Cyber Risk Analytics - RedSeal (VA-25-00011826)

Page 14 of 33 PRODUCT REQUIREMENTS The Department of Veterans Affairs (VA), Office of Information and Technology (OIT), Development, Security, Operations, Infrastructure Operations (IO), Infrastructure Cybersecurity Management (ICSM) has a requirement for a cloud based brand name RedSeal solution to identify, assess, prioritize and remediate risks across the network through network mapping, Common Vulnerability Scoring System (CVSS) risk and exposure scoring with integrations with mainstream cyber, visibility, and for dual-based network.

The solution shall provide configuration data from VA network devices and as well as add vulnerability data, providing a holistic view of threat vectors throughout the enterprise. The automated, flexible, cybersecurity risk scoring method, system administrators, engineering staff and cybersecurity staff can prioritize efforts on the tasks that have the greatest impact on the VA network, system and application environment.

The solution will analyze configurations of each of the network devices to find deviations of approved baseline configuration requirements in conjunction with identifying high priority risk and exposure analytics. The solution shall have a customer facing reporting capability to allow for customized report generation with presentation graphics capabilities.

The Contractor shall provide 24x/7x365 engineering support, hardware and software support, patches and defect support including maintenance coverage to repair or replace systems equipment components that restores full operation and accessibility. The Period of Performance (PoP) shall be a 12-month base period and one 12-month option period. The Contractor shall provide the following:

Description Part no. Quantity Brand Name RedSeal Platform: Device Annual Subscription for layer 3 devices. Includes Premium Support.

P/N: NVA-DEV-1YR-SUB-ENT 1 Brand Name Annual Subscription for all available Security Technical Implementation Guide (STIG) content P/N: NVA-STIG-SUB-ENT 1 Brand Name Device annual subscription for layer 2 devices Includes Incident Response. Includes Premium support.

P/N: NVA-IRL2-1YR-SUB-ENT 1 Brand Name Annual subscription for Software Defined Network (SDN)

Includes Premium Support P/N: NVA-SDN-SUB-ENT 1 Brand Name 1 Year HARDWARE SUPPORT & MAINTENANCE for the RedSeal G5c Appliance. 3-day Return Merchandise Authorization (RMA).

P/N: SM-RS-G5c 5 Brand Name 12 months FTE Full Time Senior Engineer on remote delivery or on customer site with Background Investigation (BI).

P/N: PS-FTE-12MOS-TS 2 KEY PERSONNEL Full Time Senior Engineer Collection and analytics reporting for the VA network and hardware and software maintenance. Provide product updates Provide security patches Provide operating system upgrades Provide replacement parts