VPN Solution SOW 27 Jun 2022.pdf

STATEMENT OF WORK (SOW)

for

AFSOC SOACS

Installation of VPN solution at

Hurlburt Field, FL

24 June 2022

1. Objective.

The AFSOC SOACS requires support to design, install, configure, and train for a Remote Access VPN solution for Hurlburt Field, Florida. The existing routers, switches, firewalls, wireless networks, Identity Service Engine (ISE) and wireless LAN controllers (WLC) may be used as part of this solution. This Statement of Work (SOW) outlines engineering services to install and configure existing government-owned hardware and software with a level of understanding in accordance with industry best practices and DoD security requirements.

2. Requirements/Existing Equipment.

The AFSOC SOACS engineering and operations teams has purchased Cisco AnyConnect software and Cisco FPR2110 for a Remote Access VPN solution that will provide security at the network edge. We are currently using a VPN solution on the FPR2110 which will be disabled. Remote VPN to the network requires a client on the Government Windows-based PC, user name and password and capable to use a future PKI function. PKI is not enabled at this time.

Requirements:

VPN client software (Cisco Any Connect) for PC/laptops connecting to the network

Use 802.1x certificates for client PC authentication

Be able to access internal network resources

Access to network file shares

Ability to Remote Desktop Connection to a device on the domain

Secure connection via IKEV2 or better Existing Network Equipment:

ASA devices Cisco - FPR2110, ASA1010

CA certificate server

Cisco ISE server v3.0

Cisco switches, routers, wireless access points

Force Point SideWinder firewall (VMware)

Approximately 100 Dell and HP laptops and desktops

3. The Government will be responsible for and provide the following:

Documentation/network topology as needed.

Device configuration as needed.

Access to equipment, server(s), located in a secure area

Proper power feeds to all equipment from UPS or separate electrical outlet within the required range of the equipment.

Necessary path cables.

Access to existing network infrastructure associated with Guest Wireless Network.

Internet circuits are terminated and functioning properly.

4. The vendor/contractor engineering team will be responsible for and provide the following:

Device configuration on up to 5 of each type of hardware (see above) with configuration guides to the remaining devices.

Coordination of the implementation of the AFSOC SOACS software installation to limit downtime during transition to the new gear and design.

Configuring VPN device to operate on the network

Implement VPN STIGs as required

Successful testing:

o VPN connections from remote laptops and or desktops o Templates and documentation for the above

Training up to 16 hours to include:

o Management Console o Administrative functions o Best practices o Reporting o Documentation of new configurations o Walk through of configurations o Basic troubleshooting information

Creation of as-built documentation with updated diagrams and build information to include system design files, IP addressing, device names, and software versions.

5. Project schedule will be provided within ten (10) days of receipt of purchase order or signed contract. This schedule includes client milestones, design, configuration, on-site work, and customer training and is based on the assumptions listed above.