Loading...
HomeMy WebLinkAboutContract 41800-A2 (2)One Concourse Parkway Atlanta, GA 30328 Fax: (678) 3064 837 Service Ordev reMVorlCS L :t i r9COTVAQ D9Qi)Q Bill To: City of Fort Worth 1000 Throckmonton St Fort Worth, TX 76102 United States 1 11-/r,/vOQI . %AEI i d-rv'r. I \IAvuv I Oa St it I v;vV ‘11vOwn. .E. - t UV I (/ Proposal Date: Account Manager: Partner: Association: Payment Terms: Order Type: 4/25/2012 Tom Nicodemus None None Monthly Billing Additional, Exchange Ship To: City of Fort Worth 1000 Throckmonton St Fort Worth, TX 76102 United States Contacts: Client SecureWorks Camillia Ryan Tom Nicodemus Jamie Hicks Purchasing Manager Enterprise Account Manager Director, Enterprise Sales (817) 392-8321 (404) 417-4781 (704) 905-1731 camillia, ryan@fortworthgov, org tnicodemus@secureworks.com J b h icks@se cu reworks, com Type SKU Product Description Additional MMIA-S-25-Tierl Managed Integrated Appliance Additional MMFW-HA-100- Managed and Monitored Firewall - High Availability Palr Tier4-Al Additional MMFW S-25-Tier2- Managed and Monitored Firewall Al Additional MSS-SetUp Installation and Activation Additional MMIDS-10OMB- Managed and Monitored IDS and IPS-Standard-1-100MB-Tierl Tier1 Type SKU Exchange MMFW-HA-100- "Managed and Monitored Firewall - High Availability Pair Tier4-A1 Exchange MFW-HA-100-Tier4 Monitored Firewall - HA Palr Qty 1 3 Term 1 Year 1 -Year 2 1 -Year 1 N/A 1 1 - Year Qty Term Years 1 1 Price $7,853,90 $33,398.91 1 $9,890,37 N/A $2,192.90 1 $12,734, 70 Years Price 4 5/14/2012 - 6/19/2012 0,1014 $4,596.65 -4 5/14/2012 - 6/19/2012 0.1014 ($2,435,03) Total (excluding any applicable taxes): $68,232,40 Notes: The charges reflected hereunder do not include taxes. Client will be responsible for any sales, use, value-added or import taxes, customs duties or similar taxes, if applicable, assessed in accordance with applicable law with respect to the provision of the Services orgoods .received .fronn-SecureWorks, Inc, which shall be invoiced separately. CSC Contract Number: CSC41800 OFFICIAL RECORD For Additional line items: Product Description CITY SECRETARY FT. WORTH, TX SecureWorks, Inc. shall send Client monthly invoices for the first two months of the Services for the initial Term, and any other fees due during such period, upon the Service Commencement Date of the Service(s). Thereafter, SecureWorks, Inc. shall send monthly invoice uringThe initialTermof this Agreement. This Order Is Issued under your current Service Agreement with SecureWorks, Ince, which Service Agreement remains in full force and effect, and/or the attached Terms and Conditions. Any purchase order terms and conditions issued by Client for the same services are null and void, SecureWorks, Inc._ �•- titSzeet-FL__ Authorized Signatu - Print Name: Je1nvmC'r Title: V P hOJCOUftHM Ifin e ~atti 470.410Asz. lab 0 1/41 Date: 05-04-12 P02:35 IN Pricing valid until 5/18/2012. VinilerlasantatatS Client: City of Fort Worn Authorized Signature: Print Name: Sawin CL Title: Date; �c 3 I 1 OsStM fit,,` Lk_Z:all`•_•% 1f/ZS8'2YY!T.�•r. 1-4;. •-_ -Z L" to _.. _+..$ Lrv9. Y - __ A Is Client tax exempt? Yes V" * No__ Will a purchase order (P.O.) be required for payment? Yes^,* No,__, Please include a copy of the certificate and/or P,O. with this 'contract or email to billing@secureworks.com. If equipment Is being provided under this service order, client hereby certifies that: All Equipment will be delivered to Client within the US. APPROVED AS TO FORM AND LEGALITY: ' All or st will be delivered to Client lo•;tio sista.m otrity £,tif,.., AmiS by: Page 1 of 1 IMtiann$ed St Monitored .l irewall Service, Level Assenting SecurcWur]s takes pride in its commitment to deliver the highest quality and reliability of Managed Firewall. This commitment is backed by this Service Level Agreement (' Sl A'"). Service Description u Sirviee Ccanpvnenus Managed Firewall uses SecureWotts developed technology, the Shcrlock''M F:nta r►sc Security ivIanagen eat Platform "Sherlocknk to enabk sea to and rtfcctirc management and monitoring of Client'owned Jiretitialis. The Sherlock Enterprise Security Management Platform is a highly distributed technology tvhieh includes Sherlock, Inspe turTM and Sherlock Inspector.AacatTM. inspector is deployed on. the Client network and awektes security events from managed tinvvalEs and: other security inthistr.rcrure (purchased separately), In»vector then eomptires eventsto known malicious activity and known, twrmaI activity, Maliciousfind unknown events rue sent via a secured conncctk n to Sherlock in Scnire orbs" Secure Operation Centers where the information is correlated and scrutinized by Intrusion Analysts_ 'the intrusion Analysts respond to attacks and anornolics according to y cvweWorlcs' Event Handling process. which can be ttibrcnced at any time by the Client on. the Rea1.=lime Events page of the SecureWotks Client laortui. SeeureWorks provides the Client with a sst'unt,. wcbbtrscd method to request ccctiifigurettian changes, coainonitrar the tirewall s performance, .security events, and ennfiguratiun. Key Deliverables * Implementation ofl'irewalls, Sherlock/NI Enterprise Security 7vQitrtagent nt: Platform, and SecureWorl;:t Client Portal. • Portal integration. * Firewall systein administration. * Pitman policy change requests, r Flretval! security avnailability, and performance monitoring. Firewall updates and security pati,hi s. + Nctworketrrnetwork VPN ri anagt.meat (clucnt-err-network management not included}, * Daily fki wu11 configuration backup. Non=trtcttrcd 24x7x3&5 firewall .supportkonsultStion by. SccnrcWorks' intrusion Analysts. Prompt reSpsan, a to enquiries submitted via the help desk ticketingsystem email widior telephonically b. Client Obligations and baerdep ezwkncfcx fbt aaur?t tks perJtin'cruce: Client agree to perform the ohlitions and acknowledge and agrees that S :ureWorks obi( lty to. perform its obligations and Ks ll>3bilLW under the SfAs below, are interdependent on Client's cemptittee with the fallowing: * The Client Is responsible for purchasing the lirewull hardware -and software necessary for the Managed F irc4> of l service. * Provide access to Client -premises and relevant appliance(s) and management enrtaole(sl; Client is responsible for nratntaiuing appropriate levels of hardware. suppo t and maintenance (including third party hardware and software contracts) and conmecti ky to pro ent mun rk performance degradation and maintain cornniunlca_tions between the Clients ciontructed devkes and SlierlachnI Platform. Service Agreements The following service, level agreements (SLAB) shall apply to thc Managed Fircwall services provided hereunder, subject to the terms,, conditions and limitations contained In this Exhibit A: u Secure Operations Center Availability Communications availability to the Internet shall equal no less ihtm c.; 9,9% ol'the time during a givon calendar month. "Communications availability" is defined as the ability for one of SSecurrWorks" Secure operations to trruistnit and receive TCPe1P p trkets bctwr."ea SherlocktM and its upstream intl'niet service providi.t'. In the cvatt that this SLA is not met for a aitit n calendar month, Clent shall be entitle to a monetmry credit equal to thirty i3()) minutes .fier each minute that communication availability vas available below the 99.9°A1 threshold. SeettreWorks can make ivgutwatntee to availability or performance oldie internee at large between Set.ure\Vorks and its Clients. Each thirty (30) minute credit shall he calculated by dividing the monthly payment for rite applicable: Service for which the SLA faiilure occurred by 43,200 and multiplying the result by 30, Each minute over the minute allotted rime is equal to 30 minute increments per minute. hidden( Response Client stroll receive a response (in the manner pre -selected In writing by Client, either through the help desk ticketing syatenti, erraaii, er telephonically) to security incidents taithin .iiiiieeu (15) minutes of the determ nation by SceutcWerks that given malicious activity constitutes a security incident. consistent with the Event Handling Prneediuras of SecureWer&s in effect {tom tittle to time (^SecureWorks hs ent Handling Prom -cif). A "security incident" is defined as a high -risk .attack an a FW in compliance with the SecureWort %vent. Handling Process itt the event that this SLA is not met for a given calendar month, Client shall bo clflitted to a monetary credit equal to thirty (30) minutes for each minute oi+cr the specified re pones tints that SccurcWorks dots not respond as required, Each thirty (30) minute credit shall lie calculated by dividing the monthly payment for the applieabie Service for which the SLA. failure t curd d by 43t00 and multiplying the result by 30. Each minute over the allotted, time is equal to 30 minute ilwtvments per minute. Help Desk &quews Standard help desk requests submitted via the SecureWorks Client Portal or via telephone will be subject to ':initial response" (either through the help desk ticketing system. email or tclepitrntically) within one (I) hour from the time stamp an the help Desk ticket treated by SecureWurks . An initial response to Help Desk orequess elassirthti. as. "Entergener on the Help Desk ticket will be sent within lai#eeit (15) rttlnuws from the time stamp on the Help Desk ticket creattsd .by SeetneWarlut In the event that this :ALA is not met for a giv n calendar month, Client shall be cnthicd to it monetary edit equal io thirty (30) minutes tor each minute over the n quIS response time. Each thirty (30) minute credit shall be calculated by dividing the monthly payment for the appliett le Service for which the SLA failure occurred by 43.200 and multiplying. the result by 30 Facia minute OYU the allotted time is Vaal to 30 minute increments per minute. IrL Additional Service Rules, Regulations and Co a. Dephryziteatt of Securc aWarlds' managed ser'viees in a Client network dnea :not achieve -the inip€ ssible goal of risk elimination, and therefore SecurtWorks makes no pat -ankle that intrusions, compromises or any other unauthorized activity will not occur on a Client network. h SccureW ores may schedule maintcunncc outages with 24 hours notice to- designated CM, rtt ci nwins, The SLAs set forth herein are subject to the folitwing terms. conditions and limitations: The SLM tint apply during scheduled maintenance outages arttl there1bre arc elijible for miy Agreement credit_ h. The SLAs Shall not apply in the event of any Ctlinrtt-caused service outage that prohibits or otherwise limits SetureWorks lint t providing the service delivering the service level Agreement or managed seance descriptions, including but not limited to. misconduct, nelgligence, inaccurate or incomplete information, mod' fictions miter to the services, or modifications made to any managed ltardwarre Of software devices by the Client. 'iiiis included isuta:s caused by Client s employees, agents, er third parties: ifi. Furthermore, the SL ks shall not apply to the extent Client does not fulfill and comply ^ with its obligations and interdependencies set forth above The obligations ofliecureWorks tert:oitapiy with dve SLAB with respect ti any incident response or help desk request are also lnterilepeadenton relVarke ability to 'connect dimity to the Clientcrevices on the client network dtrauglr �n authenticated seiNer in the SeeureWorks !+;cure Operations Center. Client will receive credit for any failure to rrtcet the SLAB outlined above within tlairiy (30) days Ofttotillcnik n o such failure. In order for Client to reiceive an, SLA credit, the notification of the SLA failure must be submitted to SecureWodui within thirty POI days or the failure, Sevt reWorl s will research the request and respond to Client within thirty (30l days from the date of the request, I'he total arrtrwnt credited to a Client In cOnneedOrt with the above SLAs in_ ianv cal dar month will not exceed the service tt.es paid 1y Client for :such mmuth. Except as otherwise se expiredy provided. the foregoing shall be Client's exclusive rented) for failure to triea.t or excixd the Ibrego ing SLrts. --.--.-------__-_-- -_-- .ltdanaged ,' Monitored Intrusion Detection Service Level Agreement ScyureWurks takes pride in its containment to deliver the highest quality wtd reliability of Mttatal cd Intrusion Detection, This commitment is bilked by this Service Level Agreement (• SLA''l, this SEA along with the Service Order that it is a part or is incorporated uno the Master Services Agreement (" MSA"). Service Description tt- Service :omponentr Managed Intrusion Detection services uses SecureWorks developed technology, the ShcriuekTM Enterprise Security ;Management Platform (Shirloek ), to enable scalable and. effective management and monitoring of intrusion deteetlnn systems, 'i•he Shetlock Enterprise Security Managerntmt PI fro. is a highly distributed teclvroltfgy whet. includes Sherlock, Inipectai i and b pcctor Agcuttbi. Inspector is deployed on the Client in work and t►,ggr•rgatcs security events from raintrtged intrusion detection engines and other security infthstaucture (purchased scptuateif. inspector then compare.; events to known malicious activity and known Loma] activity. Malicious and unknown events are. sent Via a sest.wed 4,vmwetion to `yherhtck kit SecureWorks' Secure Optuatlon Centers (,SIC.) where the information is eorreinted and scrutinized by Intrusion Analysts. The intrusion Analysts respond to attacks and anomalies according to: aSctareWarks" Evern Handling process, which on he referenced at any drat by the client an the RetilyTime Events page of the Secure -Works Client PCITial. SetureWttrks provides Client with n SLturt:, web -based method to co monitor tiro enterprise, gear security reports update escalation pruoadures and ntakc help desk requests. Aev Delhgex, bks ✓ integraaian and ongoing adminiatratinq off SecureW&Irk! 1 security monitoring Infrastructure including 01ent • lntrwion detection system installation and =figuration according to the- organizast©u":s:st curity priticy. • 4dministratton and rrutthie mairttenanet, A Intrusion detection system updates and patching. • (Remote arddve of system configuration files and alerts. ▪ intrusion detection system alerts art securely tratrmnittcd tit tht SecureWorks SOC for caie orixatticn'r,, assestmwtt> and _response. A 5ec`tlreWoeks Client Portal integration rear help desk, reporting, and security event monitoring, • S-ccareWorks provided iScnsor and SNORT FPS devices will support an atggivgatc throughput across nil interlaces as tbllo n: SNOW[ IPS: up to 100 megabits per second or 280 milliseconds latency $wnclanUSrn ijr ihm1warertrp o C) mega?ritapr settnal-at ,Oirtiltiseconds latent., v IUgh End iStnsor Hardware, tip to 850 megabits per second at 250 milliseconds latency. Should monitored bandwidth cxccetl iht c limits, in ruder for SecureWorks to continue providing Services in compliance with this SLA Client shall be responsible for the purchase of an alternate IPS technology that supports the Client's bandwidth requiremenu. the alternate IPS rv;chnoloa must be listed in the Supported Product List, which is available upon request. C1i ni O tig arrouu.and inienkr a dtncles for SS:ecurettiorks pEtfonriance: Client agrees to perform the ohlipti ns and achowlCdges and ogees SecureWorks' ability to pertbirrt $ obligations and 113 liability- under the SU, s b.eiow, am interdependent -pit Client's compliance with the t+,bitet ingr, Provide fiet`ass to elietnmpremises and relevant appliance(s) andmanagement conznie(s). Client is responsible for maintaitt'ing appropriate levels of hardware support and ttianntenarit;e (including third party hardware end snibvnre contracts).aand connectivity to prevent network performance degradation and maintain conunurtictttions between the Clients contrasted devices andSlterloektM Platform, I1 Service Level Agreements The. following service level agreements (SLAB) shall apply- to the Managed intrusion Detection setices prosridcd hereunder, subject to the terms, conditions and limitations contained in this Exhibit A: Sec tade attrnrhnis On rr lialadahallY '1be SecurttWorks Se ate bpertrtiorts Cenncrs will maintain communications availabilit}' to the intern -et 99,9% of the time during a calendar month. "Communications availability" is defined as the ability far one of SecurtWorks Secure Opctaticrres Ca.hntt;rs to transmit and receive TCP/IP packets between its netwotksand its upstream Internet Service Provider. In the event that this SLA is not met for a given calendar month, Client shall be .entitled to a monetary edit equal to thirty (30) minutes for each minute that communication availability was available below the 99.9% threshold. Secure Works can make nq guarantee to availability or performance: of the tntemet at lama between SecureWniirks and its Clients. Each thirty (30) minute credit shall be calculated by dividing the monthly payment for the applicable Service for which the SLA failure occurred by 43 200 and multiplying the result by 30.. Each minute over the allotted time is opal to 30 minute increments per minute • 6, fnteidenr Response: Client shall receive a response tin the manner pre -selected in writing by Client, either thraiugh the help desk ticketing system, email_ or telephonically) to security incidents within fifteen (19) minutes of the determination by Sci urvWorks that given malicious :c etivmr constitutes a security incident consistent with the Event Handling Ptvntedures in effect from time to time i"SecuveiWi*ks Evian Htutdlh* Prot,esa"). A "security incident" is defined as a high -risk attack on an IDS device in rompiiance with t e ttrc t6'orks -Event Handling Process. In the event thnt this SLA. is not ma for a ,given calendar tnauth, Client shall be entitled to a monetary credit quo] to thirty (30) .minutes for each minute over the bpeciti d iponse tittle that SecureWorks does not respond as required, Bach thirty (3 0' mince credit 5111111 be calculated by dividing the miynthiy payment for the applicable Servke for which the SLA Mare occurred In 43,200 and multipl` ins the resole by 30. Eakli rtunuic over the allotted time is cquaI to .30 rttittcttc incrernents.per rntnute. Help.1».sk Requests Stin„ard help desk requests submitted. via the SccureW.orlcs- Client Portal or v'a telephone will be subject to 'initial response" (cattier through the help desk ticketing ;system, email, or telephonically) witltirt arts ( I) hour from the time scamp on the help desk ticket created by Securer, corks. An initial response to Help Desk requests ciassitFicd as "Emergency' on the help desk ticket will Ile- sent within fifteen (i5) minutes from the time stamp on the help desk taeket created by SceureWor}s in the- event that this SLA is meet for a given calendar month. Client shall be entitled to a rr of tar; eretfit equal to thirty (30) minutes for eec:it miinute over the required response time_ Sell thirty (30) minute credit shall be calculated by dividing the monthly payment :for the applicable Servile for which the SLA L;iiurt occurred by 43 200nud multiplying the n stdt by 30 Eueh minute over the allotted time is equal to 30 minute increments per minute. 1T1. Additional Service Rules, Regulations and Conditions ra. Deployment of SecuwtWorks' managed scn.h. s in a Client network dairy not achieve the impossible goal •ofrisk elimination,, end f7crefore SecurtWerks makes no guarantee that intrusions, compromises, or any outer unauthorized activity will not occur an a Client network. SccureWArks rimy schedule in,aimeaance Otitirigersi with Z.4 hairs notice to designated Client contacts. The SSLAs set forth herein are subject to the following terms, conditions anti limitations: The SLAs shaft not apply during scheduled maintenance outages and therefore are not tliglbh? for any Agreement credit. II. The $t.M shall not apply in Ott event of any Clienicaused service outage that prohibits or otherwise limits Sci urtWorks irony providing the service~ delivering the service level Agreement or managed service descriptions. including but not limited to. misconduct negl:igence,inaccurate or incomplete information. modifications mate to the s?cniwvs, or modifications MSC tit tuiy managed hardwire or software devices by the Client. This includes issues causal by Client's employees, agents, or third parties. Ftnthcrrtrorc, the SLAs shall not apply to the extant Client doe, not tblffll and comply twit];. its alfligutlotls Interde„pende ies set forth above The obligations of StheureWorks to comply with the SLAs with respect to any incident rvspunse or help desk request are also interdependent on Secwre&arks' ability to connect directly to the Client devices on the client network through ran authenticraed server in the SLstirvWorks Secure Operations Curter. a (Hem will receive credit for any failure to meet ibe SLAs outlined above within thirty (30) days of notification of such failure. In carder for Client to receive an SLA credit, the notification ofthc Sisk failure trout he sobririrted to SeeiireWerlcs within that). (3Q) days orate Callum SecurtWorks will research the retpwst and respond to Client va ithin thirty (30) days from the date of the request The total amount cn.dited to a Client in cnnnectiun with the above Si A ki any calendar month will not exceed the sere ice fees paid by Client for such ;;tout;;. Except AS otherwise expressly provided, the 1br egraing shall be Clings exclusive remedy for failure to meet or exceed the foregoing SLAB. M&C Review UNCIIL ACTION: i *.'i:T-' ors ' 2/ - DATE: 12/6/2011 REFERENCE NO.: **P-11328 LOG NAME: CODE: P TYPE: CONSENT PUBLIC HEARING: 13P12-0013 S ECUREWORKS CBR N O SUBJECT: Authorize an Amendment to the Purchase Agreement with SecureWorks, Inc., for Network S ecurity Services Through a General Services Administration Contract for the Information Technology Solutions Department Increasing the Amount by $190,717.00 for a Total Amount U p to $265,000.00 (ALL COUNCIL DISTRICTS) RECOMMENDATION: It is recommended that the City Council authorize an amendment to the Purchase Agreement with SecureWorks, Inc., for network security services through a General Services Administration Contract GS- 35F-0335V for the Information Technology Solutions Department increasing the amount by $190,717.00 for a total amount up to $265,000.00 for the first year with payments due 30 days from receipt of invoices. DISCUSSION: On March 22, 2011, City Council approved a purchase Agreement, using a GSA Contract, with SecureWorks, Inc., for network infrastructure monitoring and vulnerability scanning for 25 devices in the amount of $74,283.00 (M&C P-11213). Security threats are evolving daily making firewall management critical. As the City's network continues to grow, it is important that the appropriate security is applied. With the help of SecureWorks, Inc., the City will be able to keep up with the latest security threats and monitor the network appropriately. The ITS Department requests the current annual Agreement be increased by $190,717.00 making the total Agreement amount $265 000.00. The additional funds are needed due to an increase in the number of firewalls requiring monitoring* management of the additional firewalis and intrusion detection and an anticipated 20 percent growth. All other terms and conditions remain unchanged and in accordance with the GSA Contract. COOPERATIVE PURCHASING - State Law provides that a local government purchasing an item or service under a cooperative purchasing Agreement satisfies state laws requiring that the local government seek competitive bids for purchase of the item or service. GSA contracts were competitively bid to increase and simplify the purchasing power of local government entities across the State of Texas. AGREEMENT TERM - The original Agreement began on March 22, 2011 upon City Council's approval of this amendment the Agreement will end March 26, 2014, to align with the GSA Contract. RENEWAL OPTIONS - This Agreement may be renewed at the City s option, provided GSA exercises renewal options. This action does not require specific City Council approval provided that the City Council has appropriated sufficient funds to satisfy the City's obligations during the renewal term. M/WBE - A waiver of the goal for M/WBE subcontracting requirements was requested by the Purchasing Division and approved by M/WBE Office because the purchase of goods or services is from sources where .. .L. a..... 4 1.aa :... .. a.. ...... ... ... .. a....... ..arm L..Lot : 4.:.... ...... ...... t : a L.I.. M&C Review FISCAL INFORMATION/CERTIFICATION: The Financial Management Services Director certifies that funds are available in the current operating budget, as appropriated, of the Information Systems Fund, BQN\12-0013\CBR TO Fund/Account/Centers Submitted for City Manager's Office by: Onginating Department Head: Additional Information Contact: ATTACHMENTS FROM Fund/Account/Centers Thomas Higgins (6192) Lena Ellis (8517) Camillia Ryan (8321) Jack Dale (8357)