZED DEVIATIONS IN CLAUSES (NOV 2020)

(a) The use in this solicitation or contract of any Federal Acquisition Regulation (48 CFR Chapter 1) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the date of the clause.

(b) The use in this solicitation or contract of any VAAR (48 CFR 1.301 through 1.304) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the name of the regulation.

(End of clause)

C.5 FAR 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR

2000)

(a) The Government may extend the term of this contract by written notice to the Contractor within any time prior to contract expiration; provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least ten calendar days before the contract expires. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed 14 months.

C.6 VAAR 852.219-73 VA NOTICE OF TOTAL SET-ASIDE FOR CERTIFIED

SERVICE-DISABLED VETERAN-OWNED SMALL BUSINESSES (JAN 2023)

(DEVIATION)

(a) Definition. for the Department of Veterans Affairs, ‘‘Service-disabled Veteran-owned small business concern or SDVOSB’’:

(1) Means a small business concern—

(i) Not less than 51 percent of which is owned by one or more service-disabled Veterans or, in the case of any publicly owned business, not less than 51 percent of the stock of which is owned by one or more service-disabled Veterans or eligible surviving spouses (see VAAR 802.201, Surviving Spouse definition);

(ii) The management and daily business operations of which are controlled by one or more service-disabled Veterans (or eligible surviving spouses) or, in the case of a service-disabled Veteran with permanent and severe disability, the spouse or permanent caregiver of such Veteran;

(iii) The business meets Federal small business size standards for the applicable North American Industry Classification System (NAICS) code identified in the solicitation document;

(iv) The business has been certified for ownership and control pursuant to 38 U.S.C.

8127, 13 CFR 128, and is listed as certified in the SBA certification database at https://veterans.certify.sba.gov/; and

(v) The business agrees to comply with VAAR subpart 819.70 and Small Business Administration (SBA) regulations regarding small business size, government contracting, and the Veteran Small Business Certification Program at 13 CFR parts 121, 125, and 128.

(2) The term ‘‘Service-disabled Veteran’’ means a Veteran, as defined in 38 U.S.C.

101(2), with a disability that is service-connected, as defined in 38 U.S.C. 101(16).

(3) The term ‘‘small business concern’’ has the meaning given that term under section 3 of the Small Business Act (15 U.S.C. 632).

(4) The term ‘‘small business concern owned and controlled by Veterans with service-connected disabilities’’ has the meaning given the term ‘‘small business concern owned and controlled by service-disabled veterans’’ under section 3(q)(2) of the Small Business Act (15 U.S.C. 632(q)(2)).

(5) The term “SDVOSB participant” or certified SDVOSB means a small business that has been certified in the SBA Veteran Small Business Certification Program and listed in the SBA certification database (see 13 CFR 128.102).

(b) General. In order for a concern to submit an offer and be eligible for the award of an SDVOSB set-aside or sole source contract, the concern must qualify as a small business concern under the size standard corresponding to the NAICS code assigned to the contract and be listed as an SDVOSB participant in the SBA certification database as set forth in 13 CFR 128.

(1) Offers received from entities that are not certified SDVOSBs and listed in the SBA certification database at the time of offer shall not be considered.

(2) Any award resulting from this solicitation shall be made to a certified SDVOSB listed in the SBA certification database who is eligible at the time of submission of offer(s) and at the time of award.

(3) The requirements in this clause apply to any contract, order or subcontract where the firm receives a benefit or preference from its designation as an SDVOSB, including set-asides, sole source awards, and evaluation preferences.

(c) Representation. Pursuant to 38 U.S.C. 8127(e), only certified SDVOSBs listed in the SBA certification database are considered eligible to receive award of a resulting contract. By submitting an offer, the prospective contractor represents that it is an eligible and certified SDVOSB as defined in this clause, 13 CFR 121, 125, and 128, and VAAR subpart 819.70.

(d) Agreement/LOS certification. When awarded a contract action, including orders under multipleaward contracts, an SDVOSB agrees that in the performance of the contract, the SDVOSB shall comply with requirements in VAAR subpart 819.70 and SBA regulations on small business size, and government contracting programs at 13 CFR part 121 and part 125, including the non-manufacturer rule and limitations on subcontracting (LOS) requirements in 13 CFR 121.406(b) and 13 CFR 125.6. For the purpose of limitations on subcontracting, only certified SDVOSBs listed in the SBA certification database (including independent contractors) shall be considered eligible and/or ‘‘similarly situated’’ (i.e., a firm that has the same small business program status as the prime contractor). An otherwise eligible firm further agrees to comply with the required LOS certification requirements in this solicitation (see 852.219–75 or 852.219– 76 as applicable). These requirements are summarized as follows:

(1) Services. In the case of a contract for services (except construction), the SDVOSB prime contractor will not pay more than 50% of the amount paid by the government to the prime for contract performance to firms that are not certified SDVOSBs listed in the SBA certification database (excluding direct costs to the extent they are not the principal purpose of the acquisition and the SDVOSB/ VOSB does not provide the service, such as airline travel, cloud computing services, or mass media purchases). When a contract includes both services and supplies, the 50 percent limitation shall apply only to the service portion of the contract.

(2) Supplies/products.

(i) In the case of a contract for supplies or products (other than from a non-manufacturer of such supplies), the SDVOSB prime contractor will not pay more than 50% of the amount paid by the government to the prime for contract performance, excluding the cost of materials, to firms that are not certified SDVOSBs listed in the SBA certification database. When a contract includes both supply and services, the 50 percent limitation shall apply only to the supply portion of the contract.

(ii) In the case of a contract for supplies from a non-manufacturer, the SDVOSB prime contractor will supply the product of a domestic small business manufacturer or processor, unless a waiver as described in 13 CFR 121.406(b)(5) has been granted.

Refer to 13 CFR 125.6(a)(2)(ii) for guidance pertaining to multiple item procurements.

(3) General construction. In the case of a contract for general construction, the SDVOSB prime contractor will not pay more than 85% of the amount paid by the government to the prime for contract performance, excluding the cost of materials, to firms that are not certified SDVOSBs listed in the SBA certification database.

(4) Special trade construction contractors. In the case of a contract for special trade contractors, no more than 75% of the amount paid by the government to the prime for contract performance, excluding the cost of materials, may be paid to firms that are not certified SDVOSBs listed in the SBA certification database.

(5) Subcontracting. An SDVOSB subcontractor must meet the NAICS size standard assigned by the prime contractor and be certified and listed in the SBA certification database to count as similarly situated. Any work that a first tier SDVOSB subcontractor further subcontracts will count towards the percent of subcontract amount that cannot be exceeded. For supply or construction contracts, the cost of materials is excluded and not considered to be subcontracted. When a contract includes both services and supplies, the 50 percent limitation shall apply only to the portion of the contract with the preponderance of the expenditure upon which the assigned NAICS is based. For information and more specific requirements, refer to 13 CFR 125.6.

(e) Required limitations on subcontracting compliance measurement period. An SDVOSB shall comply with the limitations on subcontracting as follows:

[ ] By the end of the base term of the contract or order, and then by the end of each subsequent option period; or [X] By the end of the performance period for each order issued under the contract.

(f) Joint ventures. A joint venture may be considered eligible as an SDVOSB if the joint venture complies with the requirements in 13 CFR 128.402 and the managing joint venture partner makes the representations under paragraph (c) of this clause. A joint venture agrees that, in the performance of the contract, the applicable percentage specified in paragraph (d) of this clause will be performed by the aggregate of the joint venture participants.

(g) Precedence. The VA Veterans First Contracting Program, as defined in VAAR 802.101, subpart 819.70, and this clause, takes precedence over any inconsistencies between the requirements of the SBA Veteran Small Business Certification Program and the VA Veterans First Contracting Program.

(h) Misrepresentation. Pursuant to 38 U.S.C. 8127(g), any business concern, including all its principals, that is determined by VA to have willfully and intentionally misrepresented a company’s SDVOSB status is subject to debarment from contracting with the Department for a period of not less than five years (see VAAR 809.406–2 Causes for Debarment).

C.7 VAAR 852.219-75 VA NOTICE OF LIMITATIONS ON SUBCONTRACTING—

CERTIFICATE OF COMPLIANCE FOR SERVICES AND CONSTRUCTION (JAN

2023) (DEVIATION)

(a) Pursuant to 38 U.S.C. 8127(l)(2), the offeror certifies that—

(1) If awarded a contract (see FAR 2.101 definition), it will comply with the limitations on subcontracting requirement as provided in the solicitation and the resultant contract, as follows:

(i) [X] Services. In the case of a contract for services (except construction), the contractor will not pay more than 50% of the amount paid by the government to it to firms that are not certified SDVOSBs listed in the SBA certification database as set forth in 852.219–73 or certified VOSBs listed in the SBA certification database as set forth in 852.219–74. Any work that a similarly situated certified SDVOSB/VOSB subcontractor further subcontracts will count towards the 50% subcontract amount that cannot be exceeded. Other direct costs may be excluded to the extent they are not the principal purpose of the acquisition and small business concerns do not provide the service as set forth in 13 CFR 125.6.

(ii) [ ] General construction. In the case of a contract for general construction, the contractor will not pay more than 85% of the amount paid by the government to it to firms that are not certified SDVOSBs listed in the SBA certification database as set forth in 852.219–73 or certified VOSBs listed in the SBA certification database as set forth in 852.219–74. Any work that a similarly situated certified SDVOSB/VOSB subcontractor further subcontracts will count towards the 85% subcontract amount that cannot be exceeded. Cost of materials are excluded and not considered to be subcontracted.

(iii) [ ] Special trade construction contractors. In the case of a contract for special trade contractors, the contractor will not pay more than 75% of the amount paid by the government to it to firms that are not certified SDVOSBs listed in the SBA certification database as set forth in 852.219–73 or certified VOSBs listed in the SBA certification database as set forth in 852.219–74. Any work that a similarly situated certified SDVOSB/VOSB subcontractor further subcontracts will count towards the 75% subcontract amount that cannot be exceeded. Cost of materials are excluded and not considered to be subcontracted.

(2) The offeror acknowledges that this certification concerns a matter within the jurisdiction of an Agency of the United States. The offeror further acknowledges that this certification is subject to Title 18, United States Code, Section 1001, and, as such, a false, fictitious, or fraudulent certification may render the offeror subject to criminal, civil, or administrative penalties, including prosecution.

(3) If VA determines that an SDVOSB/ VOSB awarded a contract pursuant to 38 U.S.C.

8127 did not act in good faith, such SDVOSB/VOSB shall be subject to any or all of the following:

(i) Referral to the VA Suspension and Debarment Committee;

(ii) A fine under section 16(g)(1) of the Small Business Act (15 U.S.C. 645(g)(1)); and

(iii) Prosecution for violating 18 U.S.C. 1001.

(b) The offeror represents and understands that by submission of its offer and award of a contract it may be required to provide copies of documents or records to VA that VA may review to determine whether the offeror complied with the limitations on subcontracting requirement specified in the contract. Contracting officers may, at their discretion, require the contractor to demonstrate its compliance with the limitations on subcontracting at any time during performance and upon completion of a contract if the information regarding such compliance is not already available to the contracting officer.

Evidence of compliance includes, but is not limited to, invoices, copies of subcontracts, or a list of the value of tasks performed.

(c) The offeror further agrees to cooperate fully and make available any documents or records as may be required to enable VA to determine compliance with the limitations on subcontracting requirement. The offeror understands that failure to provide documents as requested by VA may result in remedial action as the Government deems appropriate.

(d) Offeror completed certification/fill-in required. The formal certification must be completed, signed and returned with the offeror’s bid, quotation, or proposal. The Government will not consider offers for award from offerors that do not provide the certification, and all such responses will be deemed ineligible for evaluation and award.

Certification:

I hereby certify that if awarded the contract, [insert name of offeror] will comply with the limitations on subcontracting specified in this clause and in the resultant contract. I further certify that I am authorized to execute this certification on behalf of [insert name of offeror].

Printed Name of Signee: ________________________________________

Printed Title of Signee: _________________________________________

Signature: ___________________________________________________

Date: _____________________

Company Name and Address: ______________________________________

C.8 VAAR 852.222-71 COMPLIANCE WITH EXECUTIVE ORDER 13899.

(DEVIATION) (APR 2025)

a. The contractor shall comply with Executive Order 13899, Combating Anti-Semitism, pursuant to Title VI of the Civil Rights Act of 1964 (Title VI), 42 U.S.C. 2000d et seq.

b. The contractor shall timely disclose, in writing, to the Contracting Officer, whenever, in connection with the award, performance, or closeout of this contract or any subcontract thereunder, the Contractor has credible evidence that a principal, employee, agent, or subcontractor of the Contractor has committed a violation under Executive Order 13899, Combatting Anti-Semitism pursuant to the Civil Rights Act of 1964 (Title VI), 42 U.S.C. 2000d et seq.

d. The contractor shall include the terms and conditions of this clause in every subcontract or purchase order so that these terms will be binding on every subcontractor or vendor.

(End of clause)

C.9 VAAR 852.239-76 INFORMATION AND COMMUNICATION TECHNOLOGY

ACCESSIBILITY (FEB 2023)

(a) All information and communication technology (ICT) (formerly referred to as electronic and information technology (EIT)) supplies, information, documentation and services support developed, acquired, maintained or delivered under this contract or order must comply with the ‘‘Architectural and Transportation Barriers Compliance Board Electronic and Information Technology (EIT) Accessibility Standards’’ (see 36 CFR part 1194). Information about Section 508 is available at http://www.section508.va.gov/.

(b) The Section 508 accessibility standards applicable to this contract or order are identified in the specification, statement of work, or performance work statement. If it is determined by the Government that ICT supplies and services provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies or services to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(c) The Section 508 accessibility standards applicable to this contract are: E205 Electronic Content – (Accessibility Standard – WCAG 2.0 Level A and AA Guidelines, E204 Functional Performance Criteria, E206 Hardware Requirements, E208 Support Documentation and Services Requirements.

(d) In the event of a modification(s) to this contract or order, which adds new EIT supplies or services or revises the type of, or specifications for, supplies or services, the Contracting Officer may require that the Contractor submit a completed VA Section 508 Checklist and any other additional information necessary to assist the Government in determining that the ICT supplies or services conform to Section 508 accessibility standards.