SOO_ERP_Support_for_Infrastructure_5_OCT_2016_update.pdf

Statement of Objectives -

Common Enclave

PROJECT TITLE: Army General Fund Enterprise Business System (GFEBS)

Army Enterprise Systems Integration Program (AESIP) Enterprise Resource Planning Support for the F5 and Cisco equipment including other equipment associated with the Common Enclave

1. INTRODUCTION:

The Army ERP programs AESIP, GCSS-Army, GFEBS and the common enclave infrastructure equipment are residing at the Network Enterprise Center (NEC-R) Redstone Arsenal, Alabama and Acquisition, Logistics and Technology Enterprise Systems and Services (ALTESS) Radford

Virginia. PM AESIP is operating its Production (PROD), Development (DEV), and Quality

Assurance (QAS) environments. PM GFEBS is currently operating its PROD environments on a separate infrastructure co-located in this data center. The migration plan for GFEBS to transition its PROD environments to the ERP enclave is currently being reviewed. The Army Logistics

Transformation (ALT) Team, located at NEC-R, runs three (3) major server enclaves on behalf of PM AESIP, PM GFEBS, and PdM GCSS-Army. One Man-Year of services is required for a base of 6 months and subsequently four (4) 12-month option periods of on-going support to assist the ALT Team with operation and maintenance, data migration, documentation, and knowledge transfer of the Common enclave located at NEC-R. The man-year effort will implement all components into the ERP enclave, and will assist with AESIP, GCSS-Army, and

GFEBS server migrations by providing documentation and transition services. See the list below:

The List of Materials:

Software:

Citrix 6.5/7.x

VMware 6.x

Microsoft System Center Configuration Manager 2012

Cisco Secure ACS 5.x

Riverbed Steel Central

Hardware:

Cisco Nexus 7k, 2k

Cisco ASA

Cisco ASR

F5 Big-IP Local Traffic Man

List of applicable certifications for Materials mentioned above:

1. Cisco Nexus 7k 2k: (CCIE) Cisco Certified Internetwork Expert

2. Cisco ASA and ASR: (CCNP) Cisco Certified Network Professional

3. VMWare: (VCP) VMWare certified Professional 6

4. Citrix 6.5/7: (CCP) Citrix Certified Professional

5. Microsoft System Center Configuration Manager: (SCCM) System Center

6. Configuration Manager

7. F5 Big IP Local Traffic Man: F5 Certified Professional

8. Riverbed Steel Central: (RSCA) Riverbed Certified Solutions Associate

9. EMC: (EMCSA) EMC Storage Administrator

10. VPLEX: Certified Storage Administrator

Require maintenance and support from skillsets that are certified by the Original Equipment

Manufacturer (OEM). The certifications for the equipment listed above should be presented as part of proposal for this effort. Additionally, the offeror shall include evidence from the OEM that they have the correct certificate. The evidence can be in the form of the actual certificate issued by the OEM with a raised seal or a letter from the OEM verifying the validity of the certificate and its relation to the equipment/software in question.

2. BACKGROUND and SCOPE:

AESIP enables integration by linking business processes and data across existing IT systems.

This integration optimizes business processes and supports Enterprise level information requirements. AESIP has successfully delivered a Web-based solution for the creation and management of customer and vendor master data and implemented an optimized messaging and hub services capability. AESIP houses and enables the Army Enterprise material master, which provides the Army a single authoritative source for material data supporting all Army constituent

(modernized and legacy) systems. This Army Enterprise material master provides the catalyst to manage, control, create, change, archive, and validate data, while providing a single global view of material; thus, providing the basic building blocks for Product Lifecycle

Management/Weapon System Management. Implementation of the Enterprise material master has enabled inventory management, accountability, pricing, accounting functions, and Material

Requirements Planning operations to be seamlessly integrated into the Army Enterprise vision.

AESIP products and services include the Enterprise hub services, Enterprise master data management and business intelligence and analytics for Global Combat Support System - Army

(GCSS-Army), the Army’s tactical logistics system; Logistics Modernization Program (LMP), the national logistics system; and GFEBS, the Army’s financial system.

AESIP: The Army continues to modernize its ERP business systems to simplify operations, optimize processes, and provide an accurate, enterprise view of business information to all users.

AESIP is a key component of this initiative.

The Army continues to modernize its business processes through ERP Systems. The

Program Manager, AESIP provides oversight, management, and enterprise governance among the Army ERPs (Global Combat Support Systems – Army (GCSS-Army), and the Logistics Modernization Program (LMP)). Program management, administrative, financial, technical, and business transformation support services are required for the

ERPs and related organizations, as listed below:

The PM AESIP and subordinate organizations:

o PD AESIP Hub o GCSS-Army o LMP o Product Director Automated Movement and Identification Solutions (PD

AMIS)

o Product Director Logistics Information Systems (PD LIS)

HQDA organizations involved in managing the Army ERPs o Office of the Deputy Chief of Staff of the Army, G-4 / Logistics o Office of the Assistant Secretary of the Army (Acquisition, Logistics and

Technology (ASA(AL&T))

GFEBS: To improve financial accountability, the Army needed to build a new, modernized system designed to standardize and streamline its financial business processes – everything from accounts receivable to cost management to property, plant and equipment inventory management. The Army chose an ERP commercial off-the-shelf (COTS) software package from

SAP. GFEBS integrates financial, real property, cost, and performance data into a Web-based

ERP system. GFEBS standardizes business processes and transactional input across the Army, provides real-time visibility of transactions, integrates data, and produces full cost data. GFEBS enables decision-makers to better leverage current resources and enable better analyses of resource implications for programs and budgets. These tools allow the Army to manage business operations efficiently and effectively by accurately measuring and thoroughly understanding the

"full cost" of an organization's business processes, products and services in order to provide the best value to customers and the Soldiers. GFEBS is fully deployed across the entire active Army, Army Reserves and Army National Guard to over 53,000 end users at 227 locations in 71 countries.

3. SPECIFIC OBJECTIVES:

Utilizing the equipment provided by PM AESIP, vendor shall be responsible for assisting the

ALT Team with the following tasks:

A. Operation and Maintenance:

1. Assist with the design and implementation of the ERP Enclave network infrastructure and operational services. This includes configuration and management of Nexus 7k, Nexus

2k, ASA 5585 firewalls, F5 LTM, ASR routers and ACS servers. Operational services include but not limited to access control lists, firewall rules, routing protocols, bandwidth monitoring and analysis within DoD, Army and program regulation and compliancy. This includes upgrades and implementations.

2. Assist with the design and implementation of firewall policies/rules for all (outbound / inbound) connectivity to the TLA/DMZ infrastructure (WAN). This includes configuration and management of both active/standby ASA 5585-X firewalls. These will serve as the security demarcation point and implement access control. Security services will include firewalling, site-to-site and client-to-site VPN access, and IPS.

3. Assist with the design, implementation and management of active/standby ASA 5585-X firewalls for security services between the ERPs (access layers). These security services include firewalling, IPS, and general segmentation.

4. Assist with the design and implementation of load balancing architecture. This includes configuration and management of F5 LTM to load balance common services and application for common and specific ERP administrative containers.

5. Assist in defining security strategy and implementation based on ERP applications and security policy (transparent or routed, applications to block, IPS strategy, VPN strategy, etc.)

6. Assist with the design, implementation and management of Cisco Secure ACS server to include new installations and upgrades.

7. Assist with the design, implementation and management of Citrix to include new installations and upgrades.

8. Assist with the design, implementation and management of Riverbed Steel Central applications and tools to include new installations and upgrades.

9. Assist with the design, implementation and management of VMware suite and tools to include new installations and upgrades.

B. Data Migration:

1. Deploy GFEBS access layer based on Customer requirements. Implement either VPC capabilities upstream or L3 routing upstream. Implement VPC capabilities downstream to servers if applicable. Attach Nexus 2000’s to Nexus 7000 pairs.

2. Assist Customer in defining migration strategy (timing of cutover, which enclaves to do first, etc.)

3. Migrate existing firewall rules and ACLs to new firewalls

4. Migrate IP address schema

5. Migrate copper and fiber physical connections

6. Migrate existing routing and switching configurations as Customer requirements dictate

(e.g., DISA security requirements, general IOS configurations required of U.S. Army

DoD Customers, best practices, etc.)

7. Implement Cisco DSA VPN Solutions

8. Migrate physical connectivity of GCSS Army connections to new shared core and make necessary configuration changes

C. Documentation and Transition:

1. Create detailed documentation as outlined in expectations for Customer’s records

2. Transition knowledge to Customer/Redstone Arsenal Staff

3. Educate and transition operational support over to Customer meet the task requirements

4. DELIVERABLES AND DELIVERY SCHEDULE:

All tasks outlined in Section 3 above, should be completed as prescribed in the table below:

Description of

Service

Period of performance

Frequency of service

Expected Outcome Priority

The certifications for all equipment listed in this SOO

Presented at the time of award

Refreshed and updated as required per the OEM requirements

All SMEs certified to work on the equipment

1a

Citrix 7.9

Upgrade and

Implementation

1 week lead time to start

One time or every 6 months

Complete

Implementation and transition as required Report no later than 5 days after completion

F5 support for

CAC/LDAP

Authentication and URL redirection

1 week lead time to start

One time or once every 6 months

Report due 5 days after completion of the action

1c. OC-12 cutover activities for G-ARMY

(Cisco support)

1 week lead time One time and then periodic maintenance

Report due 5 days after the cutover is complete.

Network

Infrastructure

Changes

2 weeks notification to be on-site and complete implementation

Once every 3 months

Report in 5 days after completion

Network Security

Assessment

4 weeks lead time travel and completion of the assessment

Once every 3 months

Report 5 days after completion

**Emergency

Surge support

12 months or as needed

As needed For remote requirement no later than 30 minutes from initial call.

To be determined by the government

*** Emergency

Surge Support

12 months or as needed

As needed On-site support 48 hour window for arrival on site from the initial call

To be determined by the government

5. GOVERNMENT-FURNISHED EQUIPMENT AND INFORMATION (GFE/GFI):

PM AESIP will provide a working environment and facilities adequate for the SME support personnel to perform their assigned duties. This includes, but is not limited to, adequate conference rooms, cubicle space, a networked computer, and telephone access.

6. PLACE OF PERFORMANCE:

The primary work location will be NEC-R, located in Huntsville, Alabama. Secondary site for data center work ALTESS in Radford, Virginia.

7. TRAVEL AND OTHER DIRECT COSTS:

All travel shall be in accordance with the Government’s Joint Travel Regulations (JTR) or

Federal Travel Regulation (FTR). Travel vouchers and supporting documents must be presented for payment within 10 days after completion of the travel.

The Contractor may be required to perform local and non-local travel to perform the tasks described in this SOO. Travel to Government sites in the National Capital Region and travel between the Contractor’s facilities and on-site offices of PM AESIP and PM GFEBS will be considered local travel. Because of the global scope of Army logistics systems, non-local

CONUS travel may be required. The contractor shall obtain Government approval prior to undertaking any long distance travel (travel greater than 50 miles or requiring an overnight stay) to any Government site or any site in performance of this contract.

8. PERIOD OF PERFORMANCE:

The required services outlined in this Statement of Objectives (SOO) shall begin within 15 days from award of contract.

9. SECURITY:

All contractor employees assigned to perform against any task order or delivery order shall have a favorable National Agency Check plus Written Inquiries (NACI). In addition, the contractor may be required to obtain or hold a final National Agency Check/Local Agency Check/Credit

Check (NACLC) in accordance with the DD Form 254.

The Contractor will ensure that all employees requiring access to Government computers, communications networks, and classified material will have valid and appropriate security clearances up to and including a Secret clearance.

Physical Security and Access: Base identification badges and/or car decals will be furnished by installation security for all Contractor task employees upon presentation of evidence of assignment to this task. Other badges such as computer facilities, access badges; computer access ID numbers, passwords, etc. will be furnished as necessary to complete task requirements.

10. SPECIAL REQUIREMENTS/INSTRUCTIONS/CONSIDERATIONS:

a. No data provided to, or developed by, the contractor shall be used for any purpose other than this delivery order. All information (to include, but not limited to, data files and hard copy) become the property of the government and the contractor shall return them to the PM AESIP at the Government’s request and at the completion of the task.

b. Government Property. Equipment (i.e., computers, furniture, mission related items, etc.)

purchased as “other direct costs” under this contract are the property of the Government and shall be transferred to PM AESIP at the completion of the task. Government property is subject to the terms of FAR 52.245-5 Government Property (Cost-Reimbursement, Time and Material, or Labor-Hour Contracts). A joint inventory of Government Furnished Equipment shall be accomplished within 10 calendar days after date of award of a delivery order. Closing joint inventory of Government Furnished Equipment to be turned in to the Government shall be accomplished NLT the final week of the delivery order performance period and upon notice of contractor resignation from the program.

c. Contractor Work Hours Schedule. All Contractor personnel performing full time functions within PEO EIS environments under this Contract shall provide, at a minimum, 8 hours per day service in accordance to PEO EIS (9am- 3pm EST) core business hours, Monday through Friday, excluding Federal Holidays and Government facility closures. Schedules are to be coordinated with the Government for any differences other than the time listed and will be addressed on a case by case basis. Contractor personnel who cannot provide support due to emergencies or other reasons during core hours shall be required to notify the Government. The contractor shall request Government approval prior to performing more than 40 hours in one week.

d. Contractor work under Government site closures. All Contractor personnel may be authorized to work at alternate sites during Government building closures. The contractor shall obtain Government approval prior to working at alternate sites. The scope of alternate sites entails to the following:

1. Incumbent Contractor Off Site Building Offices

2. Off Site Building Offices from other Contractors working for the PEO EIS Program

Offices, but related to specific PEO EIS work under this Contract