Attachment_3_-_Responses_to_Solicitation_Questions.pdf

SP7000-17-R-1002 Attachment 3 – Responses to Solicitation Questions Page 1 of 7

Responses to Solicitation Questions

1. Per the solicitation SP7000-17-R-1002 Certified Printers & Scanners- it is stated that the Government will perform NGEN/NMCI Testing and Certification process for all the proposed solutions provided by the offeror. Will the solution proposed by the offeror be tested by the Government to see if it meets the NGEN checklist? In the event the Government encounters issues while testing (the solution does not meet the NGEN checklist) will the offeror be disqualified or will the Government allow offerors to address the issue and modify their solutions?

RESPONSE:

The NGEN checklist has been removed as a reference on the SOW and replaced with a DLA Device

Manufacturer Questionnaire. Not all items of the NGEN checklist were applicable. However, the solution proposed by the offeror will go through NGEN/NMCI testing and certification. If the proposed solution fails the NGEN/NMCI certification and testing, then DLA will terminate the contract for default.

2. For Certified Printers & Scanners to meet the requirements of the NGEN checklist (for CAC

Authentication) it is stated they must be SIRP/Classified and/or NIPR/Unclassified, yet there are no additional stated requirements. Can the Government provide clarification into the requirements for these protocols? Can the Government provide additional details regarding SIPR/Classified and/or

NIPR/Unclassified requirements?

Manufacturer Questionnaire. Not all items of the NGEN checklist were applicable. However, the solution proposed by the offeror will go through NGEN/NMCI testing and certification. DODI

8520.02 and DODI 8520.03 are the directives for PKI. Also, NIPR uses Active Client and SIPR uses

90 Meter software.

3. It is stated in the NGEN checklist that Certified Scanners must have CAC authentication, whereas in section 1.1.6 “Connectivity” of Attachment- 4 Statement of Work 3- NGEN & ONENET Certified

Scanners, the requirements state that Certified Scanners only need standard USB 2.0 yet in order to enable CAC authentication an inbuilt network port is required. Can the Government please clarify as to the correct connectivity requirements for Attachment 4 – Statement of Work 3 – NGEN & ONENET

Certified Scanners?

Manufacturer Questionnaire. Not all items of the NGEN checklist were applicable. However, the

SP7000-17-R-1002 Attachment 3 – Responses to Solicitation Questions Page 2 of 7 solution proposed by the offeror will go through NGEN/NMCI testing and certification. Scanners do not require CAC authentication.

4. Section 1.1 “Specification for Networked Desktop Laser Prints for Black/White and Color with CAC

Authentication Capability” of Attachment 5 – Statement of Work 4 – NGEN & ONENET Certified

Printer Requirements has no mention of a need for network LAN connectivity. Are there any specific requirements for an inbuilt network LAN port or may offerors propose a solutions that may or may not contain, at a minimum, a standard inbuilt LAN port included with the device?

All Printers should be able to be networked.

5. The NGEN Checklist - Desktop MFP’s that are 45 ppm or less don’t have finishing capabilities like floor standing A3 MFD’s and don’t have an option for multi-position staplers. Would the Government consider updating the specification to an Offline convenience stapler?

Manufacturer Questionnaire. Not all items of the NGEN checklist were applicable. However, the solution proposed by the offeror will go through NGEN/NMCI testing and certification. Finishing capability is not a requirement.

6. Attachment 3 & 5 - Paper weight Cards 90 lb index – Desktop A4 MFP’s do not have the range of media weights as floor standing A3 MFD’s. Would the Government consider updating the specification to support up to 80 lb in all speed band?

The SOWs state “Cards: 90 lb index or similar.” The GSM for 90 lb index is about 165, and the GSM for 80 lb cover is about 215. Therefore, 80 lb cover exceeds the requirement and is acceptable.

7. Would the Government consider posting and providing the NGEN Checklist, DLA DOC Svcs Testing

Checklist, PMW 205 HW Certification, and One-Net Remote Testing documents?

Yes, the certification documents will be posted, except for the NGEN checklist. The NGEN checklist has been removed as a reference on the SOW and replaced with a DLA Device Manufacturer

Questionnaire. Not all items of the NGEN checklist were applicable. However, the solution proposed by the offeror will go through NGEN/NMCI testing and certification.

SP7000-17-R-1002 Attachment 3 – Responses to Solicitation Questions Page 3 of 7

8. Attachment 3 & 5 – 2.1.2 Consumables – OEM Supplies have higher standards to provide consistent print yields, consistent toner coverage and print quality meeting manufacturer product specifications.

Must offerors provide OEM consumables?

DLA requires brand new toner that does not violate the original equipment manufacturer (OEM) warranty. New generic substitutes equivalent to OEM toner are acceptable. No Remanufactured, Refurbished, or Gray Market Toner will be accepted.

9. As all listed products will ship to DoD Agencies can the Government confirm that all products must be

TAA Compliant?

RESPONSE:

The items on this solicitation are not required to be TAA compliant. This acquisition is a small business set-aside and in-accordance-with (IAW) FAR 25.401(a)(1) small business set-asides are exempt from trade agreements.

10. SOWs for Printers state: "Desktop Printers Black/White & Color with CAC authentication capability:

Laser printer used for printing documents in a personal office or small business. Device is a smaller, more compact, low-high volume printer that usually fits on a desk or table." Can the Government please confirm that the offerors must bid printers that fit on a desk or table and not the printers that fit on the floor?

Yes, proposed devices must fit on a desk or table.

11. There are two types of CLINs: certified CLINs and non-certified CLINs. The SOW technical requirements (bullet items) are exactly the same for both types of CLINs. The only difference is the testing process that the Government will use to test products for both types of CLINs, that is, devices bid under certified CLINs will be tested for NGEN certification.

11a. Based on reading the old RFP and Q&A, offerors could submit a solution for even the certified

CLINs that does not yet have NGEN certification. Can offerors bid devices under certified CLINs that does not yet have NGEN certification?

Yes, offerors may propose devices that have not yet received NGEN certification for the certified

CLINS. These devices will go through the certification process.

SP7000-17-R-1002 Attachment 3 – Responses to Solicitation Questions Page 4 of 7

11b. If offerors are bidding "already NGEN certified" devices under certified CLINs, (i) will the

Government still test such devices for NGEN certification? (ii) Will offerors need to submit one unit for testing?

All devices must be submitted for testing even if devices are already NGEN certified. DLA also conducts testing.

11c. If offerors are allowed to bid "not-yet-certified" devices under certified CLINs, what happens if the Government tests such device for NGEN certification and encounters a problem. Is the offeror disqualified or will they have a chance to address the issue?

Issues can be addressed during testing. Testing at DLA will be conducted and issues will be worked out prior to sending to the Navy.

11d. In case the Government allows "not-yet-certified" devices under certified CLINs, consider two offerors: Offeror A bids already NGEN certified device (say device X) for a certified CLIN and

Offeror B bids "not-yet-certified" device (say device Y) for the same CLIN. How will the Government evaluate these two different products for the same CLIN?

Offerors will be evaluated in-accordance-with the technical requirements listed in each statement of work. The certification status is not a consideration at time of technical evaluation because the devices will be tested after award.

12. Please provide a current NMCI Certified Device List so that offerors may be able to propose the appropriate models based on the requirements.

The NMCI Certified Device List is an official use document and cannot be posted. However, the list will be emailed to offerors upon request.

13. Missing Documents

REF: Attachments 3 through 5

Question: Attachments 3 through 5 provided with the solicitation have what appear to be embedded links to other documents regarding testing, checklists, and certification. As an example, please see

Sections 1.1.4.1 and 1.1.4.2 of Attachment 5. The embedded links do not seem to work properly and as a result, bidders cannot access those documents. If bidders are required to review those documents, please provide those as separate documents, not embedded within the listed attachments.

SP7000-17-R-1002 Attachment 3 – Responses to Solicitation Questions Page 5 of 7

The certification documents will be posted, except for the NGEN checklist. The NGEN checklist has been removed as a reference on the SOW and replaced with a DLA Device Manufacturer

14. NMCI Certified Devices

REF: Device list

Comment: Can the Government please provide a list of current NMCI certified devices so that bidders can select and propose the appropriate models based on all requirements?

The NMCI Certified Device List is an official use document and cannot be posted. However, the document will be emailed to offerors upon request.

15. Technology

REF: Availability of new imaging technology

Question: Will new ink technology be acceptable for categories labeled "Laser" if that technology can meet or exceed the laser specifications at a lower price and lower total cost of ownership?

No, new ink technology is not acceptable.

16. Will new ink technology be acceptable for categories labeled “Laser” if that technology can meet and exceed the laser specifications?

No, new ink technology is not acceptable.

17. Attachment 5 – SOW 4, Section 1.1.4.1 and 1.1.4.2 on page 3 reference additional documents regarding the testing and certification process for NGEN/NMCI and for ONENET, however the files appear to be embedded but since the SOW is a PDF, we cannot extract them. Please provide these additional 5 documents referenced?

The certification documents will be posted, except for the NGEN checklist. The NGEN checklist has been removed as a reference on the SOW and replaced with a DLA Device Manufacturer

SP7000-17-R-1002 Attachment 3 – Responses to Solicitation Questions Page 6 of 7

18. Will the equipment sent for testing be returned in workable / resalable condition?

Yes.

19. Once testing is complete and devices are approved, can the units submitted for testing then be sold and shipped to the government as a part of this contract?

Yes, the vendor can use the test devices to fulfil a future order.

20. Attachment 4, SOW 3, Section 1.1.11 on page 2 states, “If PMW 205 does not certify applicable devices for any reason, DLA Document Services will not proceed with delivery of devices at customer locations and DLA Document Services will terminate the contract for default.”

a. Please clarify, does this mean that if any device does not pass the PMW 205 testing, the contract will be terminated for cause and will be considered a performance strike to be reported to the government by the contractor for three years?

If any of the Awardee’s proposed devices do not pass testing after award the contract will be terminated in-accordance-with FAR 52.212-4(m).

b. To not risk contract cancellation for cause, what are the requirements for a device to meet the

PMW 205 testing?

In order for devices to obtain a Navy accreditation they are required to pass an ACAS scan

(Drivers and devices), be STIG Compliant, and have all of the ports and protocols associated and listed in the DOD registry. These things will be requested at the time of testing.

21. Attachment 4, SOW 3, Section 1.1.11 on page 3 states, “All IA products must be NSTISSP #11 compliant.” Can you please explain NSTISSP #11 compliance and what exactly is required to meet this requirement?

The objective of NSTISSP #11 is to ensure that COTS IA and IA-enabled IT products acquired by the

U.S. Government for use in national security systems perform as advertised by their respective manufacturers, or satisfy the security requirements of the intended user. To achieve this objective, the

SP7000-17-R-1002 Attachment 3 – Responses to Solicitation Questions Page 7 of 7 policy requires COTS products be evaluated and validated in accordance with either the International

Common Criteria for Information Technology Security Evaluation, or the National Institute of

Standards and Technology (NIST) Federal Information Processing Standard (FIPS) 140-2. Supportive of the intent and implementation of NSTISSP #11, the NSA and NIST have collaborated to establish the following two evaluation and validation programs: The National Information Assurance

Partnership's (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS) Program and the

NIST Federal Information Processing Standard (FIPS) Cryptographic Module Validation Program

(CMVP) each which target different, but complementary, areas. Devices must be listed on either of the following two sites:

https://www.niap-ccevs.org/Product/ https://www.commoncriteriaportal.org/products/

Products that are on an ARCHIVE LIST WILL NOT BE CONSIDERED TECHNICALLY

ACCEPTABLE.

22. To allow for sufficient time to review the Government's responses to questions submitted, will DLA please consider moving the solicitation response due date to December 30, 2016?

The RFP response date will be extended to a Government approved date based upon when the answers to the Q&A's are posted and when considering the Government’s schedule for award.