Addendum to RFP for Supply, Installation and Maintenance of Server, Storage and Virtualization Solution

Addendum to RFP for Supply, Installation and Maintenance of Server, Storage and Virtualization Solution Ref No.: HO/DIT/Server, Storage and Virtualization /2015-16/01 Date: 13.04.2015 Addendum to RFP for Supply, Installation and Maintenance of Servers, Storage and Virtualization Solution Allahabad Bank Ref No.:HO/DIT/SERVER, STORAGE & VIRTUALIZATION/2015-16/01 Dated: 13.04.2015 Addendum Date: 07 th August, 2015 Page 1 of 3

Addendum to RFP for Supply, Installation and Maintenance of Server, Storage and Virtualization Solution Ref No.: HO/DIT/Server, Storage and Virtualization /2015-16/01 Date: 13.04.2015 Introduction The Bank has floated the Tender Ref No. HO/DIT/Server, Storage & Virtualization/2015-16/01 Dated: 13.04.2015 for Supply, Installation and Maintenance of Server, Storage and Virtualization Solution in the Bank. Pre Bid Queries Clarifications: As per the terms of the RFP document, a pre bid meeting was held on 09 th 2015 attended by the bidder s representatives. July, As an outcome of the clarifications sought by the bidders at the pre-bid meeting and the queries received from the bidders by e-mail, this addendum dated 07.08.2015 to the RFP document is being issued herewith. The Addendum covers clarifications to the queries raised by the bidders, and other additional information, which the Bank deems fit to be furnished to the bidders. Bidder should submit a detailed masked commercials along with technical bids, which must include all the line items of bill of material with detailed configurations, quantity etc. All other terms and conditions of the Tender document remain unchanged. Any deviations will not be entertained with respect to the legal, terms & conditions of the RFP. Please treat this Addendum as an integral part of the Tender document issued. No further queries pertaining to this Addendum will be entertained. Chief Manager (IT) Allahabad Bank DIT-Head Office Page 2 of 3

Addendum to RFP for Supply, Installation and Maintenance of Server, Storage and Virtualization Solution Ref No.: HO/DIT/Server, Storage and Virtualization /2015-16/01 Date: 13.04.2015 Pre Bid Queries Clarifications: 1. Timeline for P2V migration of all applications should not be more than 14 weeks. Procurement of hardware and planning of migration are independent activities, so it should carry out parallel and not incur additional time. 2. The Schedule of RFP is amended as under: Last Date and time for sale of RFP 24 th August 2015 17:00 Hours IST Last date and time of submission of 25 th August 2015 15:30 Hours IST Bid(Technical & Commercial) Date and time of opening of Technical Bids 25 th August 2015 16:30 Hours IST Date and time of opening/downloading of Commercial Bids Will be intimated to the qualified bidders in due course. 3. Other Clarifications: Any payment related, legal, contractual, obligation, liability, terms and condition or related concerns by any bidder are regarded as "RFP Requirement Stands and any deviations in these areas will not be entertained. Other clarifications/queries/clauses raised by the bidders are amended/ clarified in the following table. Apart from these queries no other changes are done in the RFP. Responses towards all other queries /clarifications/clauses bidders may be treated as RFP Requirement Stands raised by the ***End of the Document*** Page 3 of 3

1 Addendum dated Clause:10.2.1.14 Page 4 Should co-exist with the current environment as there would be some applications on nonvirtualized environment interacting with applications in virtualized environment Please detail 'current environment' and 'some applications' 2 Addendum dated Page 7 General Queries What are the 'existing monitoring and ticketing solutions available at Bank' Clause:10.6.15 & 10.7.4 Current environment means existing setup which are not getting altered or affected during migration. * some of the applications could be still with non-virtualization environment post migration; those applications which are hosted in non end of support servers. Bank is being used Tivoli* for monitoring and CCM.net is being currently used for ticketing. 3 Addendum dated Clause:10.7.50 Page 10 Solution should be integrated to existing ITIL Service Support Areas functions including but not restricted to Event Management, Incident Management, Request fulfillment, Problem Management, Access Management List of 'existing ITIL Service Support' tools required Bank is being currently used Tivoli* for monitoring and Bidder is expected to factor integration with existing Tivoli component. Pl refer RFP clause 2.4.28 & 2.4.29 for more details. 4 Addendum dated Clause:10.7.59 Page 10 5 RFP Page 2, Page 3 of Schedule A- Bill of Material Solution should be able to extend (through emails/hyperlink/sms) the existing helpdesk of the Bank for Call Log and escalation maintenance. Hardware / Software / Licenses: Backup server (1 rack mount server and adequately factored in a VM as redundant server of primary backup server) Which are 'existing helpdesk of the Bank for Call Log and escalation maintenance' under consideration? Backup server need to have Tape Library access where as Tape Library can't be accessible from any VM running on Intel platform. Hence we need to have physical server even for failover, Pl suggest do we need to propose backup server in redundant mode? CCM.net is existing application which is currently being used for helpdesk Yes; Bidder can propose a pair of backup servers in DC and DR 6 RFP RFP Page 15, point 2.4.48 7 RFP RFP Page 15, point 2.4.48 8 RFP RFP Page 15, point 2.4.48 General Queries What is the Operating system on clients? Microsoft Windows General Queries Do the symantec management console configured and hardened? It is expected to be as it is in running condition, if the successful Bidder finds any flaws or challenges during migration or implementation Bidder has to take the ownership and responsibility to fix the issue General Queries Is the console server configured to push the new licenses? It is expected to be as it is in running condition, if the successful Bidder finds any flaw or challenge during migration or implementation Bidder has to take the ownership and responsibility to fix the issue

9 RFP RFP Page 15, point 2.4.48 General Queries need to confirm whether Bank is looking for any upgradation on the sysmantec endpoint ver 12.1 to latest. Version upgradation and updates are continuous process and Bidder is expected to factor for the necessay upgradation and updates during the contract period. 10 RFP RFP Page 104, note 2 General Queries As per our understanding, the OS Licenses will be provided by the Bank. Please confirm whether the understanding is correct. Bidder is expected to use the existing Licenses available with the bank. If solution sized and provided by the bidder requires upgradation of Licenses, the same has to be factored and provided by the bidder at no additional cost to the Bank. 11 RFP RFP Page 56 point 3.34 General Queries Will the servers which won't be bought back require monitoring? Yes, Bidder is expected to factor component for monitoring of such servers 12 RFP RFP page 11, point 2.4.23 General Queries Would Bank like to continue with the Old Tivoli Hardware Setup or go for new Hardware Setup. 13 RFP 11 There will be separate virtual machines for Is bidder required to provide firewall and IPS? Clause:2.4.12 Web Server, Application Server, and Database Server etc. All will be in different logical zones separated through firewall to communicate to each other. Accordingly the connectivity should be established for making them operational. In no case communication will be permitted without Firewall and/or IPS. Bidder has to ensure the communication in the desired way and all the required hardware, software etc, if required will be provided by bidder only. Bidder is expected to consider Tivoli servers also for P2V migration Bidder needs to use Bank's existing firewall / IPS; however if bidder feels necessary then they may keep provision for virtual firewall / IPS as part of sizing. 14 Addendum dated 30 /scope considerations 3 2 Bidder needs to adequately factor 10G ports as required for the implementation of the project for bank s core router and core switches What is the model of Core Router & Core Switch, also what is the EOL & EOS date for Core Router & Switch? Core Router: CISCO ASR1006 Core Switch: CISCO WS-C4510R+E. EOL/EOS dates are not yet published by OEM. Bidder needs to factor the interface and compatible line cards for the router and switch as per their proposition (like SFP and / or SFP+ and / or GBIC) 15 Addendum dated 30 / Clause:10.6.3 16 Addendum dated 30 Clause:10.6.4 6 Solution should be able to provide existing Host Firewall Protection 6 Solution must offer ability to utilize existing Intrusion Detection System / Intrusion Protection System Please clarify on the current Host firewall protection used by bank What is the EOL & EOS date for existing IDS & IPS. Also what is the priod of licences procured for existing IPS & IPS? Symantec Perimeter IPS: Cisco Sourcefire Internal IPS: IBM XGS. EOL & EOS dates are not yet declared.

17 Addendum dated: 30 Clause:10.1.1 3 On-demand Self-service: Applications should have self provision computing capabilities. This shall also provide Automation and Orchestration, Capacity Management, Life Cycle Management and Catalogue and directory Maintenance. Clarity from Bank is required related to Directory Maintenance. It is Active Directory in case of Microsoft OS and LDAP in case of UNIX / LINUX OS. Bank is currently connected to all domain users through Microsoft Active Directory. 18 RFP Clause:2.4.28 13 The Bank is having Tivoli EMS solution deployed for management and monitoring of storage and backup capabilities (TBSM) for it s DC and DRC environment. The Bidder needs to adequately factor additional EMS / Storage / Backup tool licenses and integration of such licenses with proposed Virtualization Management, Monitoring and Audit tool to ensure direct extraction of SLA measurement report from single window EMS platform., The bidder also needs to adequately plan the capacity of EMS / Storage and Backup Mgmt. hardware and propose the upgradation and re-sizing of EMS / Storage / Backup hardware (if any). There are some physical servers(qty=43) which Bank have retained with them.(these are not included in the server Buyback list.) How will the Backup and monitoring of these servers happen? Bidder is required to provision for such backup of all servers which are still in support. 19 Addendum dated 30 Clause:10.1.2 20 Addendum dated 30 Clause:10.2.1.11 21 Addendum dated 30 Clause:10.3.13 22 Addendum dated 30 /10.3.14 3 Resource Pooling: Computing, storage and network resources are shared to serve multiple applications with location independence and are discoverable over IP with minimum latency. Server, Storage and Network Virtualization Software with required security capabilities would be required to ensure resource pooling. 4 Solution should support 3rd party cloud management solutions and have an API that allows for custom development 5 Should have software load balancing feature to ensure while dynamically scaling up/down virtual machines. 5 Software should have the capability to create Virtual Machines with required number of vcpus. Clarity required from Bank on location independence.true location independence calls for heavy investment on load balancer and storage geocluster / metro cluster features. This will increase the investment to great extent. Bank to clarify regarding the services requirement and integration/ development scope. Need calrity from bank as these kind of features requires additional software and itegration at multiple layers including load blancer and orchestrator along with hypervisor. Request Bank to please specify the quantities. Bidder needs to factor location independence in true sense, however it should be factored as part of 2nd year's implementation. Bank is not in a position to clarify this in current state of Indian Banking scenario because integration may be required with other oraganizations like Credit buraeu, regulator, statutory authority, payment system, RRBs or other Banks. Bidder is required to provision for any such necessary components. Bidder should factor with respect to the solution sizing proposed.

23 Addendum dated 30 Clause:10.6.2 24 Addendum dated 30 Clause:10.6.2. 25 Addendum dated 30 Clause:10.6.4 26 Addendum dated30 Clause:10.8.9 6 Solution should have capability to apply ACLs for access at network layer 6 Solution should be able to provide existing Host Firewall protection for the virtual machine also. 6 Solution must offer ability to utilize existing Intrusion detection System / Intrusion Protection system to seamlessly extend into Virtualization environment 11 Solution should provide a Knowledge base to store history of useful incident resolution or integrate into the existing knowledge base if available with the Bank. These are network specifications. Not Virtualisation/cloud specifications. Request Bank to remove. These are network specifications. Not Virtualisation/cloud specifications. Request Bank to remove. These are network specifications. Not Virtualisation/cloud specifications. Request Bank to remove. Request Bank to remove as it is an EMS function, not an Virtualisation Software function. Considered as removed. Solution should be able to provide existing Host Firewall Protection Solution must offer ability to utilize existing Intrusion Detection System / Intrusion Protection System Bidder is required to factor intergration between Virtualization management & monitoring tool and existing or proposed EMS for generation of incident and issue resolution knowledge base. 27 RFP FMS The RFP asks for DB Support, Please share the Databases OEM,Version & Count. 28 Addendum dated 25.05.2015 3 SAN Switch: All 3 SAN switches published in Schedule C- Current Configuration Details at DC and DR in HA mode (total 6 switches in DC and 6 switches in DR, total 12 switches) are 100% utilized. All these switches are reached End of Support. Bidder needs to consider the replacement of these above switches with connectivity with in scope new hardware to be procured and insupport hardware as mentioned in the RFP. We understand that x86 servers which will be migrated on virtual setup will go away after completion of this project, in that case ports will become free on these SAN switches. As per this clause replacement of SAN switches is asked, however these many ports would not be required once x86 servers are diconnected after migration. Please confirm how many ports are required for existing devices in the new SAN switches bidder will be proposing for this tender Bidder needs to factor DB support for all used DBs like Microsoft SQL Server, Oracle, DB2 and other open source Databases. Bidder needs to consider all in support servers which are yet to reach end of support during sizing of the solution. 29 RFP 13 The bidder also needs to adequately plan the New backup servers will be provided as asked in the RFP. Pleae clarify capacity of EMS / Storage and Backup Mgmt. the hardware requirement if any for EMS setup. hardware and propose the upgradation and re-sizing of EMS / Storage / Backup hardware (if any). Bidder should adequately factor and propose. 30 RFP Page No: 113 Point 3.Should have active / passive and disaster recovery setup also Please suggest if we require to quote and configure backup server in HA mode or it can be configured on a single physical machine. Please note in commercial sheet it is mentioned additional virtual server to be planned for backup which is not feasible to deploy in virtual server. if Bank needs HA deployment then two physical servers required at each site. It should be considered in High Availability mode.

31 RFP Page No: 113, 11 and 12.10 The proposed backup solution must support at least AES 256-bit encryption capabilities Remove point 12.10 as it is duplicate for point 11 Remove point 12.10 as it is duplicate for point 11 Considered as removal of the duplicate 32 RFP Page No: 113 Point 4 33 RFP Page No: 113 Point 4.Backup Licensing (to VTL) shall support total storage capacity of source data (Virtual servers). The proposed backup solution should support both LAN and LAN Free backups and should offer CPU independent Licensing policy for the entire solution. Delete VTL is not part of the current backup architecture and RFP requirement. The proposed backup solution should support both LAN and LAN Free backups (only on clients which are SAN connected) and should offer CPU independent Licensing policy for the entire solution. SAN based backups are feasible with clients which have SAN connectivity (HBA cards installed) Considered as removed The proposed backup solution should support both LAN and LAN Free backups (only on clients which are SAN connected) and should offer CPU independent Licensing policy for the entire solution. 34 RFP Page No: 113 Point 10 35 RFP RFP page no 111 The proposed backup software should support searching data using either structured and unstructured Information. The proposed backup software should support contextual search based on meaning. SAN SWITCH - Should be minimum of 24 ports of at least 8 Gbps scalable to minimum of 48 FC ports 36 RFP page no 112 BACKUP SERVER - Upto 16 GB per slot, at least 8 slots in totals". The proposed backup software should support searching data using either structured and unstructured Information. Support for contextual search based on meaning is vendor specific. Existing SAN switches specifications are not sufficient. Please change the specifications. Based on our due diligence we find out that Bank will need 96 ports SAN switches with minimum 72 ports activated. Please revised the SAN switches specifications. Does this mean backup server to be fully populated with 16 GB memory DIMM i.e. 128 GB per server? These specifications increase hardware cost. This is much higher sizing for backup server. The proposed backup software should support searching data using either structured and unstructured Information. Semantic search is optional however it is recommended. Bank has mentioned a minimum spec, Bidder needs to factor with respect to their solution sizing and provisioning. Bank has mentioned a minimum spec, Bidder needs to factor with respect to their solution sizing and provisioning. 37 RFP RFP page no 112 38 RFP RFP page no 112 39 RFP RFP page no 112 40 Addendum dated 41 Addendum dated Page 4 Clause 10.3 Page 6 Clause 10.4.3 18 Form Factor Rack Mountable Maximum 2U Giagabit Ethernet Adapter - Two numbers of dual ports Ethernet cards of 10/100/1000 Mbps. All ports should' support teaming feature and teaming to be implemented Form factor : Rack / Blade Please revise the specification as" Dual ports Ethernet/FCOE cards of 10 Gb/s. " 10 Gbps dual ports cards are recommended to increase LAN based backup. HBA CARD Two numbers of single port Please revise the specification as" Dual ports FC HBA / FCOE cards of 8 8Gbps HBA card to connect to SAN Switches Gb/s OR higher." 8 Gbps dual ports cards are recommended to increase LAN free backup. Hypervisor Solution should provide the capability to migrate the Virtual Machine files from one storage array to another storage server Kindly clarify whether specifications provided in section 10.3 Hypervisor overrule hypervisor related clarifications provided in previous Addendum and RFP. Is Storage vmotion to be implemented or Bank wants to evaluate as capability of proposed cloud mgmt. software? Rack Giagabit Ethernet Adapter - Two numbers of dual ports Ethernet/FCOE cards of 10/100/1000 Mbps / 10 Gbps. All ports should' support teaming feature and teaming to be implemented. Dual ports FC HBA / FCOE cards of 8 Gb/s OR higher. Clarifications provided in previous Addendum and RFP will prevail. Bidder needs to factor adequately as part of their solution provisioning.

42 Addendum dated 43 Addendum dated Page 7 Clause 10.6.11 Page4, 8,11 Clause 10.2.1.5, 10.7.25, 10.7.61, 10.7.62, 10.7.63, Solution should have 2 factor authentication for accessing virtual machines 10.7.61 Solution should possess capabilities to extent resource & cloud fabric management onto other Private Clouds 10.7.62 Solution should be able to move identified workloads to another private cloud or burst into available public cloud (leaders as identified in Gartner Magic Quadrant). 10.7.63 Solution should be able to give back its capacity that can be used by other private cloud 10.7.25 Solution should be able to manage virtual and physical assets across multiple Private Clouds - implying that a specific Cloud should have the ability to get resources from other Clouds 10.2.1.5 Solution should be able to provide workload migration and interoperability between private and public clouds even cloudbursting into available public cloud options (Azure, AWS, Softlayer, VMware public cloud and other major public cloud players as identified in Gartner Magic Quadrant) Please clarify whether 2 factor authentication is required for Bidder consideration is correct, bidder may Administrative purpose? If so please provide how many admin users will consider only five admin users. have access to virtual machines. Please suggest if the Data Center East-west traffic needs to be monitored and introspected in a policy driven manner? Network virtualization / NSX needs to be proposed in that case. Please clarify what is Bank's strategies for Cloud adoption? Is bank Bidder needs to consider the cloud solution looking for Hybrid cloud on day 1 or to support in future roadmap. Our for implementation from 2nd year ; Bidder experience is that for these specifications cost of cloud mgmt. software should factor and keep provision for will increase significantly. Please conform whether Bank wants Bidder to licenses in accordance. propose the solution factoring the necessary licenses. 44 Addendum dated 45 Addendum dated page 4, Clause 10.2.1.12 Solution must support standards-based REST and SOAP interfaces Cloud Management self-service REST and SOAP are two diffierent type of interfaces supported by different OEMs please write it as - Solution must support standardsbased interfaces like REST, SOAP. How many end users will have access to Cloud self-service portal? What is expected number of concurrent users accessing to the portal? Need for licesing purpose. 46 Commercial Sheet Com2 Cost of ATS/AMC AMC/ATS to be proposed for Cloud related solutions for how many years? Since Cloud will be introduced from second year onward, does Bidder need to factor AMC/ATS for 3 years or 4 year. Solution must support standards-based interfaces like REST and / or SOAP and / or similar At Head Office, Zonal Office, Project Office, Project Management Office Users (Approx. 50 Users) Bidder needs to provision end of the contract means 3rd year, 4th year, 5th year

47 Addendum Dated 30th Page 4 Clause:10.2.1. 11 Solution should support 3rd party cloud management solutions and have an API that allows for custom development Our Feedback: Generally one cloud management solution managing multiple hypervisor and infrastructure allows you to have different flavors of virtualization and their management solution from a single console. Having multiple 3rd party cloud solution management will lead to additional complexity and this is a unique offering of a particular vendor. Recommendation: Point to be changed as - Solution should support multiple hypervisors and infrastructure management from a single pane of glass and allow Rest API based integration and provision for customization of solution Solution should support multiple hypervisors and infrastructure management from a single view and allow API based integration and provision for customization of solution 48 Addendum Date: 30th 49 Addendum Date: 30th 50 Addendum Date: 30th 51 Addendum Date: 30th 52 Addendum Date: 30th Page 4, Clause:10.2.1. 12 Page 5, Clause: 10.3.7 page 6, Clause:10.6.8 Page 6, Clause:10.6.9 page:7 & 8 Clause: 10.7.5 & 10.7.24 Solution must support standards-based REST and SOAP interfaces Solution should be able to dynamically allocate and balance computing capacity across collections of hardware resources of one physical box aggregated into one unified resource pool Solution should support VLAN isolation by supporting multiple networks per resource pool. Solution should support encrypted communication (AES 256 bit or stronger) between cloud framework and all target systems. Solution should be able to offer choice of various Service offering on multiple hypervisors (such as Hyper-V, ESXi, KVM, Xen) with an option to select multi operating systems such as Windows 2008, Windows 2012, RHEL / SUSE Linux, etc. Solution should have the ability to manage Virtual Assets across the major multiple virtualization platforms (Microsoft Hyper-V, VMware, Xen,KVM,etc). Our Feedback: Rest and SOAP are similar interfaces. Our recommendation: Point to be changed as - Solution must support standards based either REST or SOAP interfaces Our Feedback: Point is not very clear and resource pool is specific terminology by Vendor VMware. Though we believe the objective is to let VMs dynamically leverage the resources in a private cloud for optimum utilization. Recommendation: The solution shall allow VMs dynamically leverage the resources in a private cloud for optimum utilization and effective load balancing across cloud. Our feedback: This is a VMware terminology specific to a particular vendor. The point should be changed as, the solution should support VLAN isolation Our feedback: This needs more clarity. Why an encryption is required in a private cloud. If this is for public cloud and hybrid cloud, its ok. We do not support KVM Solution must support standards-based interfaces like REST and / or SOAP and / or similar The solution shall allow VMs dynamically leverage the resources in a private cloud for optimum utilization and effective load balancing across cloud / clouds. Point may be considered as The solution should support VLAN isolation Bidder needs to factor the encryption as optional item and it should be made available and enabled during integration with public cloud or hybrid cloud. This is an optional requirement of the Bank; it should be made available and enabled during integration with public cloud or hybrid cloud. Bidder may factor any adequate additional / third party component / license if found necessary for the solution. 53 Addendum Date: 30th Page :10 Clause: 10.7.47 Solution should support following modeling scenarios: Physical to Virtual, Virtual to Virtual or Virtual to Physical or Test to production or any of the combinations Complied with 3rd party tools (Doubletake) Bidder may factor any adequate additional / third party component / license if found necessary for the solution.