Attachment_2_-_Revised_SOW_1_-_Non_Certified_Large_Format_Printers.pdf

SP7000-16-R-1004, Amendment 3 Attachment 2 Page 1 of 6 Revised Statement of Work 1 – Non-Certified Large Format Printers

NON-CERTIFIED LARGE (WIDE) FORMAT PRINTERS PURCHASES FOR CONTINENTAL U.S.,

ALASKA, HAWAII, & GUAM

1. Large (Wide) Format Printers: Hardware used for printing documents in an office or business environment, often referred to as a Large Format Printers. This device must accept and output multiple formats including all major formats up to 2400 dpi — Printer must include a multi-roll system for both print and copy function — Image preview on controller or built-in display unit. — Scan-to-file system must be CAC enabled and network compatible and operate within all DOD environments — Ability to retrieve scanned image files with integrated Windows compatible client software to network share directory — the software must be compatible with Windows 7, Windows 10 or current DOD operating systems. (Both PC and Mac compatible)

1.1 Specification for Large (Wide) Format Printers must meet or exceed the minimum salient characteristics listed within this Statement of Work.

Printer 44”

Print:

• Print Speed Line drawings 28 sec/page on A1/D, 103 A1/D prints per hour

• Print Resolution 2400 x 1200 optimized dpi

• Margins Roll: 5 x 5 x 5 x 5 mm (0.2 x 0.2 x 0.2 x 0.2 in)

• Ink Types Dye-based (C, M, Y, G, pK); Pigment-based (mk)

• Handling Two automatic roll feeds; smart roll-switching; sheet feed; media output bin; automatic cutter

• Size 210 to 1118-mm (8.3 to 44-in) wide sheets; 279 to 1118-mm (11 to 44-in) rolls

• Thickness min 0.5 mm (19.7 mil)

• Memory 32 GB (virtual), 160 GB hard disk

• Connectivity CAC enabled (FIPS 140-2 Complaint) Interfaces (standard) Gigabit Ethernet (1000

Base-T), Hi-Speed USB 2.0 certified,

• Print Languages Adobe PostScript 3, Adobe PDF 1.7, TIFF, JPEG, CALS G4, GUI

• Printing Paths Printer driver, USB, email printing

• Drivers PostScript Windows and Mac drivers Compatible

• Scan & Copy PostScript Windows and Mac drivers Compatible

Scan & Copy:

• Scan Speed Color: Up to 15 cm/sec (6 in/sec)

• Grayscale: Up to 33 cm/sec (13 in/sec)

• Enhanced Resolution 9600 dpi

• Optical Resolution 1200 dpi

• Maximum Scan Width 1118 mm (44 in)

• Supported File Formats: PDF, TIFF, JPEG, JPEG2000, DWF, CALS (B&W), multi-page, PDF generation.

• Scan preview, scan to file, scan to HDD, scan to network folder, scan to e-mail, scan to USB, scan to print, scan to FTP

• Scan Settings: Type of original-preset, color mode, resolution (dpi), batch, single/multi-page, file format, customizable file naming, de-skew, image crop and align preview, enlarge/reduce, blueprint, lightness, saturation and RGB controls, sharpen/blur, background removal, invert, mirror, accounting

• Copier Settings: Print mode, output size, paper type, copies, page order, collate, printer output destination

• Size Detection: Automatic and manual width detection

• Media Handling: Straight-through scan paper path for sheet and cardboard originals

SP7000-16-R-1004, Amendment 3 Attachment 2 Page 2 of 6

• Media Size: Up to 1168 mm (46 in) wide

• Media Thickness: Up to 2 mm (0.08 in)

• Scanner Memory: 4 GB memory, 500 GB hard disk

• Connectivity: Interfaces (standard) dual Gigabit Ethernet (1000Base-T), Hi-Speed USB 3.0 certified

Printer 42”

Print:

• Print Speed Line drawings 15.5 sec/page on A1/D, 165 A1/D prints per hour

• Color Images Minimum of: 13.5 sec/page on A1/D or 117.5 m²/hr (1265 ft²/hr) on coated media

• Minimum print speed 1320 ft²/hr

• Ink Types Dye-based (C, M, Y, G, DG); pigment-based (mK)

• Media Handling Two roll feeds (upgradeable to three), automatic roll switching, rolls up to 650ft each, automatic cutter, media bin

• Size 11 to 42-in rolls, up to 26.5 lb

• Thickness 0.4 mm (15.7 mil)

• Memory 64 GB (virtual), 320 GB hard disk (AES-256 encrypted, FIPS 140-2 Level 2 certified)

• Connectivity CAC enabled (FIPS 140-2 Complaint) Interfaces Gigabit Ethernet (1000Base-T)

• Print Languages Standard, CALS G4

• Print Languages will include Adobe PostScript 3, Adobe PDF 1.7, TIFF, JPEG

• Drivers (included) PostScript Windows and Mac OS X drivers with PostScript/PDF Kit. Compatible with

Universal Print Driver

Scan & Copy:

• Scan Speed Color: Up to 15 cm/sec (6 in/sec)

• Grayscale: Up to 33 cm/sec (13 in/sec)

• Enhanced Resolution 9600 dpi

• Optical Resolution 1200 dpi

• Maximum Scan Width 1118 mm (44 in)

• Supported File Formats: PDF, TIFF, JPEG, JPEG2000, DWF, CALS (B&W), multi-page, PDF generation.

• Scan preview, scan to file, scan to HDD, scan to network folder, scan to e-mail, scan to USB, scan to print, scan to FTP

• Scan Settings: Type of original-preset, color mode, resolution (dpi), batch, single/multi-page, file format, customizable file naming, de-skew, image crop and align preview, enlarge/reduce, blueprint, lightness, saturation and RGB controls, sharpen/blur, background removal, invert, mirror, accounting

• Copier Settings: Print mode, output size, paper type, copies, page order, collate, printer output destination

• Size Detection: Automatic and manual width detection

• Media Handling: Straight-through scan paper path for sheet and cardboard originals

• Media Size: Up to 1168 mm (46 in) wide

• Media Thickness: Up to 2 mm (0.08 in)

• Scanner Memory: 4 GB memory, 500 GB hard disk

• Connectivity: Interfaces (standard) dual Gigabit Ethernet (1000Base-T), Hi-Speed USB 3.0 certified

Printer 36 “

• Print Speed Line drawings 21 sec/page on A1/D, 120 A1/D prints per hour

• Ink Types Dye-based (C, G, M, pK, Y); Pigment-based (mK)

• Media Input: Two automatic front-loading roll feeds; smart roll switching; rolls up to 200 m

(650 ft) long each and 180 mm (7.1 in) of diameter; sheet feed

• Output Integrated output stacker (from A4/A to AO/E, with up to 100 A1/D-size capacity);

media bin; automatic cutter

• Scanner Straight-through scan paper path for sheet and cardboard originals

• Size Rolls: 279 to 914 mm (11 to 36 in)

SP7000-16-R-1004, Amendment 3 Attachment 2 Page 3 of 6

• Sheets 8.3 x 11 to 36 x 48 in

• Thickness 0.5 mm (19.7 mil)

• Scan Speed Color: 6.35 cm/sec (2.5 in/sec)

• Grayscale 19.05 cm/sec

• Scan/Copy resolution 600 dpi

• Ratio 25 to 400%; at least in 1% increments

• Maximum Up to 99 copies

• Copy Settings Copy quality, copy color, roll, paper output, content type, original paper type, background removal, contrast, de-skew, blueprints support, copy margin layout, full width, job queue

• Memory min 96 GB, 500 GB hard disk (AES-256 encrypted, FIPS 140-2 Level 2 certified) storage mode

• Connectivity CAC enabled (FIPS 140-2 Complaint) Interfaces(standard) High-Speed USB 2.0 certified host connector Gigabit Ethernet (1000Base-T), supporting the following standards:

TCP/IP, BootP/DHCP (IPv4 only), DHCPv6, TFTP (IPv4o only), SNMP (v1, v2c, v3), Apple Bonjour Compatible, FTP, WS Discovery, Embedded Web Server(HTTP, HTTPs), IPSec, SMTP (e-mail), Raw IP printing (9100, 9101, 9102), LPD, IPP, WS print, NTLM, NTLM v2, SSL/TLS, 802.1X authentication (WEP, WPA, WPA2, LEAP, PEAP, EAP-TLS)

• Print Languages TIFF, JPEG, CALS G4, PCL 3 GUI Adobe PostScript 3; Adobe PDF 1.7

• Printing paths direct printing from USB flash drive, email printing

• Drivers for Windows 7; PCL 3 GUI driver for Mac OS X; PostScript Windows and Mac drivers with

PostScript/PDF Kit. Compatible with Universal Print Driver Print Driver for PS (with PostScript/PDF Kit)

Power:

Input 110 volts alternating current, 50/60 Hz

Energy efficiency:

ENERGY STAR® qualified

Security (Network)

Must meet and stay current to the Department of Defense (DOD) operating systems through the term of contract.

Devices shall be configured in compliance with all applicable DoD Security Technical Implementation Guides (STIG) (Ref: http://iase.disa.mil/stigs). Any known deficiencies shall be identified to DLA Document Services prior to the Certification and Accreditation testing phase for evaluation of acceptance.

Provide up-to-date software and drivers to include, but not limited to: print drivers and web interface drivers.

All devices/components shall have the capability of turning on and off any nonessential ports and protocols.

All hard drives that are put into service within the Department of Defense will remain in the custody of DLA Document Services. All hard drives, whether internal, external, or otherwise, shall not be returned to the contractor.

SP7000-16-R-1004, Amendment 3 Attachment 2 Page 4 of 6

Testing and Certification Process

DLA Document Services will perform equipment testing, within available capabilities, in accordance with the guidelines and provision that have been outlined for each DOD agency. Devices that have not been approved by DLA Document Services will not be accepted to be placed on any network. The contractor shall deliver the proposed devices for each VB series to DLA Document Services HQ, Bldg 9, NSA Mechanicsburg, Mechanicsburg, PA 17055, for testing, at no cost to the government. Estimated time for testing is 20 business days. Testing and approval shall be performed by the DLA Document Services in coordination with the contractor’s assistance. The hardware will be required to pass the DOD standard NESSUS Vulnerability Scan. The Contractor shall provide at no additional cost, onsite engineering assistance and other support necessary to configure, setup, and test the equipment as needed.

DLA Document Services has agreements with the Air Force and the Marine Corp to test devices on their specific networks upon completion of our internal testing process. If all pass the testing process, DLA Document Services will submit a compliance memorandum to the Director of Contracting informing them that the devices have passed our preliminary testing process.

For all devices tested and placed on the DLA Document Services contract, the vendor will collaborate with DLA Document Services to develop the testing results package. The vendor will develop the MFD Implementation Guide. The Implementation Guide will provide step-by-step instruction and screen shots to configure the Desktop Printers in accordance with the testing results. Government acceptance of the Implementation Guide is at the discretion of the DLA Document Services EMS Branch.

This list is not inclusive of any future requirements and or changes by the DLA. The contractor will be required to perform operating system updates and patches IAW future DoD or DLA directives.

All contractor-provided software (including Operating System) must be supported by the contractor and the software’s original manufacturer at all times it is in use. If it becomes apparent that either the contractor or original manufacturer will no longer support any contractor-provided software, the contractor must provide and install other software in coordination with DLA Document Services that is still supported by the contractor and the software’s original manufacturer.

Devices shall be configured in compliance with all applicable DoD Security Technical Implementation Guides (STIG) (Ref: http://iase.disa.mil/stigs). Any known deficiencies shall be identified to DLA Document Services prior to the Certification and Accreditation testing phase for evaluation of acceptance.

Contractors shall monitor industry standard vulnerability sites (e.g. http://nvd.nist.gov/, https://www.us-cert.gov/ncas/alerts, http://oval.mitre.org/ ) and take appropriate actions if their equipment is subject to a known vulnerability. In addition, the customer will notify the contractor via DLA Document Services as security vulnerabilities are identified concerning all equipment installed on the DOD Information Network (DODIN) When vulnerabilities are identified by either the contractor or the customer, the contractor shall provide remediation for distribution to all installed equipment in accordance with USCYBERCOM TASKORD 13-0670 unless a different time period is directed by USCYBERCOM via DLA Document Services. The TASKORD is For Official Use Only and is quoted below for reference:

3.B.1.D.2. (U//FOUO) Assured Compliance Assessment Solution (ACAS) assigns severity scored of critical , high, medium and low to plug-in findings.

3.B.1.D.2.A. (U//FOUO) Critical findings reflect discovery of a common vulnerability and exposure (CVE) that poses significant risk to the confidentiality, integrity, and availability of DODIN Networks. Actions to mitigate or remediate critical vulnerabilities should be initiated upon discover with the goal of mitigation/remediation within 7 days.

https://www.us-cert.gov/ncas/alerts https://www.us-cert.gov/ncas/alerts http://oval.mitre.org/

SP7000-16-R-1004, Amendment 3 Attachment 2 Page 5 of 6

3.B.1.D.2.B. (U//FOUO) Findings with a severity score of high should be addressed in the same manner as vulnerabilities addressed via Information Assurance Vulnerability Alert (IAVA) directives and mitigated or remediated within 21 days of discovery.

3.B.1.D.2.C. (U//FOUO) Findings with severity scores of medium and low should be addressed in accordance with local Approving Official (AO), Information System Security Manager (ISSM), or Information System Security Officer (ISSO) guidance until further notice.

3.B.1.D.2.D. (U//FOUO) In all instances, DOD components should consider exposure to threat, mission impact, sensitivity of data, and current mitigating security controls when prioritizing implementation of fix actions.

In the event remediation cannot be achieved within the mandated timeline, a Plan of Actions and Milestones will be approved by the Customer's Authorizing Official or designee for risk acceptance.

Provide up-to-date software and drivers to include, but not limited to: print drivers and web interface drivers.

All devices/components shall have the capability of turning on and off any nonessential ports and protocols.

All hard drives that are put into service within the Department of Defense will remain in the custody of DLA Document Services. All hard drives, whether internal, external, or otherwise, shall not be returned to the contractor.

Multifuctional Devices must be ISO/IEC 15408 (Common Criteria) certified using the National Information Assurance Partnership (NIAP) approved criteria. To be technically acceptable all devices must meet the following two conditions:

NIAP CCEVS Validated Products List NIAP CCEVS Product Compliant List Common Criteria Portal Certified Products List

Are capable of obtaining accreditation through the NIST based RMF process. As part of this, the contractor agrees to provide all requested information and work in good faith with DLA Document Services so the DLA Document Services’ customer(s) can expeditiously obtain RMF accreditation. The contractor further agrees that should the proposed device(s), not obtain RMF accreditation, after 6 months the contractor shall remove the device(s) at no additional expense to the government to include, but not be limited to, waiving any and all early or premature discontinuance/termination/cancellation/etc./fees.

SMARTCARD: The contractor shall supply a SMARTCARD PKI Solution, which is compliant with DOD CAC and NIST FIPS 201 (PIV) standards. The contractor shall provide card readers at time of installation that are capable of reading and processing all approved CAC and PIV cards. The contractor shall maintain compliance with DOD wide SMARTCARD and DOD PKI standards, and support all approved physical cards during the full lease period.

Secret Internet Protocol Router Network (SIPRNet) Token: The contractor shall supply a SMARTCARD PKI Solution with SIPRNet token capability, which is compliant with DoD requirements for PK-enabling and interoperability as set forth in DODI 8520.02/8520.03. The contractor shall provide card readers that are capable of reading and processing all approved SIPRNet token cards. Support Systems that incorporate the use of PKI for encryption of information in transit or at rest. Be compatible with 3.3 volt

SP7000-16-R-1004, Amendment 3 Attachment 2 Page 6 of 6

SafeNet SC650 token. Compatible with the 90Meter Middleware solution for CAC known as CAC Smart Card Manager-90. The contractor shall maintain compliance with DOD wide SIPR and DOD PKI standards, and support all approved physical cards and firmware during the full lease period.

All IA products must be NSTISSP #11 compliant

Warranty/Maintenance:

All purchased equipment shall include a 1 Year fix or replace manufacturer’s warranty.

Additional Year Warranty included as a separate CLIN.

Delivery of Equipment:

Devices will be delivered to multiple locations on and off government installations as specified in each task order associated with this contract. Vendors will use the best commercial packaging and mode of shipping i.e. (Postal Services, Fedex, UPS) advantageous to the government, however it must be of traceable means. The Government requires delivery of devices to be made within 30 calendar days upon execution of each delivery order off the base contract of the IDIQ.