Mobile Environment Security Architecture (MESA) Virtual Private Network (VPN) and Command and Control Services (CCS) for Department of Defense (DoD) Mobility Classified Capability – Secret (DMCC-S) Gateways

Awarded Limited / Sole Source Justification Posted

Solicitation number
842674756
Agency
Set-aside
No set-aside

Opportunity facts

Contract number
HC108426C0004 Federal contract award
Awardee
ITC - Iss, LLC
Place of performance
Fort George G Meade, Maryland 20755, United States

Notice details come from SAM.gov. Updated .

About this opportunity

The Defense Information Systems Agency intends to award a sole-source contract to Apriva ISS LLC for Virtual Private Network software licenses and Command and Control Services supporting the Department of Defense Mobility Classified Capability – Secret (DMCC-S) Gateways program, with award made on July 20, 2026.

The justification cites 10 U.S.C. 3204(a)(1) and FAR 6.103-1, only one responsible source. Apriva's MESA VPN is the sole NSA Commercial Solution for Classified (CSfC)-approved, standards-based Internet Protocol Security VPN compatible with the existing DMCC-S Secure Mobile Device Gateways architecture and legacy end-user devices consisting of Samsung S24, S25, and Tab S9 (Non-CROM) and Dell 5350 and Pro 13 (Windows Data-at-Rest). Market research conducted April 21 through May 21, 2026, including a sources-sought notice posted to SAM.gov, identified no alternative viable solutions; competing VPN solutions utilize proprietary protocols incompatible with the Samsung strongSwan VPN client currently deployed across the DMCC-S fleet. The contract covers a 1-year base period. The contracting activity is DISA's Defense Information Technology Contracting Organization (DITCO). Procurement history includes four previous Apriva contracts (HC101317C0003, HC108421C0006, HC108425C0003) and one BAH task order (HC108420F0242). The government certifies the contract represents best value and lowest overall cost and will determine fair and reasonable pricing using historical pricing comparisons and independent government cost estimates.

Notice text

This requirement will provide VPN software licenses to support voice and data services for legacy DMCC-S end user devices (EUDs) consisting of the Non-Custom Read Only Memory (Non-CROM): Samsung S24, Samsung S25, Samsung Tab S9. Windows Data-at-Rest (WINDAR): Dell 5350, Dell Pro 13. The VPN must be approved by the National Security Agency (NSA) Commercial Solution for Classified (CSfC) program, compatible with the current DMCC-S Secure Mobile Device Gateways (SMDG) architecture and support the legacy EUDs.

Awarded contract HC108426C0004 to unknown vendor for unknown amount on 2026-07-20.

Files

File Type Posted
842674756_JA_Redacted.pdf PDF

Notice history

Notice Type Posted
This notice Latest Limited / Sole Source Justification
APRIVA Mobile Endpoint Security Architecture Virtual Private Network Follow-on Sole Source Latest pre-solicitation Pre-Solicitation

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Find teaming partners
  • Similar opportunities
  • Ask GovTribe AI about this opportunity

GovTribe for Federal Contractors