Statement of Work_ECTC WAP.pdf

Statement of Work

(SOW)

Edward Cross Training

Center (ECTC) Wireless Solution

I. GENERAL INFORMATION

a. SCOPE OF WORK: The awarded contractor shall Implement a wireless solution to extend commercial internet in support of the New Hampshire Army National Guard (NHARNG) Edward Cross Training Center (ECTC) facilities as defined in this Statement of Work (SOW).

b. SUMMARY OF WORK: The awarded contractor shall procure and install 40 Access

Points, capable of offering a combined dual-radio aggregate frame rate of 2.98 Gigabits per second (Gbps) Wireless Access Points (WAP) and all mounting hardware devices at ECTC buildings and Pembroke Readiness Center. The Access Points shall be mounted and cabled in designated locations. Additionally, the offeror shall be responsible for the installation of low voltage cable drops to support the WAP where needed.

The data/voice drops shall meet the specifications as follows:

1. The required number of drops is 40.

2. The offeror shall conduct a complete assessment of the site prior to commencement of the project. The purpose of the assessment is to determine the exact location of all data drops.

3. The required low voltage cabling specification is Category 6a. The NHARNG requires that data/voice cable runs have a gray jacket. All cable jackets must be Plenum rated.

4. There is not a preferred product for jacks and faceplate termination. Please specify the brand name proposed.

5. All data drops will be home runs from the faceplate to a Category 6a patch panel in the nearest IDF.

6. The offeror shall provide Category 6a patch cables for all patch panel/switch ports. A variety of 3 foot to 10-foot patch cables will be provided customized to the lengths needed in each rack space.

7. All data/voice drops will be clearly and professionally labeled with matching labels at the faceplate and at the patch panel. Handwritten labels are not acceptable.

8. All data/voice drops will be tested and certified. The successful offeror will provide a complete testing report for all data/voice drops.

Wireless Access Points shall be placed according to the floor plan/diagram provided, shall be ceiling mounted to secure the devices from potential damage, and ensure the best coverage possible.

WAPs shall be labeled to correspond with the following naming scheme:

Bldg. number-Room number/name-AP number. For example: 5221-112A-01 OR

5221-CONF-01.

Enterprise Wireless Network Installation:

During the installation the awarded contractor shall distribute Wireless Access Points throughout the buildings. A security appliance shall also be installed to automatically maintain security, adjust power settings, and load balance between Access Points. The Agency will supply a building diagram to accompany the offeror’s install team(s) with suggested locations for each Access Point. Exact WAP locations will be determined at the time of installation. A diagram showing the suggested locations will accompany each job folder.

40 additional Category 6a drops will be installed in the general location of the WAP and will be pulled back to the nearest distribution frame. All WAP drops will be installed above drop ceilings where possible. Each WAP shall support power over ethernet (PoE). This will eliminate the need for power supplies at each location.

The Access Points shall be Light Weight Access Points with integrated Antennas (one

2.4 GHz antenna and one 5.0 GHz antenna). Where drop ceilings or ceiling-mounting is not available, the use of surface-mounted raceways will need to be approved prior to use.

The offeror shall install the Security Appliance Controller in the main distribution frame (HUT D) designated by the NHARNG G6. The Access Points will also be configured for Wireless Protected Access 2 (WPA2) authentication, in accordance with Institute of Electrical and Electronics Engineers (IEEE) 802.11i standard.

The offeror shall fill any floor and wall penetrations with fire-stop putty in accordance with the National Electrical Code (NFPA 70) and local fire code

Cloud based Wireless Access Point Installation:

The successful offeror’s solution must be compatible with a hosted cloud architecture. The wireless system must support a stateful application-layer firewall that can identify, classify, and prioritize applications and have web content classification and filtering capabilities.

The wireless access points must support operation in the defined cloud-hosted architecture and also be able to convert to local access points with a local controller for flexibility.

The wireless system shall include intuitive multi-site scalability and management.

Must be able to deploy multiple sites rapidly and monitor, manage and troubleshoot all sites from a single web-based interface. This includes being able to clone configurations of devices automatically, and easily reassign assets to other network areas as needed. This interface will be Graphical User Interface (GUI) based and include shall include the ability of Command-Line (CLI) programming.

The system must support the ability to fingerprint client device types (i.e. iPad, Android, iPhone, Windows, etc.) and apply security settings to those devices, without the need for additional appliances or licenses. For example: iPads on a specific Service Set Identifier (SSID) may have access to only the web and are rate limited to 2 mbps, and no peer-to-peer traffic is allowed.

The system shall be contextually aware and able to make priority decisions related to firewall enforcement, QoS, etc based on the application type (e.g.: Microsoft Lync aware).

The wireless system must support the ability to take a packet capture directly from the management interface. This packet capture should be able to filter based on client, IP address, and Media Access Control (MAC) address.

The wireless system must support the ability to provide deep application visibility into all of the applications that are used on the wireless network, including hostname visibility to view the individual URLs of all of the applications. This information should be exportable and downloadable on a per network and per SSID basis.

The wireless system shall have built-in guest access with captive portal support and not require any additional appliances or licenses for guest users.

The wireless solution should have the ability to provide failover capabilities for high-availability applications.

The wireless system must have the ability to automatically re-assign end devices to different access points based on interference, saturation, and other quality mechanisms even if the new access point is a lower signal strength.

The wireless system must include a tagging function to provide easy search-ability across the network, device types, and users with search "tagging" functionality.

The wireless system must support the ability to send summary reports to certain administrators on a daily, weekly, and monthly basis. These summary reports should show information like top users, top applications, bandwidth consumed per day, etc.

Solution shall include fully integrated client, device, and Operating System (OS) visibility, with ability to assign policies via the management interface to different users, networks, and device types based on preferences. Group policies must be universally applicable to all access points and switches.

For use in the Federal market, access points shall have current Common Criteria, Federal Information Processing Standard (FIPS) 140-2 and (as applicable) Joint Interoperability Test Command (JITC) certification.

Solution must maintain common management, inventory, and historical logging interface of existing network systems and new cloud-based systems. It must also minimize any conflicts between existing and new wireless systems and prevent any loss of coverage or operations with the existing wireless network.

The wireless system must have built-in redundancy and reliability. Solution must be able to provide a 99.99% service level agreement, leveraging globally redundant cloud data centers.

The quantity of access points needed is calculated using the square footage, room counts, and building design. The solution proposed should include at a minimum one access point in every common area, conference room, and classroom and should provide a minimum of 99% coverage. Access points and network design should be designed and installed with enough access and capacity to support location with a user density of 1000 users: 20 users/ 30 devices per Access Point.

Access to building drawings showing network Main Distribution Frame (MDF) and Intermediate Distribution Frames (IDF) will be provided by the government.

Solution shall include built-in Payment Card Industry (PCI) compliance wizard and remediation tool and provide secure management access with password restrictions and two-factor authentication via Short Message Service (SMS). Access Points must include a third (non-client serving) radio dedicated to continuously and automatically monitoring surroundings to maximize Wi-Fi performance. This third radio will measure channel utilization, signal strength, throughput, signals from 3rd party access points, non-Wi-Fi interference, and automatically optimize Wi-Fi performance of individual access points and maximize system-wide performance.

The offeror shall provide and install all modules, transceivers, cables, connectors, etc., needed to make each device 100% operational.

In the performance of this task order, the awarded contractor agrees to abide by all laws, codes, rules and regulations set forth with regard to the equipment by municipal or State authorities having jurisdiction in effect on the date of this task order. The awarded contractor shall be responsible for obtaining all local licenses and permits. This section applies to all tasks associated with this task order.

d. WORK LOCATION:

a. ECTC: 722 Riverwood Drive, Pembroke, NH 03275

b. If staging of equipment is required, coordination will be made with the

Contracting Officer and the Supervisor of the project.

e. PERIOD OF PERFORMANCE: The installation will be coordinated with the

Supervisor and the Contracting Officer based on the lead time for the equipment required in the contract.

f. WORK DAY:

a. The installation shall be performed Monday through Friday from 7:00am to 3:00pm excluding Federal Holidays

b. There are eleven (11) Federal holidays set by law (USC Title 5 Section 6103) that The National Guard follows:

i. New Year’s Day: January 1st

ii. Martin Luther King, Jr.’s Birthday: January 15th

iii. President’s Day: February 19th

iv. Memorial Day: May 27th

v. Juneteenth National Independence Day: June 19th

vi. Independence Day: July 4th

vii. Labor Day: September 2nd

viii. Columbus Day: October 14th

ix. Veteran’s Day: November 11th

x. Thanksgiving Day: November 28th

xi. Christmas Day: December 25th

II. PROPERTY

a. The awarded contractor shall furnish all necessary tools, equipment and materials required for performing all work associated with the completion of this requirement, which also includes testing and installation.

b. The US Government shall furnish Cisco C9300-48P PoE network switches as needed.

III. DEFINITIONS AND ACRYNOYMS

a. CONTRACTOR: A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

b. DELIVERABLE. Anything that can be physically delivered and includes non-manufactured items such as meeting minutes or reports.

c. CONTRACTING OFFICER (KO): A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

d. PHYSICAL SECURITY: Actions that prevent the loss or damage of Government property.

e. QUALITY ASSURANCE: The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

f. QUALITY CONTROL: All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

g. SUBCONTRACTOR: One that enters into a contract with a prime contractor. The Government does not have privacy of contract with the subcontractor.

IV. FACILITIES

a. GENERAL

i. All Contractor employees, including subcontractors, and subcontractors’ employees, suppliers, and suppliers’ employees shall be required to comply with the Installation Security Requirements regarding personnel, vehicle, and equipment security passes and access the jobsite. Nothing in the contract shall be construed in any way to limit the authority of the Commanding Officer to prescribe new, or to enforce existing security regulations governing the admission or exclusion of persons and the conduct of persons while on base, including but not limited to, the rights of search of all persons or vehicles on base.

ii. Contractor employees shall conduct themselves in a proper, efficient, courteous and businesslike manner. Remove from the site any individual whose continued employment is deemed by the Contracting Officer to be contrary to the public interest or inconsistent with the best interests of National Security.

iii. The Contractor is expected to become fully acquainted with, and strictly adhere to Readiness regulations affecting the performance of this Contract. Parts of the regulations pertaining to fire prevention, driving safety, restricted areas, sanitation, disposal of debris and pollution control may apply to this project.

b. COORDINATION

i. Coordinate with the Contracting Officer for specific security and access requirements.

ii. Access to Buildings/ Occupied Buildings: The Contractor may work in or around existing occupied buildings. The Contractor is responsible, via the Contracting Officer, to obtain access to building and facilities and arrange for them to be opened and closed. Do not enter the building(s) without prior approval of the Contracting Officer. Keep the existing buildings and their contents secure at all times. Provide temporary closures as required to maintain security. Contract personnel will not be permitted in security-regulated buildings or areas unless cleared by the Security Officer.

c. CONTRACTOR VEHICLES

i. All vehicles shall display a valid state license plate and safety inspection sticker, if applicable, and shall be maintained in good repair. The company name shall be displayed in a clearly visible manner and size on each Contractor vehicle used in the course of work. Registration and proof of insurance shall be kept in the vehicle, and drivers shall be properly licensed.

d. SECURITY REQUIREMNTS

i. All security requirements apply to all subcontractors and suppliers associated with this contract. Comply with the following:

xii. All Contractor employees, including subcontractors, and subcontractors’ employees, suppliers, and suppliers’ employees shall be required to comply with the Installation Security Requirements regarding personnel, vehicle, and equipment security passes and access the jobsite. Nothing in the contract shall be construed in any way to limit the authority of the Commanding Officer to prescribe new, or to enforce existing security regulations governing the admission or exclusion of persons and the conduct of persons while on base, including but not limited to, the rights of search of all persons or vehicles on base.

xiii. Contractor Personnel: Provide the Contracting Officer the name(s) of the supervisory person(s) authorized to act for the Contractor. Provide, and update as required, a list of the key personnel for the Contractor and subcontractors including addresses and telephone numbers for use in the event of an emergency.

xiv. Access to Buildings/ Occupied Buildings: The Contractor may work in or around existing occupied buildings. The Contractor is responsible, via the Contracting Officer, to obtain access to building and facilities and arrange for them to be opened and closed. Do not enter the building(s) without prior approval of the Contracting Officer. Keep the existing buildings and their contents secure at all times. Provide temporary closures as required to maintain security. Contract personnel will not be permitted in security-regulated buildings or areas unless cleared by the Security Officer.

xv. The use of base roads will be subject to base regulations including speed limits, requirement to wear seat belts, prohibition on the use of hand-held telephones by drivers, and wear of protective equipment by motorcycle operators.

xvi. Contractor employees and representatives performing work under this contract are required to be either United States citizens or documented legal residents. All Contractor employees shall obtain the required contractor identification. Each employee shall wear the Government issued identification over the front of the outer clothing. Failure to obtain security and base access passes shall not be a cause for contract performance time extension. The Contractor shall immediately turn in all terminated employee’s badges to the issuing office.

xvii. Personnel will be issued appropriate identification badges when the

Contractor submits, in writing, on a form prescribed by the Contacting

Officer, a request for issuance of badges. Employees shall complete questionnaires and other forms as required for security. Allow 10 business days for background checks and processing. The list shall contain the following information:

1. Fill out Authorized release (vetting form) authorization

(provided after contract award)

2. Fill out a Contractor Entry Pass Form

3. Complete AT Level I training indicated below

4. Send all complete documents to:

Keith.R.Abbott.civ@army.mil

5. Rejected base passes will be sent back via email with corrections

xviii. Anti-Terrorism (AT) Level I Training: This standard language is for

Contractor employees with an area of performance within a Government controlled installation, facility or area. All Contractor employees, to include subcontractor employees, requiring access to Government Installations, Facilities and Controlled Access areas shall complete AT Level I Awareness Training within seven (7) calendar days prior to start/notice to proceed date annotated on the contract. The Contractor should register their Contractor employees and subcontractors immediately to avoid a Contractor delay. Registration at a minimum is 48 hours.

1. Instructions for Anti-Terrorism (AT) Level I Training:

2. Training is available through the website http://jko.jten.mil

3. Two (2) hour average to complete training

4. Government sponsor: Will be provided after award

xix. All security requirements apply to all subcontractors and suppliers associated with this contract. Comply with the following:

xx. Do not publicly disclose any information concerning any aspect of the materials or services relating to this contract, without prior written approval of the Contracting Officer.

xxi. Do not disclose or cause to be disseminated any information concerning the operations of the activity’s security or interrupt the continuity of its operations.

xxii. Do not disclose any information to any person not entitled to receive it.

Failure to safeguard any classified information that may come to the Contractor or any person under his control, may subject the Contractor, his agents or employees to criminal liability under 18 U.S.C., Sections 793 and 798.

xxiii. Direct to the Contracting Officer for resolution all inquiries, comments or complaints arising from any matter observed, experienced, or learned as a result of or in connection with the performance of this contract, the resolution of which may require the dissemination of official information.

xxiv. Coordinate photography requirements with the Contracting Office. Some mailto:Keith.R.Abbott.civ@army.mil http://jko.jten.mil/ areas restrict or prohibit photographing Government property.

xxv. Deviations from or violations of any of the provisions of this paragraph will, in addition to all other criminal and civil remedies provided by law, subject the Contractor to immediate termination for default and withdrawal of the Government’s acceptance and approval of employment of the individuals involved.

xxvi. Upon completion or termination of the contract or expiration of the identification passes, the prime contractor shall ensure that all base identification passes issued to employees and subcontractor employees are returned to the issuing office.

xxvii. Failure to comply with these requirements may result in withholding of final payment.

e. COMBATING TRAFFICKING IN PERSONS:

i. The United States Government has adopted a zero-tolerance policy regarding trafficking in persons. Contractors and contractor employees shall not engage in severe forms of trafficking in persons during the period of performance of the contract; procure commercial sex acts during the period of performance of the contract; or use forced labor in the performance of the contract. The Contractor shall notify its employees of the United States Government’s zero tolerance policy and the actions that will be taken against employees for violations of this policy. The contractor shall take appropriate action, up to and including termination, against employees or subcontractors that violate the US Government policy as described at FAR 22.17.

f. ORGANIZATIONAL CONFLICTS OF INTEREST:

i. The contractor and subcontractor personnel performing services under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCIs, as defined in FAR Subpart 9.5. The contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO. In the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may impose other remedies as he or she deems necessary, including prohibiting the contractor from participation in subsequent contracted requirements which may be affected by the OCI.

ATTACHMENTS AND DELIVERABLES

Deliverables Schedule

Deliverable Frequency # of Copies Format Submit to

#1 AT Level I

Once One (1) Electronic delivery via email Contracting Officer