70--Learn what products are available in the marketplace which might assist the National Business Center in securing communication within their network

The U. S. Department of the Interior (DOI), National Business Center (NBC) is requesting information on products available in the marketplace that meet the requirements listed below in this Request for Information (RFI). The NBC is interested in learning about products available that will allow it to secure communications inside its network(s) to and from servers and clients running various operating systems. Product Requirements: 1.Server to server or client to server authenticated encryption using standardized tunnel or data encryption protocols such as Internet Protocol Security (IPSEC), Secure Sockets Layer (SSL), etc. 2.256 bit AES (Advanced Encryption Standard) encryption must be available via the product without enhancement or additional cost 3.The product should be easy to configure & manage from a centralized location 4.Product or solution must work across all or a majority of available operating system platforms (Mainframe Operating Systems, Linux, UNIX, Windows, Solaris, etc.) 5.Must have minimal impact on server or network performance 6.Must enable data encryption configurable to a port level between servers (all traffic can be encrypted between servers or only traffic over certain ports can be configured for encryption between servers) 7.Product or solution must be able to utilize existing Certificate Authority (CA) infrastructure or must come with a CA as part of the product solution 8.Software or hardware based solution for encryption is Federal Information Processing Standard 140-2 (FIPS 140-2) certified 9.The system shall log any denied access to the system - that is, if a client or server attempts to access a protected resource directly and is denied access, that event shall be logged to a common facility 10.The product should fail gracefully and in a "failed closed" condition - that is, the product should deny access to the resource in the event of a failure of the product 11.The product should allow for the off-loading of log files to a third party Security Information Management (SIM) product 12.The Product should enable encryption of traffic between client systems and servers 13.The product should allow for multiple encrypted communications to and from multiple servers over multiple ports. 14.The product should be easily and quickly scalable 15.Must not require significant hardware upgrades or augmentation to accomplish required encryption (i.e. should not require separate Network Interface Cards (NICs) in each server to meet requirements). How to Respond: Please contact the Contracting Officer via e-mail at [email protected] or fax (202) 208-4956 by no later than January 31, 2006. All responses must be received no later than 5pm EST, January 31, 2006. All responses must include the following: 1. A listing of which requirements are met by the product (in full or in part with details explaining why or why not met and why full or partially met) 2. Fully product documentation including whitepapers, technical details or sales brochures relevant to the product 3. List of technical contacts (name, company address, e-mail, phone number(s)) that may be reached for technical questions regarding products/solutions