W912HZ-15-R-0004-0006.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The solicitation is amended as seen in the follow ing pages.

1. CONTRACT ID CODE PAGE OF PAGES

Y 1 10

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 17-Jun-2015

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W912HZ-15-R-0004

X 9B. DATED (SEE ITEM 11)

26-May-2015

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

17-Jun-2015

CODE

ERDC CONTRACTING OFFICE

3909 HALLS FERRY ROAD

VICKSBURG MS 39180-6199

W912HZ 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

W912HZ-15-R-0004

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION J - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

The following have been modified:

QUESTIONS AND ANSWERS

Questions and Answers for ERDC Solicitation W912HZ-15-R-0004

(Answers are in Bold)

1. Can the Government disclose to bidders the number of FTEs supporting the current contract? The previous award was a Performance Based Firm Fixed Price (FFP) contract. Under this contract type, the vendor determines the quantity and mix of labor to perform the requirements. The ACA portion of the current contract is Time and Materials (T&M) with a not to exceed quantity of 2,000 hours. See question #8 below.

2. Can the Government provide the labor categories and/or position descriptions for the incumbent labor force? This is a new requirement, however, similar services were provided in support of this mission under portions of previous contracts. The labor categories and/or position descriptions for the incumbent labor force is not exactly the same as this requirement. See question #8 below.

3. Are there Service Contract Act (SCA) employees currently assigned to the incumbent contractor supporting this effort, and if so can the Government provide the Department of Labor local wage scales for labor categories used? The SCA was not included in the previous contract.

4. Are Key Personnel required for this bid? No.

5. The Government has only allowed ten (10) business days to compose a response to this solicitation.

Generally, proposal of this complexity and size, we would expect at 20 to 30 days to respond. Will the Government considering extending the due date to allow adequate time to develop a comprehensive response and allow time for reproduction and mailing proposal to Vicksburg? This will also adequate time to notify Government Customers of Past Performance Questionnaire, to insure timely response. Please refer to Amendment 0002 to the solicitation.

6. Can the Government provide the tools currently in use for the Authorization to Operate (ATO)? Yes, The Government Enterprise Management System (EMS) will provide all the tools needed for the Authorization to Operate (ATO).

7. Is this a new requirement or an existing requirement? This is a new requirement, but similar services were provided in support of this mission under portions of previous contracts. See question #8.

8. Is there an incumbent on this contract? If so, please provide the incumbent name, current contract number, length, value of the contract? Task orders W912HZ-09-D-0001-0017 for $475,633.00 and W912HZ-09-D-0001-0018 for $5,135,501.80 were both awarded to HX5, LLC in 2014 with a period of performance of 12 months. Current interim contract W912HZ-15-C-0006 in the amount of $1,986,824.56 with a POP of 4 months was awarded to HX5, LLC.

9. What is the estimated # of FTE’s for performing the tasks stated in PWS? This is a Performance

Based Firm Fixed Price (FFP) contract. Under this contract type, the vendor determines the quantity and mix of labor to perform the requirements. The ACA portion of the current contract is Time and Materials (T&M) in which not-to-exceed hours will be provided.

10. Would the government accept email submission, instead of hard copies delivery? See amendment

0003.

11. Please provide the man-hours relevant to Attachment A. The estimated capacity of this contract is $9,999,000 with an ordering period of 2 years.

12. Experience requires up to seven experience references. How many past performance questionnaire are required? The RFP does not require a specific number of past performance questionnaires.

13. Please provide the Labor Category and Staffing (man-hours) for Sample Task Order 0001. The sample task order is Performance Based, Firm Fixed Price (FFP). Under this contract type, the vendor determines the quantity and mix of labor to perform the requirements.

14. How is Network Access Control implemented currently for Sample Task Order 0001? Network

Access Control (NAC) is used to prevent unauthorized or unknown computing systems and/or peripherals access to the RDE network.

15. How is virtual desktop infrastructure being implemented and maintained currently for Sample Task

Order 0001? The contractor shall manage a virtual environment utilizing the VMWare suite.

The VDI solution was implemented using a hyper-converged solution simplifying enterprise datacenter infrastructure by integrating server and storage resources into a turnkey platform for delivering storage and compute performance capacity for persistent and non-persistent desktops. VDI is maintained through the Government's Cloud Computing Environment processes.

16. How are secure websites being implemented and maintained at this time for Sample Task Order

0001? Hardware proxy appliances are implemented to provide complete control over all web traffic delivering threat protection, user authentication, web filtering, data loss prevention, inspection, and visibility of SSL-encrypted traffic (including the ability to stream decrypted content to an external server with an Encrypted Tap license), content caching, bandwidth management, and stream-splitting.

17. For Sample Task Order 0001, is there more than one location? If so, please provide locations.

Yes, Locations of Work. The contractor will be required to provide services for the four main ERDC locations: Vicksburg, MS, Champaign, IL, Hanover, NH, and Alexandria, VA. The four main ERDC locations host the ERDC seven laboratories.

Four laboratories reside in Vicksburg, MS: Coastal and Hydraulics Laboratory (CHL), Geotechnical and Structures Laboratory (GSL), Environmental Laboratory (EL), and Information Technology Laboratory (ITL).

Construction Engineering Research Laboratory (CERL), Champaign, IL; Cold Regions Research Engineering Laboratory (CRREL), Hanover, NH and The Geospatial Research Laboratory (GRL) in Alexandria, VA.

18. Due to the amount of information required to be addressed in the Technical Volume will the

Government consider moving the due date to June 29, 2015? Please refer to Amendment 0002 to the solicitation.

19. L-3.4 Formatting and Page Limitations: With reference to spreadsheets, charts, tables, diagrams, or design drawings, what does the government consider as an appropriate font type and font size? The formatting and page limitations for all Volumes shall be typed in Times New Roman font type and font size 12 for text pages. Page size shall be 8.5 x 11 inches for text pages, and a maximum of 11 x 17 inches for spreadsheets, charts, tables, diagrams, or design drawings; font type and font size shall be appropriate for spreadsheets, charts, tables, diagrams, or design drawings.

Pages larger than 8.5 x 11 inches shall count as two pages for determining page limits. Page margins shall be a minimum of one inch at the top, bottom and each side. Pages shall be numbered sequentially by volume.

20. Does the Government currently use/have available a task management system that contractors are expected to use to record their hours expended against tasks? No. The contractor is responsible for tracking the hours expended against tasks under this IDIQ. This should be captured in the technical proposal.

21. Is the Sample Task Order 0001 an actual task order that will be executed after contract award? The sample task order 0001 will be used for evaluation purposes. The Government reserves the right to award Sample Task Order 0001 as the first task order under the resulting contract if determined to be in the best interest of the Government.

22. What off the shelf programs are supported at the four locations?

We have a dynamic baseline environment. Listed is a snapshot example for our commercial off the shelf software; but our baseline is not limited to this list.

Adobe Suite

Apple Macintosh Operating Systems, Desktop/Server

ApproveIT

ArcGIS

Axway (Tumbleweed)

CISCO VPN

Chrome eSign

GoogleEarth

Heat (Lumension) iTOPS

JAMF Casper

Linux/UNIX Operating Systems, Desktop/Server

MatLAB

Mcafee HBSS

Microsoft Exchange

Microsoft Operating Systems, Desktop/Server

Microsoft SQL

Microsoft Visual Studio

Microsoft Office Suite

Microsoft Visio

Microsoft Project

Parallels

VMWare Suite, Desktop/Server

Solarwinds

Spark

Splunk

23. What are considered the offer’s normal hours of operations?

The vendor shall make this determination in the technical approach in accordance with the requirements of the PWS.

24. In reference to the 4 hour “after hours” timeframe, is a resolution (meaning completion of task) needed within the 4 hours?

Recognition and a plan of action will be required in the timeframe.

25. Is there a current ticket tracking system in place? If so, what is used and will it be available to the offeror? Does the current ticket tracking system provide information needed for CDRLS?

Yes. A Government off-the-shelf (GOTS) system and it will be available to the offeror. The offeror will have the ability to run reports from the system.

26. Is there a current configuration management program management system in place? If so, what is used?

Yes. GOTS software and hardware.

27. In section 4.3 on page 16 under Government Furnished Materials, it states that government will provide facilities, utilities, equipment and materials necessary to accomplish the work for “on-site” employees. Is it anticipated that there is off-site employees? Or an off-site location needed where the government does not furnish such items? It is anticipated that all work task will be performed at a Government facility.

28. The solicitation number referenced on the DD254 does not match the solicitation number offerors are writing to. Is the DD254 in Attachment D, with the solicitation number W81EWF42620198, truly applicable to solicitation number W912HZ-15-R-0004? This is the correct attachment.

29. Is there a current incumbent? If so, who is it and what is there current contract number? See question

#8 above.

30. Is the contract funded? Funding is required prior to any services being ordered.

31. What content management system is used at the four locations within the solicitation? A GOTS system that will be available to the offeror.

32. Does the Government currently use/have available a task management system that contractors are expected to use to record their hours expended against tasks? No

33. On page 7 of 87 a reference is made to other locations. Could the Government please identify these “other locations?” There are field site locations in Duck, NC and Anchorage, AK.

34. In paragraph 2.3.1 there is a requirement to maintain communications between the customer sites and the contractor corporate office. Is there a requirement to maintain a corporate office in proximity to the Government locations? Where? No

35. There are multiple references to UNIX/LINUX system support. Could the Government please clarify the version of each that are being used as well as differentiate between the numbers of platforms (servers or workstations) of each based on the table found on page 4?

ERDC R&D frequently explores and evaluate new code base releases. Attached is a list of UNIX/Linux variants to date. At this time, the Government does not have a breakdown of the platforms (servers vs. workstation).

Linux/UNIX Variants

CentOS release 6.5 (Final) 2.6.32-431.11.2.el6.x86_64

CentOS release 6.6 (Final) 2.6.32-504.8.1.el6.x86_64

CentOSrelease6.6(Final)Linux2.6.32-431.el6.x86_64

Fedora 21 (Twenty One)

Fedora 22 (Twenty Two)

Linux2.6.32-431.11.2.el6.x86_64

MasterCentOS 2.6.32-504.16.2.el6.x86_64

MasterRedHat7 2 3.10.0-229.4.2.el7.x86_64 openSUSE11.3(x86_64)Linux2.6.34.7-0.7-desktop

Oracle Linux Server 7.1

Oracle Linux Server 7.1 3.10.0-229.1.2.el7.x86_64

Oracle Linux Server release 6.6

Oracle Linux Server release 6.6 2.6.39-400.249.3.el6uek.x86_64

Oracle Linux Server release 6.6 3.8.13-55.1.2.el6uek.x86_64

Oracle Linux Server release 6.6 3.8.13-55.1.5.el6uek.x86_64

Oracle Linux Server release 6.6 3.8.13-68.2.2.el6uek.x86_64

Red Hat Enterprise Linux

Red Hat Enterprise Linux 2.6.32-431.20.3.el6.x86_64

Red Hat Enterprise Linux 3.10.0-229.4.2.el7.x86_64

Red Hat Enterprise Linux Server release 5.11 (Tikanga) 2.6.18-404.el5

Red Hat Enterprise Linux Server release 6.6 (Santiago) 2.6.32-504.16.2.el6.x86_64

Red Hat Enterprise Linux Server release 7.1 (Maipo) 3.10.0-123.13.2.el7.x86_64

RedHatEnterpriseLinuxServerrelease6.6(Santiago)Linux2.6.32-504.16.2.el6.x86_64

RedHatEnterpriseLinuxServerrelease6.6(Santiago)Linux3.8.13-68.1.3.el6uek.x86_64

Slackware 14.1

SunOS5.10Generic_150400-24

SUSE Linux Enterprise Server 11 (x86_64)

Ubuntu 14.04.2 LTS

Ubuntu precise (12.04.4 LTS)

36. In paragraph 5, page 17 – 18, there is a deliverables table. Would the Government please provide further details on the deliverables table for the description of what each Deliverable requirement is?

Deliverables will be detailed at the task order level after the IDIQ contract award.

37. Is the dashboard report identified as CLIN A008 referring to the requirements in paragraph 3.2.1?

What format is the Government looking for in a dashboard report (system generated or contractor developed)? This will be detailed at the task order level.

These are from the Sample Task Order 0001 PWS.

Reference - Pertaining to 1.1 Host Based Security

38. DISA's HBSS includes many different modules. What HBSS modules (i.e. Antivirus, Firewall, IPS, DLP, etc.) are deployed currently on ERDC's RDE? Antivirus, Firewall and IPS (logging only), Rogue Sensor

39. Are there any known future plans to expand the HBSS modules identified in the previous question?

Tune IPS and fully implement. Implement DLP, ABM, DCM

40. At which locations identified on the PWS are the RDE's HBSS servers located, and is remote access allowed for implementation of security management and administration of these servers? NO, HBSS servers located on the DREN with limited remote access allowed

41. Are there any application white/blacklisting requirements? NO, blacklist/whitelist is currently implemented at the host level

Reference - Pertaining to 1.2 Comply to Connect

42. What patch management and remediation suites (i.e. Microsoft SCCM, MS WSUS, etc.) are currently being used in the RDE environment to maintain IAVA compliance? MS WSUS, Heat (Lumension), VMWare Configuration Management, JAMF CASPER

43. Are there multiple remediation/patch management tools in use for each of the operating systems identified in the PWS? YES

44. Of the total number of endpoints (i.e. laptops, desktops, and thin clients) being used on the RDE, what number of those are physical devices vs. virtual desktops being accessed via thin client roughly. Approximately 2400

45. At which locations identified on the PWS are the RDE's patch remediation servers located, and is remote access allowed for implementation of security management and administration of these servers? Heat (Lumension) located in Vicksburg distributes to all sites, Primary patch that enforces patch installation/required IAVA patching; MS WSUS at each site, not required but available (e.g., firmware/driver updates)

46. Does management have a preference on in which SIEM tool is used for daily reporting and real time monitoring if one exists beyond the HBSS solution? If so, could they please identify? There are no preferences for SIEM as it is not fully implemented. We currently employ SPLUNK for auditing, but do not have a way to perform SIEM functionality.

47. Is the ERD using ACAS for vulnerability scanning? Are there any other vulnerability scanning tools in use for other than Microsoft based clients? ACAS is used to scan for vulnerabilities in MS, Mac and Linux systems.

48. What is the current quarantine policy if any exists and can you please provide that? Per ACAS findings, all critical vulnerabilities and hosts with more than 5 highs are blocked/quarantined from access. Additionally, all rogues are blocked.

49. What percentage of the workforce is not located at core locations identified (i.e. teleworking remotely)? Approx. 10%

Reference - Pertaining to 1.3 Virtualization Management

50. The Virtual Desktop Infrastructure (VDI) backend identified in the PWS is made up of roughly how many physical servers and is located at which locations? If there are multiple VDI backends please identify their locations and physical server numbers of each. 3-hosts, all in Vicksburg

51. Is it appropriate to assume that all or the vast majority of thin clients in use are physically located at the four core locations identified in the PWS (i.e. thin clients are not issued for remote access from remote worksites like private residences)? No

Reference - Pertaining to 1.4 Network Management

52. What network monitoring tools (i.e. SolarWinds, WhatsUpGold, etc.) are currently in use if any?

Solarwinds

53. Are the preponderance of switching devices (routers, switches, VPN concentrators) in use Cisco products and could you please identify any other vendor products that may be currently implemented? CISCO/Brocade

54. Are you able to share the Continuity of Operations Plan (COOP) if one exists? Do you have an expectation of reliability and availability rating you can share? NO, MAC-III or equivalent

RFM

55. Question regarding Section B Item 0001. Should this amount for Labor FFP equal the sample task order price proposal only and include the amount for the two year period? The vendor is not required to enter a amount for Section B Item 0001. The total capacity for the 2 year contract is $9,999,000.00 as seen in clause 52.216-19.

56. Question regarding Section B: Are Items 0002, 0003, 0004, 0005 amounts for one year? All listed

Line Items amounts are for 2 years.

57. In the original Q&A you changed the submission type from physical to electronic, however in amendment 2 you say that Q&A 1 is cancelled and is replaced by Q&A 2. My question is that will the submission type be a physical version as specified in the RFP or will the electronic version suffice? Also, if we are sending out a physical version it does not leave us enough time to polish the response and ship it to you, so would you consider giving us an extension until the end of this week to complete the response to this solicitation? Please see Amendment 0002, hard copies and CD will be required. The solicitation due date is extended, see Amendment 0005.

58. Just wanted to know if Solicitation Number: W912HZ-15-R-0004 is still set aside for competitive

8(a) only? Yes

59. Do you require a signed copy of each posted amendment be submitted by the due date? Yes

(End of Summary of Changes)