December 3 rd, 2015 Subject: Philadelphia Works To All Interested Vendors: Philadelphia Works ( Client ) has retained Watchdog Real Estate Project Managers ( Watchdog ) in connection with the construction/renovation project taking place at 4261 N 5 th Street in Philadelphia PA. This Request for Proposal (RFP) consists of providing the IT Infrastructure Setup and Ongoing Support requirements outlined in this RFP. The completed Request for Proposal must be submitted no later than December 17th, 2015 by COB (5pm EST). We anticipate awarding the contract on or before December 18 th, 2015 by COB (5pm EST). Please submit one (1) PDF copy of your proposal to the following email address: pkilty@watchdogpm.com Sincerely, Peter Kilty Project Manager Watchdog Real Estate Project Managers Cc: John Kindred (Watchdog)
Philadelphia Works IT Infrastructure Setup and Ongoing Support RFP Invitation to Respond to Request for Proposal (RFP) I. Background: A. Client is interested in acquiring IT Infrastructure Setup and Ongoing Support for their real estate project at 4261 N 5 th St., Philadelphia PA ( the Project. ) The selected bidder will enter into a contract with Client to provide complete requirement as outlined in this RFP. B. Point of Contact for this project will be: Watchdog Real Estate Project Managers Peter Kilty Project Manager Tel: 215-625-8550 Cell: 267-322-1640 Email: pkilty@watchdogpm.com C. Scope of Work: Install, Configure, and Support: 1ea Cisco ASA 5515-X w/ FirePower, Cisco FireSIGHT Management Center and Cisco Security Manager 1ea Barracuda Web Filter 410 - Security appliance 5ea Cisco Catalyst WS-C2960X-48FPS-L 48 port PoE+ switches w/ 5ea Cisco FlexStack-Plus modules and cables 1ea Dell VRTX Server with 3ea Blade Servers, Integrated Storage and Switch, w/ VMware vsphere 6 Essentials plus, Microsoft Windows Server 2012r2 Datacenter and Standard, and Dell AppAssure Advanced Data Protection Software (server configuration described below in Exhibit-A ) 9ea Aerohive AP230 Wireless Access Points with Cloud Management 2ea APC Smart-UPS X 2200 Rack/Tower LCD UPS for Network and Server Equipment 200 PC s, w/ Windows 10 Pro VOL, Symantec Endpoint Protection - (v. 12.1) Clients, and Microsoft Office 2016 Pro (desktop configuration specifications below in Exhibit-B ) Ongoing monthly server and network support will be required to maintain the environment. This will include: Ongoing maintenance, patching and updates of the server hardware, VMware hosts, Windows Server OS s, applications utilized to ensure the environment is backed up and recoverable, switches, router, firewall, web filter, wireless access points, and scheduling desktop/server updates via the WSUS/WDS/VMware Update Manager servers. Provide tier 2 and tier 3 support for the onsite tier 1 helpdesk support technician. The tier 1 helpdesk support technician is not part of this contract. II. Selection Requirements Submission of Bids:
A. RFP Response 1. Client intends to make its decisions based solely on the analysis of the RFP response received by or before the response deadline. It is essential that each prospective contractor submit its best response to this RFP on time. a. The deadline for your electronic response to this RFP is December 11 th, 2015 COB, U.S. Eastern Standard Time. 1) One (1) PDF copy of your proposal must be sent to the following email address: pkilty@watchdogpm.com 2) Please submit two (2) copies of your proposal to the following address: Watchdog Real Estate Project Managers Attn: Peter Kilty 2129 Chestnut Street, Suite 300 Philadelphia, PA 19103 b. Requests for Information (RFI s) about the details or scope of this RFP should be addressed to pkilty@watchdogpm.com Have you ever failed to complete any work awarded to you? If so, attach a separate sheet of explanation. Work completed last year within the Philadelphia area $ Total work in progress: $ The undersigned, as bidder, declares that they have carefully examined the information provided as listed on the invitation to bid letter and hereby proposes to furnish all work including labor, material, equipment, supervision, insurance, freight, overhead, profit, taxes, etc. required to fully complete the work: This proposal shall remain in effect for sixty (60) days. Signed: Title: Name of Organization: Date:
III. Proposal Evaluation A. Submission of Proposals All proposals shall include five bound copies of the bidder s and staff qualifications, five copies of the pricing information, and five copies of the signed Certifications. These documents will become part of the contract. B. Nonresponsive Proposals C. Evaluation Proposals may be judged nonresponsive and removed from further consideration if any of the following occur: 1. The proposal is not received timely in accordance with the terms of this RFP 2. The proposal does not follow the specified format. 3. The proposal does not include Certifications. The RFP responses will be evaluated by an fair and impartial Evaluation Team consisting of staff and consultants. That team will make the final recommendation to the Chief Financial Officer. The Evaluation Team and / or Chief Financial Officer reserve the right to: Contact any proponent to clarify responses; shortlisted candidates may be interviewed as part of the evaluation process. Contact current or past customers of the bidder. Select the bidder it feels best meets the needs of the project, regardless of whether the proposal has the lowest cost. Reject any proposal that the evaluation team and / or Chief Financial Officer believes is not in the best interests of Philadelphia Works. Accept or reject all or any part of any response, waive minor technicalities, and select a bidder that best serves the goals of the project. Use any or all of the ideas presented in the proposals without limitation. Request a Best and Final Offer (BAFO) from selected bidders if the Evaluation Team and / or Chief Financial Officer believes it to be in the best interest of Philadelphia Works to do so. Finally, Philadelphia Works may cancel this RFP, reject all proposals and select a proponent through a new RFP.. D. Evaluation Process 1. The Evaluation Team will initially evaluate submissions to determine compliance with the RFP requirements. Any submission failing to meet the compliance criteria will be deemed unresponsive, and may be excluded from further consideration.
2. The remaining submissions will be evaluated according to the basic criteria listed below. Details of the criteria used are presented in Appendix B. Criteria Weighting Proposed solution quality and fit: 25% Cost 20% Anticipated timeline 25% Experience in comparable projects (including reference 10% checks) Expertise and availability of key personnel 10% Project management plan 10% Total: 100% 3. Philadelphia Works may request that bidders participate in interviews and / or presentations. Philadelphia Works may, at its sole discretion, offer bidders the opportunity to provide a BAFO if it feels that the results of bidder interviews or presentations warrant such. Bidders are under no obligation to submit a BAFO. In such a case, the original submission will be treated as their BAFO. E. Review Process Philadelphia Works may, at its discretion, request presentations by or meetings with any or all bidders, to clarify or negotiate modifications to their proposals. However, Philadelphia Works reserves the right to make an award without further discussion of the proposals submitted. Therefore, proposals should be submitted initially on the most favorable terms, from both technical and price standpoints, which the bidder can propose.
Exhibit A.1. Scope of Work Server Setup and Support The server setup consists of a Dell PowerEdge VRTX server chassis, which will contain 3 blade servers. 2 identical blade servers to be configured with VMware ESXi 6 hypervisor OS. The 3 rd blade will be a dedicated server for the Dell AppAssure Backup, Replication and Recovery function. The VRTX chassis built in storage array will be split between the virtual and backup environment to ensure that there s ample storage for backups. The 2 ESXi servers will be managed by a vcenter Server Appliance (vcsa). It will be configured with vsphere HA and DRS, to ensure failover capabilities between the 2 hosts. The network configuration should be configured using vsphere s Standard Switch (VSS). AppAssure backup server configuration: NW-911; OS: Microsoft Windows 2012r2 Server Standard, Applications: Dell AppAssure. VMware Environment: OS - Microsoft Windows 2012r2 Server Datacenter; FQDN: NECL.ORG Servers: 2ea domain controllers (NE-DC01 & NE-DC02) configured with the following services: AD Services, DNS, DHCP, and other required services/functions. Domain OU s will be configured as follows: Computer OU will contain a Staff Computer OU, individual classroom/computer room OU s. Users OU will be organized into a separate sub OU s for Staff and Clients. Passwords policies will be set to enforce a minimum of 8 characters in length, with a complexity of at least 1 each upper and lower case letter, a number, and a special character. Passwords will be forced to change every 60 days. Print Server: NE-vPRINT. Printer mappings will be configured by group policy and security groups. vcenter Server Appliance (vcsa): NE-VCSA DFS Servers: NE-SHARED01 & NE-SHARED02 (DFS Namespace should be NECL ). This will house staff home shares (H: drive), departmental shares, staff NECL shares (S: drive), and a read only drive for Clients of the center (X: drive). All mappings will be configured through group policies and secured solely by security groups. Symantec Endpoint Protection Server: NE-SHIELD, Symantec clients will be install on all servers and computers. Radius Server: NE-ADFS01. WiFi authentication configured with Aerohive Hive cloud management. WSUS & WDS Server: NE-SUPPORT01. Desktop/Server imaging and OS patching IT Supportive Server: NE-SUPPORT02. NetWrix Account Lockout Examine, Spiceworks for inhouse trouble ticketing, Office KMS Activations, and any other additional services needed to support the environment. This is the minimum server requirement listing. As long as these minimum server requirements are met, and the VM environment resources are available, additional VM s may be stood up to support the domain only with approval of Philadelphia Works IT manager. All server installations will be setup using industry best practices. This is to ensure a tight standardization between centers. Ongoing support for this server environment will be required, to include all software and hardware maintenance in alignment with industry best practices.
Exhibit A2. Scope of Work Desktop Setup and Support The desktops will be setup using 1 of 2 standardized Windows 10 Pro 64bit images. 1 image for Staff use, and 1 for Client use. These images will be setup and maintained by this contracted IT support vender. The image used for Staff computers will have installed: Windows 10 Pro x64, MS Office 2016 Pro x32, Symantec Endpoint Protection Client, IE11, Chrome Browser, latest Adobe: Reader, Flash (active-x and plugin), latest Java. Printers will be mapped via group policy using security groups. Client computers that will be located in computer labs, resource centers, and job clubs, will be configured with the same software as the Staff computer image, but will only have one mapped drive linked to a read-only share. The Client computer image will have the PA CareerLink logo for the desktop wall paper, and group policies to disable any attempted modifications to the computers, unless made by the centers network administrators in alignment with industry best practices. Staff and Client users will not have any administrative rights on any center computes. All installation, updates, and patching will only be conducted by the centers onsite helpdesk support technician and/or this contracted tier 2 and 3 network administrators.
Exhibit A3. Scope of Work Network Equipment Setup and Support The PA CareerLink network infrastructure will be setup in alignment with industry best practices. There will be 1 service router at this site, provided and maintained by the hosted VoIP provider for voice only. A 100MB /29 fiber hand-off for internet connectivity is already contracted through Cogent (provided by Verizon) via a Canoga Perkins device. The Canoga Perkins device will connect into a Cisco ASA 5515-X with FirePOWER Services. The Cisco ASA will be configured to an internal NAT of: LAN 10.x.x.x /16 (Hardwired LAN), Guest Wireless VLAN 200 /24(Isolated guest wireless internet), LAN Wireless (Internal LAN access from wireless), and MGMT. Intrusion, malware, and threat defense protection will be configured on the Cisco ASA using the FirePOWER services. The ASA will connect into the Barracuda Web Filter 410 - Security appliance, which will be configured to secure internet access and monitor traffic. The web filter will then feed into 5 Cisco Catalyst WS-C2960X-48FPS-L 48 port PoE+ switches, and connected via 5 Cisco FlexStack-Plus modules and cables. The switches will require a configuration to support 84 PoE VoIP phones and over 200+ computers. The VoIP phones will feed network access to 84 of the 200+ computers by daisy chaining 1 computer off 1 phone. The phones will be VLAN tagged, and the computers will be un-tagged. Patch cables will be supplied by the network cable/low voltage contractor, and will be this contracts responsibility to patch the network equipment together in a neat and professional appearance, so as to promote good airflow and easy access to the equipment. 9 Aerohive AP230 Wireless Access Points with hosted online Hive Manager will be installed and configured by this contractor. The access points will be configured with 2 SSID s (CareerLink-STAFF and CareerLink-GUEST) CareerLink-GUEST SSID will only have access to external internet (VLAN 200), but will still be managed by the Barracuda Web Filter. CareerLink-STAFF SSID will have normal LAN access. All wireless users will be taken to a login page to which will inform the user that they will be monitored while accessing this connection. Ongoing support for this network environment will be required by this contract, to include all software, firmware, and hardware maintenance in alignment with industry best practices.
RFP Distributed December 3 rd, 2015 Exhibit B RFP Schedule RFI s Due to Peter Kilty on December 17 th, 2015 COB (5pmEST) RFI s responded to by Peter Kilty and distributed to vendors December 17 th, 2015 COB (5pmEST) RFP due Date December 17 th, 2015. Award RFP- December 18 th, 2015 COB (5pmEST).