App-Firewall-Backup-Solution-Security

advertisement

Michigan Community College Association

Michigan Colleges Online

Application Firewall/Load Balancer, Backup Solution and Security

Solution/Services

May 12th, 2014

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

Michigan Community Colleges Association

Request for Proposal for Application Firewall/Load Balancer, Backup Solution and

Security Solution/Services

RFP ID No.: MCO 03

Pre-Bid Conference Call:

Deadline to Submit Questions:

Proposal Due Date: 12:00pm EST

May 15 th , 2014

May 22 nd 2014

June 6 th , 2014

Contact/Submit To: Randy Melton

Michigan Community Colleges Association

222 North Chestnut Street,

Lansing, Michigan 48933-1000

Phone: (517) 372-4350

Fax: (517) 372-0905

Email: rmelton@mcca.org

PLEASE NOTE THE ITEMS IN YELLOW.

In most cases these are the Actions Items required for this Bid.

2

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

Table of Contents

1.0 STATEMENT OF WORK ..................................................................................................................... 4

1.1

P URPOSE ......................................................................................................................................... 4

1.2

C OVERAGE & P ARTICIPATION ........................................................................................................ 4

2.0 GENERAL INFORMATION ................................................................................................................. 5

2.1

O RIGINAL RFP D OCUMENT ............................................................................................................ 5

2.2

T HE O RGANIZATION ....................................................................................................................... 5

2.3

V ENDOR

S U NDERSTANDING OF THE RFP ...................................................................................... 6

2.4

G OOD F AITH S TATEMENT ............................................................................................................... 6

2.5

B ID R ESTRICTIONS ......................................................................................................................... 6

2.6

B ID R ESPONSE I NSTRUCTIONS ........................................................................................................ 6

2.7

C OMMUNICATION ........................................................................................................................... 7

2.8

B ID R EGISTRATION ......................................................................................................................... 7

2.9

P ROPOSAL S UBMISSION .................................................................................................................. 7

2.10

M ETHOD OF A WARD ....................................................................................................................... 8

2.10.1

S ELECTION AND N OTIFICATION ...................................................................................................... 8

3.

HOSTING ENVIRONMENT ................................................................................................................. 9

3.1

T ARGETED A PPLICATIONS FOR H OSTED E NVIRONMENT ............................................................... 10

4.

APPLICATION FIREWALL AND LOAD BALANCER .................................................................. 11

4.1

O VERVIEW .................................................................................................................................... 11

4.2

A PPLICATION F IREWALL /L OAD B ALANCER Q UESTIONNAIRE ....................................................... 12

5.

BACKUP SOLUTION ........................................................................................................................... 13

5.1

5.1

B ACKUP S OLUTION Q UESTIONNAIRE ...................................................................................... 14

5.2

B ACKUP S OLUTION W ORKSHEET .................................................................................................. 15

6.

SECURITY SERVICES / SOLUTIONS .............................................................................................. 16

6.1 16

7.

VENDOR QUALIFICATIONS & REFERENCES ............................................................................ 21

7.1

ENGAGEMENT METHODOLOGY .................................................................................................. 22

7.2

9.1

V ENDOR C ERTIFICATION ........................................................................................................ 24

3

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

1.0 Statement of Work

1.1 Purpose

The purpose of this Request for Proposal (RFP) is to invite prospective vendors to submit a proposal to supply an Application Firewall/load balancer, Backup solution and Security Services for the Michigan Community

College’s Association, Michigan Colleges Online operating unit. This RFP provides vendors with the relevant operational, performance, application, and architectural requirements of the system.

Preference will be given to suppliers who have demonstrated a clear understanding of the requirements and that have core competencies and practices for providing Co-location services. Suppliers are required to propose a solution that best meets MCCA/MCO ’s stated requirements using industry best practices.

1.2 Coverage & Participation

MCCA/MCO reserves the right not to enter into any contract, to add and/or delete elements, or to change any element of the coverage and participation at any time without prior notification and without any liability or obligation of any kind or amount.

This bid may be sub-divided into the following deliverables:

1. Bid Group 1: Application Firewall / Load Balancer

2. Bid Group 2: Backup Solution

3. Bid Group 3: Security Solutions and Services

4

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

2.0 General Information

2.1 Original RFP Document

MCCA/MCO shall retain the RFP, and all related terms and conditions, exhibits and other attachments, in original form in an archival copy. Any modification of these, in the vendor’s submission, is grounds for immediate disqualification.

2.2 The Organization

The Michigan Community College Association is a network-centric organization that provides leadership on issues affecting member colleges. In addition to providing core legislative and government advocacy for its members, MCCA members benefit from the activities of four Centers of Excellence including the Center for

Student Success, Michigan Community College Virtual Learning Collaborative, Michigan New Jobs Training

Program, and the new Center for Global Initiatives.

Industry: Higher Education Member Support Services

Public Sector

28 Community Colleges located in Michigan

5

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

Schedule of Events

The following is a tentative schedule that will apply to this RFP, but may change in accordance with the organization’s needs or unforeseen circumstances. Changes will be communicated by e-mail to all invited bidders.

Issuance of RFP

Bid conference call

Technical Questions/Inquiries Due

May 8th, 2014

May 15th, 2014

May 22 nd , 2014

RFP Closes

Final Award Notification

June 6th, 2014 - 5 pm (Email Submission)

June 12th, 2014

UPON FINAL SELECTION, MCCA/MCO RESERVES THE RIGHT TO EXTEND THE REWARD

NOTIFICATION DATE IF NEEDED TO NEOGIGATE FINAL TERMS OR TUNE REQUIREMENTS.

2.3

Vendor’s Understanding of the RFP

In responding to this RFP, the vendor fully accepts the responsibility to understand the RFP in its entirety, and in detail, including making any inquiries to MCCA/MCO as necessary to gain such understanding.

MCCA/MCO reserves the right to disqualify any vendor who demonstrates less than such understanding.

Further, MCCA/MCO reserves the right to determine, at its sole discretion, whether the vendor has demonstrated such understanding. That right extends to cancellation of award if award has been made. Such disqualification and/or cancellation shall be at no fault, cost, or liability whatsoever to MCCA/MCO .

1. Rights to Reject Bid

MCO reserves the right to reject or cancel a Bid on several conditions which are not limited to the following list:

 TCO does not align within operating cost parameters (too expensive).

 Solution does not fully satisfy MCO Use Case due to architecture changes or service model changes post bid.

 Viability of solution.

 Concerns with complexity or security.

 Limited skill sets within the state for supporting the solution.

 Alignment concerns.

2.4 Good Faith Statement

All information provided by MCCA/MCO in this RFP is offered in good faith. Individual items are subject to change at any time. MCCA/MCO makes no certification that any item is without error. MCCA/MCO is not responsible or liable for any use of the information or for any claims asserted therefrom.

2.5 Bid Restrictions

 Any vendor subject to usage restrictions by the Department of Defense or State Department are prohibited from bidding.

 Vendors that do not have a physical service presence within the state of Michigan are prohibited from bidding. Managed services can be provided by resources outside the state but not outside the country.

 Co-location and hosting space must be provide within the state of Michigan.

2.6 Bid Response Instructions

 Complete the Items Highlighted in Yellow within this Word Document. Save your Word Document as a

PDF and email to rmelton@mcca.org.

6

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

 Complete the Bid-Response Spreadsheet for each proposed solution. Email the updated spreadsheet and a

PDF version to rmelton@mcca.org. Please send as an unlocked spreadsheet for edits.

2.7 Communication

Verbal communication shall not be effective unless formally confirmed in writing by a specified procurement official in charge of managing this RFP process. In no case shall verbal communication govern over written communication.

2.7.1 Vendors’ Inquiries.

Applicable terms and conditions herein shall govern communications and inquiries between MCCA/MCO and vendors as they relate to this RFP. Inquiries, questions, and requests for clarification related to this RFP are to be directed in writing to:

Michigan Community Colleges Association

222 North Chestnut Street,

Lansing, Michigan 48933-1000

Phone: (517) 372-4350

Fax: (517) 372-0905

Email: rmelton@mcca.org

2.7.2 Informal Communications . Inquiries for clarifications and information that will not require addenda may be submitted verbally to Randy Melton subject to the availability of time.

2.7.3 Formal Communications that are not clarifications shall include, but are not limited to:

Errors and omissions in this RFP and enhancements. Vendors shall recommend to

MCCA/MCO any discrepancies, errors, or omissions that may exist within this RFP. With respect to this RFP, vendors shall recommend to MCCA/MCO any enhancements, which might be in MCCA/MCO ’s best interests.

Inquiries about technical interpretations, which must be submitted in writing and be received prior deadline data published above. Inquiries for clarifications/information that will not require addenda may be submitted verbally to the buyer named above at any time during this process.

Addenda to this RFP.

2.7.4 Addenda.

MCCA/MCO will make a good-faith effort to provide a response to each question or request for clarification that requires addenda within two business days.

MCCA/MCO will provide limited response to any questions/requests for clarification that require addenda, if received by MCCA/MCO after the deadline date.

2.8 Bid Registration

Please register your participation intention by email: rmelton@mcca.org and specify which Bid Group you intend to submit a proposal for. You will receive a Goto Meeting Invite to the pre-bid meeting.

2.9 Proposal Submission

Proposals must be delivered by email: rmelton@mcca.org. On or prior the deadline date stated above within the schedule of events. MCCA/MCO shall not accept proposals received by fax. Vendors are to submit one electronic PDF copy of proposal marked “Original”.

7

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

2.10 Method of Award

The evaluation of each response to this RFP will be based on its demonstrated competence, compliance, format, and organization. The purpose of this RFP is to identify those suppliers that have the interest, capability, and financial strength to supply MCCA/MCO with a Hosting and Managed Services identified in the

Scope of Work.

Evaluation Criteria:

1. Features and Functionality

2. Leadership in the Market

3. Engagement methodology

4. Security: The proposed solution must clearly demonstrate that it will introduce no unacceptable business risk to the integrity, confidentiality, and availability of MCO information assets or resources.

5. Architecture: The solution must be scalable, flexible, robust, and perform well.

6. Vendor’s qualifications and references.

7. Cost and TCO

2.10.1 Selection and Notification

Vendors determined by MCCA/MCO to possess the capacity to compete for this contract will be selected to move into the negotiation phase of this process. Written notification will be sent to these vendors via –email. Those vendors not selected for the negotiation phase will not be notified.

8

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

3. Hosting Environment

The following sections provide a brief overview of the hosting environment planned for MCO. This is subject to change based upon the final architected solution.

MCO has selected a virtualization strategy utilizing VMWare as the virtual host manager for three physical servers.

Virutal Data Center (Michigan Colleges Online - Data Center Services Model)

Draft - (3-31-2014)

HA Two Power Supplies

Virtual Data Center

Dark-Data Center Management Support

Redhat Enterprise OS

 2 TB of Shared Storage raid 5 configuration

Minimum of Three years of 24/7 support Production

Critical

 Server 1 and 2 should be Virtual Clusters

VMWare Hypervisor

Data Services Backup Services Two Virutal Hosts (Web, App Services)

CPUs Min 2.3

NICS (3 x 1 GIG)

Storage: [Local 2 x 600]

OS: [ Red Hat ]

Server # 1

128 Gigs

Supports up to 30 Web Servers

CPUs [TBD]

NICS (3 x1GIG)

Storage: Local 2 x 600]

OS: [ Red Hat ]

Server # 2

128 Gigs

Supports up to 30 Web Servers

Load Balancer App Firewall

CPUs [TBD]

NICS (3x 1 GIG)

Storage: Local

400 X 2 RAID 1

OS: [ Red Hat ]

[ Windows

Enterprise ]

Server # 3

128 GIGS

MongoDB

SQL Services

Cloud

Backup

Service

9

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

3.1 Targeted Applications for Hosted Environment

Application

Layer

Data Layer

Targeted Applications for Virtual Infrastructure

(This list is subject to change and is a draft list of services)

Application Presentation Instances Memory Storage Within Scope of this RFP

CMS ColdFusion10.x based

Instance 1

Instance 2

Instance 3

Instance 4

Core

Application

Services

Enterprise

BUS

Security

Inventory System

Custom Service

DOL Services

Custom Service –

Integration Services

Data Services

TBD

MS SQL Server

Data Warehouse

MongoDB

Data warehouse

Postgre SQL

Application Firewall

Up to 4 medium VM

Instances

Multiple

Up to 60 small VM

Instances

Up to 4 small VM instances

Two

One

Two

Two

Two

One

2 Gigs

1 Gig

1 Gig

4 Gigs

< 20

Gigs per instance

No

No

No

No

No

No

No

No

2 Gigs 100

Gigs

16 Gigs

16 Gigs

16 Gigs

16 Gigs

Approx. of 25

Gigs

(SSD) per instance

No

No

No

No

No

1 Gigs Throughput No Security

Layer

OS Layer

Windows

Enterprise

Red Hat

Linux

Hypervisor VMWare

Two Instances

Three Host

Physical Servers

Three Host

Physical Servers

Yes

Yes

Yes

10

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

4.

Application Firewall and Load Balancer

4.1 Overview

MCO requires a proactive security appliance/service protects information assets against cyber-attacks and that that also provides load balancing and SSL, digital certificate services.

Requirements

Targeting 200 Megs of throughput; actually needs may be much lower. Please provide pricing for each tier of throughput. HA is NOT needed; however, 24 hour warranty replacement is required or warm failover to VM is required.

1) Load Balancer a) Affinity Management b) Failover Detection c) Alerting

2) Application Firewall a) Deep Packet Inspection support with customization for filters b) Injection detection c) Signature Based d) Throttle detection for abnormal traffic patterns e) Virus Detection (Optional) f) Alerting

3) Certification Management a) SSL management b) Cert provisioning

External Clients

Web Clients and Web Services (External sites)

(1) Load Balancer

(2) Application Firewall

(3) Cert Management

Port 80

Port 80

HTTP Web (Node.JS) (Server B)

HTTP Web (Node.JS) (Server A)

MCO Services (Assets to Protect)

Bid Instructions:

 Complete the Questionnaire below.

 Complete the Bid Response “Application Firewall/Load Balancer” worksheet.

11

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

4.2 Application Firewall/Load Balancer Questionnaire

Ref Requirements

Q1 Load Balancer Function

Please describe or provide collateral material that outlines how your solution satisfies these requirements.

Q2

Q3 a. Affinity Management b. Failover Detection c. Alerting

Application Firewall Function a. Deep Packet Inspection support with customization for filters b. Injection detection c. Signature Based d. Throttle detection for abnormal traffic patterns e. Virus Detection (Optional) f. Alerting g. Detection techniques h. Protection techniques i. Traffic processing j.

Connection handling.

k.

Honeypot Support (Optional)

Certification Management a. SSL management b. Cert provisioning

Worksheet Questionnaire

Please complete in workbook.

Application Firewall Appliance

Model

VM (Yes, No)

20 Megs

Cost

50 Megs 100 Megs 200 Megs 500 Megs

Warranty Selected

Implementation

Three Year

Maintenance

Three Year TCO

$0.00

$0.00

$0.00

$0.00

$0.00

12

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

5. Backup Solution

MCO desires a low service overhead backup solution that supports a backup to cloud archiving model. Due to the low volume of change, we are targeting a tapeless backup solution that archives to a Cloud and provide sufficient alerting and robust monitoring tools.

Backup Requirements

Estimated: 2 – 3 Terabytes

Change rate per Month: < 100 Megs

Targeted RTO from Backup Repository (Cloud Store): 4 Hours

MCO Business Continuity Plan

Application Installs and Meta Data

Disk A  Disk B

Replicated by SAN

On Premise Backup

Applicance

Recovery in secondary data center using VM

Host Services with another vendor.

Data

Destruction

Certification is required for

Student Data.

Transactional

Data is replicated to

Secondary

Storage Unit in

Real-time.

Transaction data is warehoused as needed.

MongoDB

Disk A  Disk B

Replicated by SAN

SQL Data

Disk A  Disk B

Replicated by SAN

Cloud Store

RPO < 30 seconds

RTO < 5 Minutes

Virutal Data Center (Michigan Colleges Online - Data Center Services Model)

Draft - (3-31-2014)

HA Two Power Supplies

Virtual Data Center

 Dark-Data Center Management Support

 Redhat Enterprise OS

 2 TB of Shared Storage raid 5 configuration

Minimum of Three years of 24/7 support Production

Critical

Server 1 and 2 should be Virtual Clusters

 VMWare Hypervisor

Annual VM

Recovery Validation in Secondary Center

Drive is removed after being wiped for security purposes.

Two Virutal Hosts (Web, App Services)

CPUs Min 2.3

NICS (3 x 1 GIG)

Storage: [Local 2 x 600]

OS: [ Red Hat ]

Server # 1

128 Gigs

Supports up to 30 Web Servers

CPUs [TBD]

NICS (3 x1GIG)

Storage: Local 2 x 600]

OS: [ Red Hat ]

Server # 2

128 Gigs

Supports up to 30 Web Servers

Load Balancer App Firewall

CPUs [TBD]

NICS (3x 1 GIG)

Storage: Local

400 X 2 RAID 1

OS: [ Red Hat ]

[ Windows

Enterprise ]

Data Services

Server # 3

128 GIGS

MongoDB

SQL Services

Cloud

Backup

Service

Backup Services

13

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

Bid Instructions:

 Complete the Backup Solution questionnaire

 Complete the Bid Response “Backup Solution” worksheet for pricing details.

5.1 5.1 Backup Solution Questionnaire

Ref Functions

1 Deduplication support.

2. MS SQL integrated backup support

(Optional).

3. PostgreSQL support for integrated backup. (Optional).

4. Encrypted cloud backup support.

Please explain or provide supporting documentation for how your solution supports this function.

5. VM Image backup support.

Backup/Restore in Virtual Server

Infrastructure.

6. Encrypted key management.

7. Integration with Storage Arrays.

8. Capabilities across Multiple Backup

Targets.

9. Support for Multiple Platforms

(Redhat, Windows, VMware).

10. Restore Granularity.

11. Usability/Manageability.

14

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

5.2 Backup Solution Worksheet

Please complete in workbook.

Backup Solution VM Appliance Size

Solution

Add ons

Yes No Yes No 2 TB 3 TB 5 TB 10TB Warranty Selected Implementation

Three Year

Maintenance

Three Year TCO

$0.00

$0.00

$0.00

$0.00

$0.00

$0.00

$0.00

15

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

6. Security Services / Solutions

6.1

MCO desires to review the options for following solutions for safeguarding key services and data assets:

Desired Solutions / Services

1.

Host Vulnerability Scanning – Safeguard host services by providing external vulnerability scan for known exploits.

2.

Website Malware Vulnerability Scanning - Safeguard websites from malware infections.

3.

Web and Perimeter Vulnerability Management. – Safeguard edge based services from malformed configurations and exploits.

4.

Host Policy Compliance Scanning – Safeguard host services from malformed configurations.

5.

Intrusion Prevention Solution / Intrusion Detection Solutions - Safeguard core services from DoS and other exploits.

Bid Instructions:

 Complete the questionnaire for the Intrusion Prevention Solution / Intrusion Detection Solution

 Please attach a summary of the key features for your Host Vulnerability Scanning Solution.

 Please attach a summary of the key features for your Perimeter Vulnerability Management

Solution.

 Please attach a summary of the key features for your Host Policy Compliance Management

Solution.

 Please attach a summary of the key features for Website Malware Vulnerability Scanning

Services.

 Please attach any additional options for managing security.

 Complete the Bid Response for pricing within “Security” worksheet

Worksheet Pricing Detail: Please complete in workbook.

On Premises Cost

Solution / Service Cost Per Device / IP

Cloud Based

Cost

VM

Applicance

Warranty

Period if

Applicable

Selected Item

(Completed by

MCO

Implementation

Three Year

Maintenance

Three

Year TCO

$0.00

$0.00

$0.00

$0.00

$0.00

$0.00

Intrusion Prevention Solution \ Intrusion Detection Solutions

Feature Service Response

1. Detection & Analysis

Indicate whether your solution supports the following correlation capabilities and describe your specific capability in that area:

16

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP o Signature and heuristic detection and updates. o Lossless packet analysis at wire speed. o Encrypted traffic inspection. o Advanced botnet and malware detection.

2. Prevention & Protection

Indicate whether your solution supports the following correlation capabilities and describe your specific capability in that area: o Virtual infrastructure protection o DoS/DDoS protection o Zero-Day protection o APT protection

3. Control

Indicate whether your solution supports the following forensic analysis capabilities and describe your specific capability in that area: o Traffic shaping o Pre-built compliance settings

4. Implementation &

Configuration

Describe the process by which IDPS devices/licenses for your solution are deployed. Include any tasks that must be performed on systems or devices already deployed (e.g. network configuration and third-party integration).

Describe the process by which the management devices/licenses for your solution are deployed.

17

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

Include any tasks that must be performed on systems or devices already deployed

(such as network configuration and third-party solution integration).

Describe the process by which the reporting devices/licenses for your solution are deployed.

Include any tasks that must be performed on systems or devices already deployed

(such as network configuration and third-party solution integration).

Describe the process by which the command console(s) for your solution(s) is initially configured. Include the creation of administrative accounts, key databases, audit and reporting functions, policy creation, etc.

5. On-going Operations

Describe the process by which the initial configuration of your solution is performed.

Include the implementation of any signature database(s), the creation of any rules, and the configuration of any and all settings required for optimal operations.

Describe the process by which the initial configuration of your solution is updated and maintained.

Include the update of any signature database(s), the update and/or modification of any rules, etc.

18

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

Describe the processes by which the command console can be backed up. Address whether the back-up process in any way compromises operations and/or security.

6. Alarming & Alerting

Describe the process by which the command console can be configured to issue alarms and alerts.

Detail the different alarming/alerting mechanisms that can be configured and the manner in which those alarming/alerting mechanisms are configured.

Indicate whether your solution can integrate with third-party ticketing and workflow systems, and where integration is possible, indicate with which platforms your solution integrates and describe the integration process.

7. Auditing & Reporting o Describe the auditing and reporting capabilities for captured logs. Address whether standard report templates exist, whether they must be constructed, or whether the system supports ad hoc reporting only. Where standard templates exist, indicate what types of reports they represent and in all cases indicate what types of information can be presented in reports. Specify if specific compliances mandates can be reported against.

19

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP o Indicate whether your solution can integrate with third-party reporting solutions, and where integration is possible. Indicate with which platforms your solution integrates and describe the integration process.

8. Customer support o Do you provide toll-free customer support 24 hours a day, seven days a week?

Please specify all paid and unpaid support options.

Implementation support o Do you provide complete turnkey, onsite implementation, and project management support?

Please specify which support will be included and which is provided for an additional fee.

Also specify whether support is available direct from the vendor or provided through a partner.

Training o Describe the type of training provided to administrators.

Specify whether training is available direct from the vendor or provided through a partner.

Software updates o Do you provide future software releases and updates to all applications as part of regular software maintenance fees?

20

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

7.

Vendor Qualifications & References

All vendors must provide the following information in order for their proposal to be considered:

1. A brief outline of the vendor company and services offered, including: a. Full legal name of the company. b. Year business was established.

2. Contact information for three references (if possible) from projects similar in size, application, and scope, and a brief description of their implementation.

Relevant Client List:

Reference 1

Organization Name

Industry

Contact Name and Title

Phone Number

Email Address

Relevant Client List:

Reference 2

Organization Name

Industry

Contact Name and Title

Phone Number

Email Address

Relevant Client List:

Reference 3

Organization Name

Industry

Contact Name and Title

Phone Number

Email Address

21

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

7.1 Engagement Methodology

Please describe your engagement methodology for how you manage customer relationships:

Ref Service

1. Account Relationship Management

2. Project management Practices

3. Service Level Agreements

Please explain your practices in this area

22

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

DEBARRED VENDORS AND EXCLUDED PARTIES SCREENING

(Fill out completely and return with RFP)

CERTIFICATE OF COMPLIANCE

I certify, buy submission of this offer, that neither __________________________________,

( name of vendor, independent contractor, or offering party ) nor any of its principals, or sub-contractors that are a part of this offer is presently debarred, suspended, proposed for disbarment, declared ineligible, or voluntarily excluded from participation in Federal assistance programs or activities, and neither ____________________________________, nor any of its principals or

( name of vendor, independent contractor, or offering party ) sub-contractors, is listed on the General Services Administration’s list of Parties Excluded from Federal Programs and the HHS/OIG List of Excluded Individuals/Entities (available through the internet at: www.sam.gov

).

Where the party is unable to certify to any of the statements in this certification, such party shall attach an explanation to this offer.

Where a party fails to submit and complete this certification, such party’s offer shall be determined to be an incomplete submission.

23

Michigan Colleges Online

MCCA – Michigan Colleges Online – ApplicationFirewall/Load Balancer, Backup and Security RFP

7.2 9.1 Vendor Certification

This certification attests to the vendor’s awareness and agreement to the content of this RFP and all accompanying calendar schedules and provisions contained herein.

The vendor must ensure that the following certificate is duly completed and correctly executed by an authorized officer of your company.

This proposal is submitted in response to Request for Proposal for Collaboration Solution(s) issued by MCCA/MCO

.

The undersigned, who is a duly authorized officer, hereby certifies that:

( Vendor Name) agrees to be bound by the content of this proposal and agrees to comply with the terms, conditions, and provisions of the referenced RFP and any addenda thereto in the event of an award. Exceptions are to be noted as stated in the RFP. The proposal shall remain in effect for a period of [ Please Define ] calendar days as of the Due Date of the RFP.

The undersigned further certify that their firm ( check one):

IS

IS NOT currently debarred, suspended, or proposed for debarment by any federal entity. The undersigned agree to notify

MCCA/MCO of any change in this status, should one occur, until such time as an award has been made under this procurement action.

Person ( s) authorized to negotiate on behalf of this firm for the purposes of this RFP are:

Name: Title:

Signature:

Name:

Signature:

Signature of Authorized Officer:

Name:

Date:

Title:

Date:

Title:

Date: Signature:

_____________________________________________________

24

Michigan Colleges Online

Download