SOLICITATION NOTICE
D -- Multi-Carrier Entry Point II
- Notice Date
- 8/11/2009
- Notice Type
- Justification and Approval (J&A)
- NAICS
- 511210
— Software Publishers
- Contracting Office
- Defense Information Systems Agency, Procurement Directorate, DITCO-Scott, 2300 East Dr., Building 3600, Scott AFB, Illinois, 62225-5406, United States
- ZIP Code
- 62225-5406
- Archive Date
- 8/28/2009
- Point of Contact
- Deborah A Benscoter, Phone: 618-229-9298, Cheryl L Wilsing, Phone: 618-229-9145
- E-Mail Address
-
deborah.benscoter@disa.mil, cheryl.wilsing@disa.mil
(deborah.benscoter@disa.mil, cheryl.wilsing@disa.mil)
- Small Business Set-Aside
- N/A
- Award Number
- HC1013-09-C-2002
- Award Date
- 7/23/2009
- Description
- Network Services (NS) Procurement Request Number: CMTNS409R015 JUSTIFICATION AND APPROVAL TO PROCURE USING OTHER THAN FULL AND OPEN COMPETITION Upon the basis of the following justification, I, as Head Contracting Activity (HCA), hereby approve the use of other than full and open competition for the proposed contractual action pursuant to the authority of 10 U.S.C. 2304 (c)(1). JUSTIFICATION 1. Agency and Contracting Activity The requiring activity for this procurement is: Defense Information Systems Agency (DISA) Network Services Directorate, Voice Services Division, NS4 Arlington, VA 22204-4502 The contracting activity is: Defense Information Systems Agency Defense Information Technology Contracting Organization, PL8223 Scott Air Force Base, IL 62225-5406 2. Nature/Description of Action(s) The purpose of this contract action is to obtain approval to issue a firm fixed price, sole source contract to Apriva ISS LLC, REDACTED, a Wholly Owned Subsidiary of APPSware Wireless, LLC dba Apriva to build and operate an MCEP (Multi Carrier Entry Point), MCEP-2, which will reside at the DISA DECC facility, REDACTED and to provide follow-on operational support services for MCEP-1 via a commercial lease with Apriva. This consists of the necessary components and services required to produce an MCEP for the support of the Secure Mobile Environment Portable Electronic Device (SME-PED). PARAGRAPH REDACTED The Period of Performance for the MCEP effort will be five years consisting of a one year base period with 4 one year option periods. This contract will be firm fixed-price. The base period includes 2 months for the Initial Build-Out of the MCEP-2 with 10 months of operational support services and 12 months of operational support services for MCEP-1. The base period is estimated at $4,015,760.00, which includes the initial build out cost, equipment leases and operational support services. Under the capacity engineering portion of the task, the contractor would analyze the impact of growth in the user community and propose additional equipment/software to enable the MCEPs to handle an increase. The total estimated Life Cycle Cost for DISA MCEP-2 (including operational support for MCEP-1) is $20,871,894.22. 3. Description of Supplies/Services DISA will lease all of the required hardware equipment for MCEP-2 from Apriva. Apriva will configure and support all network systems and host the systems in the DISA DECC facility. MCEP-2 will be locally redundant with onsite spares and the ability to expand in place by adding associated equipment. MCEP-2 will be built out and configured to provide failover/backup capability for MCEP-1. Apriva will provide ongoing support of all the required MCEP-1 network systems and host the systems REDACTED. The MCEP-1 will be locally redundant with on-site spares and the ability to expand in place by adding associated equipment. The MCEP-1 and MCEP-2 support the operational deployment of the SME-PED in a complex multi-network, multi-application environment. The MCEPs provide a common, high quality interface to the required wireless carriers, provide both Type 1 and non-Type 1 S/MIME messages traffic routing, which provides specialized HAIPE fixed IP end encapsulation in support of widest range of carrier Network Address Translation (NAT) traversals/roaming scenarios and provides centralized active intrusion protection. It also supports customer-authorized SME-PED fire walling to comply with the next edition of DoDD 8100.2. The MCEPs provide network component monitoring, support, traffic/trend reports, monitoring interfaces to DISA, provisioning, and problem resolution facilities. A thorough review of commercial off-the-shelf (COTS) Cisco network appliances, currently installed High Assurance Internet Protocol Encryptor (HAIPE) boxes, coupled with the fact that wireless carriers randomly changed PDA IP addresses, concluded that Type 1 push email was not possible without some proprietary network components. General Dynamics and L3 Communications, the two providers of the SME-PED, found that Type 1 push email was not possible with COTS network systems. Apriva's proprietary AprivaTalk middleware offered a well tested solution. 4. Identification of Statutory Authority The statutory authority that will be used for this contract action is 10 U.S.C. 2304(c) (1) - Only one responsible source and no other supplies or services will satisfy agency requirements - FAR 6.302-1 (a) (2) (iii). 5. Demonstration of Contractor's Unique Qualifications REDACTED The SME-PED is a WinCE based handheld device that allows its users to send and receive wireless email and data to the Secret level and phone calls to the Top Secret level via CDMA or GSM commercial carrier systems. REDACTED has two separate contracts in place, one with General Dynamics and the other with L3 Communications, to develop the SME-PED devices. In order to successfully deliver email and data from the user's enterprise to the device and vice versa, the SME-PED relies upon a commercial infrastructure and associated handheld software that is the subject of this justification. This commercial infrastructure is referred to as the Multi Carrier Entry Point (MCEP). As its name suggests, the MCEP interfaces the user's enterprise to the commercial wireless carriers providing support to the SME-PED. This very complicated system ensures that IP packets destined to and from the SME-PED device are compatible with the HAIPE Inline Network Encryptors (INEs) deployed to protect SIPRnet connected enterprises. Without the MCEP and Apriva's proprietary software, packets to and from the SME-PED could never be delivered. This process is called Network Address Translation-Traversal or NAT-T. On 21 September 2007, Apriva was awarded a contract and successfully built out and made operational an MCEP to traverse the data packets from the SME-PED to the user enclaves. In-depth coordination REDACTED personnel for system and device testing allowed the MCEP-1 to receive an Authority to Operate (ATO) from the Defense Security Accreditation Working Group (DSAWG) and a certificate of security accreditation from the DISA Designated Approval Authority (DAA). MCEP-1 is the centerpiece for providing the mission critical transport layer for the SME-PED email/data traffic. To fulfill the failover requirement in the event that MCEP-1 is knocked out of action by forces of nature, malicious attack, or other reasons, DISA planned for the implementation of MCEP-2. MCEP-2 will be located at the DISA DECC facility REDACTED, with independent connectivity to the network carriers as well as the unclassified and classified data systems. Apriva was selected by both General Dynamics and L3 Communications to provide DoDD 8100.2 PKI-enabled email messaging technology. Apriva was able to demonstrate the unique capability to provide Type 1 and Type 4 push email capability without having to upgrade customer enclave HAIPE INEs. This capability is provided in the MCEP-extended AprivaTalk middleware using unique IP/UDP encapsulation and last-known-carrier-IP marshalling and synchronization between redundant MCEP components. This middleware software was specifically developed by Apriva to allow for full functionality of the SME-PED, which allows the device to communicate with the user's network without the need for any changes to their existing network equipment. AprivaTalk middleware is proprietary and was adapted specifically for the SME-PED device. The associated handheld software chosen by the SME-PED developers is critical in supplying the path to and from the SME-PED and is proprietary to Apriva. The associated software, called SENSA, is an email application that enables the communications on the handheld. This software will also be installed on a designated server at the user enclave, which will work in concert with AprivaTalk, allowing for the data to pass from the device, through the MCEP to the user site. Both AprivaTalk and SENSA software are proprietary to Apriva and there is no other software on the market that is compatible or compliant with the SME-PED. This application was selected over all other wireless email applications due to SENSA's compliance with DoD Directive 8100.2, "Use of Commercial Wireless Devices, Services, and Technologies in the Department of Defense (DoD) Global Information Grid (GIG)," dated 14 April 2004. Additionally, based on experience under the existing contract, Apriva proved it can deliver an immediate, functional MCEP product within a 30 - 60 day timeframe as evidence by the previously delivered MCEP, whereas any other potential provider would take approximately 2 - 4 years to design, develop and test a viable system. 6. FEDBIZOPPS Announcement/Potential Sources Upon approval of this acquisition package, FEDBIZOPPS notices will be published as required by FAR Subpart 5.2. The approval authority will be advised of any responses to the synopsis. 7. Determination of Fair and Reasonable Cost The Contracting Officer will determine that the estimated cost for this acquisition is fair and reasonable, pursuant to FAR Part 13.106-3(a)(2)(i) and (ii), using market research and a comparison of the estimated cost with cost that were found reasonable for similar services. Estimated costs are based on historical data from the existing contract with Apriva. Further, an Independent Government Cost Estimate (IGCE) was submitted to the contracting officer for comparison in determining the proposed prices fair and reasonable for defined core skills identified under the GSA labor schedules. GSA costing is already based on a competitive analysis. 8. Description of Market Research Market research was conducted over the summer 2008 by a project subject matter expert. The research of potential sources used was: CCR Repository, Small Business Administration and Google. The results of the research are shown in table 1, page 5. As part of DISA market research efforts to fulfill the MCEP requirements, the Program Management Office explored the option of using managed services, which resulted in AT&T presenting DISA with a proposal to meet the MCEP requirements under the GSA NETWORX contract. REDACTED. The NETWORX option still required Aprivia's classified email technology. Because Apriva's Sensa technology, which is proprietary, is the only classified email technology that meets the MCEP requirement, contracting with AT&T would only serve to add a layer of cost to the service. Additionally, as AT&T is one of the wireless providers, there is a potential for a conflict of interest if AT&T were to provide the service; therefore, a decision was made to select Apriva. Apriva is currently providing a production MCEP for DISA to support deployed SME-PED device within the DoD. Apriva also continues to provide an operational Proof of Concept MCEP for the REDACTED SME-PED devices to support ongoing testing. Additionally Apriva was exclusively selected by both SME-PED developers, General Dynamics and L3, to provide the wireless email application and associated MCEP interface software for the SME-PED, which is the associated proprietary software, called Sensa and AprivaTalk. Apriva was selected by these vendors as they are considered the Subject Matter Experts in delivery of DoDD 8100.2 compliant, FIPS 140-2 validated, PKE enabled wireless mobile email on a portable electronic device. Apriva is considered by the nation's leading credit clearing house to be the foremost provider of wireless point of sale transaction processing through their MCEP REDACTED. Apriva has a 5 year, 99.5+% uptime records, and its MCEP is certified by VISA through its Cardholder Information Security Program (CISP). Apriva has partnerships with virtually all Point of Sale terminal vendors of consequence and its middleware (AprivaTalk TM ) is ported to most operating system platforms used by these vendors. Apriva's Secure Mobile Email System (Sensa TM ) is DoD Joint Interoperability Test Command (JITC) validated and has passed all Army G6 Information Assurance (IA) vulnerability tests at Army ATID. The MCEP supports the operational deployment of the SME-PED in a complex multi-network, multi-application environment. The MCEP provides a common, high quality interface to the required wireless carriers, provides both Type 1 and non-Type 1 S/MIME messages traffic routing which provides specialized HAIPE fixed IP end encapsulation in support of the widest range of carrier NAT traversals/roaming scenarios and provides centralized active intrusion protection. It also supports customer-authorized PED fire walling to comply with the next edition of DoDD 8100.2. The MCEP provides network component monitoring, support, traffic/trend reports, monitoring interfaces to DISA, provisioning and problem resolution facilities. Table 1 represents some of the current key requirements considered for selection of an MCEP/Software application provider. Requirement Apriva Research in Motion Good Technologies Provide 8100.2 compliant wireless email application Yes No Yes Provide PKE enabled wireless email application Yes Yes Yes Provide FIPS 140-2 Validated email applications Yes Yes Yes Provide Common Access Card interface for PKE applications Yes Yes Yes Provide soft token interface for PKE email application Yes Yes Yes Products incorporate HAIPE and Nat-t for MCEP functionality Yes No No Provides S/MIME email platform for Type 1 and Non Type 1 for both SME prime contractors Yes No No Can easily accommodate SME email provisioning Yes No No Ability to easily transfer or duplicate MCEP to a DISA Data Center Yes No No Small Business consideration Yes No No Army TWED List Validated Yes Yes No Table 1 9. Any Other Facts Supporting the use of Other than Full and Open Competition Apriva delivered source code to General Dynmics and L3 Communications that works in concert with the Apriva Multi-Protocol Routers in the MCEPs to support improved NAT traversals/roaming and support fixed IP endpoints as viewed by the HAIPE INEs. Without having the proprietary software, Sensa and AprivaTalk, no other corporation will be able to provide the service for the MCEPs. The System supports the mission capabilities described by the Defense Information Systems Network (DISN) Mission Needs Statement (MNS) dated 30 March 1995. The DISN MNS cites the following requirements in the C4I and Space-based Systems section of the Defense Planning Guidance (DPG) FY 1996-2002: •· "Integrated connectivity to all theater and tactical elements through modernized, jam-resistant telecommunications network support." •· "Joint and combined interoperability in all mission areas to facilitate JTF/CTF operations." •· "Improved systems to integrate strategic, theater, and tactical intelligence with joint/combined forces." •· "Intelligence systems that are fully integrated with C4 Systems." The DISN also supports the critical system capabilities identified in the DISN Capstone Requirements Document (CRD) validated on 15 April 1996, as well as the GIG CRD dated 30 August 2001. PARAGRAPH REDACTED 10. Listing of Interested Sources Not applicable. 11. Actions Taken to Remove Barriers to Competition In future acquisitions, the government will consider any source that has received Authority to Operate (ATO) by the Defense Security Accreditation Working Group (DSAWG) and given a certificate of security accreditation by the DISA Designated Approval Authority (DAA). 12. Reference to the Approved Acquisition Plan (AP)/Program Plan (PP) An Acquisition Plan is not required. Ref DFARS Subpart 207.103(d) (i) and DARS 7.9002. <h4> TECHNICAL AND REQUIRMENTS CERTIFICATION (FAR 6.303-1(b), DFARS 206.303-1, and DARS 6.303-1(b)). </h4> I certify that the facts and representations under my cognizance which are included in this justification and which form the basis for this justification are complete and accurate. CONTRACTING OFFICER CERTIFICATION (FAR 6.303-1(a), 6.303-2(a) (12)) I certify that this justification is accurate and complete to the best of my knowledge and belief. Signature: ______________________ Date: __________________ DEBORAH BENSCOTER Contracting Officer, PL8223 618-229-9298 APPROVED BY: (FAR 6.304 and DFAR 206.304) Head Contracting Activity (HCA) <h4> ALL QUESTIONS REGARDING THIS J&A ARE TO BE REFERRED TO: </h4> DEBORAH BENSCOTER Contracting Officer, PL8223 618-229-9298
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/notices/bbdbf695ed366c8e52a5a74d837f32fc)
- Place of Performance
- Address: Various, United States
- Record
- SN01907485-W 20090813/090812001121-bbdbf695ed366c8e52a5a74d837f32fc (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |