COMMONWEALTH OF VIRGINIA COUNTY OF HENRICO DEPARTMENT OF FINANCE CECELIA H. STOWE, CPPO, C.P.M. PURCHASING DIRECTOR February 11, 2014 ADDENDUM NO. 1 Request for Proposal: Subject: #14-9539-1CS Lease of Cisco Networking Hardware and Services for Middle Schools Gentlemen/Ladies: Please make the following changes, corrections, additions or deletions to the above referenced Request for Proposal: Page 1, Please change the following: From: The submittal, consisting of the original proposal and nine (9) copies… To Read: The submittal, consisting of the original proposal, nine (9) copies and one electronic copy Page 3, Section III.E 1.. Please add the following: HCPS would prefer to have the ability to prepay the lease balance, plus accrued interest, without penalty on any lease payment date. Offerors shall provide full amortization schedules to include interest rates and pre-payment options if any. Page 4, Section IV. Scope of Work.. Please replace the Bill Of Material list with the attached and revised Bill of Material list Page 35, H. Implementation Services… add the following: Configure, stage, deploy and implement the ASA 5585 Configure, stage, deploy and install Server Farm Switches Page 37, Section V. Anticipated Schedule: Orals presentations have been changed from March 12, 2014 to March 19, 2014 1590 E. Parham Road/P.O. Box 90775/Henrico, Virginia 23273-0775 (804) 501-5660 Fax: (804) 501-5693 1 Attachment H and I are now available in Excel. Please use these documents to submit your proposed pricing. Include the Excel spreadsheet information in the electronic copy submission. Attachment I…please use the attached REVISED Attachment I as provided in Excel format Find attached Questions and Answers Unless otherwise changed by an addendum, all other information will remain the same. Sincerely, Cecelia H. Stowe, CPPO, C.P.M. Purchasing Director CHS/jfb Attachments 2 RFP 14-9539-1CS Lease of Cisco Networking Hardware and Services for Middle Schools Questions and Answers February 10, 2014 Q1. Will HCPS provide the asset tags that will be installed on the equipment? Yes, HCPS will provide asset tags. Q2. Regarding ISE, How will it be implemented? ISE will be implemented to support wireless only. It will be a centralized installation that will be phased in. Other details can be discussed during Professional Services implementation planning meeting with Successful Offeror. Q3. Page 34 D. 1. (b). What will be expected from the Successful Offeror for this requirement? Successful Offeror will: 1. 2. 3. 4. 5. Provide burn in period for equipment to ensure unit is fully functional out of the box. Configure equipment with provided configurations. Place Asset Tags on equipment. Keep running Inventory of Serial Number, Asset Tag Number and Location. Equipment staged by school to be transported from vendor location to school site. This can be done at the Successful Offeror’s location or at the Technology warehouse and will be agreed upon prior to contract finalization. Q4. Does the County have any specific transportation requirements for removal of the old equipment? Only requirements are that it’s performed in a secure theft proof and damage free manner. Q5. Does HCPS have available room to deliver and hold the new equipment until the installation occurs? HCPS does not have space available to plan to have the equipment delivered when the vendor is ready to iinstall the equipment at the school. The related question was regarding if the Schools have available room to deliver and hold the new equipment until the installation occurs. We had explained that schools do not have space available to plan to have the equipment delivered when the vendor is ready to install the equipment at the school. Q6. Page 55 – 60. Attachment C – Can Offerors submit resumes in lieu of completing this document? Yes 3 Q7. Trampton Complex server farm switches WS-C4500x-40X-ES there is no secondary power supply included in the BOM , so is the secondary power supply not required? Correct, secondary power supply is needed. Updated in the addendum Attachment H and BOM. Q8. Trampton Complex Server farm switch there are no SFP's included in the BOM. Will be using CU5M cables that HCPS currently has in stock. Q9. Byrd Middle School Fiber distribution switch there is no secondary power supply included. Is secondary power supply not required for this switch? Secondary power supply is needed. Updated in the addendum Attachment H and BOM. Q10. For most of the schools there are no SFP's included in the server farm and IDF switches. Are those Sfp's included in MDF Switch BOM of respective schools? Will be using CU5M cables that is listed under 4500x Core BOM for each site. Q11. For Cisco Prime 1.2 there is no server hardware mentioned , does HCPS already have Server with sufficient CPU, Memory and storage required for Prime1.2? Yes, HCPS currently has a sufficient Prime server platform that can support this. Ourrequirements are to expand our current licensing to include LMS and support new Wireless Access Points. Q12. I see you have license for 5 ISE VMs, Do you have plans to increase VM license to get redundancy? In the future and not part of the initial implementation of the ISE platform. Q13. When does HCPS anticipate providing a spreadsheet (addendum) to use for pricing purposes? Attachment H and Attachment I (Revised 2.10.14) are attached to Addendum 1 Q14. Can we have multiple folks help present our offering should we make it to oral presentations? Offerors may have multiple presenters during the oral presentations as needed to completely articulate their offering however, if any of the presenters are sub-contractors of the Offeror they should be clearly identified as such. Q15. Do we need to use the exact format given in the RFP for addressing Resumes? No. See Q6. 4 Q16. Please clarify that approximate quantity of existing equipment is similar to what they are asking for in terms of the replacement equipment? For the exception of the Trampton Data Center and Elementary Server Farm BOM sections, for the most part it is a one to one replacement of equipment for HCPS. Q17. The removal of equipment, then transport to HCPS Technology Warehouse would occur after installation and testing of replacement equipment? 1. 2. 3. 4. Remove old existing equipment. Install new equipment. Perform Test and Performance test. Deliver old equipment to the Trampton Warehouse. Q18. Does HCPS have clear “title” or “ownership” of any equipment expected to be removed and transported to HCPS Warehouse Facility? Yes, all equipment being replaced is currently owned free and clear by HCPS. Q19. Whose Insurance/Bonding/Coverage is expected to be in place when any of HCPS “owned” equipment is transported? Successful Offeror will be required to provide and maintain insurance coverage for any services performed. Q20. Please clarify “specific” $1.00 Out Lease Structure Requirements ($1.00 Out Option or Tax Exempt Municipal Lease) HCPS desires the flexibility of purchasing the assets at the end of the lease for $1. If they exercise the option, they will own the equipment and can sell/use the equipment as desired. If they don’t exercise the $1 option, the successful offeror will be responsible for removal/disposition of the equipment. Q21. Will HCPS sign or have any issue in signing IRS Form 8038g if lease structure is Tax Exempt Municipal Lease? If lease structure is tax-exempt, an 8038g would be executed by Henrico County. But, the County reserves the right to review and approve any lease documents in advance. Q22. Under what circumstances would HCPS choose/elect to lease equipment under $1.00 Out structure, then not exercise option to own for $1.00 at expiration of term? If at the end of the lease a project is executed to refresh the infrastructure HCPS may forgo the $1 buy out option and allow the vendor to make an offer on residual value. 5 Q23. HCPS indicated at the pre-proposal conference there was funding appropriated for this phase. Is this for the Base Year Only? HCPS funding is subject to the Appropriations Clause and the budgets are only approved on an annual basis. Funding in the current fiscal year allows HCPS to proceed with contract award. Future funding will be appropriated annually. Q24. Has an 802.11ac-based wireless survey of the in-scope areas been completed? No, however 802.11 b/g/n site surveys have been completed and can be made available to the Successful Offeror. Our RFP requirement is for the Offerors to perform a one-to-one wireless access point replacement. Q25. Can the results of any prior wireless survey be shared? This will be provided to Successful Offeror at the time of initial deployment planning meeting. Site Map’s for all the schools with AP placement will be provided at that time. Q26. Are the 700 access point locations already wired back to the nearest IDF, or are AP hanging and cabling services/materials required for this response? All AP locations are currently cabled. Listed in the BOM, all required mounting hardware is included in addition to the AP’s units themselves. Installation of AP’s will be based on site maps provided by HCPS based on a one-to-one swap out. Q27. Do any of the access point locations have high ceilings that require a scissor lift or similar device to reach the ceiling? The vast majority of Access Point installations will be able to be reached via an A Frame ladder. However there will be limited situations where HCPS staff will need to make arrangements to obtain a scissor lift and perform the swap out. Q28. What are the models of the existing wireless controllers, and what version of software are they currently running? HCPS currently has Cisco 8510 Wireless Controllers running in an HA configuration and with Software ver. 7.4.110.0. 6 Q29. What applications to you anticipate using over wireless – i.e. wireless video, wireless voice over IP (VoIP), multicast, etc.? No Voice over IP or Multicast. Just standard Data and HTTP traffic including video streaming at times. Q30. Will all the access points to be installed be within 100 meters of a school provided PoE switch? Yes. Q31. Can HCPS provide softcopies of the floor plans for the in-scope locations? This will be provided to Successful Offeror at the time of initial deployment planning meeting. Q32. Can HCPS provide a list of the old equipment to be transported to the Trampton Rd. warehouse? With the exception of Trampton Data Center and Ready Service Spare section of the BOM, this is a one-to-one replacement approach. No inventories will be provided. Q33. Does the County own the old equipment that is to be moved to the Trampton Rd. facility? Yes, all equipment being replaced is currently owned free and clear by HCPS. Q34. If ISE is expected to be integrated to existing access layer switches and wireless controller, can you provide a list of that equipment including model number and current version of IOS running? ISE will only be implemented to support Wireless at this time. Q35. Does HCPS require ISE policies that will make use of device profiling and device posture checks? Based on this being the initial implementation, this has not been determined at this time. This will be determined by district leadership based on development of Network Access Security Policies at a later date. Q36. Does HCPS require ISE policies that will make use of secure group access tagging? Not at this time. 7 Q37. Does HCPS anticipate requiring cryptographic certificates for ISE policies? This will be determined between the Successful Offeror and HCPS based on professional services pre implementation meeting. Q38. Does the school district have certificate authority and PKI infrastructure? Yes, VeriSign if required. Q39. Will the county provide the necessary cryptographic certificates? Yes if determined that it’s required. Q40. Is the school providing the necessary racks, patch panels, mounting hardware, cabling guides and raceways, copper and fiber patch cables (excluding those already listed in the RFP equipment lists) and any mode conditioning cables or fiber termination conversion cables (e.g. SC-LC converters) Yes. Q41. When newer versions of software exist than those on the RFP equipment list, should Offerors refresh their quotes to reflect the newest version available? Yes, quotes should reflect current available versions of the software available from CISCO at the time of response. Q42. What is the total number of concurrent end-points (i.e. laptops, network printers, network cameras, mobile devices, etc.) that will be on the ISE managed network? Initial phase will be an estimated 40,000 Endpoints. Q43. It was mentioned in the pre-bid meeting that HCPS will be handing off the configurations to the Partner for configuration of the equipment either onsite or offsite. Are these configurations going to be written by HCPS staff? If so are all configurations (layer 3, Layer 2, as well as ASA) going to be written by HCPS or does HCPS want the implementing partner to help with any design/redesign of the HCPS network? HCPS will provide config templates and VLAN information or all Layer 3, Layer 2 and current ASA unit. HCPS is requesting Design and Implementation assistance from the Successful Offeror as listed specifically under Professional Services section of the RFP. Network design/redesign is out of scope of the RFP and not required. 8 Q44. In the Resume and Reference response section of the RFP would you like us to provide the information within the table embedded within the word document or can we put in Resumes and References in a more traditional format? Offerors may use the table provided or provide separate resumes Q45. Will there be any schools under major renovation during the allotted time? a. i.e. Moody Middle No Schools will be under major renovations during the allotted time. Q46. Will an escort be required for after-hours work? HCPS prefers that all work to be accomplished during the stated operational hours outlined in the RFP. Q47. Are all existing AP locations accessible by standard A frame ladders? Will lifts be needed? The vast majority of Access Point installations will be able to be reached via an A Frame ladder. However there will be limited situations where HCPS staff will need to make arrangements to obtain a scissor lift and perform the swap out. Q48. Will the equipment within the equipment rooms be refreshed during normal operation hours? HCPS prefers that all work to be accomplished during the stated operational hours outlined in the RFP. Q49. How many buildings can be done simultaneously? Is there a limit? Yes, but no more than 2 sites simultaneously. Based on current HCPS manpower and other projects the following would be an example. I.e. Elko Middle School being refreshed Mon and Tues with a number of Elementary site server Farm and Core implementation occurring simultaneously. Holman Middle School being refreshed Wed and Thursday with a number of Elementary site server Farm and Core implementation occurring simultaneously. Q50. Who will verify the building is secure when we leave? HCPS Staff 9 Q51. What is the timeline of Prime Infrastructure Addition of 1500 Devices and LMS Upgrade? I don't see anything related to that on the anticipated schedule. HCPS will be implementing the licensing at a later date and is not part of the professional service implantation requirements. Successful Offeror will meet with HCPS Technology staff to hold a design and planning meeting. Successful Offeror must have all layer-two and -three switches and wireless equipment configured and ready for deployment. Successful Offeror will have the Identity Service Engine (ISE) implemented and tested. Successful Offeror will have the Mobility Service Engine (MSE) platform implemented and tested. May 13- 17, 2014 June 14, 2014 June 16 - 20, 2014 June 16 - 20, 2014 Q52. Regarding the timeline below, is the deadline for the ISE and MSE pertaining to a full implementation, meaning that 802.1x is being enforced on the wired switchports and any SSID's? Schedule reflects that ISE and MSE will only be implemented to support Wireless only. Remainder will be determined by Network Access Security Policy as established by district leadership at a later date. Q53. Is the ISE deployment for wired and wireless devices? Wireless only. Q54. Have wireless site surveys been conducted at all the locations receiving access points? 802.11 b/g/n site surveys have been completed and can be made available to the Successful Offeror. Our RFP requirement is for the Offeror to perform a one-to-one wireless access point replacement. Q55. Are these locations currently wired for access points? Yes Q56. Our assumption is that you may use ISE for dynamic VLAN assignment at a minimum along with wireless access, which represents the 60000 base licenses, what are your plans for the 1000 advanced licenses? What are the business goals for the advanced licensing? The ISE platform will be implemented in a Wireless only approach. Network Access Security Policies will need to be developed by HCPS leadership that will determine the implementation of other ISE functionality such as device profiling the 1000 advance licenses are for. 10 Q57. Will anything other switches be integrated with ISE that are not listed on the bill of materials? If so, can you tell us how many and provide their IOS version? No, we are deploying it to support Wireless only. Q58. What will provide the Identity stores (For Example Active Directory)? Yes, AD and Certificates on end points owned by HCPS. Q59. Do you currently have a PKI infrastructure? Yes, VeriSign Q60. Are all wired machines on a domain? All computers are on the domain except for various elementary School Macs which fall outside the Scope of this RFP. If this is related to ISE, we are only implementing ISE to support Wireless only. Q61. What type of clients will be allowed on the network and OS versions (For Example, Windows XP SP3) Final policy determination will be the result of pre-implementation meeting with Successful Offeror but the main stay is going to be Windows XP, Windows 7 and MAC OS 10x. Q62. What type of devices are going to be network and what type off access is that device going to have. (for example, mobile phones, IPADs, Laptops, etc..) If this is related to ISE, we are only implementing ISE to support Wireless only. Only HCPS Laptop and iPAD devices will be supported via the secure network. All other devices will be routed to a guest SSID. Q63. Assuming the use case is for wireless and wired is there a use case for VPN? If so how many VPN gateways? Out of scope of RFP. Q64. What is the supplicant on each end user device? For example is it AnyConnnect or the native windows supplicant? If you are referring to VPN aspect of ISE, this is out of scope of RFP. Q65. Does each school need its own policies? If so, do you have thoughts on the number of policies that might be required? No 11 Q66. If an application/supplicant is needed on the end user device, would you like us to include services to install/configure each end machine? No Q67. What version is your OS on your 8500 series controller? We currently have Cisco 8510 Wireless Controllers running in an HA configuration and with Software ver. 7.4.110.0. Q68. Are you wanting us to migrate WCS to Prime? Do you have drawings for the buildings already in WCS? No Q69. Will Your APs be re-used in the new environment? If sow what are your existing AP models? No Q70. Is the MSE for Rouge detection and are you using RFID tracking? MSE will be used for Rouge detection, interference identification and location, client tracking and logging. RFID tracking will not be used. Q71. Is there enough rack space, power, and cooling for the new equipment? Yes Q72. Are we doing a wireless site survey at each site, or are we replacing existing APs and hanging the new APs in the same location? Replacing existing APs and hanging the new APs in the same location. Q73. Will the new equipment use the same routing and switching design and configuration as implemented today or will we need to redesign the network? It will use the same routing and switching design and configuration as implemented today. Q74. Will you provide a lift for hanging APs if needed. (For example Gymnasiums.) The vast majority of Access Point installations will be able to be reached via an A Frame ladder. However there will be limited situations where HCPS staff will need to make arrangements to obtain a scissor lift and perform the swap out. 12