70 -- SOURCES SOUGHT/NOTICE OF INTENT TO PURCHASE SOCKS5 SOFTWARE PRODUCT The Social Security Administration (SSA) is attempting to identify responsible vendors that can provide and support SOCKS5 software that is a high-speed proxy server used for easy development, management and implementation of Internet/Intranet security policies. This software must also be Virtual Private Networking (VPN) ready to enable remote employees and business partners to privately communicate, share applications and securely exchange information over the Internet. This software should provide secure connections automatically, be infrastructure- independent, and shall be directly compatible with SSA's current Secure Computing's SmartFilter software and filtering list and UNIX/AIX operating system. This software must be compatible with Windows NT and various UNIX platforms. The SOCKS5 software will be installed on UNIX/AIX equipment located at SSA's National Computer Center, Baltimore, Maryland. SSA has only been able to identify one source capable of satisfying its needs. Therefore, if no other responses are received, or if responses received are unable to satisfy SSA's mandatory requirements as detailed below, SSA shall issue a sole source award under FAR PART 13.5 Simplified Acquisition-Test Program for Certain Commercial Items to Aventail Corporation for the current and future purchase and support of their SOCKS5 Internet Policy Manager (IPM) software as required by the agency. THE SOFTWARE MUST, AT A MINIMUM: -support multiple operating systems; include powerful security features such as sophisticated access controls, datastream filtering, support for multiple authentication methods and intelligent auditing capabilities; provide multi-threaded support for 80,000 users; proxy all traffic through any firewall and create a secure connection by building user- specific proxies at the session level; eliminate any direct connections to the corporate network; provide a high level of security and performance; enable interoperability with all firewall products; be compatible with Windows NT and all major platforms of UNIX including Solaris, AIX, HP/UX, Digital UNIX, BSD/OS, SCO UNIX and Linux; be VPN-ready; support assignment of private internal network Internet Protocol (IP) addresses; be compatible with current Internet/Intranet specification for Classless Internet Domain Routing (CIDR); hide internal IP addresses and host names from external connections; block specific file types that could demand too much bandwidth or infect the network with a virus; be compatible with the existing Secure Computing SmartFilter web filtering software product and the list of blocked sites to prevent users from accessing specific Web sites or IP addresses that may interfere with employee productivity; include a pre-defined directory of Web sites to help with access restrictions; control access and transfer of the following packet traffic for all well known ports such as: inbound and outbound Telnet, FTP, SMTP, NNTP, HTTP, Gopher, SQL and WAIS; include the ability to create custom filters for specific corporate needs; include the industry's broadest support for authentication methods; allow access parameters to be set for individual users, groups and networks according to: source, destination, user/group identity, application and/or service, authentication method and time of day; include a real-time traffic monitor that displays inbound and outbound traffic for all well known ports such as: FTP, HTTP, Telnet, SMTP, NNTP, Gopher and Custom ports such as Real Audio and SQL; be in compliance with the Internet Engineering Task Force (IETF) approved SOCKS5 security protocol; be interoperable with any SOCKS4 or SOCKS5 server; allow any TCP and most UDP client applications to securely traverse any SOCKS4 or SOCKS5-based server without modifications to the desktop; require no modifications to existing Windows applications, drivers or transports; seamlessly route connections from Windows applications to external networks through any SOCKS server; transparently negotiate authentication and encryption; provide easy network administration to include: simple network-based installation and configuration, a tracing utility for troubleshooting, online documentation and help, full install and uninstall on all Windows platforms, and allow administrators to create customized client installations for wide-spread network distribution; be compatible with Windows NT domain user rights and Windows NT authentication methods; allow the exchange of confidential and critical date over a secure and private channel; be compatible with popular firewalls and servers; provide secure connection automatically; be Year 2000 compliant; and include full documentation and technical support. Responsible organizations possessing the requisite expertise and resources are invited to submit information concerning their pricing, capabilities, experience, and other pertinent data (including GSA contract information) . Any literature, or information submitted as a response to this notice, must contain enough information attesting to the capability of a product offered to meet SSA's requirements. RESPONSES TO THIS ANNOUNCEMENT ARE DUE BY COB SEPTEMBER 9, 1998 and should be submitted to the address noted in the beginning of this announcement. When responding to this announcement, respondents should refer to SOCKS5 Software. No faxes are permitted, and the Government does not intend to pay for any information provided. WEB: Download Solicitation when/if available, http://www.ssa.gov/oag. E-MAIL: Contracting Officer, SSA/OAG, JOANNE.TARR@ssa.gov. Posted 08/20/98 (D-SN239930).

Loren Data Corp. http://www.ld.com (SYN# 0654 19980824\SP-0004.MSC)