Loading...
The URL can be used to link to this page
Your browser does not support the video tag.
Home
My WebLink
About
IT Infrastructure Upgrade Project
DENIS NONCARROW Cz Town Hall, 53095 Main Road TOWN CLERK �, � P.O. Box 1179 REGISTRAR OF VITAL STATISTICS Southold,New York 11971 MARRIAGE OFFICER � .�� Fax(631) 765-6145 RECORDS MANAGEMENT OFFICER Telephone (631) 765-1800 FREEDOM OF INFORMATION OFFICER ' OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD BID OPENING IT Infrastructure Upgrade Proiect Bid Opening 9/25/2025 2:00 P.M. One bid Received Core BTS, Inc. d/b/a NRI $ 426,875.28 855 Route 146, Suite 240 Clifton Park,NY 12065 Matthew Vetro CDW Government $ 808,290.57 230 N. Milwaukee Avenue Vernon Hills, IL 60061 Justin Schwier i' o��gUFFO(,(�o DENIS NONCARROW c� G.y� Town Hall,53095 Main Road TOWN CLERK P.O.Box 1179 y 2 Southold,New York 11971 REGISTRAR OF VITAL STATISTICS O Fax(631)765-6145 MARRIAGE OFFICER y RECORDS MANAGEMENT OFFICER �o,( �a0 Telephone oldt 76n .gov FREEDOM OF INFORMATION OFFICER www.southoldtownny.gov OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD Core BTS Inc. dba NRI 855 Route 146, Suite 240 November 19, 2025 Clifton Park New York 12065 Dear Matthew Vetro, Congratulations. At the regular Town Board meeting held on November 18th, 2025, the Town Board accepted the bid of Core BTS. Dba NRI . to supply Southold Town with a Infrastructure upgrade. A certified copy of the resolution is enclosed. Thank you for your bid. Ver trul your , Denis Noncarrow Town Clerk Ens. 1 DENIS NONCARROW TowdIIall,$3.099'Main'R_oad'P O. TOWN CLERK g0�'SO r�" Box,1179 southol'd,New York 1-1971 Fax REGISTRAROF:VITAL (631) 765-6145.Telephone(631) STATISTICS'MARRIAGE OFFICER 765-1800 RECORDS MANAGEMENT # www.southoldtownny.gov OFFICER FREEDOM OF INFORMATION,OFFICER OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD THIS IS TO CERTIFY THAT THE FOLLOWING RESOLUTION NO..2025-892 WAS ADOPTED AT THE REGULAR MEETING'OF THE SOUTHOLD TOWNBOARD ON NOVEMBER 18,2025: RESOLVED that the Town Board of the Town of Southold herdby accepts the•bid'of CoreBTS, Inc., d/b/a NRI for the Information Technologies Infrastructure Upgrade project in the-amount of $426,875.28, all in accordance with the Town Attorney. i Denis Noncarrow Southold Town Clerk. RESULT: Adopted MOVER: Justice Evans SECONDER: Councilman Doroski AYES: Councilman Mealy,.Councilwoman Smith,Councilwoman Doherty; -Justice Evans, Councilman.Doroski, Supervisor Krupski,Jr. NAPES: None . Rudder, Lynda From: DeChance, Paul Sent: Friday, October 31, 2b25 2:29 PM To: Rudder, Lynda Cc: Schlachter,Amy Subject: Resolution In response to the RFP put out by IT for Information Technologies Infrastructure Upgrade Project, can you put a bid acceptance resolution on for Lloyd today— He wants to accept NRI—.Core BTS in the amount of$426,875.28 I,have the actual bid if you need it. Paul Paul M. DeChance, Esq. Town Attorney Town of Southold Southold Town Hall Annex 54375 Route 25, P.O. Box 1179 Southold,NY 11971 Office (631) 765-1939 Fax(631)765-6639 pauld@southoldtownny.gov 1 DENIS NONCARROW Town Hall, 53095 Main Road TOWN CLERK P.O. Box 1179 REGISTRAR OF VITAL STATISTICS �' ' Southold,New-York 11971 MARRIAGE OFFICER Fax (631) 765-6145 RECORDS MANAGEMENT OFFICER Telephone (631) 765-1800 FREEDOM OF INFORMATION OFFICER OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD BID OPENING IT Infrastructure Upgrade Proiect Bid Opening 6/12/2025 2:00 P.M. One bid Received Core BTS, Inc. d/b/a NRI $69,000.00 855 Route 146, Suite 240 Clifton Park,NY 12065 z a � t. RFP — Information Technologies Infrastructure Upgrade Project Submitted to: Town of Southold Prepared by: Core BTS, Inc., d/b/a NRI AE Information: Matthew Vetro Senior Account Executive Matthew.vetro Cad nri-na.com r�t Copyright©2025 NRI All rights reserved.Proprietary and Confidential Material. This document contains proprietary information owned by Core BTS,Inc.,d/b/a NRI(herein"NRI")and should be regarded as confidential. e e � Table of Contents FinancialStability...............................................................................................................................................1.2 Qualifications and References.............................................................................................................................4 ProposedSolution................................................................................................................................................4 CostProposal.....................................................................................................................................................16 Statementof Non-Collusion..............................................................................................................................27 Termsand Conditions..................................................................................................................................... 33 -- 1 l P a g e --- - NRI e ' Financial Stability NRI, formerly known as Core BTS, is a business and technology solutions consultancy that specializes in digital transformation, optimizing technology strategies, and harnessing data- driven insights. We solve the most pressing challenges by delivering integrated solutions that connect people,processes,and technology to defined business outcomes.As of April 7,2025,Core BTS, ITSA, and NRI-A have united under the NRI brand as NRI's North American operations. This rebranding reflects our deepened expertise, expanded capabilities, and renewed commitment to innovation. Parent Company NRI R . Founded in 5 L .., . �iLlion s 1965 in Annual Revenue $17 Billion 17k _- Market Capitalization Employees North America United States ' 42 16, Europe Asia/Oceania ' Locations Countries&Regions Denmark United Kingdom, Australia 'India Philippines Taiwan Ireland China Indonesia Singapore Thailand Luxembourg Hong Kong NeivZealand 'South Korea Since 2005,we have used a proprietary methodology to simplify complex technical scenarios and deliver holistic solutions. The NRI team holds multiple top-level certifications and partnerships with IT industry leading companies, allowing us to provide customers with expertise across multiple technologies. With NRI,you will benefit from deeply knowledgeable technical resources passionate about delivering the highest quality results. NRI story is one of convergence—bringing together the right people and organizations to build a leading provider of business technology solutions. • NRI-NA Origin: began as CTi in 2004,aiming to build a leading voice and data services integration company.With equity commitment from Founders Equity,CTi acquired three companies in the Northeast: o Open Systems Technologies LLC(Clifton Park,NY) o WorldNet Technology Consultants, Inc. (Reading, PA) o AAA Networks (Falls Church,VA) • Expansion and Acquisitions: CTi acquired Core Business Technology Solutions,LLC, headquartered in Indianapolis, IN, and merged under the Core identity. Core BTS expanded further by acquiring Inacom Information Systems in Wisconsin in 2009, and the Cisco sales and support team in New Jersey in 2012 • Private Equity and Further Growth: Tailwind Capital acquired Core BTS in 2018. NRI continued to grow by acquiring the Microsoft business o SADA Systems in Los Angeles, CA in 2019 o Blue Chip Consulting Group in Cleveland, OH in 2020 o Skyline Technologies in Green Bay,WI o Aptera in Fort Wayne, IN in 2021 • Rebranding: In December 2021, Core BTS was acquired by Nomura Research Institute Holdings America, Inc. (NRI-HA). In April 2025, Core BTS rebranded to NRI North America Our service offerings are now clearly defined into strategic areas including: • Inform&Advise:Delivering strategic insights through data-driven analysis and tailored advisory services. • Build & Transform: Driving precision transformations with intelligent data, AI solutions, and modern application integrations. • Protect & Manage: Ensuring robust cybersecurity and continuous resiliency with comprehensive risk management and managed services NRI has more than 16,000 employees in 16 countries and regions including New York, London, Tokyo, Hong Kong, Singapore, and Australia. We report annual sales above US $4.8 billion and are rated"A"by S&P Global Ratings Japan. This alignment eliminates market confusion, fosters knowledge sharing, and positions us for continued growth and innovation. Clients benefit from expanded capabilities, deeper expertise, and financial stability for long-term strategic projects, while partners gain access to larger opportunities and investments in emerging technologies In North America,NRl is a business and technology solutions consultaricy,Guiding our clients frominsightto execution,we design and deliver solutions that fuel growth grove profitability,and deliver innovation.with impact:, 4 V h V=V a Are " 50 years dnvinginnovation 650hands onexpens '- 1,800+purpose-driven clients WA Why Organizations Business-First Approach—Strategy leads, h.. itechnology Hospitality,Industry Expertiso—Specialization in Automotive, Government,Healthcare.and Manufacturing. End-'to-End Solutions—From advisory to execution to optimization. K ' .. Proven Success—Delivering measurable results for leading organizations. Our People—Top architects,engineers,and il . problem-solvers --------- 3 IT a g e -- --- - -- NRI r ' Qualifications and References References Company • Email/Phone ProNrided RPI Frank Hill-Senior Frank.HM@rpi.edu Exchange Systems Manager 518-276-6708 Migration to 0365. Over 1oK mailboxes.Cisco W/Lan,Edge. NetApp Data Storage, Commvault backup Hamilton Jesse Thomas jthomas@hamilton.edu SCCM upgrades, College Director of 315-859-4211 full Cisco Information W/LAN, Edge, Services Security,Voice, NetApp Data Storage Bellmore- Joe Innaco Jinnaco@bellmore- W/LAN, Cisco Merrick Director of merrick.k12.ny.us core and access CHSD Administrative& 516 9921057 layer switching, Instructional security, Technology and storage, firewall Data upgrades over 14 Protection/Security years, MS AD - MECM Exchange Camden Richard Behm Richard.behm@camdencounty.com Strategy& County Information 856-365-3228 Roadmapping, Technology& Switching, Communication Security Westchester Lennox Harris ldhl@westchestergov.com Switching, County Deputy CIO 914 995 8013 wireless, MS Exchange, Voice, Security Proposed Solution I NETWORK UPGRADE NRI engineers will replace key components of the Town's network infrastructure.This will ensure that the Town has a stable and well supported network for years to come. NRI engineers will develop a plan to replace the infrastructure at each Town site during available maintenance windows. Following the plan, NRI engineers will install a new, highly-available pair of Secure Network Services(SNS) appliances to host the Town's Identity Services Engine(ISE) and a new Firepower - - -- — 4 1 P a g e -- J---- NRI Management Center (FMC) appliance to manage the Town's Firepower Threat Defense (FTD) firewalls. Once complete, the engineers will deploy a new, highly-available firewall pair (3 pairs total) at the Town Hall, Policy Department, and Annex, along with standalone firewalls at the remaining four (4) sites. Each site will receive new building distribution switches (7 total). The access switches (for the buildings which require them) will be replaced to provide increased bandwidth and Power-over-Ethernet(PoE)capabilities (ig in total).Testing will be performed at the completion of each step. At the conclusion of the project,NRI will update the documentation created during the network assessment project. The updates will incorporate the final, as-built state of the network. The documentation will be added into a runbook which will also include recommended maintenance tasks and schedules.NRI will provide a backup copy of all in-scope configuration files at project completion. This project will take approximately six weeks to complete. The specified timeframe does not encompass project dependencies, including task interdependencies within or outside the project scope, NRI customer access, customer change management windows, or any hardware or software acquisitions beyond the purview of this project managed by NRI. NRI personnel will work closely with Customer's IT staff to perform the following services. Plan • Project Kickoff o Review project objectives. o Define an initial project work schedule. o Identify key Town and NRI personnel. o Document issue escalation paths. • Develop a Plan for Upgrades o Develop plans for equipment replacement using the information gathered during the infrastructure review. o Work with Town personnel to schedule maintenance windows and create a cutover plan for each location. o Town personnel will confirm the schedule with all Town departments. Implement • Configure vSphere Infrastructure to use Active Directory authentication o Configure the Town's vSphere environment to use Active Directory for authentication. o This includes the Town's VxRail cluster. The Town will open a support case with Dell for technicians to work with NRI resources to complete this task. • Define New Subnets and a New Town-Wide IP Addressing Scheme o Create a new IP addressing and subnet layout for the Town's network. o Solicit feedback and sign-off on the new addressing from Town IT resources before continuing to later project tasks. o Changes to the subnet layout and IP addressing scheme after sign-off will require a PCR. o Define new DHCP scopes. o Incorporate the new IP addressing scheme into the new device configurations. o Update NAT/PAT and ACLs on firewalls to reference the new subnets. • Prepare New Dell Servers for;Configuration o Rack and cable three (3) new Dell R36o servers at the Town Hall, Police Department, and Annex. 4 5 Page NRI o The servers'iDRAC(baseboard management controller)will be configured with an IP address and access credentials in preparation for further configuration tasks by the Microsoft engineers.Test virtual KVM access for remote configuration. o The servers' integrated network ports (LOMs) should be cabled for use once the operating system is configured. • Deploy the FMC 170o Appliance and Migrate o Deploy one FMC 170o appliance in the Town's datacenter. o Upgrade/downgrade the appliance's software to support the new and existing FTD firewalls. o If there is no software version available which supports all of the FTD firewalls, upgrade the FMC to the latest, Cisco-recommended software version. o Connect FTD firewalls to the new FMC appliance and test. o Decommission the old FMC appliance. • Deploy the SNS 3715 Pair and Migrate ISE Services o Deploy a pair of SNS 3715 appliances to provide highly-available ISE services. o Upgrade the SNS to the latest, Cisco-recommended software version. o Reconfigure network devices to use the new SNS appliances for ISE services. o Decommission the old ISE nodes. • Deploy Three Umbrella Virtual Appliances o Deploy Cisco Umbrella Virtual Appliances (VA) on Hyper-V hosts located at the Town Hall, Police Department, and Annex. o Add the VAs to the Town's Umbrella instance and replicate the policies from the existing VAs. o Configure the new VAs as the primary DNS resolvers in the Town's DHCP scopes. o Decommission any VAs which are no longer required after updates to the DHCP scopes are complete. • Deploy Three Cisco Secure Firewall HA Pairs o Deploy a highly-available pair (a total of three pairs) of Cisco Secure Firewalls (FTD) at the Town Hall,Annex, and Police Department. o Upgrade each firewall pair to the latest, Cisco-recommended software version. o Connect each firewall pair to the new FMC appliance for management. o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall pairs during a maintenance window. • Deploy Four Cisco Secure Firewalls o Deploy standalone (a total of four) Cisco Secure Firewalls (FTD) at the Highway Department, Recreation Center, Waste Management, and Human Resources Center. o Upgrade each firewall to the latest, Cisco-recommended software version. o Connect each firewall to the new FMC appliance for management. o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall during a maintenance window. • Deploy Seven Distribution Switches o Deploy seven(7) Catalyst 9500/930o distribution switches,one per Town site. o Upgrade each switch to the latest, Cisco-recommended software version. o Incorporate the new subnet and IP addressing scheme into the configuration of the switches. o Cutover and test during a maintenance window. • Deploy Fifteen Access Switches o Deploy fifteen (15) Catalyst 93oo access switches at the Town Hall, Annex, and Police Department. o Upgrade each switch to the latest, Cisco-recommended software version. o Incorporate the new subnet and IP addressing scheme into the configuration of the switches. o Cutover and test during a maintenance window. • As-Built Documentation&Post Cutover Support o Update the documents provided during the infrastructure assessment project to match the final, as-built state of the Town's network. o Create a detailed runbook which includes documentation, updated hardware, software, and application configurations. This document will also contain recommended maintenance schedules. o Provide post cutover support during the twelve (12) hour period following each cutover. o Provide one calendar week of support per location after the location cutover is performed.This support is provided on a best effort basis,without an SLA. o NRI will provide a backup copy of all in-scope configuration files at project completion. o Three months after the main project is completed, NRI engineers will analyze the performance of each firewall and domain controller,then optimize,tweak,and fine tune settings. Delivery Team: Roles and Responsibilities NRI will provide the core resources required to plan and execute this project and ask that Town of Southold provide the complementary resources required to assist in the planning and execution of this project. NRI will require access to several subject matter experts and managed services staff to complete this engagement. NRI Project Monitoring This engagement will leverage the assistance of a Project Monitor that will work with the Town of Southold's personnel to perform the following activities: Project Initiation&Logistics • Coordinate and conduct the client project kickoff meeting. • Complete essential project initiation activities including validating entry criteria. Scope, Timeline, and Budget Management • Create and maintain project outline(milestones) and budget. • Initiate and manage Project Change Request (PCR). Communication and Stakeholder Management • Prepare and distribute project status reports. Quality and Risk Management • Serve as the primary contact between the NRI project team and the client. • Track identified risks,issues, and decisions. Project Closeout NRI offers full Project Management as an additional service that can be added to this engagement if there are complex dependencies, or otherwise more comprehensive project management is preferred. - - - 7 1 P a g e -- - NRI I MICROSOFT CONSULTING Town of Southold ("Southold") has put for an RFP for an upgrade of their Active Directory and Exchange environments. Active Directory has three (3) domain controllers currently running Windows Server 2012 R2 and a domain and forest functional level of Windows Server 2012 R2. Southold would like to upgrade the domain controllers to Windows Server 2022 and the domain and forest functional levels Windows Server 2016. The two(2) Exchange servers are currently running Exchange 2019 CU14.Southold would like to upgrade these servers to Exchange 2019 CU15. Upon conclusion of this initiative,Southold envisions upgraded AD and Exchange environments. Core BTS, Inc., d/b/a NRI (herein "NRI") would like to position its experience in these technologies, as well as its status as a Microsoft Cloud Solutions Partner and Azure Expert Managed Services Provider ("MSP"), as evidence that it can be a trusted advisor to Southold to provide guidance, expertise, and implementation execution. PROJECT WORK ESTIMATE AND,TIMELINE Southold - Active Directory and Exchange Upgrade Project Monitoring Project Mi-crosoftcon'selfting Disitovor and Plan ■ Build Stabilize Deploy Project Initiation The Project Initiation phase is the critical first step to set the foundation of success for this engagement by engaging key stakeholders and ensuring that both technical and organizational prerequisites are met before the project starts. The technical work focuses on deploying tools for discovery,gathering detailed insights into the source and/or destination environments, enabling efficient planning and identifying potential challenges. High-level tasks that may be performed during the Project Initiation phase: ORGANIZATIONAL READINESS • Validate project entry criteria: Assess readiness by reviewing access, accounts, configurations, and remote access requirements to ensure project prerequisites are met. • Refine schedule: Set initial schedules and agendas to align with project milestones. • Define project team:Identify and assign owners or subject matter experts for each relevant technology or workload.This person is responsible for providing information and making decisions on their assigned technology/workload. TECHNICAL DISCOVERY • Deploy Migration Tools and Run Discovery Reporting • Use tools to analyze the existing technology environment, capturing key configurations and identifying data sources for analysis, enabling efficient planning for migrations. • Validate environmental access OUTCOMES • Ensure all entry criteria are met for project kick-off readiness. - -- ----- - 8 1 P a g e NRI • Technical data collection is in-progress to support Discover&Plan phase. Project Monitoring The key goals of this workstream include monitoring project activities (such as scope, timeline, and budget) and providing routine status communications to stakeholders throughout the duration of the project. Project Monitoring Activities This engagement will leverage the assistance of a Project Monitor that will work with the Southold personnel to perform the following activities: • Project Initiation and Logistics o Coordinate and conduct the project kickoff meeting o Complete essential project initiation activities including validating entry criteria • Scope,Timeline, and Budget Management o Create and maintain project outline(milestones) and budget o Initiate and manage Project Change Request(PCR),if needed • Communication and Stakeholder Management o Prepare and distribute project status reports • Quality and Risk Management o Serve as the primary contact between the NRI project team and the client o Track identified risks,issues, actions, and decisions • Project Closeout NOTE: NRI offers full Project Management as an additional service that can be added to this engagement if there are complex dependencies or if more comprehensive project management tasks are preferred. Project Monitoring Assumptions Assumptions made surrounding this workstream's work efforts include: 1. NRI and Southold will confirm the timeline during project initiation to ensure proper alignment and preparedness of sequential tasks. 2. Southold will coordinate with NRI technical resources for hardware, accounts, or access as needed. 3. Southold will provide a resource to manage client resources and project-related tasks. --- -- -- - -- 9 I P a g e - --- NRI Project Monitoring Timeline Project Monitoring Project Initiation and Logistics Scope, Timeline, and Budget Management Communication and Stakeholder Management Quality and Risk Management Microsoft consulting Workstream The key goals of this workstream include upgrading the domain with two new Windows Server 2022 domain controllers,upgrading Exchange to Exchange 2019 CU15, and implementing a Windows Server 2022 FTP server in the DMZ. Discover and Plan Phase The Discover and Plan phase of this workstream will establish the foundation for the remainder of the project.This phase will solidify the plan for the remaining efforts and bring together the various aspects of this workstream into a cohesive vision and solution. High-level tasks that may be performed during this phase for this workstream include: • Define business and functional requirements o Prepare requirements to support the desired functionality • Identify priorities for each of the requirements • Discovery: Domain Services Current State o Conduct discovery workshops with subject matter experts o Run custom AD scripts and tools to determine health and collect data against each domain o Discover all application installations on domain controllers o Complete initial analysis of AD DS o Identify any AD DS dependent applications • Analysis and Design: Domain Services Future State o Complete Core Infrastructure Analysis o Complete Forest and Domain Structure Analysis o Verify domain replication is performed using DFS-R o Assess business continuity strategies (backup,recovery, monitoring) o Conduct a best practice analysis against gathered data o Create AD upgrade plan • Review and consolidate login scripts • Review the Exchange environment • Plan for implementation of Windows FTP server in the DMZ o Determine windows server version and VM specs for CPU,memory, and disk o Determine IP addressing and networking o Plan for testing of FTP • Create AD and Exchange upgrade plan and Windows FTP Server implementation plan • Present AD and Exchange upgrade plan and Windows FTP Server implementation plan ---- -- 10 I P a g e ----- TNRI Deliverables This phase will be complete when NRI has completed all outcomes and documents listed below and they have been reviewed with the Southold Program Manager. Phase Outcomes • Discovery and planning for AD upgrade to Server 2022, Exchange upgrade to 2019 CU15,and implementation of a Windows Server 2022 FTP server in the DMZ Phase Documents Document Name Revision Document Content AD`and,Exchange Initial • Executive Summary . 'Upgrade acid FTP Design ' Current State Review Plan Document, . Target State Architectural Model • High-level Roadmap ; Build Phase The Build phase of this workstream primarily involves developing the solutions and content required for go-live. During this phase, all key elements of the technical solution and deployment process must be carefully engineered and validated. High-level tasks that may be performed during this phase for this workstream include: • Upgrade the to Windows 2022 Domain Controllers o Select one domain controller to perform upgrade o Move FSMO roles to,another server if applicable o Demote the domain controller o If doing a new install,remove the server from the domain. o Install Windows Server 2022 on the server(new install or in-place upgrade). Upgrade to Windows Server 2019 will need to take place before moving to Windows Server 2022 if doing an in-place upgrade. o If doing a new install, add the server to the domain with the same name and IP address. o Promote the server back to domain controller o Configure AD DS services on new domain controllers o Configure DNS o Configure DHCP if applicable o Configure NTP if applicable o Client will configure other applications if applicable o Configure AD DS sites and services with new domain controllers o Validate new domain controller functionality o Repeat the process for up to three(3) domain controllers • Upgrade the domain and forest functional level to Windows Server 2016 • Install Exchange 2019 CU15 update to all Exchange servers • Build Windows FTP server in the DMZ o Virtual Machine Setup: ■ Provision a new Windows Server(latest supported version, e.g.,Windows Server 2022)VM in the DMZ network. ■ Configure VM with appropriate CPU, memory, and storage specifications based on expected FTP workload(e.g.,4 vCPUs, 8 GB RAM, 1oo GB storage). iiIPage NRI ■ Install and configure the latest service packs and security updates for the Windows Server operating system. o IIS Configuration: ■ Enable and configure IIS features on the Windows Server VM. ■ Install and configure the FTP Server role within IIS to support secure file transfers. ■ Configure FTP site settings,including directory structure, authentication (e.g., anonymous or basic authentication), and SSL/TLS for secure connections. o Network and Security Configuration: ■ Assign a static IP address within the DMZ subnet for the VM. ■ Configure firewall rules to allow FTP traffic(ports 20, 21, and passive mode port range)to the VM. ■ Implement security best practices,including disabling unnecessary services, enabling Windows Defender, and configuring user access controls. ■ Ensure the VM is isolated from the internal network, adhering to DMZ security policies. Deliverables This phase will be complete when NRI has completed all outcomes and documents listed below and they have been reviewed with the Southold Program Manager. Phase Outcomes • Windows 2022 domain controllers servers deployed,AD upgraded successfully, and Exchange upgraded successfully • Windows Server 2022 FTP server built in the DMZ and ready for testing Phase Documents Document Name Revision Document Content FTP As-biiift Document Initial . High level capture of configuration settings for the FTP server Stabilize Phase The Stabilize phase of this workstream involves testing the technologies configured during the Build phase and performing any necessary reconfiguration based on testing feedback.The goal of the Stabilize phase is to ensure that all implemented technologies are operating to specification and ready to support the Deploy phase activities. High-level tasks that may be performed during this phase for this workstream include: • Validate domain health • Validate DNS health • Validate DHCP health • Validate Exchange functionality • Testing and Validation of the Windows FTP server o Test FTP server functionality,including file upload/download, authentication, and SSL/TLS connectivity. o Verify accessibility from external networks while ensuring no unauthorized access to internal network resources. --- --- - ---- 12 1 P a g e ----- --- ----NRI o Document test results and confirm compliance with security and performance requirements. Deliverables This phase will be complete when NRI has completed all outcomes and documents listed below and they have been reviewed with the Southold Program Manager. Phase Outcomes • AD and Exchange upgrades validated successfully • FTP successfully tested Phase Documents Document Name Revision Document Content FrP As linilt Document; ;Updated, . ;..High level capture of;configiiration ,. F. settings,for. FTP,server Deploy Phase The Deploy phase of this workstream involves implementing the technologies built and tested in the previous phases.The goal of the Deploy phase is to successfully execute the plans and solutions created throughout this workstream with minimal impact to the business. High-level tasks that may be performed during this phase for this workstream include: • Deploy the FTP server into production • Documentation and Handover o Provide documentation detailing the VM configuration,IIS settings,FTP server setup, and firewall rules. o Conduct a knowledge transfer session with the Town's IT team to ensure operational understanding. Deliverables This phase will be complete when NRI has completed all outcomes and documents listed below and they have been reviewed with the Southold Program Manager. Phase Outcomes • Documentation delivered and FTP server is deployed Phase Documents Document Name Revision Document Content FTP As-built Document Final . High level capture of configuration settings for the FTP server Microsoft Consulting Assumptions Assumptions made surrounding this workstream's work efforts include: i. Three (3)AD domain controllers will be upgraded either in-place or via new installation. Efforts will be made to keep the names and IP addresses of the servers. 2. Two(2) Exchange servers will be upgraded. 3. One(i)FTP server will be deployed. 131Page -- NRI 4. Southold's virtualization infrastructure(e.g.,VMware, Hyper-V)is already in place and has sufficient capacity to host the new VM. 5. The DMZ network is pre-configured with necessary routing and firewall capabilities to support external FTP traffic. 6. Southold will provide necessary administrative credentials and access to the virtualization platform and DMZ network. 7. Southold's IT team will handle post-deployment management,including user account setup and ongoing server maintenance. 8. Any software licenses required(e.g.,Windows Server) are already available or will be provided by Southold. 9. The expected FTP workload is within the capacity of the specified VM resources; any performance issues requiring resource scaling will be addressed post-deployment. 1o. External testing of the FTP server will be conducted in a controlled manner to avoid service disruptions. Microsoft Consulting Timeline Microsoft . Ditcover and PlanFINE Project setup and kickoff Discovery: Domain Services Current State Analysis and Design: Domain Services Future State Review and consolidate login scripts Review Exchange environment Plan for implementation of Windows FTP server in the DMZ Create AD and Exchange upgrade plan and Windows FTP Server implementation plan Present AD and Exchange upgrade plan and Windows FTP Server implementation plan Upgrade the to Windows 2022 Domain Controllers Upgrade the domain and forrest functional level to Wdinwos Server 2016 Install Exchange 2019 CU15 update to all Exchange servers Build Windows FTP server in the DMZ ,A Validate domain health ,;. Validate DNS health Validate DHCP health Validate Exchange functionality t Testing and Validation of the Windows FTP server eploy Deploy the FTP server into production Documentation and Handover Conduct a completion meeting -------- -- --------- -- 14 P a g e ------ -- NRI NRI Microsoft and Cisco Qualifications: Ohe -ofAhe.World's Top Microsoft Partners At NRI,we believe that'successful evolution requires comprehensive understanding' -, �_ ..._.._ outoJ 6 11 2 Microsoft ��Microsoft I { Microsoft IN $o a nrts Part xr noNZ M1,C, m Dartmr � sohn;o s Pant+ I Solution Paitner Advanced Specializations Microsoft MVP$- secu,iry f inhaswnure I •( Digtw App mnovu�*n Designations: on Staff 1 Marc 11 Arurc 300+ 3- 16 Microsott'Certifletl PAC Memberships Consultants Years of Delivering Value ` pp Microsoft I^■ icrosoft M !all f �W sonR.ava�s, i s:,t�r N neuaa i neaic+nwm t Microsoft Partner Azure Expert MSP Winner Rom Microsoft MSUS Partner Awards Make the, Most of. Your Cisco Solution our focus is on always helping our clients maximize the value of Cisco products and services to get the most of your business. I `Partnership Makes'Anything Possible Cisco;Certifications&:Specializations NRI is one of the leading Cisco partners in United ;NRI is amongjustahandful of Cisco Gold Certified Partners to hold the integrator.Provider,andCX Advanced States.We've been recognized for our proven ability to Speciatiiation Certifications.This distinction put us among the very best Cisco Channel Partners in the country. build innovative,enterprise-wide digital solutions that 'deliver[fetter business outcomes. " From Initial product procurement to end user training and adoption,our Cisco expertise enables us,to provide you with the design,Implementation,and support services needed to successfully leverage Cisco's product suiteand maximize your IT investment. _Cisco Gold Certified -• :i • „. -,...• Partnersince 4 Environmental Full[-Stack Hybrid Work Solution Hybrid Cloud r Sustamabibty Observability Solution Computing Solution' ®®VCisco Career:Certified J Individuals on staff Hybrid ,iAdVaCollaboration b on ( Advanced Adrcen Networking Solution Architecture- Networks ArchitectLa Architecture 6' / Customer Experience Master Cisco Cisco.'.' Advanced. cCiE Collaboratio yp n Herflex JOT 2 Specializations Certifications --__---------- Master. Cisco Unified Contact , Cisco Webex I Collaboration. Networking Center Express Contact Center SaaS ----- ------ 15 P a g e NRI Cost Proposal Professional Services Pricing Summary Service Description Price Fixed Fee $69,000.00 NRI Fixed Fee Billing Terms • Town of Southold agrees to compensate NRI for the effort required to deliver all items outlined in this Statement of Work. Modifications to this project via the Change Management Process may change the associated fees. • This engagement will be performed on a fixed-fee basis, with phased billing. This fixed fee project will be invoiced at the phased completion stages,specified below. • This fixed fee price is inclusive of all travel related expenses. • Payment Schedule - $17,250.00 Upon Completion of the Planning Phase of the Project and Before the Start of the Implementation Phase(25%) - $17,250.00 Upon Completion of Implementation Work at the Town Hall,Police Department, and Annex(25%) - $17,250.00 Upon Delivery and Review of Project Documentation (25%) - $17,250.00. Upon Completion of the. Post-Deployment Performance Tuning(25%) Investment Summary Component Pricing Delivery;Services $3,9,150. Total Price $39,150 Invoice Schedule Invoice# Invoice Milestone Invoice Amount 1 Upon acceptance of proposal $20,000 2 Upon completion of Deploy phase $19,150 Total to be Invoiced $S9,150 16 Page NRI Network Appliances QtV Item Number Description Term(Months) Bulbs Price ExtPrlce Frequency 1 FMC1700-K9 Secure Firewall Management Center 1700 Chassis Prepaid $18,49059 $18A90.99 1 CON-SNTFNIC1700K SNTC-BXSXNBD Secure Rewall 12 Prepaid $3,782A0 $3.782.40 2 FMC-MG-PS-AC- FMC IOSOVJAC Power SuppV Prepaid Mo $O.OD 105OW 2 CAB-9K12A-NA Power Cord,125VAC13ANEMAS-15Pkag,North America Prepaid $0.00 $0.00 1 SF-FMC-7.4.0-K9 Secure Fkavall Management Center Software v7.4.0 Prepaid $0.00 $000 1 FMC-MG-NIC-SFP FMCX710-DA2 dual-part 10GSFP+NIC Prepaid $0.00 $0.t10 2 FMC-MG-HDD-240G6 FMC24OGBSATAM2 Prepaid $DAD $0AO 1 FMCMG-HWRAID FMC M6 Boat optimized M.2 Paid controller Prepaid $0.00 S"O I FMC-M6 TPM-2.0 FMC Trusted Platform Module 2.0 Prepaid $OOO $OAO I FMCMG-CPU-A7232P FMC AMO3.16Hz7232P120VJSC/32MB Cache DDR43200MH2 Prepaid $0.00 $0.00 2 FMC-MG-MEM-X-IGGB FMC 16GB16GBRDIMMSRx43200(8Gb) Prepaid $0.00 Wo 1 FMCMG-MRPJD-12G FMC 12G Modular RAID controller With 2GS cache Prepaid ftoo $0.00 2 FMC-MG-HDD-I.2TB FMC MG127812G SAS 1OK RPM SFFHOD Prepaid $O.00 $0.00 1 FMGM6.0-I010174C FMC Intel X71OT2LOCPU3G1L2xIOGbEP14SOCP3.0NCC Prepaid $0.00 $0.OD 1 FMC-M6.00P3-KIT FMCC2XXOCP3.OInterposerW/MethAssy Prepaid $0.DO $0.00 2 SFP-IOG-SR. 10GBASE-SRSFPMODULE Prepaid $55 m $1,139 IG 2 SNS-3715-R9 Small Secure Network Sewer for ISE Applications Prepaid $923432 $IBA68.64 2 CON-SNTSN3715K9 SWIG-B)5WOSmOl Secure Network Sewer for ISEApp 12 Prepaid $1,652110 $3.304.00 2 SNS- GDDGB12G SAS IDK RPM SFFHOD Prepaid $564sG $1.129.12 HB6000lOK12NMG 2 SNS-PSUI-1200W 1200YJ Titanium power supplV for C-SerlesServers Prepaid $0.00 $0.00 2 SNS-PSUI-1200LV-2 2nd120OW Titanium power sopplV for C-SedesServers Prepaid $404.72 $809.44 4 CAB-9K12A-NA Power Cord,125VAC13ANEMA5-15Plui;NorthAmerica Prepaid $0.00 $OAD 2 SNS-CPU-14310 Intel 43102.1GH2/1201'J12C/18MBDOR42667MHz Prepaid $0.00 $O.00 4 SNS-MR-XIGGIRW 1GGSR014MMSRx4320D(8Gb) Prepaid $0.00 $0.00 2 SNS-TPM-002C 7PM2ATCG,F1PS140-2,CCEAL4+Certified,for M6seivers Prepaid $0.00 $0.00 2 SW-37X6-ISE-K9 ISE Software Load onSMS-3GxS-K9appliance Prepaid $O.DO $O.OD QtV Item Number Description Teen(fdonths) Bulbs Price Ext Price Frequency 2 SMS-RAID-220116 12G SAS RAID ControUerve/4GBFBWC(16Oru)w11UBritt Prepaid $0.00 $MOO 2 SMS-PCIE-IQtDGF Intel X710quad-portIOGSFP+IJiC Prepaid $0.00 $0.00 2 SFP-HIOGB-CU3M- IOGBASE-CU SFP+CABLE 3 M Prepaid $60.74 $121.48 Subtotal: $47,24G.03 - ------ --- -------- ---- 171 P a g e NRI Townitall pry Item Number Description Term(Months) DROUS Price Est Price Frequentil 2 CSF1220CX-70-K9 Secure Fimvrall1220 Appliance,CompacL Threat Defense Prepaid SZ34M $4,69336 2 CON-SNTCSF1XTOK SNTC-WGXNBD Secure Firewall1220 Appliance.Compact 36 Prepaid $89520 $1,790.40 2 CSF1220CXTTM CSF1220EX Threat Defense IPS&Malware Defense License 36 Prepaid $0.00 80.00 2 L-CSF1220CX-TM-3Y OF1220CXThreat Defense lPS&.Mahvare Defense 3YSubs 36 Prepaid $1,914.69 $3,829.78 2 CSF12000-PWR-AC Secure Firewa91200 Series external PSU for compact models Prepakf $O.OD $Mao 2 CAB-AC Pawer[ord,11011 Prepaid $000 $OAM 2 SF-F1200-TD7.6-K9 Threat Defense software 7.6 for 12M Series Rewall Prepaid ftno %Do 2 CAB-CONS-1158-C 6FT Console cabk USB-C to USB-C Prepaid $0.00 $0.00 2 CSF1220CX-BSE Secure Firewa01220C Essentials License Prepaid S0.01) $0.00 2 C5F1200GRACK-MNT- Secure Firewapl200 Series rackmount kit rat compact models Prepaid $46934 $938.68 2 SFP-Id1OGB-CU1Mm OSCOSFP+COPPERTWINAX CABLE UMMAXAL CABLE-SFP+SFP+ Prepaid $60.19 S12038 33 FT 1 C9SOO-24Y4C-£ Catalyst 950024x1/10/25G and A-port40/1000,Essential Prepaid S72,291.06 S72,291.06 1 CON-SNTP CO5024EY SNTC-24X7X4 Catalyst 950024-port2511006 only.Esse 12 Prepaid $2,414.40 $2,414.40 1 C95O0-DNA-24Y4C-E C9500 DNA Essentials,Term License 36 Prepaid $O.00 SOAO 1 C9500.ONA-L-E-3Y 36 months-DIVA Essentials 3 Year License 36 Prepaid $552.41 $552.41 2 CAB-9K12A-NA Power Cant 12SVAC13ANEMAS-1S Plug,North Ameaica Prepaid $0.00 $0.00 1 C9KPL"JR-650WAC-R 650VlACConfig4 Power Supply front to back cooling Prepaid $0.00 $020 1 C9N Pd1iR-6501NAC--R/2 6SOLhlACConfig4 Power Supply front to back eooing Prepaid $1.243.74 $1,243.74 1 OK-F1-SSO-BLANK Cisco pluggable SSO storage Prepaid $0.00 $0.00 2 OX-T1-FANTRAY Catalyst 95OO Type 4 front to back cooling Fan Prepaid 90,00 SOW 1 C9500-NW-E C95MNetwork Stack Essentials Prepaid $000 Saco 1 C9500-SSO-NONE NoSSDCardSelected Prepaid $0.00 Moo 1 C9SCO-RFlD RFlDSelected Prepaid $OAO $0.00 1 NETVJORK-PNP-UC NetworkPiug-n-Play License for zero-touch device deployntent Prepaid $0.oll $0.00 7 C9300-48dd-E Catalyst 930048-partUPoE+,Network Essentials Prepaid %157.13 $43,0 991 7 CON-SNTP-C930210L SNTC-24X7X4 Catalyst 930048-por 12 Prepaid $1.209.60 $%467.20 7 C9300-014A-E-48 C9300 DNA Essentials,48-PartTerm Licenses 36 Prepaid $OJXt $0.00 7 C9300-014A-E-484Y C9300 DNA Essentials.48-port 3 Year Term license 36 Prepaid $618.70 S4,33M90 7 C9300-NW-E-48 C9300 Network Essential!;48-portlicense Prepaid SO.OD Sam 7 SC9300OK9-1715 CAT9300/9400/9500/960DUNNERSAL Prepaid $0.00 $Q00 7 PWR-CI-110®VJACP I IoIWJ AC So+platinum Config 1 Power Supply Prepaid SOAO $0.00 7 PL4R-CI-11OOWACP/2 IIGrWJAC80+platinum ConfgI Secondary,Paw&Supply Prepaid $1,04957 S7,346.99 14 CAB-TA-NA North America ACTypeA Power Cable Prepaid $0.OI) $0.00 7 C9300-SSO-NONE NoSSOCardSeletted Prepaid SOW So" -- - ----- - 18 1 Page NRI QtV Ram Number Description Terra(Months) owing Pdce ' ExtP(Ice Frequenty 7 C9300-STACK-NONE No Stack Cable Selected Prepaid $0.00 moo 7 C9300-SPWR-NONE No Stack Power Cable Selected Prepaid $0.00 $O.W 7 CSK NONE Smart Building Application Opt Out SKU Prepaid $O.W MOD 7 W-ACC-RO" RUBBER FEET FOR TABLE TOP SETUP 9200 and 9300 Prepaid $0.00 $0.00 7 C9K-ACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLATION,QTY 4 Prepaid $0.00 SOW 7 CAB-GUIDE-1RU 1RU CABLE MANAGEMENT GUIDES 9200and930D Prepaid $0.00 $0.00 7 C9300-NM-BX Catalyst 9300 8 x IOGE Network Module Prepaid $1,40MG4 $9,860Aa 7 NEWJORK-PNP-UC Network Plug-n-May License for zero-touch device deployment Prepaid MOO $QOO 14 SFP-1CG-LAM= 10GBASE-LRMSFPMODULE Prepaid $02.72 S%138.08 Subtotal: $110,117.77 Annex QtY Item Number Description Term(Months) BOKng Price Fitt price Frequency 2 CSF1220CX-70-K9 Secure Firewali122OAppliance.Compact,Threateefense Prepad $2.34&68 $4.69336 2 CON-SNYCSFIXTOK SNTG8X5XNHD Secure Firewall1220ApptiartmCompact 36 Prepaid $895.20 $1,79DA0 2 CSF1220CXT TM CSF 1220CXThreat Defense lPS&,Matware Defense License 36 Prepaid $0.00 $0.00 2 6C5F1220CX-TM-3Y CSF1220CXThreat Defense lPS&,Matware Defense 3YSubs 3G Prepaid $1,9114.89 $3029.78 2 CSF12000-PVIR-AC Secure Firewa01200 Series external PSU for compact models Prepaid $0.00 $OW 2 CAB-AC Powereord,11011 Prepaid $O.W $0.00 2 SF-F1200-TO7.6-K9 Threat Defense software RG for 1200 Series FirewaR Prepaid $0.00 $0.00 2 CAB-CONS-USB-C GIFT Console cable USB-CtoUSB-C Prepaid $0.W $O.W 2 CSF1220CX-BSE Secure FirewaB 1220CEssentials License Prepaid $0.00 $0.W 2 CSF1200C-RACK-MNT■ Secure Firewall1200 Series radmount hit for compact models Prepaid $4034 $93B.68 2 SFP-H70G8-CU1Mo CISCOSFP4 COPPER TWINAX CABLE TWWAXAL CABLE-SFPeSFP. Prepaid $60.19 $120.38 33 Fr 1 C9500-24Y4C-E Catalyst 950024x1/1O/2SG and 4-part40/10D6yEssential Prepaid $12.291.06 $12,291.06 1 COr9-SHTP-C95024EY SNTC24X7X4 Catalyst SSW 24-port2511 COG orftEsse 12 Prepaid $2,414.40 $2.414.40 1 C9500-DNA-24Y4C-E C95W DNA Essentials,Term License 36 Prepaid $0.00 $0.00 1 C9500-DNA-L-E-W 36 months-DNA Essentials 3 Year License 3G Prepaid $552.41 $S52A1 2 CAB-9K12A-NA Power Cord.12SVAC13ANEMAS-15 Plug,North America Prepaid $O.W $0.00 1 C9K-PWR-6SOWAC-R 650WACConfigA Power Supply front to back coaling Prepaid $000 $0.00 1 C9K-PWR-G50WAC-R/2 650WJACCcn0g4 Power Supply front to back ccoung Prepaid $1.243.74 $1,243.74 1 C9K-F7-SSO.8IANK Cisco pluggableSSDstorage Prepaid $0.00 $0.00 2 C9K-T7-FANTRAY Catalyst 9SW Type 4 front to back cooling Fan Prepaid MOD $040 1 C9500-NW-E C9SW Network Stack,Essentials Prepaid $000 S9.00 1 C9500-SSO-NONE NoS50 Card Selected Prepaid $0.00 $0.00 1 C9SW-RFID RFIOSelected Prepaid $0.00 $D.W 1 NETWORK-PNP-UC Network Plug-n-Play License for zero-touch device deployment Prepaid $0.00 $0.00 3 C9300-48H-E Catalyst 93048-partUPo£i,NeWorkEssentials Prepaid $%157.13 SIBA7139 3 CON-SNIP-C9302101. SNTC-24XV4 Catalyst 930048-par 12 Prepaid $1,209.60 $3.628.80 3 C9300-ONA-E-48 C0300 DNA Essentdals,48-ParrtTermLicenses 36 Prepaid SOW $04:10 3 C9300-DNA-E-48-3Y C93W DNA Essentials,48-par43 Year Term license 36 Prepaid $61WO $1.05G.10 -- ---- --- - 19 I P a g e NRI QIV Item Number Description Term(Months) Baling price Extpda Frequency 3 C9300-NW-E-48 C9300 Network Essentials,48-pottileense Prepaid $0.00 OAD 3 SC93000K9-171S CAT9300/940019500/9GODUN1llERSAL Prepaid $0.00 $0.00 3 PWR-Cl-1100WACP 1100WAC80+platinum[onFgIPowerSupply Prepaid $0.00 $0.00 3 PWR-CI-1100WAC-P/2 1100WAC80+platinum ConggI Secondary PowerSupply Prepaid $1.04957 $3,148.71 6 CAB-TA-NA North AmerhaAC Type A Power Cable Prepaid $000 $0.00 3 C9300-SSD-NONE No SSO Card Selected Prepaid $O= $0.00 3 C9300-STACK-NONE No Stack Cable Selected Prepald $O.OD $0.00 3 C9300-SPVJR-NONE No Stack Power Cable Selected Prepaid $0.00 $OAO 3 C9K-NONE Smart Building Application Opt Out SKU Prepaid $O.00 $0.00 3 C9KACGRBFT RUBBER FEET FOR TABLE TOP SETUP 9200 and 9300 Prepald $0.00 $0.00 3 CSK-ACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLAMON,QTY 4 Prepaid $0.00 $OAO 3 CAB-GUME-IRU 1RU CABLE MANAGEMENT GUIDES 9200 and 9300 Prepaid $Q00 $OAO 3 C930O-NM-8x Catalyst 9300 8 x IDGE Network Module Prepaid $1,408.64 $4,22592 3 NETWORK-PNP-LIC Network Plug-n-Play License to r zero-touch device deployment Prepakl $0.00 $0.00 6 SFP-IOG-I.RM= 10GBME-LAMSFPF400ULE Prepaid $652.72 $3,91632 Subtotal: $63,121.4S Police Dept Qty Item Number Description Term(Mooths) Baling Prla Ext Price Frequenty 2 CSF1220CX-70-KO Secure Firetsaa1220Appliante,Compact Threat Defense Prepaid $2,346.69 $4,69336 2 CON-SNY CSFIXTDK SNTC-8MXNBD Secure FWwa11122OAppliance,Compatt 3G Prepald $895.20 $1,790.40 2 CSF1220CXT-TM CSF1220CXThreat Defense lPS&Mah+rue Defense License 36 Prepaid $0.00 SaDD 2 L-CSF1220CX-TM-3Y CSF1220EX Threat Defense lPS&Malware Defense 3YSubs 36 Prepaid $1.914.89 $3829.78 2 CSF120OC-PWR-AC Se ewe Firewall 1200 Series external PSU for compact models Prepaid $O.00 $0.00 2 CAB-AC PowerCord,110V Prepaid $0.00 $O.00 2 SF-FI200Y07.6-K9 Threat Defense software 7Sfor120MilesFkewail Prepald $am Saco 2 CAB-CONS-USB-C GFT Console cable.uSB-CtoUSB-C Prepaid $0.00 $0.00 2 ESF1220CK-OSE Secure Fkewa01220C Essentials License Prepaid $0.00 $0.00 2 CSF120OC-RACKMNTv Secure Firm-jag 1200 Series rackmountkit for compact models Prepaid $46934 $9381i8 2 SFP-HIQGB-CU1Mm CISCOSFP+COPPER TWINAXC48LETOMAYAL CABLE-SFP+SFP+ Prepaid $60.19 $12038 3.3 FT 1 C9500-24Y4C-£ Catalist950D24xl/10/25G and 4-port40/1009,Essential Prepaid SIZ291M $12,291.06 1 CON-SNTP-C95024EY SNTC-24=4Cataiyst950024-port2S/100G only,Esse 12 Prepall $2,414AO $2,414AO 1 C9S00-ONA-24Y4CE C9500 DNA Essentials,Tenn License 36 Prepaid $0.00 $O.OD 1 C9S00-DNA-L-E-3Y 36 months-DNA Essentials 3 Year License 36 Prepaid $552A7 $SS2.41 2 CAB-9K12A-NA Power Cord,125VAC13ANEMAS-IS Plug.North America Prepald Moo $0.00 1 C9K-PWR-6SOWAC R 6SDWACCOnRs4 Power Supply front to back cooling Prepaid $0.00 $0.00 1 C9K-PL1JR-650WAC-R/2 65OWACCoaDg4 Power Supply front to back cooling Prepaid $1.243.74 $1,243.74 1 C9K-F1-SSD-BLANK CiscopluggableSSOstorage Prepaid $0.00 $O.DD 2 C9K-TI-FANTRAY Catalyst9SMType4 front to back cooling Fan Prepaid $0.00 $0.00 1 COS00-NW-E C9500NetworkStack,Essentials Prepald MOO $0.00 1 C95W-SSO-NONE No SSD Card Selected Prepaid $0.00 $0.00 -- - - �------- - 20 1 Page NRI Qty Item Number Description Term(Months) BOling Pdco ExtPrlto Frequency 1 C9500-RFID RFIDSelected Prepadi $0.00 $0.00 1 NETWORK-PUP-UC Network Piug-n-Play License for zero-touch device deployment Prepaid $0.00 $0.00 5 C9300.48H-E Catalyst 930048-portUPoE+,Network Essentials Prepaid $41IS7.13 $30785.65 5 CON-SNTP-C930210L SHTC-24=4Cata%st930048-por 12 Prepaid $1.209.60 $6.048.00 5 C9300-DNA-E-48 C9300 DNA Essentials,48-PortTemoLicenses 36 Prepaid $O.@o $0.00 5 C9300-DNA-E-484Y C9300 DNA Essential%48-port,3 Year Term license 36 Prepaid $618.70 $3,09350 S C9300-NW-E-46 C9300 Network Essentials,49-port license Prepaid $0.0o $0.00 5 SC9300UIt9-1715 CATS3 0 019400/950019 6 0 0 0NMRSAL Prepaid $0.00 $0.00 5 P1NR-C1-11O0VVAC-P 1100Y]AC 80+platinum Config I Power Supply Prepaid $0.o0 $0.00 S PIUR-C1-11OO1NAGP12 11001,'JAC80+platinum ConfigISecondary Power Supply Prepaid $1.04957 $5,247.8S 10 CAB-TA-NA NorUr America AC Type A Power Cable Prepaid $0.00 $0.00 5 C9300-SSO-NONE No SSD Card Selected Prepaid $0.00 $0.00 S C93OD-STACK-DONE No Stack Cable Selected Prepaid $0.00 $0.00 5 C9300-SPNJR-NONE No Stack PowerCable Selected Prepaid $0.00 $0.00 5 COK-NONE Smart Buiiding Application Opt Out SKU Prepaid $0.00 $0.00 S CSK-ACC-RBI.7 RUBBER FEET FORTABLF70P SETUP 9200 and 9300 Prepaid $0.00 $0.00 S C9K ACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLATION,QTY 4 Prepaid $040 $0.00 S CAB-GUIDE-1RU IRU CABLE MANAGEMENT GUIDES 9200 and 9300 Prepaid $0.00 $0.00 5 C9300-N69-8X Catalyst 93008x10GEPPetwwrkModule Prepaid SILO % $7.04320 5 NETWORK-PNP-UC Network Plug-n-Play License for zero-touch device deployment Prepaid $O.00 SO= 10 SFP-IOG-LRM- 10GBASE-L.RMSFPMODULE Prepaid $652.72 %S2R20 Subtotal: $06,619.61 Highway Dept Qty Item Number Description Tom(Months) Owing Pace ExtPrice Frequency 1 CSF120OC-PWA-AC Secure Firemra91200 Series external PSUforcompactmodels Prepaid sow $0.00 I CAB-AC Powercerd,110V _ Prepaid $0.00 Saco 1 SF-F1200-107.6-K9 Threat Defense software 7.6 for 1200 Series Firewi l Prepaid $0.00 $0.00 I CAB-CONS-USB-C 6FT Console cabte,USB-CtoUSB-C Prepaid $0.00 $0.00 1 CSF12000-RACK-MNT= Secure Firewa01200 Series rackmount kit for compact modeis Prepaid $46934 %Ca34 1 C9300.48H-E Catalyst 930048-portUPoE+,N@h:brkEssentials Prepaid $6,157.13 $fi',157.13 1 CON-SNTP-C93021CL SNTC-24X7x4 Catalyst 93004e-por 12 Prepaid $1.209.60 $1,209.60 1 C9300.ONA-E-49 C9300 DNA Essentials.48-Port Term Licenses 36 Prepaid $0.00 $0.00 1 C9300-DNA-E-49-3Y C9300 DNA Essential%48-porC3 Year Term license 36 Prepaid $6111170 $618.70 1 C9300-NW-E-4B C9300 Network Essentials,48-portlicense Prepaid $000 $0.00 I SC93O0UK9-171S CAT9300/9400/9500/96000NIUERSAL Prepaid Sow $O.QO 1 PWR-C1-11001/AC-P 1100WAC80+platinum ConfigI Power Supply Prepaid $Q00 $0.00 I PifJR-C1-11OQWAC-P/2 I10OWAC60+platinum ConOgI Secondary Power Supply Prepaid $1.04957 $1.04957 2 CAB-TA-NA North America AC TypeA Power Cabre Prepaid $0.00 $0.0o 1 C9300-SSO-NONE NoSSO Card Selected Prepaid $0.00 $0.00 I C93OD-STACK-NONE No Stack Cable Selected Prepaid $0.00 $0.0o 211Page NRI Qty Item Number Description Term(Months) BDRrrg Price Eat Price Frequency 1 C9300-SPLIJR-NONE No Stack Power CableSeletted Prepaid $0.00 SO.00 1 COK-NONE Smart BuIlVingAppldcation Opt Out SKU Prepaid $0.00 Saco 1 C9KACC-RBFT RUBBER FEET FORTABLE TOP SETUP 9200 and 9300 Prepaid $DAD $0.00 1 C9K-ACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLATION,QTY 4 Prepaid $O.DD $0.00 1 CAB-GUIDE-1RU 1RU CABLE MANAGEMENT GUIDES 9200 and 9300 Prepaid 90.00 $0.00 1 NETWORK-PNP-ldC Network Plug-n-Play License for xem-touch device deployment Prepaid MOO SOAR 1 CSF1210CE-TO-K9 Secure Fdrewall1210 Appliance.Compact Threat Defense Prepaid $1,642.G7 $1.642.67 1 CON-SNIP-CSF10ET0 SNTC-24X7X4Secu re,Firerva01210App11 ante,Compact 36 Prepaid $1,002.62 $1.01)2.62 1 CSF1210CETTtA CSF 1210CE Threat Defense IPS&Malware Defense License 36 Prepaid $O.00 $0.01) 1 L-CSF11210CE-71VI-3Y CSF1210CE Threat Defense lPSSamp;INakvam Defense 3YSubs 36 Prepaid $1,340.42 $1340.42 1 CSF1210CE-OSE Secoe,Fdrewa01210CE Essentials License Prepaid $OAO $OAO 1 Nil-BLANK-Tt Cisto Catalyst TVpeI Network Module Blank Prepaid $0.00 $0.00 1 C9300-NM-NONE No Network Module Selected Prepaid $000 Saco Subtotal: $13.490.05 Rec Center Qty Item Number Description Term(Months) Bidding Price EhtWIN Frequency 1 CSF120OC-PLVR-AC Secure Firewall 1200 Series external PSU for compact models Prepaid $0.00 S0.00 1 CAB-AC Pow"Cord,11011 Prepaid $DAO Sa.00 1 SF-F1200-707.6-K9 Threat Defense software 7.G for 1200 Series Fkewall Prepaid $DOD SOAO 1 CAB-CONS-USB-C 6FT Console cable.US13-CtoUSS-C Prepaid $O.OD SOAO 1 CSF120OC-RACK-MNT. SecureFirewap120OSeriesrackmounthitfor compact models Prepaid $46934 $469.34 1 C9300.4BH-E CateiVst930048-portUPoE*,NelworkEssenUats Prepaid SG,1S7.13 96,157.13 1 CON-SNTP-CD30210L SOC-24XV40taiyst930048-par 12 Prepaid $1,209.60 $1,209.60 1 C9300-DNA-E-49 C9300 DNA Essential%48-PartTermLfaenses 36 Prepaid $0.00 $0.00 1 C9300-DNA-E-49-3Y C930D DNA Essentiais,48-port3 Year Tenn Qcense 36 Prepaid $6118.70 $61&70 1 C9300-NW-E-49 C9300 Network Essentials,48-pottlicense Prepaid $0.00 SO.00 1 SC93OWK9-171S CAT9300/9400f9SOD/96000NNERSAL Prepaid $0.00 SOAO 1 PWR-C1-11OOWACP IIGO JAC80+platinumConfigIPowerSupply Prepaid $0.00 g0A0 1 PWR-C1-1100WACP/2 11DOWAC80+platinum[onfigI Secondary Power Supply Prepaid $1.04957 $1.049.57 2 CAB-TA-NA North America AC Type A Power Cable Prepaid $0.00 $0.00 1 C9300-SSO-NONE No SSD Card Selected Prepaid $O.00 Saco 1 C9300-STACK NONE NO Stack Cable Selected Prepaid WDO $0.00 1 C9300-SPWR-NOPJE No Stack Power CableSelected Prepaid $0.00 $CAD 1 COK-NONE Smart Building Application Opt Out SKU Prepaid $OA0 SHOO 1 C9K-ACC RBFT RUBBER FEET FOR TABLE TOP SETUP 9200 and 9300 Prepaid $om SO-Go 1 C9K-ACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTAU ARON,QTY 4 Prepaid $0.00 SOcO 1 CAB-GUIDE-1RU 1RU CABLE 41MAGSMENT GUIDES 9200 and 9300 Prepaid $0.00 SO-GO 1 C9300-N0.1-8X Catrdyyst93008x10GENetwo"lodule Prepaid S1.wm $1408.64 100 NETWORK-PNP-1!C Network Plug-n-Play License for sero-touth device deplaiment Prepaid $CLOD VXOD 1 CSF1210CE-70-K9 Secure firewa01210 Appliance.Compact,Threat Defense Prepaid $1.642.67 $1,G42.67 i 22 1 Page NRI qty Item Number Description Term(Months) Owns price ExtPrlce Frequency 1 CON-SNTP-CSFICETO SNTC-24X7X4SecureFlretirall121OAppliance,Compact 36 Prepaid $1,OD2.G2 $1.092.62 1 CSF1210CETTM CSF1210CE Threat Defense lPS Sump;Malvme Defense License 36 Prepaid $0.00 $%GO 1 L-CSF121DCE-TM-3Y CSF1210CE Threat Defense lPS&Mahvare Defense 3YSubs 36 Prepaid $1,340.42 $1,340.42 1 CSF1210CE-USE Secure Firewan 1210CE Essentials License Prepstd $m $0.00 Subtotal: $14.898.69 Waste eft Item Number Description Term(Months) Billing Price text Price Frequency 1 CSF1200C-PWR-AC SecureRrewall 1200 Series external PSU forcompact models Prepaid $0.00 $0.Oo 1 CAB-AC PowerCord,11OV Prepaid $O.00 $0.00 1 SF-F1200-707.6-K9 Threat Defense software 7.6 for 1200 Series Firewall Prepaid $0.00 $0.00 1 CAB-CONS-USB-C 6FT Console cabiGUSB-CtoUSB-C Prepaid $0.00 $0.00 1 CSF12000 RACK MNT. Secure Firewal1120D Series rackmountkitforcompactmodels Prepaid $46934 $46934 1 C9300-48ti-E Catalyst930046-portUPoE+NetrtorkEssentFzb Prepaid 96.157.13 $4157.13 1 CON-SNIP-C930210L SNTC-24X7X4 Catalyst 93DO 48-por 12 Prepaid $1.209.60 $1,2a9.60 1 C9300-UNA-E-48 C9300 DNA Essentials,48-Port Term Licenses 36 Prepaid $0.00 $0.01) 1 C9300-DNA-E-48-3Y C9300 DNA Essentials,4B-porL3 Year Term Ikense 36 Prepaid $618.70 $618.70 1 C9300-NW-E-48 C9300 Network Essential%48-portlicense Prepaid $0.00 $0.00 1 SC9300UK9-1715 CAT93 0 01940 0/9 50 019 60 0 0NNERSAL Prepaid Moo $0.00 1 PWR-C1-110OWAC P I100Vt1AC80+platinum ConflgI power Supply Prepaid $D.DD $O.00 1 PVJR-CI-1100WAC-P/2 110OWACSO+platinum ConRgI Secondary power Supply Prepaid $1.049.57 $1.049.57 2 CAB-TA-MA North America AC Type A Pam rCable Prepaid $0.00 $0.00 1 C9300-SSD-NONE No SSO Card Selected Prepaid $Dim $0.D0 1 C9300-STACK-140NE No Stack CableSelected Prepaid $0.00 %oo 1 C9300-SPWR-NONE No Stack Power Cable Selected Prepaid $0.00 $0.00 1 C911-NONE Smart Building Application Opt Out SKU Prepaid $O.00 $0.00 1 C9K-ACC RBFT RUBBER FEET FOR TAKE TOP SETUP 9200 and 9300 Prepaid $Dim $0.00 1 O*ACC SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLATION.QTY 4 Prepaid $O.00 Saco I CAB-GUIDE-1RU 1RU CABLE MANAGEMENT GUIDES 920D and 9300 Prepaid $0.00 $0.00 1 C9300-NM-OX Catalyst 93DO ax IOGE Network Module Prepaid $1,403.64 $1.408.G4 1 NETWORK-PNP-LIC Network Plug-n-Play License for zero-touch device deployment Prepaid %0.00 $0.00 1 CSF1210CE-70-K9 Secure Arerrall1210 Appliance,Compact,Threat Defense Prepaid $1.642.67 $1,642.67 1 CON-SNTP-CSFICETO SNTC-24X7X4 Secure Rrewail1210 Appliance,Compact 36 Prepaid $1.002.62 $1.00162 1 CSF1210CET-TM CSF1210CE Threat Defense tPS∓1.1alware Defense License 36 Prepaid $0.00 $0.00 1 L-CSF1210CETM-3Y CSF12IOCE Threat Defense lPS&Malware Defense 3YSubs 36 Prepaid $1.340.42 $1,340.42 1 CSF1210CE-OSE Secure Firewa01210M Essentials License Prepaid $0.00 $O.Oo Subtotal: $14,898.69 MR Center 4w Item Number Description Torm(Months) Biding Prlco Ext Price Frequency 1 CSF12DOC POUR-AC Secure Firesvail1200 Series external PSU for compact models Prepaid $0.00 $0.00 --_-- - 23 1 P age NRI Qty Item Number Description Term(Months) Boling Price Ent Price Frequency 1 CAB-AC Power Cord,110V Prepaid $0.00 $0.00 1 SF411200-707.6-K9 Threat Defense software 7.6 for 1200 Series Prewa0 Prepaid $0.00 $0.00 1 CAB-CONS-USS-C 6FT Console cable,USB-CtoUSB-C Prepaid $0.00 30.00 1 CSF12000-0RACK-MNT- SecureRtewa$12WSedesrackmountkit for compact models Prepaid $46934 $469.34 1 C9300-48H-E Cataiyst930048-poetUPpE+,Network Essentials Frepam $6,157.13 $6,157.13 1 CON-SNTP-C930210L SNTC-24X7X40talySt930049-por 12 Prepaid $1,209.60 $1,209.60 1 C9300-ONA-E-48 C9300 DNA Essentials.48-PostTerm Licenses 36 Prepaid $0.00 $0.00 1 C9300-DNA-E-48-3Y C9300 DNA Essential%48-poit,3 Year Term Ikense 36 Prepaid $618.70 $61B.70 1 C9300-NW-E-48 C0300 Network Essentials,48-port license Prepaid $0.00 3o.00 1 SC9300UK9-171S CAT9300/9400/9500/960DUNIVERSAL Prepaid $0.00 $0.0D 1 PWR-C1-110OWAC-P 11001VAC80+platinum Con6gI Power Supply Prepaid $0.00 $0.00 1 PWR-C1-1100WAC-P/2 11OO1VAC80+platinum ConOgI Secondary power Supply Prepaid $1.049.S7 $1,04957 2 CAB-TA-NA North America ACiypeA Power Cable Prepaid $0.00 $0.00 1 C9300-SSD-NONE No SSD Card Selected Prepaid $0.00 $0.00 1 C9300-STACK-NONE No Stack Cable Selected Prepaid $O.00 $0.00 1 C9300-SPWR-NONE No Stack Power Cable Selected Prepaid $0.00 $0.00 1 C9KNONE SmartBuRting Application Opt Out SKU Prepaid $0.00 $0.00 1 C9K-ACC-ABFT RUBBER FEET FOR TABLE TOP SEFUP 9200 and 9300 Prepaid $0.00 $0.00 1 COK-ACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLATION,QTY 4 Prepaid $O.00 MO, 1 CAB-GUIDE-1RU 1RU CABLE MANAGEMENT GUIDES 9200 and 93DO Prepaid $0AO $0.00 1 C93OO-Nfd-8X Catadyst93008x10GE Network Module Prepaid $1.408.64 $1ABIC4 1 NETWORK-PNP-UC Network Plug-n-Play License for zero-touch deulce deployment Prepaid $0.00 $0.00 1 CSF1210CE-TO-K9 Secure Firewall1210Appliarim Compact.Threat Oefense Prepaid $1,64267 $1.642.67 1 CON-SNTP-CSFICETD SNTC-24X7X4 Secure FTrewa01210 Appliance,Compact 36 Prepaid $1.0D2.62 $1,002.62 1 CSF1210CET-TM CSF 121 OCE Threat Defense IPS&Malwrare Defense License 36 Prepaid MOO $0.00 1 L-CSF1210CE-TM-3Y CSF 12IOCE Threat Defense IPS&Malware Defense 3YSubs 36 Prepaid $1,34OA2 $1,340.42 1 CSF1210CE-BSE Secure Firewa01210CE Essentials License Prepaid $DAD $0.00 Subtotal: $14.898.69 Servtws Qty Item Number Desulption Tam(Months) Baling Price Fart Price Frequency 20.00 PS-SNY-END-al Enterprise Network Consultant III Prepaid $235.00 $4.700.00 239.00 PS-SNY ENO-Ill Enterprise Network Consultant III Prepaid $229.10 $S4,75490 49SO PS-SNY ENC Enterprise Network Consultant Prepaid $150.00 $7.425.00 10.00 PS-SNYENCII Enterprise Network ConsultantIf Prepaid $212.00 SZ120JOD 1 NYCONTRACT- NYSOGS Cisco,Umbrella contractoPh120800 Prepaid $0.®0 $0.00 PM20600 Subtotal: $68,999.90 Trelning[ndits Qty Item Number Description Term(Months) Baling Price FxtPrice Frequency S TRN-CLC-000 10 Prepaid Training Credu:RedeernWICLca Learning Partners Prepaid $0.00 $0.00 Subtotal: $0.00 Quote Subtotah $434,290im Estimated Sales Thy- $OAO Quote1lotal: $436,290.88 - --- -- 241 Page NRI Qty Item Number Description Term(Months) Billing Price Est Price Frequency 3 210-BJTR PowerEdge R360 Server Prepaid $659.16 $1,977.48 3 461-AAIG TRUSTED PLATFORM MODULE 2.0V3 Prepaid $35.12 $10536 3 321-BKHP 25 Chassis With upto8 Hot Plug Hard Drlva Front PERC Prepaid $13307 $39921 3 338-CMQZ Intel XeonE-24682.6GSC116T24M Cache Turbo HT(6S%Vd)ODRS Prepaid $329.66 $98M 3 412-BBHK Heatsink Prepaid $14.40 $43.20 3 370-APAP performance Optimized Prepaid $0.00 30.00 3 370-BCBM 560014tT/sUDIMMS Prepaid $0.00 $0.00 3 780-SCD1 C1,NoRAin for HODVSSOs(Mixed Drive TypesAllowed) Prepaid $0.00 $0A0 3 405-ABCO PERC H355 Controller Front Prepaid $576.73 $1,730.19 3 750-ACFR Front PERC Mechanical Part%front load Prepaid $1629 $40.07 3 384-BBBL Performance BIOS Settings Prepaid $0.00 $0.00 3 387-OBEY NoEnergyStar Prepaid $0A0 SOAD 3 Sao-BBDM UEFI BIOS Boat ModewithGPTPartition Prepaid Moo $0.00 3 394-ODW High Performance Fan Prepaid $70.61 $211.83 3 450-AMDH Dual(1+1)Redundant Hot-Plug Power Supply 600LJMM1100- Prepaid $315.47 $946.41 24OVac) 3 330-SCMK Wiser Config2 Butterfly Gen4fter(xWxB) Prepaid $38S3 $116.49 3 329-BJTG RowerEdgeR360Motherhoard with LOM161X Prepaid $0.00 $0.00 3 325-DEM PowerEdge 1UStandard Bezel Prepaid $1739 $52.14 3 350-BCTP Luggage TagR360 Prepaid $0.00 WO 3 403-BCRZ BOSS-111controller card+with 2 M2 960GS(RAID 11 Prepaid $1.426.62 $4,279M 3 470-BBIL BOSS Cables and Bracket forR360 Prepaid $17.74 $5322 3 634-CUGB VAndows Server 202S Standard,IGCORE,Ft.NoMed,NoCAt.Multi Prepaid $690.63 $2.071.69 Language 3 379-BFXT Connectivity Client-Disabled Prepaid $000 $0.00 3 634-CYOF ConnectiultyModule Prepaid $0.00 $0.00 3 S2B-CTiC IORAC),Enterprise 16G Prepaid $17352 $52056 3 528-COYT Secured ComponentVerifleation Prepaid $35.12 $10536 3 379-SCRG IDRAC,Factory Generated Password Prepaid $0.zo $OAO 25 P age NRI QtV Item Number Description Term(months) Billing price Exit price FrequencV 3 659-BFRK iORAC Service Module(ISM)Pre-Installed In OS Prepaid $%DO $0.00 3 379-BCQY iDRAC Group Manager.Disabled prepaid $000 SO= 3 618-BBEC Hyper-V role enabled With pre-lostatledStandard or DataCenter Ed OS Prepaid S032 $0.96 onincl Vhtual HDO 3 770-SaW ReadVRalls Sliding Rails Without Q:able Management Arnn(Al 2) Prepaid $4258 $127.74 3 770-SUMT CABLE MANAGEMENTARM Prepaid $23.66 $70.98 3 631-AACK No Systems Documentation,NoOpenManage DUO l6t Prepaid SO" $D.QO 3 340.OLXS PowerEdgeR36OShlpping Prepaid $17.38 M14 3 340-EWUJ PowerEdgeR350/R360 Shipping Material for25Chassis Prepaid $3S.12 $10536 3 389-FFNB PowerEdge R360 CCC Marking No CE Marking Prepaid $0.00 $0.00 3 707.6877 ProSupport4-Heur7x24 Technical Support and Assistance 3Years 36 Prepaid $ISM $48252 3 707-6889 ProSuppott 4-Ho ur 7x24 Onsite Service 2 Yews Exten de d 24 Prepaid $6931 $207.93 3 707-6992 ProSupport4-Hour7x24Onsite Service IYear 12 Prepaid SS33 $15.99 3 707-6946 Hardware Limited Warranty Pleas Onsite Service 12 Prepaid $45.77 $137.31 3 955-9041 DELL HARDWARE LIMiTEDWARRANTYPLUSONS 12 Prepaid $0.00 $0.00 3 989-3439 Thankyou choosing Dell PwSuppwt.For tech support,visit I Prepaid $000 $0.00 www.dell.com/suppottorcall 1-800-945-3355 3 841-5979 Keep your Hard Drive For Enterprise 3 Years 12 Prepaid $127.74 $383.22 3 900-S997 On-Site Installation Declined Prepaid $OAO $0.D0 6 370-BBZF 32GO UDIMM 560OMT/s ECC Prepaid $503.90 $3.023.40 3 400-AXTV 480GO SSD SATA Read Intensive 6Gbps 512 231a Hot-plug AG Drive, Prepaid $367.69 $1,103.07 1 OWPD,876TOW 6 45O-AALV NEMA5-1SPtoC13 Wall Plug,12S Volt,IS AMP 10 Feet(3mlPower Prepaid $0.00 $0.00 Cord,North America 3 528-DHTW Windows Server 2025 Standard.16COM OF Recovery Image,Multi Prepaid $OJDO $0.00 Lang,(Downgrade not inciudeM 3 528-DHVH Windows Server 202E Standard,No Media,WS2019 SW Downgrade Prepaid MOO $0.00 OF Media,Multi Language 3 634-CURL Windows Server 2025 Standard,No Medla,%452019 Sid Downgrade Prepaid SIMIO $3030 w/DVO Media,Multi Lang 3 634-CVGJ Undows Server 2025 Standard.16COR£.Media l6tt,Multi Lang, Prepaid $20.20 $60.60 (Downgrade not included) 3 528-DHVD Windows Sewer 202S Standard.No Media,VJS2022 Std Dmngrade Prepaid $0.00 $0.00 OF Media,Multi Language 3 634-EVBQ Wiindmvs Serve:202S Standard,No Media,VJS2022 Std Downgrade Prepaid $10.10 $3030 w/DUD Media.Muld Lang; 1 CORE-NOFGHT No freight charge toclleat prepaid MOO $0AO 1 OMNIA-CONTRACT- TOSYNNEXOmnla Partners contractOR200803CVberSecurity Prepaid AM SO.00 R200803 Solutions and Associated Products&,Services Subtotal: $19.482.87 Quote Subtotal. $19,492.87 EstlmandSalesTax: S0.00 QuoteTotal: $19,482.07 261Page NRI Quote Totals/Summary Professional Services $69,000 Delivery Services $39,150 Network Appliances $365,2 0.98 Server Quote $19,482.87 Total: $ 92,923.85 - ---- ------ ----- 271 Page -- --------NRI Cisco Cisco Systems.Inc.Additional Terms and Conditions for Authorized User Agreements under GROUP 7360D AWARD 22802 INFORMATION TECHNOLOGY UMBREUA CONTRACT-MANUFACTURER BASED (STATEWIDE) Contract Number PM20800 Cisco Systems, Inc. ("Cisco" or"Contractor") is pleased to offer Cisco Products and Services("Cisco Technology")to the Authorized User issuing a RFQ or similar bid document("RFCr)under the terms and conditions of the NYS OGS Contract Number PM20800 ("Contract") as further set forth below. For purposes of this Authorized User Agreement, Cisco Technology shall refer to Ciscds Hardware, On- Premise Software,Cloud Products and Services. Whereas the parties intend to enter into an Authorized User Agreement that includes additional and/or alternative terms and conditions that result in a transaction which is,on an overall basis,more favorable to the Authorized User than if the transaction did not include such additional or alternative terms and conditions,the parties agree to the terms and conditions set forth herein.By accepting a Cisco authorized Reseller response to RFC,Authorized User hereby agrees that the conditions set forth in subsections(i) through(iii)of Appendix B,Section 28(b)of the Contract are met and further accepts and agrees that the following terms and conditions are hereby incorporated into the Contract: 3. The Cisco End User Ucense Agreement ("EULA"), available at httos:/IvAvw.cisco.com/c/en/us/about/legal/cloud-and- sgfhvare/end user license a r men html is hereby incorporated into the Contract by reference and applies to Authorized Usees usage of Cisco Technology acquired under the Contract.Asset forth in the EULA,and forthe avoidance of doubt,any changes to the EULA apply only to Cisco Technology acquired or renewed after the date of the EULKs modification.In the event of a conflict between the Contract and the EULA as it relates tothe Authorized Usees usage of Cisco Technology,the terms and conditions of the EULA shall take precedence,unless and only to the extent a term or condition in the EULA conflicts with a substantially similar applicable term or condition in a provision referenced in Appendix B,Section 28(c)of the Contract. 2. The Contract's definition of"Data"is replaced in its entirety with the following definition of "Data": any information,text,audio video,formula,or algorithms thatthe Authorized User may provide to Contractor pursuant to Authorized Usees use of Cisco Technology under the ContracL Notwithstanding the foregoing, "Data" excludes "Systems Information" as that term is defined in Contractoe s Systems Information Data Brief("Systems Information Data Brief")available at httos://trustoortal.cisco.com/c/r/ctp/home.htmI("Cisces Trust Portal")- S. in order to procure certain Cisco Technology offered under the Contract that stores,acts upon and/or locates Data OCONUS,the Authorized User may agree to Data location outside of the Continental United States("OCONUS")1 Accordingly,if Authorized User specifies that Data may t For the convenience of Authorized Users when procuring Cisco Technology under RFQs that specify OCONUS, Cisco Technology is included on the Contract that may store,act upon,and/or locate Data in Data Centers --_— ----28 1 P a g e NRI el �lel �le Cisco be located OCONUS in a RFQ or otherwise procures Cisco Technology that stores, acts upon and/or locates Data OCONUS pursuantto the RFQ,Authorized Useragrees to allow Data(in transit and at rest)to be stored,acted upon,and located in Data Centers OCONUS.If Authorized User specifies that Data is to be located in the Continental United States ("CONUS") in a RFQ or otherwise procures CONUS Cisco Technology pursuant to the RFQ„ an Authorized User who properly configures its organization for U.S. based location will have its Data acted upon, located,and stored at rest in data centers physically located within the United States.To facilitate certain operations and aspects of CONUS Cisco Technology,certain exceptions to the foregoing exist, specifically, cross-border transfers of Data may occur when 1) a user engages in collaboration with users outside of the United States,2)a user travels to a location outside of the United States,and/or 3)a user shares Data with a Cisco employee,subcontractor or agent who provides support and/or maintenance services,including helpdesk,online and support services, in a Follow-the-Sun model globally. Data will be secured as set forth in Cisco's Information Security Exhibit available at httos://trustportal.cisco.com/c/r/ctpltrust- portal.htmlg/1604543381171981("Information Security Exhibit)and in accordance with Cisco Privacy Data Sheets applicable to the Cisco Technology("Privacy Data Sheets")located at Cisco's Trust Portal.For the avoidance of doubt,this paragraph applies to Lots 1,2 and 3 of the Contract and does not apply to services covered under Lot 4 of the Contract 4. Notwithstanding anything to the contrary, unless Authorized User procures Cisco Expert Care National Services,Authorized User and Contractor hereby acknowledge and agree that Cisco's support and maintenance services,including but not limited to Cisco SmartNet Total Care(SNTC) and Software Support Services,may be provided in a Follow-the-Sun model by Cisco's Technical Assistance Centers (TAC) and other support personnel located globally who may access Data directly,or indirectly,from OCONUS.If Authorized User procures Cisco Technology that includes support,support shall be a Follow-the-Sun model by personnel located globally unless Cisco offers and Authorized User procures applicable Expert Care National Services.'For the avoidance of doubt, unless Authorized User procures Cisco Expert Care National Services, Authorized User consents to the global delivery of all Cisco helpdesk,online and support services. 5. Cisco's standard Data handling,retention and security processes,procedures and policies as set forth in Cisco's Information Security Exhibit and applicable Privacy Data Sheets shall apply to the Authorized User's usage of Cisco Technology for orders placed under the Contract and shall take precedence over any related requirements in the Contract, including,without limitation those found in Section 2.72 (Security) or Section 3 for Contractor's Cloud Solutions where they are consistent with or exceed such requirements in Section 2.72 and/or Section 3 of the Contract. Notwithstanding the foregoing,any time periods set forth in Section 2.72 and/or Section 3 shall not apply unless required by applicable law or as modified herein.As related to Cloud Solutions and Section 3 terms,Contractor will encrypt Data in transit and at rest,retain and return Data, and store,process and retain Data in the locations indicated and only to the extent and as set forth in Contractor's Privacy Data Sheet for the applicable Cloud Solution purchased byAuthorized User.In particular,the parties further acknowledge and agree to the following: OCONUS. Upon Authorized User's request prior to the issuance of a RFQ Cisco and/or its Resellers will inform the Authorized User if a Cisco Technology intended to be procured stores,acts upon,and/or locates Data OCONUS. --- 29 1 P a g e NRI � Illol '1� - clsc a. Pursuant to Section 2.72.2 (Security) of the Contract, Contractor Security Incident notification policy is as follows: Contractor shall notify Authorized User at the email address(es) designated by Authorized User in the RFQ within 48 hours or sooner if required by applicable law of Cisco's confirmation of a Security Incident.The Contract's definition of"Security Incident"is replaced in its entirety with the following definition of 'Security Incident": a successful or imminent threat of unauthorized access,use,disclosure,breach, modification, or destruction of information or Data; or interference with information technology operations. b. Section 2.72.2 (Data Breach-Required Contractor Actions) of the Contract is hereby revised as follows:In the event of a Data Breach,the Contractor shall:(i)notify the NYS Cyber Command Center at cycom@its.ny.gov and(528)242-5045(normal business hours or(528)292-2200(after hours,weekends,holidays),DHSES CIRT at cirt@dhses.ny.gov, and the affected Authorized Users'representative(s)at the email address(es)designated in the RFQ as soon as possible, but no greater than 48 hours or sooner if required by applicable law,from the time the Contractor confirms Data Breach.Cisco's commitment to notify the NYS Cyber Command Center by telephone number is conditioned upon NYS Cyber Command Center adequately staffing such phone number with a 24x7 call center designated to field Data Breach notifications;(ii)include a description of the incident,the effect of the incident and the procedure for rectifying the incident in the content of any notice to affected parties to whom notice of the Data Breach is required herein; (iii) coordinate all communication regarding the Data Breach with the NYS Cyber Command Center,DHSES CiRT,and Authorized User(including possible communications with third parties); (iv) cooperate with the Authorized User, NYS Cyber Command Center, DHSES CIRT, and any Contractor working on behalf of the Authorized User or the NYS Cyber Command Center in attempting(a)to determine the scope and cause of the breach and (b)to prevent the future recurrence of such security breaches; and (v) promptly take commercially reasonablesteps to mitigate the effects and minimize any damage resulting from the Data Breach.Contractor shall provide written notice to the Authorized User of initial remedial action taken by the Contractor to mitigate the Data Breach.if Contractor Is unable to mitigate the Data Breach within a reasonable timeframe as required by applicable law and services become unavailable as a result of Contractor's inability to timely mitigate the Data Breach, Authorized User may contract with a third party to provide the required services and the Contractor will be responsible for the reasonable costs of those directly related services. c. Section 2.72.4(Security Reports):Contractors written descriptions of its physical and/or virtual security and/or internal control processes are available on Cisco's Trust Portal for the Authorized Users review. d. Pursuant to Section 3.4.3(Contractor Access to Data)of the Contract,the parties agree that Data may be used, including copied, transferred, accessed, and monitored, in accordance with Contractor's Privacy Data Sheets for applicable Cisco Technology. Additionally,Systems Information shall be used in accordance with Contractor's Systems information Data Brief and Personal Data,as that term is defined in Contractor's Personal — -- -- -- 30 1 P a g e NRI Cisco Data — Data Brief available at Ciscds Trust Portal, shall be used in accordance with Contractoers Personal Data—Data Brief e. Section 3.7(Encryption)of the Contract-Data will be encrypted as set forth in the Privacy Data Sheet for the applicable Cisco Technology_Upon reasonable request of Authorized User,Contractor will provide additional information on the level of encryption that a particular Cisco Technology implements to enable the Authorized User to make an informed decision based on its risk assessment as to the sufficiency ofthe encryption level that Contractor uses for a particular Cisco Technology_ This Agreement represents the entire understanding of the parties with respect to its subject matter and supersedes any prior oral orwfitten communications or understandings with respect to the subject matter herein_This Agreement may only be amended by a written document signed by the Authorized User and Contractor.Any conflict between the Contract and this Agreement shall be resolved by giving priority to the additional and/or alternative terms and conditions of this Agreement Proposal Acceptance To proceed with the work as defined by this proposal, all parties must sign below acknowledging that they have read the entire document and agree to all terms as laid out within. Core BTS, Inc., d/b/a NRI Town of Southold ignature:• ' . Signature: Print Name: Print Name: itle e. Date: Date: 311 Page NRI Statement of Non-Collusion STATEMENT OF NON-COLLUSION (To be completed by each Bidder.) n accordance with Section 103-d General Municipal Law, effective September 1, 1966, .every bid or proposal,hereafter made to a political subdivision of the State of any public department,agency,or official thereof or to.a fore district or any agency or official thereof for work or services performed onto be performed,or goods sold or to be sold,shall contain the following statement sibscribed to by-the bidder aid affirmed by such:bidder as true under the.Penalties of perjury;non-collusive bidding certification. A. By submission of tlus.bid,each bidder.and each person signing on behalf of any bidder eenifics,,and in the. case of a joint bid, each party thereto certifies as to its own organization,cinder penalty of perjury,that to the best of knowledge and belief- (1) The prices,in this bid have been arrived at independently without collusion,consultation, communication,.or agreement,for the purpose of restricting competition,as to any matter relating to such prices%vith Any other bidder or any competitor. (2) Unless otherwise required by late, the prices which Have been.quoted in this bid have not been knowingly disclosed by the bidder and will not knowingly be disclosed by the bidder prior to opening,directly or indirectly,to any other bidder or to any competitor. (3) No attempt lags been made, or will be made by the bidder;to,induce. any other person, partnership, or corporation to,submit or not to submit a.bid i'or the purpose of restricting competition. B. The person signing this bid or proposal certifies that he has filly informed himself regarding the accuracy of the statements contained in this certification,and under the statements contained in this ecrtifcation,,and under*the penalties of perjury, affirms the truth.thereof, such:penalties being applicable-to the bidder,as well as,the_person signing in itsbehalf. C. That attached hereto(if a corporate bidder)is a certified copy of resolution authorizing the execution of this'certifrcatc by the signature of this bid or proposal on behalf of the corporate bidder. RESOLUTION Resolved that Jason Eiekmann of the :(Nameof signatory) Core BTS,Inc.,d/b/a NRt Be authorized to sign and submit the bid (Name of Corporation) 4r.proposal of this corporation for the following Project: infrastructure,Upgrade Project..Rr _20250512102935 and.to include in such bid or proposal the certificate as,to.non=collusion required by section one-hundred-three- d(103-d)of the.General.Municipal Law as the act and deed of such corporation,and for any inaccuracies or miss-statements in supli certificate this corporate bidder shall be liable under'the penalties of perjury. The foregoing is true and correct copy:of the resolution adopted by Cone BTS,Inc„dlb/a NRI corporation at a, meeting of the Bonrd.of Directors,held on the 29th day of May ,20 25 (SEAL OF THE CORPORATION Laws of Now York; 1965 = CIA ; ST Ch.751,Sec. 103-d,as amended effective on September 1, 1965. s SSNIJ i awe <<hi7ttlHW�i 32 Page NRI Terms and Conditions 1. Payment Terms.Payment is due within thirty(3o)days of invoice date.After this time period,interest accrues at the lesser of the maximum rate permitted under applicable law or one and one-half percent(1.5%)per month from the date due until paid.We shall have a purchase money security interest in the products delivered by us to secure payment of the purchase price and any installation charges until they are paid in full by you.If invoice is not paid by you after 6o days, you authorize us to file all documents(including UCC financing statements)deemed necessary by us to protect and maintain our security interests. 2. Independent Contractor:Taxes.We will perform all services hereunder in our capacity as an independent contractor and not as an employee or agent of yours.Our employees shall not be entitled to any privileges or benefits that you may provide to your employees,and we shall be responsible for payment of all unemployment,social security,federal income(state and local income where applicable)and other payroll taxes imposed by any governmental body on us in regard to our employees who are engaged in the performance of the services.Pricing set forth herein is exclusive of applicable sales,use and similar taxes assessed on the performance of any services.You agree to reimburse,indemnify and hold us harmless from and against any such tax,penalty and interest thereon levied against us for the provision of services to you hereunder. 3. No Hiring.For the term of the project and for a period of one year thereafter,you agree not to hire,solicit or accept solicitation of,through employment or otherwise,directly or indirectly,any of our employees or independent contractors with whom you have had any contact during the project,unless you obtain our prior written consent.Should you hire an employee or independent contractor of ours through employment or otherwise within this time period without our prior written consent,you will immediately pay as liquidated damages to us an amount equal to the relevant person's then current annual compensation(or the amount paid to or on behalf of the person in the last 12 months,in the case of an independent contractor). 4. Warran a. We warrant and represent that the services will be performed in a skillful and workmanlike manner according to those standards generally prevailing among consultants performing similar services under similar circumstances.To the extent that we are not the manufacturer of any hardware or software products that you may purchase as a result of or relating to our Services,we do not provide any warranty on such products,whether with respect to their design, performance,functionality or compatibility with your existing system.Any warranty with respect to product must come from the manufacturer.Our product procurement distributor or we will pass through to you any applicable warranties of the manufacturer,to the extent permissible. b. EXCEPT FOR THE EXPRESS WARRANTIES STATED IN THIS SECTION,WE DISCLAIM ALL WARRANTIES INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. 5. Our Indemnity.We will indemnify,defend and hold you harmless from and against any claims,liabilities, losses,expenses or damages(collectively,"Damages")caused by the services performed or the work delivered by us under these terms infringing any copyright,trade secret or any other proprietary right of any third party.Excluded from such indemnification are any claims related to(i)services performed on equipment or software which you covenanted that we had the rights to modify as set forth in Section 7 below,(ii)services performed to your specification or design and(iii) infringement resulting from or caused by your misuse or unauthorized modification of systems or product.We will also indemnify,defend and hold you harmless from and against any Damages resulting from our willful misconduct or negligent acts or omissions in performing the services which are the subject of these terms,except to the extent such Damages are caused by the willful misconduct or negligence of you,your employees or agents.Our obligation to indemnify and defend you with respect to any claim shall be subject to(i)your providing us with prompt notice of such claim,(ii)our having sole control over the defense and settlement thereof,(iii)your providing us with the information and assistance necessary to defend or settle such claim as reasonably requested by us,and(iv)the limitations on liability set forth in Section 6 below. 6. Limitations of Liability.WE WILL NOT BE LIABLE FOR INCIDENTAL,SPECIAL,PUNITIVE, INDIRECT OR CONSEQUENTIAL DAMAGES,INCLUDING FOR LOSS OF DATA OR ITS USE OR LOST PROFTTS OR OTHER ECONOMIC DAMAGES,EVEN IF ADVISED OF THE POSSIBILrI`Y OF SUCH DAMAGE.With the exception of indemnification for intellectual property infringement,your right to recover Damages from us in aggregate of all claims is limited to the amounts paid to us by you in the preceding twelve(12)months.You acknowledge that this limitation of liability is part of the consideration and was considered by us in establishing the prices and rates to be charged to you,which,but for this limitation,would have been higher. 7. Your Covenants.You covenant that:(i)you have the authority to agree to these terms and the funding necessary to pay for the requested services;(ii)you have title to or license or rights to use or modify any software or products which you have requested us to modify as part of such services;and(iii)you will provide us necessary access to your personnel, appropriate documentation and records and facilities in order for us to timely perform such services. 8. Requests for Changes.No change in the services provided hereunder will be performed until we receive a properly issued and executed Change Order;provided,however,that nothing herein will relieve you of the obligation to pay us for services rendered which were requested by you but are not documented in such a properly issued and executed Change Order or within the applicable scope of work. 9. Confidentiality.Each party acknowledges that it and its employees or agents may,in the course of the project,be exposed to or acquire information that is proprietary or confidential to the other party.Each party agrees to hold such information in strict confidence and not to discuss or disclose any such information to any third party for a period of three years.The parties acknowledge that the provisions of this paragraph shall not apply to:(a)information which at the time of disclosure is,or without fault of the recipient becomes,generally available;(b)information which either party can show was in its possession at the time of disclosure or was independently developed by it;(c)information received from a third 33 1 P a g e NRI party which had the right to transmit same without violation of any secrecy agreement with the other party;and(d) information which is required to be disclosed pursuant to court order or by law. io. Termination of Agreement.Either party may terminate our engagement at any time upon 3o days prior written notice to the other.Unless otherwise expressly stated in the body of this Agreement or related order(s), termination for convenience or default by Customer of any(i)licensing or subscriptions,(ii)products ordered from NRI that NRI cannot cancel with NRI's vendors,or(iii)services with a fixed term,shall incur a termination fee equal to ioo%of the unpaid price of the product and/or the unpaid remainder of the term,payable to NRI in full upon the effective termination date. In the event of termination for convenience or default by Customer for products or services not subject to the preceding paragraph,Customer shall within thirty(3o)days of the date of termination pay NRI all amounts owed for Products and Services provided by NRI during the Term of this Agreement up to and including the date of termination. ii. Entire Agreement:Amendment.These terms and the accompanying engagement letter sets forth the entire understanding of the parties with respect to the subject matter hereof and is binding upon both parties in accordance with its terms and may be amended only by an entry signed by both parties.There are no understandings,representations or agreements other than those set forth herein. 12. Assignment.You may not assign any of the rights or obligations hereunder without the prior written consent of NRI. 13. Notices.Any notice or communication from one party to the other concerning the terms hereof shall be in writing and shall be sent by certified mail,return receipt requested and postage prepaid or by commercial overnight mail to the most recent address that either party has specified in writing to the other. 14. Governing Law.These terms shall be governed by and construed in accordance with the laws of the State of Delaware. 15. Force Majeure.Neither party shall be liable to the other for any failures or delays arising out of conditions beyond its reasonable control,including,without limitation,work stoppages,fire,civil disobedience,delays associated with product malfunction or availability,riots,rebellions,storms,electrical failures,delays caused by the other party,and acts of God and similar occurrences. 16. Waiver:Severabilitv.Any waiver of any right or default shall be effective only in the instance given and if in writing and signed by the party against whom it is sought to be enforced and shall not operate as or imply a waiver of a similar right or default on any other occasion.If any term or provision hereof should be declared invalid by a court of competent jurisdiction,the remaining terms and provisions hereof shall be unimpaired,and the invalid terms or provisions shall be replaced by such valid terms and provisions as come closest to the intention underlying the invalid term or provision. REP Exceptions - Town of Southold Penalty Clause Timeliness of Completion The Vendor shall complete the full scoj2e of work outlined in this RFP within six(6)months of the contract start date. 'o ac thi t: 3c)days or onion thereof that � e , o3ect extends beyon the six ) rnont eadline, the vendor shall incur a financ a anal, o IO,O570-7? which '11 be de Meted ein t. -onsdei• Lion ne to � e e dor NRI Exception: Given the current economic and supply chain conditions,NRI cannot agree to this item as written.All products and/or services are subject to availability at the time of the order, and product backorders are not uncommon for products in high demand. Additionally, manufacturers periodically discontinue products and introduce new models; NRI has no control over the timing of any product obsolescence, discontinued availability, and price changes. Per company policy, NRI accepts liability for direct damages only. NRI will not agree to"a financial penalty." Limitations of Liability. NRI WILL NOT BE LIABLE FOR INCIDENTAL, SPECIAL, PUNITIVE, INDIRECT OR CONSEQUENTIAL DAMAGES, INCLUDING FOR LOSS OF DATA OR ITS USE OR LOST PROFITS OR OTHER ECONOMIC DAMAGES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. With the exception of indemnification for intellectual property infringement, the Town of Southold's right to recover Damages from NRI in aggregate of all claims is limited to the amounts paid to NRI by the Town of Southold in the preceding twelve (12) months. The Town of Southold acknowledges that this limitation of liability is part of the consideration and was considered by NRI in establishing the prices and rates to be charged to the Town of Southold, which, but for this limitation, would have been higher. --� _ 34 ( P a g e NRI Performance Standards The vendor's work shall meet or exceed all performance standards and technical specifications detailed in the RFP.If,at any point during the project or within six(6)months of the completion date,the Information Technologies Department determines that the contract has failed to meet one or more of the stated performance requirements,the vendor shall be subject to the following penalties: s� each er armante e�cienc, "dentified a ens 1 0 5000.0o shall b e .o . aC ice ale to Yh-ve:�da Ifth cumulative eifc�rma - penalties exceed io° a the cant Pact iic tl�e svn of t.a h I'llzi l a t rm at the can act a cause. NRI Exception: Per company policy, NRI accepts liability for direct damages only. NRI will not agree to performance penalties. Limited Warranty NRI warrants to the Town of Southold that the Services will be performed in a professionally diligent manner by qualified personnel and that the Services will materially conform to all applicable requirements and specifications identified in the RFP.If NRI fails to perform the Services as warranted,the Town of Southold shall so notify NRI within fifteen(15)business days after the date such nonconforming Services were rendered. Such notification shall include a reasonably detailed description of the nature of the nonconformity with the above limited warranty. Within thirty(3o)days after receipt of such written notification,NRI will re-perform such nonconforming Services at no additional charge to the Town of Southold or,if such re-performance still does not provide Services as warranted,NRI will refund any moneys paid to NRI with respect to such nonconforming Services. Termination for Convenience Notwithstanding any other provision,the Town of Southold reserves the right to terminate this contract for convenience at any time upon thirty (3o) days written notice. In the event of such termination for convenience,the Town of Southold shall be responsible for all work completed to date. till it shah of iab fa ant er inataz n ees o e�alties. rl�is penalty Clause "s e igne to i centi�" e eve dor to om Ie eLT11reject o time and to the fwll erfa 1 ee ,tender autTi e in t e +� . The timeliness an pe or ace :e Itie r� a eia isinee Lives, w ile t e tea inatia for convenient -lease rotec-ts the T=wn of Sauflaold s a ili�, t evxninate the tantr tt'f the rnunici a', deems NRI Exception: Unless otherwise expressly stated in the body of this Agreement or related order(s),termination for convenience or default by the Town of Southold of any(i)licensing or subscriptions or (ii) products ordered from NRI that NRI cannot cancel with NRI's vendors(inclusive of vendor services with a fixed term),shall incur a termination fee equal to ioo%of the unpaid price of the product and/or the unpaid remainder of the term,payable to NRI in full upon the effective termination date. Liquidated Damages FT�OMIIT es. ,�tl e�fa mance ens�represented above repre c*nt li�uidated de a he I`awn©f Southold's setae clams es in eI e eve a de a a d ,tie ties NRI Exception: Per company policy,NRI accepts liability for direct damages only.NRI will not agree to liquidated damages. Limitations of Liability. NRI WILL NOT BE LIABLE FOR INCIDENTAL, SPECIAL, PUNITIVE, INDIRECT OR CONSEQUENTIAL DAMAGES,INCLUDING FOR LOSS OF DATA OR ITS USE OR LOST PROFITS OR OTHER ECONOMIC DAMAGES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. With the exception of indemnification for intellectual property infringement, the Town of Southold's right to recover Damages from NRI in aggregate of all claims is limited to the amounts paid to NRI by the Town of Southold in the preceding twelve (12) months. The Town of Southold acknowledges that this limitation of liability is part of the consideration and was considered by NRI in establishing 35IPage NRI i the prices and rates to be charged to the Town of Southold, which, but for this limitation, would have been higher. 361Page NRI TOWN OF� SOUTHOLD ` ' 1 . ON M REQUEST FOR PROPOSALS INFORMATION TECHNOLOGIES INFRASTRUCTURE UPGRADE PROJECT Town of Southold: REQUEST FOR BIDS: Information Technologies Infrastructure Upgrade The Town of Southold invites competitive sealed bids from qualified professional firms for the upgrade of its network and security-infrastructure to the next generation Cisco's and Microsoft's technologies. This comprehensive turnkey technology project aims to modernize and enhance the performance of the Town of the technology infrastructure, which supports critical municipal operations, improves service delivery, and ensures a secure resilient scalable technology environment. The selected vendor will work with Southold's Information Technologies staff and be responsible for the design, procurement, deployment, installation, configuration, testing, and documentation of all hardware, operating systems, software, and application upgrades. This government project, funded by the Town of Southold, must comply with all applicable local, state, and federal regulations governing public sector information technology projects. Vendor bids must also adhere to all terms and conditions described in this document. Project Overview Phase I • Define new subnets and a new town wide IP addressing scheme • Replace end-of-life Cisco ASAs at seven (7) locations. • Install fiberoptics connecting four(4) locations. • Upgrade and increase the WAN connectivity, security, and bandwidth to support Southold's current and future initiatives as defined in Phase I and Phase II of this document. • Upgrade the Cisco Firepower Server and Management Center Systems (MCS). • Integrate the Cisco Firepower MCS with the existing Cisco AMP application. • Upgrade Cisco ISE-PIC Server and ISE Passive Identity Connector application. • Replace end-of-life switches, routers, and fiber converters. • Replace end-of-life domain controllers at three (3) different locations. • Upgrade Microsoft Active Directories and the forest functional level. • Incorporate the existing two (2) Microsoft Exchange servers into the new Active Directories structure • Incorporate the existing VxRail cluster and vSphere systems into the new Active Directories structure • Create an FTP site to be located in a DMZ Phase II - See Appendix A 1. Core location connectivity redundancy 2. Cisco Umbrella server migration 3. Security camera network connections 4. Public W-Fi Responses should be organized into Phase I and Phase'll, respectively. Applicants must submit written bids to the Southold Town Clerk's office at Southold Town Hall, PO Box 1179, 53095 Main Road, Southold, New York 11971, by 2:00 PM on 06/12/2025. Bid proposals must be in sealed envelopes and labeled "Infrastructure Upgrade Project." Please copies of your proposal ensuring the original copy is marked as "ORIGINAL" on the cover. Request for Bid Overview Project Name: Infrastructure Upgrade Project Bid Issue Date: 05/8/2025 Bid Due Date: 06/12/2025 @ 2:00 p.m. Vendor Requirements • Certified Microsoft Gold Partner. • Certified Microsoft Solutions Expert (MCSE) • Certified Cisco Meraki Solutions Specialist • Cisco CCNP Security Certification • Cisco CCIE Security Certification • The vendor must have performed similar Cisco and Microsoft upgrades • The vendor must provide at least five (5) references of similar scope. • The vendor must provide all the necessary hardware, software, and services for a turnkey solution. Locations 1. Town Hall, 53095 Main Rd., Southold, NY. (Core location) 2. Town Hall Annex, 54375 Main Rd., Southold, NY (Core location) 3. Police Department, 41405 Route 25, Peconic, NY (Core location) 4. Highway Department, 275 Peconic Lane, Peconic, NY (Remote site) 5. Recreation Center, 970 Peconic Lane, Peconic NY (Remote site) 6. Peconic Community Center, 1170 Peconic Lane Peconic, NY (Remote site) 7. Solid Waste Department, 6155 Cox Lane, Cutchogue, NY (Remote site) 8. Human Resources Center, 750 Pacific St., Mattituck, NY (Remote site) 9. Katinka House, 750 Pacific St., Mattituck, NY (Remote site) Scope of Services • The selected vendor shall provide alternatives and solutions pertinent to upgrading the Town's network infrastructure. These proposed solutions must adhere to industry standards and best practices. • Project pricing to include: o Implementation services o This upgrade requires all proposed equipment, cables and connections, operating systems, licenses, certificates, software, and applications. o Maintenance and support must be included for 24/7/4 and 24/7/NBD for distribution and access layer equipment for a duration of three (3) years. o Along with any equipment and/or services classified as other or additional items. ---- --_--- -- -- --- 31 P a g e • Work with the Information Technologies staff and Southold's ISPs to upgrade/increase the WAN connectivity, security, and bandwidth to support Southold's current and future technology initiatives. • Evaluate the existing LAN infrastructure and make recommendations for improvements. • Review and design, upgrade, and/or replace o All seven (7) ASA firewalls, Firepower services, and their configurations. o The operation of the Firepower Management Center (FMC) and the FireSight Management Center. o The ISE-PIC deployment. o The hardware and configurations of the Town's three (3) domain controllers. o Recommendations for the design, performance, and redundancy of Active Directories, DHCP, DNS, and Group Policy are paramount. o Microsoft Active Directories, including the forest functional level. Making sure that the updated systems adhere to industry standards and best practices. o All Town applications, systems, and interfaces using Active Directories must be tested for compatibility and proven to perform efficiently. o The configurations of the network's managed switches. o Evaluate'and update Microsoft Active Directory configuration for Microsoft Exchange and the VxRail cluster and vSphere systems. o Evaluate and update third-party directory services integrations via LDAP and Kerberos. o Examine each location's LAN/WAN connectivity and provide recommendations for improvement. • Install fiberoptics to connect the Recreation Center and the Peconic Community Center. The firewall upgrade at the Recreation Center should be designed to include the Community Center. • Install fiberoptics to connect the Human Resource Center and the Katinka House. The firewall upgrade at the Human Resource Center should also include the Katinka House. • Provide detailed project implementation timeline and test plans. • Provide advanced-level training and knowledge transfer to the Town's Information Technologies staff. • Provide a detailed runbook that includes documentation of the updated hardware, software, applications, and systems upgrades and changes to the-existing configurations. This document must also contain recommended maintenance and schedules, which should be documented and illustrated. Vendors should strongly consider trade-in allowances for the.old equipment, which should be listed separately on the bid. Deliverables — Installation, Deployment and Decommission The vendor will replace key components of the Town's network infrastructure, ensuring a stable and well-supported network for years to come. The vendor's engineers must develop a plan to replace the infrastructure at each town site when maintenance windows are available. Following the plan, the vendor's engineers will install a new, highly available pair of Secure Network Services (SNS) appliances to host the Town's Identity Services Engine (ISE) and a new Firepower Management Center (FMC) appliance to manage the Town's Firepower Threat Defense (FTD) firewalls. Once complete, the engineers will deploy a new high-availability firewalls 4 1 P a g e (3 HA pairs and 4 standalone units total) at each Town location, along with new building distribution switches (7 total). The access switches (for the buildings that require them) will be replaced to provide increased bandwidth and Power-over-Ethernet (PoE) capabilities (15 in total). Testing will be performed at the completion of each step. • Configure vSphere Infrastructure to use the updated Active Directory authentication o Configure the Town's vSphere environment to use Active Directory for authentication. o Including the Town's vSphere cluster. • Define New Subnets and a new town wide IP addressing scheme o Create a new IP addressing and subnet layout for the Town's network. o Solicit feedback and sign-off on the new addressing scheme from the Town's I.T. staff before continuing with later project tasks. o Define new DHCP scopes. o Incorporate the new scheme addressing into the new device configurations and any existing devices on the network. • Deploy FMC 1700 appliances and migrate. o Deploy one FMC 1700 appliance in the Town's data center. o Upgrade/downgrade the appliance's software to support the new and existing FTD firewalls. o I If there is no software version available that supports all of the FTD firewalls, upgrade the FMC to the latest, Cisco-recommended software version. o Connect FTD firewalls to the new FMC appliance and test. • Deploy SNS 3715 Pair and migrate ISE Services. o Deploy a pair of SNS 3715 appliances to provide highly-available ISE services. o Upgrade the SNS to the latest Cisco-recommended software version. o Reconfigure network devices to use the new SNS appliances for ISE services. • Rack and Configure three Dell Servers. o Rack and cable Dell R360 servers. One to be located in the Town Hall, Police Department, and Annex. o For each server: ■ Set up and configure the servers and install Windows Server 2022 with the Hyper-V role. ■ Build a new Windows Server 2022 virtual machine and configure it as a domain controller. ■ Deploy a Cisco Umbrella virtual appliance and update the DHCP scopes to use the appliances as the DNS resolvers. • Deploy Three Cisco Secure Firewall HA Pairs o Deploy three (3) highly-available pairs of Cisco Secure Firewalls (FTD) at the Town Hall, Annex, and Police Department. o Upgrade each firewall pair to the latest, Cisco-recommended software version. o Connect each firewall pair to the new FMC appliance for management. — --- 5 1 P a g e o Migrate configurations from existing ASA/FTD-firewalls. o Test and cutover to the new.firewall pairs during a maintenance window. • Deploy Four (4) Standalone Cisco Secure Firewalls o Deploy four standalone Cisco'Secure'Firewalls (FTD) at the Highway Department, Recreation Center,Waste Management, and Human Resources Center. o Upgrade each firewall to the latest, Cisco-recommended software version. o Connect each firewall to the new FMC appliance for management. o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall during a maintenance window. • Deploy Seven Distribution Switches o Deploy seven (7) Clatalyst 9500/9300 distribution switches, one per Town site. o Upgrade each switch to the latest, Cisco-recommended software version. o Port the existing network configuration to the new switches, making only the changes required to support the latest hardware. o Cutover and test during a maintenance window. • Deploy Fifteen Access Switches o Deploy fifteen (15) Catalyst 9300 access 'switches at the Town Hall, Annex, and Police Department. o Upgrade each switch to the latest, Cisco-recommended software version. o Port the existing network configuration to the new switches, making only the changes required to support the latest hardware. o Cutover and test during a maintenance window. • Build anew Windows Server virtual machine, with IIS features enabled, to host the Town's public-facing FTP server in the DMZ network. • Decommission and removal of the old devices and equipment. o After the new infrastructure is completed, tested and approved by the I.T. staff all old devices and equipment must be physically removed. Data sanitization must be performed on all old equipment ensuring that all sensitive data and settings stored are destroyed beyond recovery. • As-Built Documentation o Update the documents provided during the infrastructure assessment project to match the final, as-built state of the Town's network. o The vendor will provide a backup copy of all in-scope configuration files at'project completion. Hand-off to Southold • Immediately after the cutover, provide twelve (12) hours of support, training, and knowledge transfer to Southold's Information Technologies staff. Demonstrating diagnostics and troubleshooting techniques for the newly implemented hardware, ---- --� �___ 6 I P a g e. systems, and applications. • Provide one (1) calendar week of support per location after the location cutover is complete and the new system is online. • Create a detailed project.runbook that includes, but is not limited to, system settings, configuration, and specifications, as well as an overview of all updated and upgraded devices, operating systems, software, and applications involved with the entire project. • Perform a backup of all of the new and upgraded devices and applications. The backup files will be turned over to Southold and documented as part of the project runbook. • Performance tuning—Three (3) months after the project has been completed, analyze each firewall and domain controller and optimize, tweak, and fine tune settings. After this final step is completed to the satisfaction of the Town of Southold's Information Technologies staff, the project will be eligible for project sign-off. Out of Scope During the RFP submittal or discovery phases, it is the vendor's responsibility to determine any deficiencies in the current environment that relate to the items per the scope of this project. If deficiencies are discovered and cannot be remedied within the scope of the project then action items will be identified, documented, and addressed by the Town of Southold Information Technologies staff and the vendor as soon as possible. In addition, during the implementation phase, all work considered "Out of Scope" by the vendor will be addressed immediately by the Town of Southold Information Technologies staff and the vendor. Issues determined to be out of scope need to be explicitly detailed in writing, containing a very clear picture of what the actual issue is and the associated costs to correct. If a modification to the existing project scope is required, then a formal written change request will be created by the vendor and presented to the Town of Southold. This change request must include clarification, feasibility, impact, and the total cost broken out by labor and materials. If approved, the change request will be signed, and the Town of Southold will issue a purchase order. Immediatelyafter receiving the purchase order, the vendor will act as soon as possible to address the issue defined by the change request. Hardware and Software Hardware and software specifications shall be based on the following minimal standards found in Appendix B. Server Hardware and Software The Town of Southold has requested an upgrade of their Active Directory structure and forest level, including three (3) new domain controllers. Active Directories has three (3) domain controllers currently running Windows-Server 2012 R2 and a domain and forest functional level running Windows Server 2012 R2. This project 71 Page is to upgrade the domain controllers to Windows Server 2022 and the domain and forest functional levels to Windows Server 2016. Penalty Clause Timeliness of Completion The vendor shall complete the full scope of work outlined in this RFP within six (6) months of the contract start date. For each thirty (30) days or portion thereof that the project extends beyond the six (6) month deadline, the vendor shall incur a financial penalty of$10,000.00, which will be deducted from the consideration due to the vendor. Performance Standards The vendor's work shall meet or exceed all performance standards and technical specifications detailed in the RFP. If, at any point during the project or within six (6) months of the completion date, the Information Technologies Department determines that the contract has failed to meet one or more of the stated performance requirements, the vendor shall be subject to the following penalties: • For each performance deficiency identified, a penalty of$5,000.00 shall be deducted from the contract price due to the vendor. • If the cumulative performance penalties exceed 10% of the total contract price, the Town of Southold has the right to terminate the contract for cause. Termination for Convenience Notwithstanding any other provision, the Town of Southold reserves the right to terminate this contract for convenience at any time upon 30 days written notice. In the event of such termination for convenience, the Town of Southold shall be responsible for payment of all work completed to date. Still, it shall not be liable for any termination fees or penalties. This penalty clause is designed to incentivize the vendor to complete the project on time and to the full performance standards outlined in the RFP. The timeliness and performance penalties provide financial disincentives, while the termination for convenience clause protects the Town of Southold's ability to terminate the contract if the municipality deems it necessary. Liquidated Damages The timeliness and performance penalty presented above represent liquidated damages as a reasonable estimate of the Town of Southold's actual damages in the event of delay or deficiencies. Reporting and Documentation The vendor shall provide regular progress reports and documentation demonstrating. compliance with the RFP to the municipality's satisfaction. This section shall deem failure 8 1 P a g e to provide regular progress reports a performance deficiency as outlined above. Communication/Questions Vendors are expected to raise any questions or make any additions they have concerning the BID document as soon as they become aware of them. Any questions or requests for clarifications must be directed in writing to Lloyd Reisenberg at Iloyd.reisenberg(abtown.southold.ny.us no later than 06/02/2025 @ 4:00 PM. The subject line of the email must be labeled "BID: Infrastructure Upgrade Project- Question." The only contact allowed with the Town of Southold I.T. staff is through email, as stated above. Unauthorized contact of any Town of Southold employee is cause for rejection of the bid. Any additional information or clarifications that are provided to one bidder will be provided to all bidders as an addendum. Calendar of Events The dates set forth below are for informational purposes only. All dates are tentative and subject to change. Milestone Date Issue BID: 05/08/2025 Deadline for Submission of Written Questions: 06/02/2025 @ 4:00 PM Proposal Due Date: 06/12/2025 @ 2:00 PM Submission of the Response The respondent must submit two sets. Please clearly mark the original copy as "ORIGINAL" on the cover: Southold Town Clerk PO Box 1179 53095 Route 25, Southold, New York 119 71 All responses must be packaged and sealed. The outside of the package should show the following information, and a Non-Collusive Bid Certificate should include the respondent's name, address, and the request for proposal number and title. Response Requirements: The Town of Southold will evaluate responses based on the following criteria: Section 1: Vendor's Financial Stability (10%): Provide a description of the vendor's firm, including history, number of years the vendor has been in business, type of services provided, and legal status of vendor's organization, 91Page i.e., corporation, partnership, etc. Provide documentation that verifies the vendor has sufficient financial support, assets, and organizational structure to deliver the products and services requested in the RFP. Acceptable documentation may include financial statements, credit ratings, lines.of credit, or other financial arrangements that demonstrate the vendor's ability to meet the requirements outlined in this RFP. Section 2: Vendor's Qualifications and References (25%) Describe similar projects the vendor has completed in environments comparable to the Town of Southold. Provide at least five,client references, including the names of the companies, individuals, phone numbers, addresses, and email addresses that the Town of Southold could contact. The Town of Southold reserves the right to contact or visit any party listed as a reference that has previously used or is presently using the vendor's products and/or services in a manner similar to those proposed by the vendor. Southold also reserves the right to use other sources to obtain information about the proposed products and services. Section 3: Proposed Solution (40%) The proposed solution must also show the following: • Provide proof of extensive experience with designing and implementing Cisco next- generation ASAs and Microsoft applications, as defined in this document. • A detailed project plan incorporating the project scope, clear objectives, key deliverables, detailed timelines with milestones, assigned responsibilities, start and completion dates, and a work breakdown structure to manage project tasks and ensure successful completion effectively. Section 4: Cost Proposal (25%) The vendor's pricing must be all-inclusive to provide the Town of Southold with a turnkey solution. -._ _---- 10 P a g e Appendix A Core Location Connectivity Redundancy - Implement redundant connectivity between the three (3) core locations using cellular connectivity. This project intends to provide immediate failover redundant and secure connections between the three (3) core locations should the primary WAN-hosted connection become unavailable for any reason. Cisco Umbrella Server Migration —As specified in Phase I, migrate two (2) and add one (1) Cisco Umbrella VM(s) to the new Dell R360 servers. The objective is to introduce additional resiliency and availability by migrating one (1) VM to Town Hall, one (1) VM to the Police Department, and adding one (1) VM to the Annex. Security Cameras - Migrate all security cameras connected to the'Town's network to a separate DMZ on the firewalls. Public WIFI - Using the upgraded network infrastructure as a backbone (see Phase 1), incorporate all facilities current independent public Wi-Fi infrastructure in all facilities into a separate and secure segment of Southold's network. Appendix B Equipment List with Part Numbers and Quantities and Support Options Equipment, applications, software, and labor must be itemized in detail individually in the proposal. Responses will include a 24x7x4 support contract for each product (where offered by the manufacturer) for a thirty-six (36) month term. PartNumber . � : Descr�ption� `k91tl Ai � b ,�i Qh! i _ R e, NetvvorkApPliancesg, g : ,w ?MAP .FMC1700-K9 Cisco Secure Firewall Management Center 1700 Chassis 1 j CON-SNTP-FMC1700K SNTC-24X7X4 Cisco Secure Firewall 1, 36 Month SFP-10G-SR= 10GBASE-SR SFP Module 2 SNS-3715-K9 Small Secure Network Server for ISE Applications 2 _— i CON-SNTP-SN3715K9 SNTC-24X7X4 Small Secure Network Server for ISE App Y 2, 36 Months t SFP-H10G6-CU3M= 10GB4SE-CU S_FP+ Cable 3 Meter 2 11 Page Tovin Hall` xA i CSF1220CX-TD-K9 Secure Firewall 1220 Appliance, Compact, Threat Defense - 2 CON-SNTP-CSF1XTDK _ SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact -- i I 2, 36 Months _ ._ -_ -- -. .__ _- . __ . ._ .-___._._.__. CSF1200C-RACK-MNT= - Secure_ Firewall_i-re-'-w--"a--I-I-1- 1200.-Series-_-.--rackmount-___ kit-for compact_-_- .-_-_. ---,-2 - 2 models _ _._---.--- .__._.__-_.-._.__.______------_--.----.---.----- -----__ ____—__.�-------,-_-____-- SFP-H10GB-CU1M= 1OGBASE-CU SFP+ Cable 1 Meter 2' - C9500-24Y4C-E Catalyst 9500 24x1/10/25G and 4-port 40/100G, Essential OCOC N-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/100G only, Esse 1, 36 Months i C9300-48H-E Catal st 9300 48- ort UPoE+ Network Essentials 7 CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 7, 36 Months j SFP-10G-LRM= 10GBASE-LRM SFP Module 14 Annex MR, ; . . j CSF1220CX-TD-K9 Secure Firewall 1220 Appliance, Compact, Threat Defense 2 I ; --....... --- CON-SNTP-CSF1XTDK SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact ! 2, 36 Months CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact 2 models SFP-H10GB-CU1M= 10GBASE-CU SFP+ Cable 1 Meter i 2 C9500-24Y4C-E Catalyst 9500 24x1/10/25G and 4-port 40/100G, Essential 1 1 ...._...._..__......_............._.......____....._...- -- -- .....__...-- - ........--.............._..........._........_..................................---..........................-............_.._............................................................-------.._..........._........................-...._._.................... ..._.. -----.....___....--- CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/100G only, Esse I 1, 36 Months i C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials 3 CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por - 3, 36 Months SFP-10G-LRM= 10GBASE-LRM SFP Module 6 Police$Departm v ent .v 'kp ' I. _ = CSF1220CX-TD-K9 Secure Firewall 1220 Appliance, Compact, Threat Defense_ 2 i I j CON-SNTP-CSF1XTDK SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact (� 2, 36 Months CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact 2 i..-.._.....__.__.......--_.._�......---- .........-_mo.d... ___ SFP-H10GB-CU1 M= 10GBASE-CU SFP+ Cable 1 Meter 2 �--&6660-2W 46-E Catalyst 9500 24x1/10/25G and 4-port 40/100G, Essential 1 CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/100G only, Esse 1, 36 Months C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials - i----------------------...- -- --- Y p 1 5, 36 Months CON-SNTP-CO SNTC-24X7X4 Catal st 9300 48- or I SFP-10G-LRM= 10GBASE-LRM SFP Module 10 s� As Highway Department x rw� L CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense - ---------___ _ 121 Page CON-SNTP-CSF10ETD SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 1, 36 Months j CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact- f 1 models C930048H-E Catalyst 9300 48-port UPoE+, Network Essentials 1 CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 1, 36 Months ~.Recr ation Center ��' w 7 � "+pxx CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense 1 ---......... CON-SNTP-CSF10ETD ' SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 11 1, 36 Months CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact - models 1 C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials i 1 I C9300-NM-8X Catalyst 9300 Series 8x 10G/1 G Network Module (to support new fiber connection between Rec and HR Center) i 1 SFP-10G-LR 10GBASE-LR SFP+ module (to support new fiber 2 connection between Rec and Community Center) I j CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por- 1 &3 Year Options i 1, 36 Months pWON .aste CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense 1 CON-SNTP-CSF10ETD SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact —�1, 36 Months CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact I 1 models C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials 1 CON-SNTP-C930210L _ SNTC-24X7X4 Catalyst 9300 48-por— 1, 36 Months Human'Resources�Center �h g �3 -� `a CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense j 1 ^_......--------------- ..._...._..........._............ _.... ----------.........---._.....-...... - -.......-- --._........ - _.._.._J CON-SNTP-CSF10ETD SNT., 24X7X4 Secure Firewall 1220 A ct j ppliance, Com a p 1'36 Months CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact 1 models — ---.... --- -......._._........................ .........._........_ --- C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials C9300-NM-8X Catalyst 9300 Series 8x 10G/1 G Network Module (to support new fiber connection between Rec and HR Center) 1 ` SFP-10G-LR 10GBASE-LR SFP+ module (to support new fiber 2 _ connection between Katinka House and HR Center) CON-$NTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por j 1, 36 Months _--------- -- 131 P a g e � DeII PowerEd a 360CS ^. e. ..m'"„,ae.. ,. u.S 1VIFG3 Part# Descry ton °s " _ s �,p_ ;� �o a�,� �. N. .,s� � 210-BJTR PowerEdge R360 Server 3 461-AAIG Trusted Platform Module 2.0 V3 3 321-BKHP 2.5" Chassis with up to 8 Hot Plug Hard Drives, Front PERC 11 3 338-CMQZ Intel Xeon E-2468 2.6G 8C/16T 24M Cache Turbo HT(65W) DDR5 3 412-BBHK Heatsink 3 370-AAIP Performance Optimized 3 370-BCBM 5600MT/s UDIMMs 3 780-BCDI C1, No RAID for HDDs/SSDs (Mixed Drive Types Allowed) 3 405-ABCQ, Front PERC H355 Front Load 3 750-ACFR 384-BBBL Performance BIOS Settings 3 800-BBDM UEFI BIOS Boot Mode with GPT Partition 3 387-BBEY No Energy Star 3 384-BDMJ High Performance Fan 3 450-AMDH Dual, (1+1) Redundant, Hot-Plug Power Supply, 600W MM (100-240Vac) 3 330-BCMK Riser Config 2, Butterfly Gen4 Riser(x8/x8) 3 PowerEdge R360 Motherboard with Motherboard with Broadcom 5720 Dual Port 329-BJTG 1 Gb On-Board LOM, MX 3 325-BFVN, PowerEdge R360 filter bezel 3 350-BCTP 403-BCRZ, BOSS-N1 controller card +with 2 M.2 960GB (RAID 1) 3 470-BBJL 634-BYJY Windows Server 2022 Standard 16CORE FI No Med No CAL Multi Language 3 528-CSCP Windows Server 2022 Standard,16 CORE, DF Recovery Image, Multi Lang, 3 (Downgrade not included) 528-CSCP Windows Server 2022 Standard No Media WS2019 Std Downgrade DF Media 3 Multi Language 634-BYLJ Windows Server 2022 Standard,16 CORE, Media Kit, Multi Lang, (Downgrade 3 not included) 379-BFXT, Dell Connectivity Client- Disabled 3 634-CYDF 528-CTIC iDRAC9 Enterprise 16G 3 528-COYT Server Secured Component Verification 3 379-BCRJ iDRAC,Factory Generated Password, No OMQR 3 658-BFRK iDRAC Service Module (ISM), Pre-Installed in OS 3 379-BCQY iDRAC Group Manager Disabled 3 618-BBEC Hyper-V role enabled with pre-installed Standard or Datacenter Ed OS on incl 3 Virtual HDD 770-BCWN 770-BDMT ReadyRails Sliding Rails with Cable Management Arm (Al2) 3 MT 631-AACK No Systems Documentation No OpenManage DVD Kit 3 340-DLXS PowerEdge R360 Shipping 3 340-CWUJ PowerEdge R350/R360 Shipping Material for 2.5" Chassis 3 389-FFNB PowerEdge R360 CCC Marking No BIS or CE Marking 3 707-6877, 707-6889, 707-6892, 3 Years ProSupport and 4-Hour Onsite Service 3 707-6946, 955-9041, 989-3439 841-5979 Keep your Hard Drive For Enterprise 3 Years 3 900-9997 On-Site Installation Declined 3 370-BBZF 32GB UDIMM 5600MT/s ECC 6 400-AXTV 480GB SSD SATA Read Intensive 6Gbps 512 2.5in Hot-plug AG Drive 1 DWPD 3 450-AALV Power Cord -C13 3M 125V 15A(North America Guam North Marianas 6 Philippines Samoa Vietnam) ------.------- 15 P a g e Appendix C Enterprise architecture drawings depicting the Town of Southold network topology. Town Hall Optimum Ring WAN SOUTHOLD5525-TH —)► SG300-52 Cisco SG300- Dell EMC 3Com Baseline SG300-28 SG300-28 SG300-52 ' 10PP 5521 F-ON 2928 SFP Plus Netgear MS1080P Figure 1:Townhall Topology -- 16IPage Annex Optimum Ring WAN SOUTHOLD5525x-ANNEX SG300-20 i SG500-28 SG500-28 WS-C2960L48TS-LL Figure 2:Annex Topology Police Optimum Ring WAN SOUTHOLD5525-PD -, SG300-28 �♦ zz - t„♦ ♦♦ �♦ �,♦ Lam♦ SG300-28 SG300.28 SG300-28 SG300-28 SG300-10 Figure 3:Police Topology __ _---------- 171 P a g e Highway Optimum SOUTHOLD5508x-HW SG350X-24P SG300-28 Figure 4:Highway Topology Recreation Optimum SOUTHOLD5525x-REC i SG102-24 SG11 OD-08 Netgear M5108UP Figure 5:Recreation Topology ----------- ------ 18 Page Waste-Landfill Optimum SOUTHOLD5525x-LF SG1 02-24 Figure 6:Landfill Topology 191 Page Senior-Katinka Optimum i SOUTHOLD5508x-H R Netgear MS1,08UP SG300-28 Figure 7.Senior-Kotinka Topology Community Center Cable Internet ISP Provided xWireless Router 20 P a g e Figure 8:Community Center Topology WAN Community Center Waste Rec g Senior p _ Ve _I �"" �" —' szs ' I AtR Internet Only — • f - 525 "•525 Highway 1 1 z � - - S2S' too` i ce fire c FIVIC o ti ~i I Annex Fi I ISE-PIC ti �i I L — — — Figure 9:WAN Topology . -------- 21 P a g e STATEMENT OF NON-COLLUSION (To be completed by each Bidder) In accordance with Section 103-d General Municipal Law, effective September 1, 1966, every bid or proposal hereafter made to a political subdivision of the State of any public department, agency, or official thereof or to a fore district or any agency or official thereof for work or services performed or to be performed or goods sold or to be sold, shall contain the following statement subscribed to by the bidder and affirmed by such bidder as true under the penalties of perjury;non-collusive bidding certification. A. By submission of this bid, each bidder and each person signing on behalf of any bidder certifies, and in the case of a joint bid, each party thereto certifies as to its own organization, under penalty of perjury, that to the best of knowledge and belief: (1) The prices in this bid have been arrived at independently.without collusion, consultation, communication, or agreement, for the purpose of restricting competition, as to any matter relating to such prices with any other bidder or any competitor. (2) Unless otherwise required by law, the prices which have been quoted in this bid have not been knowingly disclosed by the bidder and will not knowingly be disclosed by the bidder prior to opening, directly or indirectly,to any other bidder or to any competitor. (3) No attempt has been made or will be made by the bidder to induce any other person, partnership, or corporation to submit or not to submit a bid for the purpose of restricting competition. B. The person signing this bid or proposal certifies that he has fully informed himself regarding the accuracy of the statements contained in this certification, and under the statements contained in this certification, and under the penalties of perjury, affirms the truth thereof, such penalties being applicable to the bidder, as well as the person signing in its behalf. C. That attached hereto (if a corporate bidder) is a certified copy of resolution authorizing the execution of this certificate by the signature of this bid or proposal on behalf of the corporate bidder. RESOLUTION Resolved that of the (Name of signatory) Be authorized to sign and submit the bid (Name of Corporation) Or proposal of this corporation for the following Project: and to include in such bid or proposal the certificate as to non-collusion required by section one-hundred-three- d (103-d) of the General Municipal Law as the act and deed of such corporation, and for any inaccuracies or miss-statements in such certificate this corporate bidder shall be liable under the penalties of perjury. The foregoing is true and correct copy of the resolution adopted by corporation at a meeting of the Board of Directors, held on the day of 520 (SEAL OF THE CORPORATION) Laws of New York, 1965 Ch. 751, Sec. 103-d, as amended& effective on September 1, 1965. Signature 1 > 1 d4be80d6 lyndarudder@town.southold.ny.us AFFIDAVIT OF PUBLICATION The Suffolk Times State of New York, County of,Suffolk County, The undersigned is the authorized designee of The Suffolk Times,a Weekly Newspaper published in Suffolk County, New York.I certify that the public notice,a printed copy of which is attached hereto,was printed and published in this newspaper on the following dates: 05/08/2025 This newspaper has been designated by the County Clerk of Suffolk County,as a newspaper of record in this county, and as such,is eligible to publish such notices. Signature Christina Henke Rea Printed Name Subscribed and sworn to before me, This 12 day of May 2025 Digitally signed DOUGLAS W REA by douglas w rea Notary Public•State of New York Date: 2025.05.12 NO.OiRE6398443 17:47:44 +00:00 Qualified in Albany County My Commission Expires Sep 30,2027 TOWN OF SOUTHOLD LEGAL NOTICE +' + REQUEST FOR PROPOSAL NOTICE IS HEREBY GIVEN that sealed proposals are sought and requested for the following: "Information Technologies Infrastructure Upgrade The Town of Southold invites competitive sealed bids from qualified professional firms for the upgrade of its network and security infrastructure to the next generation Cisco's and Microsoft's technologies. This comprehensive turnkey technology project aims to modernize and enhance the performance of the Town of the technology infrastructure,which supports critical municipal operations,improves service de!ivery,and ensures a secure resilient scalable technology environment. The selected vendor will work with Southold's Information Technologies staff and be responsible for the design, procurement,deployment, installation,configuration,testing, and documentation of all hardware, operating systems,software,and application upgrades. This government project,funded by the Town of Southold,must comply with all applicable local,state,and federal regulations governing public sector information technology projects.Vendor bids must also adhere to all terms and conditions described in this document. Definite specifications may be obtained at the Southold Town Clerk's Office beginning May 8, 2025. PLACE OF OPENINGS: Southold Town Clerk's Office 53095 Main Road Southold,NY 11971 DATE&TIME OF OPENING: June 12,2025 at 2:00 PM CONTACT PERSON: Lloyd Reisenberg Town of Southold,631-765-1891 VENDORS MUST SUBMIT BIDS IN SEALED ENVELOPES. PLEASE PRINT ON THE FACE OF ENVELOPE: 1)NAME&ADDRESS OF BIDDER 2)BID NAME It is the bidder's responsibility to read the RFP Specifications,and General Conditions,which outline RFP rules of the Town of Southold. Upon submission of RFP,it is understood that the bidder has read,fully understands and will comply with said General Conditions and specification requirements. Questions may be sent to Lloyd.reisenberg®town.southold.ny us before June 2,2025 at 4:00 pm. The Town of Southold welcomes and encourages minority and women-owned businesses to participate in the bidding process. Dated:April 29,2025 Denis Noncarrow,Town Clerk TOWN,OF SOUTHOLD LEGAL NOTICE REQUEST FOR PROPOSAL NOTICE IS HEREBY GIVEN that sealed proposals are sought and requested for the following: "Information Technologies Infrastructure Upgrade" The Town of Southold invites competitive sealed bids from qualified professional firms for the upgrade of its network and security infrastructure to the next generation Cisco's and Microsoft's technologies. This comprehensive turnkey technology project aims to modernize and enhance the performance of the Town of the technology infrastructure,which supports critical municipal operations,improves service delivery,and ensures a secure resilient scalable technology environment. The selected vendor will work with Southold's Information Technologies staff and be responsible for the design, procurement,deployment, installation,configuration,testing, and documentation of all hardware, operating systems,software,and application upgrades. This government project,funded by the Town of Southold,must comply with all applicable local,state,and federal regulations governing public sector information technology projects.Vendor bids must also adhere to all terms and conditions described in this document. Definite specifications may be obtained at the Southold Town Clerk's Office beginning May 8, 2025. PLACE OF OPENINGS: Southold Town Clerk's Office 53095 Main Road Southold,NY 11971 DATE&TIME OF OPENING: June 12,2025 at 2:00 PM CONTACT PERSON: Lloyd Reisenberg Town of Southold,631-765-1891 VENDORS MUST SUBMIT BIDS IN SEALED ENVELOPES. PLEASE PRINT ON THE FACE OF ENVELOPE: 1)NAME&ADDRESS OF BIDDER 2)BID NAME It is the bidder's responsibility to read the RFP Specifications,and General Conditions,which outline RFP rules of the Town of Southold. Upon submission of RFP,it is understood that the bidder has read,fully understands and will comply with said General Conditions and specification requirements. Questions may be sent to Lloyd.reisenberg®town.southold.ny .us before June 2,2025 at 4:00 pm. The Town of Southold welcomes and encourages minority and women-owned businesses to participate in the bidding process. Dated:April 29,2025 Denis Noncarrow,Town Clerk TOWN OF SOUTHOLD LEGAL NOTICE REQUEST FOR PROPOSAL NOTICE IS HEREBY GIVEN that sealed proposals are sought and requested for the following: "Information Technologies Infrastructure Upgrade" The Town of Southold invites competitive sealed bids from qualified professional firms for the upgrade of its network and security infrastructure to the next generation Cisco's and Microsoft's technologies. This comprehensive turnkey technology project aims to modernize and enhance the performance of the Town of the technology infrastructure,which supports critical municipal operations,improves service delivery, and ensures a secure resilient scalable technology environment. The selected vendor will work with Southold's Information Technologies staff and be responsible for the design,procurement, deployment, installation,configuration,testing, and documentation of all hardware, operating systems, software, and application upgrades. This government project, funded by the Town of Southold,must comply with all applicable local, state, and federal regulations governing public sector information technology projects. Vendor bids must also adhere to all terms and conditions described in this document. Definite specifications may be obtained at the Southold Town Clerk's Office beginning May 8, 2025. PLACE OF OPENINGS: Southold Town Clerk's Office 53095 Main Road Southold,NY 11971 DATE& TIME OF OPENING: June 12, 2025 at 2:00 PM CONTACT PERSON: Lloyd Reisenberg Town of Southold, 631-765-1891 . VENDORS MUST SUBMIT BIDS IN SEALED ENVELOPES. PLEASE PRINT ON THE FACE OF ENVELOPE: 1)NAME&ADDRESS OF BIDDER 2)BID NAME It is the bidder's responsibility to read the RFP Specifications, and General Conditions, which outline RFP rules of the Town of Southold. Upon submission of RFP, it is understood that the bidder has read, fully understands and will comply with said General Conditions and specification requirements. Questions may be sent to Lloyd.reisenbere(a)fown.southold ny us before June 2,2025 at 4:OOPm. The Town of Southold welcomes and encourages minority and women-owned businesses to participate in the bidding process. Dated: April 29, 2025 Denis Noncarrow, Town Clerk STATE OF NEW YORK) SS: COUNTY OF SUFFOLK) Denis Noncarrow,Town Clerk of the Town of Southold,New York being duly sworn, says that on the 5TH day of May , 2025, a notice of which the annexed printed notice is a true copy was affixed, in a proper and substantial manner, in a most public place in the Town of Southold, Suffolk County,New York,to wit: Town Clerk's Bulletin Board, 53095 Main Road, Southold,New York and the Southold Town website, www.southoldtownny.gov . "Information Technologies Infrastructure U rade" nis No arrow Southold Town Clerk Sworn before me this 51h day of Ma , 2025. a Notary Public LYNDA M. RUDDER Notary Public, State of New York No.01 RU6020932 Clualified in Suffolk County Commission Expires March 8,2027 p RESOLUTION 2025-336 ADOPTED DOC ID: 21247 THIS IS TO CERTIFY THAT THE FOLLOWING RESOLUTION NO. 2025-336 WAS ADOPTED AT THE REGULAR MEETING OF THE SOUTHOLD TOWN BOARD ON . APRIL 29,2025: RESOLVED that the Town Board of the Town of Southold hereby authorizes and directs the Town Clerk's office to advertise for Requests for Proposals for an Infrastructure Upgrade Project for the Information Technologies Department. Denis Noncarrow Southold Town Clerk RESULT: ADOPTED [UNANIMOUS] MOVER: Louisa P. Evans, Councilperson SECONDER:Greg Doroski, Councilperson AYES: Mealy, Smith, Doherty, Evans, Doroski, Krupski Jr I r I � ' TOWNOF SOUTHOLD j V NI REQUEST FOR PROPOSALS INFORMATION TECHNOLOGIES INFRASTRUCTURE UPGRADE PROJECT 1 Page Town of Southold: REQUEST FOR BIDS: Information Technologies Infrastructure Upgrade The Town of Southold invites competitive sealed bids from qualified professional firms for the upgrade of its network and security infrastructure to the next generation Cisco's and Microsoft's technologies. This comprehensive turnkey technology project aims to modernize and enhance the performance of the Town of the technology infrastructure, which supports critical municipal operations, improves service delivery, and ensures a secure resilient scalable technology environment. The selected vendor will work with Southold's Information Technologies staff and be responsible for the design, procurement, deployment, installation, configuration, testing, and documentation of all hardware, operating systems, software, and application upgrades. This government project, funded by the Town of Southold, must comply with all applicable local, state, and federal regulations governing public sector information technology projects. Vendor bids must also adhere to all terms and conditions described in this document. Project Overview Phase I • Define new subnets and 'a new town wide IP addressing scheme • Replace end-of-life Cisco ASAs at seven (7) locations. • Install fiberoptics connecting four(4) locations. - • Upgrade and increase the WAN connectivity, security, and bandwidth to support Southold's current and future initiatives as defined in Phase I and Phase II of this document. • Upgrade the Cisco Firepower Server and Management Center Systems (MCS). • Integrate the Cisco Firepower MCS with the existing Cisco AMP application. • Upgrade Cisco ISE-PIC Server and ISE Passive Identity Connector application. • Replace end-of-life switches, routers, and fiber converters. • Replace end-of-life domain controllers at three (3)different locations. • Upgrade Microsoft Active Directories and the forest functional level. • Incorporate the existing two (2) Microsoft Exchange servers into the new Active Directories structure • Incorporate the existing VxRail cluster and vSphere systems into the new Active Directories structure • Create an FTP site to be located in a DMZ Phase II -.See Appendix A 1 1. Core location connectivity redundancy 2. Cisco Umbrella server migration 3. Security camera network connections 4. Public Wi-Fi 2 Page Responses should be organized into Phase I and Phase II, respectively. Applicants must submit written bids to the Southold Town Clerk's office at Southold Town Hall, PO Box 1179, 53095 Main Road, Southold, New York 11971, by 2:00 PM on XX/XX/2025. Bid proposals must be in sealed envelopes and labeled "Infrastructure Upgrade Project." ,(iizJal; Please copies of your proposal ensuring the original copy is marked as "ORIGINAL" on the cover. Request for Bid Overview Project Name: Infrastructure Upgrade Project Bid Issue Date: XX/XX/2025., 5l1,%`2s Bid Due Date: XX/XX/2025_, @ 2:00 p.m. Vendor Requirements • Certified Microsoft Gold Partner. • Certified Microsoft Solutions Expert (MCSE) • Certified Cisco Meraki Solutions Specialist • Cisco CCNP Security Certification • Cisco-CCIE Security Certification • The vendor must have performed similar Cisco and Microsoft upgrades • The vendor must provide at least five (5) references of similar scope. • The vendor must provide all the necessary hardware, software, and services for a turnkey solution. Locations 1. Town Hall, 53095 Main Rd., Southold, NY. (Core location) 2. Town Hall Annex, 54375 Main Rd., Southold, NY (Core location) 3. Police Department, 41405 Route 25, Peconic, NY (Core location) 4. Highway Department, 275 Peconic Lane, Peconic, NY (Remote site) 5. Recreation Center, 970 Peconic Lane, Peconic NY (Remote site) 6. Peconic Community Center, 1170 Peconic Lane Peconic, NY (Remote site) 7. Solid Waste Department, 6155 Cox Lane, Cutchogue, NY (Remote site) 8. Human Resources Center, 750 Pacific St., Mattituck, NY (Remote site) 9. Katinka House, 750 Pacific St., Mattituck, NY (Remote site) Scope of Services • The selected vendor shall provide alternatives and solutions pertinent to upgrading the Town's network infrastructure. These proposed solutions must adhere to industry standards and best practices. • Project pricing to include: o Implementation services o This upgrade requires all proposed equipment, cables and connections, operating systems, licenses, certificates, software, and applications. o Maintenance and support must be included for 24/7/4 and 24/7/NBD for distribution and access layer equipment for a duration of three (3) years. o Along with any equipment and/or services classified as other or additional items. 31Page . • 1 Work with the Information Technologies staff and Southold's ISPs to upgrade/increase the WAN connectivity, security, and bandwidth to support Southold's current and future technology initiatives. • Evaluate the existing LAN infrastructure and make recommendations for improvements. • Review and design, upgrade, and/or replace o All seven (7) ASA firewalls, Firepower services, and their configurations. o The operation of the Firepower Management Center(FMC) and the FireSight Management Center. o The ISE-PIC deployment. o The hardware and configurations of the Town's three (3) domain controllers. o Recommendations for the design, performance, and redundancy of Active Directories, DHCP, DNS, and Group Policy are paramount. o Microsoft Active Directories, including the forest functional level. Making sure that the updated systems adhere to industry standards and best practices. o All Town applications, systems, and interfaces using Active Directories must be tested for compatibility and proven to perform efficiently. o The configurations of the network's managed switches. o Evaluate and update Microsoft Active Directory configuration for Microsoft Exchange and the VxRail cluster and vSphere systems. o Evaluate and update third-party directory services integrations via LDAP and Kerberos. o Examine each location's LANAIVAN connectivity and provide recommendations for improvement. • Install fiberoptics to connect the Recreation Center and the Peconic Community Center. The firewall upgrade at the Recreation Center should be designed to include the Community Center. • Install fiberoptics to connect the Human Resource,Center and the Katinka House. The firewall upgrade at the Human Resource Center should also include the Katinka House. • Provide detailed project implementation timeline and test plans. • Provide advanced-level training and knowledge transfer to the Town's Information Technologies staff. • Provide a detailed runbook that includes documentation of the updated hardware, software, applications, and systems upgrades and changes to the existing configurations. This document must also contain recommended maintenance and schedules, which should be documented and illustrated. Vendors should strongly consider trade-in allowances for the old equipment, which should be listed separately on the bid. Deliverables— Installation, Deployment and Decommission The vendor will replace key components of the Town's network infrastructure, ensuring a stable and well-supported network for years to come. The vendor's engineers must develop a plan to replace the infrastructure at each town site when maintenance windows are available. Following the plan, the vendor's engineers will install a new, highly available pair of Secure Network Services (SNS) appliances to host the Town's Identity Services Engine (ISE) and a new Firepower Management Center (FMC) appliance to manage the Town's Firepower Threat Defense (FTD) firewalls. Once complete, the engineers will deploy a new high-availability firewalls 41 Page 1 (3 HA pairs and 4 standalone units total) at each Town location, along with new building distribution switches (7 total). The access switches (for the buildings that require them) will be replaced to provide increased bandwidth and Power-over-Ethernet (PoE) capabilities (15 in total). Testing will be performed at the completion of each step. • Configure vSphere.lnfrastructure to use the updated Active Directory authentication o Configure the Town's vSphere environment to use Active Directory for authentication. o Including the Town's vSphere cluster. • Define New Subnets and a new town wide IP addressing scheme o Create a new IP addressing and subnet layout for the Town's network. o Solicit feedback and sign-off on the new addressing scheme'from the Towns I.T. staff before continuing with later project.tasks. o Define new DHCP scopes. o Incorporate the new scheme addressing into the new device configurations and any existing devices on the network. • Deploy FMC 1700 appliances and migrate. o Deploy one FMC 1700 appliance in the Town's data center. o Upgrade/downgrade the appliance's software to support the new and existing FTD firewalis. o If there is no software version available that supports all of the FTD firewalls, upgrade the FMC to the latest, Cisco-recommended software version. o Connect FTD firewalis to the new FMC appliance and test. • Deploy SNS 3715 Pair and migrate ISE Services. o Deploy a pair of SNS 3715 appliances to provide highly-available ISE services. o Upgrade the SNS to the latest Cisco-recommended software version. o Reconfigure network devices to use the new SNS appliances for ISE services. • Rack and Configure three Dell Servers. o Rack and cable Dell R360 servers. One to be located in the Town Hall, Police Department,. and Annex. o For each server: ■ Set up and configure the servers and install Windows Server 2022 with the Hyper-V role. ■ Build a new Windows Server 2022 virtual machine.and configure it as a domain controller. ■ Deploy a Cisco Umbrella virtual appliance and update the DHCP scopes to use the appliances as the DNS resolvers. • Deploy Three Cisco Secure Firewall HA Pairs o Deploy three (3) highly-available pairs of Cisco Secure Firewalls (FTD) at the Town Hall, Annex, and Police Department. o Upgrade each firewall pair to the latest, Cisco-recommended software version. o Connect each firewall pair to the new FMC appliance for management. 5 Page o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall pairs during a maintenance window. • Deploy Four (4) Standalone Cisco Secure Firewalls o Deploy four standalone Cisco Secure Firewalls (FT'D) at the Highway Department, Recreation Center, Waste Management, and Human Resources Center. o Upgrade each firewall to the latest, Cisco-recommended software version. o Connect each firewall to the new FMC appliance for management: o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall during a maintenance window. • Deploy Seven Distribution Switches o Deploy seven (7) Catalyst 9500/9300 distribution switches, one per Town site. o Upgrade each switch to the latest, Cisco-recommended software version. o Port the existing network configuration to the new switches, making only the changes required to support the latest hardware. o Cutover and test during a maintenance window. • Deploy Fifteen Access Switches o Deploy fifteen (15) Catalyst 9300 access switches at the Town Hall, Annex, and Police Department. o Upgrade each switch to the latest, Cisco-recommended software version. o Port the existing network configuration to the new switches, making only the changes required to support the latest hardware. o Cutover and test during a maintenance window. • Build anew Windows Server virtual machine, with IIS features enabled, to host the Town's public-facing FTP server in the DMZ network. i • Decommission and removal of the old devices and equipment. o After the new infrastructure is completed, tested and approved by the I.T. staff all old devices and equipment must be physically removed. Data sanitization must be performed on all old equipment ensuring that all sensitive data and settings stored are destroyed beyond recovery. • As-Built Documentation o Update the documents provided during the infrastructure assessment project to match the final, as-built state of the Town's network. o The vendor will provide a backup copy of all in-scope configuration files at project completion. Hand-off to Southold • Immediately after the cutover, ,provide twelve (12) hours of support, training, and knowledge transfer to Southold's Information Technologies staff. Demonstrating' diagnostics and,troubleshooting techniques for the newly implemented hardware, 61 Page systems, and applications. • Provide one (1) calendar week of support per location after the location cutover is complete and the new system is online. • Create a detailed project runbook that includes, but is not limited to, system settings, configuration, and specifications, as well as an overview of all updated and upgraded devices, operating systems, software, and applications involved with the entire project. • Perform a backup of all of the new and upgraded devices and applications. The backup files will be turned over to Southold and documented as part of the project runbook. • Performance tuning—Three (3) months after the project has been completed, analyze each firewall and domain controller and optimize, tweak, and fine tune settings. After this final step is completed to the satisfaction of the Town of Southold's Information Technologies staff, the project will be eligible for project sign-off. Out of Scope During the RFP submittal or discovery phases, it is the vendor's responsibility to determine any deficiencies in.the current environment that relate to the items per the scope of this project. If deficiencies are discovered and cannot be,remedied within the scope of the project then action items will be identified, documented, and addressed by the Town of Southold Information Technologies staff and the vendor as soon as possible. In addition, during the implementation phase, all work considered "Out of Scope" by the vendor will be addressed immediately by the Town of Southold Information Technologies staff and the vendor. Issues determined to be out of scope need to be explicitly detailed in writing, containing a very clear picture of what the actual issue is and the associated costs to correct. If a modification to the existing project scope is required, then a formal written change request will be created by the vendor and presented to the Town of Southold. This change request must include clarification, feasibility, impact, and the total cost broken out by labor and materials. .If approved, the change request will be signed, and the Town of Southold will issue a purchase order. Immediately after receiving the purchase order, the vendor will act as soon as possible to address the issue defined by the change request. Hardware and Software Hardware and software specifications shall be based on the following minimal standards found in Appendix B. Server Hardware and Software The Town of Southold has requested an upgrade of their Active Directory structure and forest level, including three (3) new domain controllers. Active Directories has three (3) domain controllers-currently running Windows Server 2012 R2 and a domain and forest functional level running Windows Server 2012 R2. This project 71 Page is'to upgrade the domain controllers to Windows Server 2022 and the domain and forest functional levels to Windows Server 2016. Penalty Clause Timeliness of Completion The vendor shall complete the full scope of work outlined in this RFP within six (6) months of the contract start date. For each thirty (30) days or portion thereof that the project extends beyond the six (6) month deadline, the vendor shall incur a financial penalty of$10,000.00, which will be deducted from the consideration due to the vendor. Performance Standards The vendor's work shall meet or exceed all performance standards and technical specifications detailed in the RFP. If, at any point during the project or within six (6) months.of the completion date, the Information Technologies Department determines that the contract has failed to meet one or more of the stated performance requirements, the vendor shall be subject to the following penalties: • For each performance deficiency identified, a penalty of$5,000.00 shall be deducted from the contract price due to the vendor. • If the cumulative performance penalties exceed 10% of the total contract price, the Town of Southold has the right to terminate the contract for cause. Termination for Convenience Notwithstanding any other provision, the Town of Southold reserves the right to terminate this contract for convenience at any time upon 30 days written notice. In the event of such termination for convenience, the Town of Southold shall be responsible for payment of all work completed to date. Still, it shall not be liable for any termination fees or penalties. This penalty clause is designed to incentivize the vendor to complete the project on time and to the full performance standards outlined in the RFP. The timeliness and performance penalties provide financial disincentives, while the termination for convenience clause protects the Town of Southold's ability to terminate the contract if the municipality deems it necessary. Liquidated Damages The timeliness and performance penalty presented above represent liquidated damages as a reasonable estimate of the Town of Southold's actual damages in the event of delay or deficiencies. Reporting and Documentation The vendor shall provide regular progress reports and.documentation demonstrating compliance with the RFP to the municipality's satisfaction. This section shall deem failure 81 Page to provide regular progress reports a performance deficiency as outlined above. Communication/Questions Vendors are expected to raise any questions or make any additions they have concerning the BID document as soon as they-become aware of them. Any questions or requests for clarifications must be directed in writing to Lloyd Reisenberg at 6�2,_ lloyd.reisenberaCaD-town.southold.ny.us no later than XX/XX/2025 @ 4:00 PM. The subject line of the email must be labeled "BID: Infrastructure Upgrade Project - Question." The only contact allowed with the Town of Southold I.T. staff is through email, as stated above. Unauthorized contact of any Town of Southold employee is cause for rejection of the bid. Any additional information or clarifications that are provided to one bidder will be provided to all bidders as an addendum. Calendar of Events The dates set forth below are for informational purposes only. All dates are tentative and subject to change. Milestone Date Issue BID: XX/XX/2025 5 1z Deadline for Submission of Written Questions: 1XX/XX/2025 @ 4:00 G 12- PM Proposal Due Date: XX/XX/2.0_25 @ 2:00 PM Submission of the Response I I� The respondent must submit two sets. Please clearly .mark the original copy' as "ORIGINAL" on the cover: Southold Town Clerk PO Box 11.79 53095 Route 25, Southold, New York 119 71 All responses must be packaged and sealed. The outside of the package should show the following information, and a Non-Collusive Bid Certificate should include the respondent's name, address, and the request for proposal number and title. Response Requirements: The Town of Southold will evaluate responses based on the following criteria: Section 1: Vendor's Financial Stability (10%): Provide a description of the vendor's firm, including history, number of years the vendor has been in business, type of services provided, and legal status of vendor's organization, 91Page i.e., corporation, partnership, etc. Provide documentation that verifies the vendor has sufficient financial support, assets, and organizational structure to deliver the products and services requested in the RFP. Acceptable documentation may include financial statements, credit ratings, lines of credit, or other financial arrangements that demonstrate the vendor's ability to meet the requirements outlined in this RFP. Section 2:Vendor's Qualifications and References (25%) Describe similar projects the vendor has completed in environments comparable to the Town of Southold. Provide at least five client references, including the names of the companies, individuals, phone numbers, addresses, and email addresses that the Town of Southold could contact. The Town of Southold reserves the right to contact or visit any party listed as a reference that has previously used or is presently using the vendor's products and/or services in a manner similar to those proposed by the vendor. Southold also reserves the right to use other sources to obtain information about the proposed products and services. Section 3: Proposed Solution (40%) The proposed solution must also show the following: • Provide proof of extensive experience with designing and implementing Cisco next- generation ASAs and Microsoft applications, as defined in this document. • A detailed project plan incorporating the project scope, clear objectives, key deliverables, detailed timelines with milestones, assigned responsibilities, start and completion dates, and a work breakdown structure to manage project tasks and ensure successful completion effectively. Section 4: Cost Proposal (25%) The vendor's pricing must be all-inclusive to provide the Town of Southold with a turnkey solution. 101Page Appendix A Core Location Connectivity Redundancy - Implement redundant connectivity between the three (3) core locations using cellular connectivity. This project intends to provide immediate failover redundant and secure connections between the three (3) core locations should the primary WAN-hosted connection become unavailable for any reason. Cisco Umbrella Server Migration —As specified in Phase I, migrate two (2) and add one (1) Cisco Umbrella VM(s) to the new Dell R360 servers. The objective is to introduce additional resiliency and availability by migrating one (1) VM to Town Hall, one (1) VM to the Police Department, and adding one (1) VM to the Annex. Security Cameras - Migrate all security cameras connected to the Town's network to a separate DMZ on the firewalls. Public WIFI - Using the upgraded network infrastructure as a backbone (see Phase 1), incorporate all facilities current independent public Wi-Fi infrastructure in all facilities into a separate and secure segment of Southold's network. Appendix B Equipment List with Part Numbers and Quantities and Support Options Equipment, applications, software, and labor must be itemized in detail individually in the proposal. Responses will include a 24x7x4 support. contract for each product (where offered by the manufacturer) for a thirty-six (36) month term. Part Number Description K� Qty - - I 4 Network Appliances FMC1700-11<9 Cisco Secure Firewall Management Center 1700 Chassis CON-SNTP-FMC1700K NTC-24X7X4 Cisco Secure Firewall 1, 36 Months SFP-10G-SR= 10GBASE-SR SFP Module 2 ! SNS-3715-K9 Small Secure Network Server for ISE Applications 2 I . CON-SNTP-SN3715K9 SNTC-24X7X4 Small Secure Network Server for ISE App 2, 36 Months SFP-H10GB-CU3M= : 10GBASE-CU SFP+-Cable 3 Meter 2 11 Page Town Hall CSF1220CX-TD-K9 Secure Firewall 1220 Appliance, Compact, Threat Defense 2 CON-SNTP-CSF1XTDK j SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 2, 36 Months CSF1200C-RACK-MNT= i Secure Firewall 1200 Series rackmount kit for compact i 2 _ models _ SFP-H10GB-CU1 M= 10GBASE-CU SFP+ Cable 1 Meter j 2 C9500-24Y4C-E Catalyst 9500 24x1/10/25G and 4-port 40/100G, Essential 1 i CON-SNTP-C95024EY i SNTC-24X7X4 Catalyst 9500 24-port 251100G only, Esse, 1 36 Months ! , C9300-48H-E i Catalyst 9300 48-port UPoE+, Network Essentials 7 -ON-SNTP-C930210L -- ! SNTC-24X7X4 Catalyst 9300 48-por _ i 7, 36 Months SFP-10G-LRM= 10GBASE-LRM SFP Module 14 Annex CSF1220CX-TD-K9 Secure Firewall 1220 Appliance, Compact, Threat Defense I 2 CON-SNTP-CSF1XTDK SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 2, 36 Months _ I ——+--- CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact I 2 models _ SFP-H10GB-CU1M= 10GBASE-CU SFP+ Cable 1 Meter 2 I -- -J C9500-24Y4C-E Catalyst 9500 24x1/10/25G and 4-port 40/100G, Essential C0N-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/100G only, Esse 1, 36 Months ---_..----.—_ —-._. ---- ----- ----------- - -- ---------- _...... C9300-48H-E I Catalyst 9300 48-port UPoE+, Network Essentials - � I I 3 CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 3, 36 Months - -__ _._. - -- -- -- - -- - , _--- - S--FP-10G-LRM= 10GBASE-LRM SFP Module g Police Department CSF1220CX-TD-K9 Secure Firewall 1220 Appliance, Compact, Threat Defense 2 CON-SNTP-CSF1XTDK SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 2, 36 Months CSF1200C-RACK-MNT= 1 Secure Firewall 1200 Series rackmount kit for compact I 2 models SFP-H10GB-CU1 M= 10GBASE-CU SFP+ Cable 1 Meter C9500-24Y4C-E Catalyst 9500 24x1/10/25G and 4-port 40/100G, Essential 1 --- ------ -- --- ----------- -----.- --- --- ------_ - ------- ------ -- -+ -- - - -- - CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/100G only, Esse 1, 36 Months I C9300-48H-E Catalyst 9300 48- ort UPoE+, Network Essentials CON-SNTP-C930210L ; SNTC-24X7X4 Catalyst 9300 48-por 5, 36 Months SFP-10G-LRM= 10GBASE-LRM SFP Module 10 ' Highway Department �� CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense 1 12 Page CON-SNTP-CSF10ETD I SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact ! 1, 36 Months CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact i models C 300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials 1 CON-SNTP-C930210L SNTC-24VX4 Catalyst 9300 48-por — I 1, 36 Months Recreation Center CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense 1 I I CON-SNTP-CSF10ETD SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact— 1, 36 Months �CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact _ models 1 C9300-48H-E— Catalyst 9300 48-port UPoE+, Network Essentials 1 jC9300-NM-8X Catalyst 9300 Series 8x 10G/1G Network Module (to I support new fiber connection between Rec and HR Center) 1 SFPI SFP 10G-LR 1 10GBASE-LR SFP+ module (to support new fiber I 2 connection_between Rec and Community Center) CON-SNTP-C930210L SNTC-24X7X4 Catalyst Options st 9300 48- or- 1 &3 Year O ons � Y P P � 1, 36 Months Waste Management CSF1210CE-TD-K9 j Secure Firewall 1210 Appliance, Compact, Threat Defense 1 CON-SNTP-CSF10ETD SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 1, 36 Months CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact �— 1 models I C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials — 1 I CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 1, 36 Months Human Resources Center CSF1210CE-TD-K9 Secure Firewall 1210.Appliance, Compact, Threat Defense 1 CON-SNTP-CSF10ETD + SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 1, 36 Months CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact 1 models C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials C9300-NM-8X Catalyst 9300 Series 8x 10G/1G Network Module (to support new fiber connection between Rec and HR Center) 1 ----- --- ---------- -------- ------------------------- - ----- -------- ---- -- ---- SFP-10G-LR 10GBASE-LR SFP+ module(to support new fiber 2 connection between Katinka House and HR Center) CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 1, 36 Months 13 Page Dell.PowerEdge R360 MFG Part# Description City 210-BJTR PowerEdge R360 Server 3 461-AAIG Trusted Platform Module 2.0 V3 3 321-BK P 2.5" Chassis with up to 8 Hot Plug Hard Drives, Front PERC 11 3 338-CMQZ Intel Xeon E-2468 2.6G 8C/16T 24M Cache Turbo HT (65" DDR5 3 412-BBHK Heatsink 3 370-AAI11P Performance Optimized 3 370-BCBM 5600MT/s UDIMMs 3 780-BCDI C1, No RAID for HDDs/SSDs (Mixed Drive Types Allowed) 3 405-ABCQ, Front PERC H355 Front Load 3 750-ACFtR , 384-BBBL Performance BIOS Settings 3 800-BBDM UEFI BIOS Boot Mode with GPT Partition 3 387-BBEY No Energy Star 3 384-BDMJ High Performance Fan 3 450-AMDH Dual, (1+1) Redundant, Hot-Plug Power Supply, 600W MM (100-240Vac) 3 330-BCMK Riser Config 2, Butterfly Gen4 Riser(x8/x8) 3 PowerEdge R360 Motherboard with Motherboard with Broadcom 5720 Dual Port 329-BJTG 1 Gb On-Board LOM, MX 3 325-BFVN, PowerEdge R360 filter bezel 3 350-BCTP 403-BC Z, BOSS-N1 controller card +with 2 M.2 960GB (RAID 1) 3 470-B BJ L 634-BYi Y Windows Server 2022 Standard 16CORE FI No Med No CAL Multi Language 3 528-CSCP Windows Server 2022 Standard,16 CORE, DF Recovery Image, Multi Lang, 3 (Downgrade not included) 528-CSCP Windows Server 2022 Standard No Media WS2019 Std Downgrade DF Media 3 Multi Language 634-BYLJ Windows Server 2022 Standard,16 CORE, Media Kit, Multi Lang, (Downgrade 3 not included) 379-BFXT, Dell Connectivity Client- Disabled 3 634-CY6 F 528-&11C iDRAC9 Enterprise 16G 3 528-CdYT Server Secured Component Verification 3 379-BQRJ iDRAC,Factory Generated Password, No OMQR 3 658-BF,RK iDRAC Service Module (ISM), Pre-Installed in OS 3- 379-BCiQY iDRAC Group Manager Disabled 3 14 Page 618-1313EC Hyper-V role enabled with pre-installed Standard or Datacenter Ed OS on incl 3 Virtual HDD 770-BCW 770-BDMT ReadyRails Sliding Rails with Cable Management Arm (Al2) 3 631-AA qK No Systems Documentation No OpenManage DVD Kit 3 340-DL�,S PowerEdge R360 Shipping 3 340-CWUJ PowerEdge R350/R360 Shipping Material for 2.5" Chassis 3 389-FFNB PowerEdge R360 CCC Marking No BIS or CE Marking 3 707-6877, 707-6889, 707-689F, 3 Years ProSupport and 4-Hour Onsite Service 3 707-6946, 955-9041, 989-3439 841-5979 Keep your Hard Drive For Enterprise 3 Years 3 900-9997 On-Site Installation Declined 3 370-BBZF 32GB UDIMM 5600MT/s ECC 6 400-AX7 480GB SSD SATA Read Intensive 6Gbps 512 2.5in Hot-plug AG Drive 1 DWPD 3 L 450-AAV Power Cord -C13 3M 125V 15A(North America Guam North Marianas 6 Philippines Samoa Vietnam) 15 Page Appendix CI Enterprise architecture drawings depicting the Town of Southold network topology. Town Hall Optimum Ring WAN SOUTHOLD5525-TH -� SG300-52 S 300-28 SG300-28 SG300-52 Cisco SG300- Dell EMC 3Com Baseline 10PP S521 F-ON 2928 SFP Plus li� Netgear MS1080P Figure 1:Townholl Topology 16 Page Annex COptimum Ring WAN SOUTHOLD5525x-ANNEX �I♦ SG300-20 SG500-28 SG500-28 WS-C2960L-48TS-LL Figure 2:Annex Topology Police Optimum Ring WAN SOUTHOLD5525-PD i i SG300-28 SG300-28 SG300-28 SG300-28 SG300-28 SG300-10 Figure 3:Police Topology 17 Page Highway Optimum SOUTHOLD5508x-HW SG350X-24P SG300-28 Figure 4:Highway Topology Recreatio Optimum SOUTHOLD5525x-REC i i SG102-24 SG11 OD-08 ' Netgear MS108UP Figure 5:Recreation Topology 18 Page Waste-Landfill Optimum SOUTHOLD5525x-LF F � SG102-24 Figure 6:Landfill Topology 191Page Senior-Katinka Optimum I I I I SOUTHOLD5508x-HR Netgear MS108UP —11IN. SG300-28 Figure 7:Senior-Katinka Topology Community Center Cable Internet I I I I i I ISP Provided iR Wireless Router v 20 Page Figure 8:Community Center Topology WAN Community Center Waste 1 I I Rec e II $ +i +-► I Senior 7tr- S2S �� InternetOniy $ ._... 1 I 52S Highway gg S2SIM i =M ire I £ € s I I0 FMC @ 4 Annex ISE-PIC «i «� I L �. 3 L _.. _ _ _. ..._ ,.� __.. _ Figure 9:WAN Topology 21 Page I 1 _ r 77 jt vNW - 1 ' ' v - ! r To n of Southold Infrastructure Upgrade Project RFP Original l Response September 25� 2025 CD1Nwe n im n� CDW Government LLC 2025 1230 N. Milwaukee Ave. I Vernon Bills,IL 60061, ; To th extent allowable, all information and documents hereby submitted in response to the Request for Proposal ("RFP") furnished by Town of Southold are the Proprietary and Confidential property of CDW Government.LLC. One CDW Way CDW Govern a 230 N.Milwaukee Ave: CDW Vernon'Hills,IL 60061 Tol l4ree:800:800.4239 Web:cdw.corn September 25; 2025 Town.of Southold Route 25 530951 Southold, NY, 11971 RE; C?W Government LLC's Response to Town of Southold's Infrastructure Upgrade .:Project RFP Dear Joycl Reisenberg, Town of Southold is seeking a reliable.and experienced IT.parfner capable of managing your The Town of Southold is seeking a reliable and experienced IT partner capable of managing a comprehensive infrastructure upgrade project that modernizes its network and security environment, including next-generation.Cisco and Microsoft technologies, hard i are, software; and related managed services. Our response demonstrates CDW Government's ability to contribute'to the overall success of this initiative. CDW Government LLC (CDW Government) was founded in 1998 to focus on the unique.needs and.opportunities of our public sector customers. Specific advantages of partnering with us include: ■ Dedicated Account.Team, Delivers High Quality Service. Your highly'trained and experienced account team, including a dedicated account manager, are responsible for coordinating all your needs and ensuring customer satisfaction. ■ Strong Partnerships Help Ensure the Best Experience. CDW. Govern ment's'top,tier partnership status with Cisco and Dell demonstrates the strength of our relationship, and our ability to fa'ci'litate efficient communication between all parties, as well as timely road mapping and other requests for information. Irn-House Expertise Provides Easy Access to Knowledge. You can leverage our valuable presal.es'consuiting expertise:to assist with developing solutions that provide robust functionality, efficiencies, and cost savings. As always, we consistently strive to exceed your expectations.Should you have-any questions regarding our response, please contact your Account Manager, Angelo Cappetta at (203) 851-7250 or angelo@cdwg.com. We lthank you for.the opportunity to participate in this RFP process and are confident you wi i our response ageous from both a strategic and budgetary standpoint. in der .ly, P us 'n Schwier- M er,.Proposals C Government CDW Government LLC submits this bid,response subject only to the terms and conditions contained in the current Sourcewell 121923-CDW Technology Products and Services Contract agreement.Any terms and conditions in the bid or elsewhere that are additional to or different from the terms and conditions of that agreement shall not apply to any transaction(s)that results from CDW Government's submission of its bid response. ©CDW Government LLC 2025 1230 N. milwaukee Ave. I Vernon Hills,IL 60061 To the extent allowable,all information and documents hereby submitted in response to the Request for Proposal' ("RFP")furnished by Town of Southold are the Proprietary and.Confidential property of CDW Government LLC. Town of Southold, Infrastructure Upgrade Project RFP Sect i-on'-. 1,:, .Vendor's ,Fin,a.nc,ial, Stability Provide a description of the vendor's firm, including history, number of years the Vendor, has.been in.;business, type of services provided, and legal status of vendor's organ'i ation, i.e., corporation, partnership, etc. . :Provi I e.documentation that verifies the vendor has sufficient financial support; assets;.and organizational structure to deliver the products and services requested in the RFP. 'Acceptable documentation,may include financial statements, credit ratings; lines of . credit, or other financial arrangements that demonstrate the vendor's ability to,meet the requirements outlined in this RFP. Please see the.following pages'for an overview of CDW Government LLC and information regard.ing.financial stability.:, ©CDW Government LLC 2025 1230 N. Milwaukee Ave. I Vernon Bills,IL 60061 Tp the extent allowable,all information and documents hereby submitted iri response to the Request for Proposal I("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC. Town of Southold, Infrastructure Upgrade Project RFP Abbut,CDW 'Gov ernment . . "CDW Government LLC'(CDW Government) is a wholly. owned subsidiary of CDW.LLC; (CDW),,a leading multi brand technology solutions provider to business, Caw Quick Facts. . . government, education, and healthcare organizations in . .the U.S., the UX, and Canada. Recognizing the unique Vernon Hills, IL challenges a nd,opportunities of our public sector us.Headquarters customers;we.established CDW Government in 1998 to, $2113 focus on the.specific needs of Our education and 202'4Annual Net Sales government customers. Our teams are broken-down by I : 15,100 .•. segrr ent, with separate teams serving state and local and coworkers. federal government customers. For local specialization, teams are further organized into geographic regions. We rUP 250,000+ customers h-ave an expansive network of offices near major cities and a large team of field coworkers across the U.S. CDW's Fos Fortune 500 Ranking, sust?inable growth andcontinued financial stability serve to:assure Town, of Southold that we,are here to stay and #s, CRN's Solution'Provider 500 List can support you through-the life of this contract and beyond. . St te .and'Lo'caL'Gove:rnment Expertise Wit�� more than 20 years of experience serving state and local'governerents, CDW Government can.help implement the right technology solutions to meet your agency's ,you p g mission and goals and better prepare for tomorrow's IT challenges. We have more than , 250laccount profession6ISL serving all 50 states from the largest state agencies to the smallest rural communities:Through regional segmentation, we ensure that each agency's needs are addressed with personalized customer. service. Your dedicated teams are well attuned to the legislative and fiscal calendars at the state level, as well as business.cyeles and practices of.,major metropolitan areas. r DW Governme,ntisa partner you an trust. With more than 20 years of experience supporting state and ; local customers, we employ more , than 250'account.professionals to' '• ' ': ensure each;agency's.needs receive . ,personalized customer service: © CDW Government LLC 2025 1 230 N. Milwaukee Ave'. I Vernon Bills,IL.60061. T the extent allowable,all information and documents hereby submitted in response to the Request for Proposal (("RFP")furnished'by Town of Southold are the Proprietary and Confidential property of CDW Government LLC. . Town of-Southold, Infrastructure Upgrade 'Project RFP Specialized. Focus Areas Based on'our understanding of government practice;we have developed specialized focus: . areasl, including small and rural cities, utilities, transit, and public safety. . Small and Rural Cities Theo gh tailored solutions and dedicated support, CDW Government is committed to Transportation Public Safety 9' .: Utilities Small and Rural Cities empowering.cities of 20;000 citizens or less with the'technology and resources needed;to deliver essential public services. We focus on enhancing service delivery through scalable' solutions,,advanced technology,integration,.and proactive security measures, ensuring. efficient operations and improved citizen services. Utilities We ave supported public utilitycustomers across thousands of projects, and currently serve approximately 6,000 electric,,gas,.Water, sewage, sanitary, and irrigation Customers across the United States: Ourteams focus on'solutions that help solve pressing 'Challenges, such as security threats and risks, urgent government mandates,.and optimizing collaboration across teams. Tra sportation We help transportation customers enhance operational efficiency, improve'safety, and driver digital transformation through innovative technology Solutions. By leveraging IoT, edge computing,'and smart.infrastructure;.CDW Government helps transportation organizations implement systems that optimize traffic,management, monitor fleet per ormance, and enable predictive maintenance. Pu I c Safety Witjh more than.20.y.ears.of experience and 100s;of engagements,.we understand that: ."access to -real-time data helps improve first responders' response time and streamline agencies''operations for greater flexibility and reliability. Our dedicated team of public . safety-specialists has the expertise and partnerships to design and deploy public safety IT sol�tions'quickl.y'and efficiently: CDW Government LLC 2025,1230 N. Milwaukee Ave. I Vernon Hills,IL 60061 To the extent allowable,all information and documents hereby submitted in response to the Request for Proposal. �("iIFP")furnished'by Town of Southold are the Proprietary and Confidential property of CDW Government LLC.: Town of Southold, Infrastructure Upgr'ade'Project 'RFP 'Strengths, Best Practices, and Value By align.ing'with CDW Government CDW Education, your organization can take advantage of outJ•strengths, best practices, and value-added services: onepartnerfrorn Wes. ; I? . Pre-sales consulting L Investmentsibrough our strong OEM with our in-house _r i specialists. L Contract Complete Management Solutions Technical Competitive Segmented teams to Best-fit,solutions Experts Value focus on your prioritized over industry. Vendor Specialized Neutral Attention Trusted advisors led bya single point of Dedicated C D YY Government contact. I Account Team Insightful Acquisitions FW Seek. FUH Ufek de. FUH -outtameso We make complex solutions.e'asy and efficient with our full life-cycle approach -,Listen, Advise; Design; Orchestrate, and Manage. DesiredOutcontes. Trust at Scale • >25U,000 custotlie%5 recagnizr '11a •' • 4,5ttil e5Q2r t s•_ileis CQU'dastiteir'exjtert�aitlt�i f//S' � •.5til'3FietdSeLsers' , ' • �' • 9005ohrtitnAretiteds Continuous Operations. • • woo ConslAtants and Enp inters ! Maniged Serviccs NPS 60* • 304 SafiwYre Es rp ers ; • Service Qesh 6•Languages } 1^ai+ pn�Sr;:Ft.0i5tr bur+eriSPace •.550+Coworker. • u i0.40Ueanfuraisesosp�rrlay • 6OperatiohsCenter'5 i • 24/7 coverage SOFTWARE Proven Quality • a/� Unmatched Expertise, • 10.000.Certifications Q. • 20'.•Partner pinyField'tdais • D. ivaiy to 157 Countries '. • 1,200 SoutionsFattuers • 6000POjects ~�y^ • flilinda try erteca1s • hro;essionaI Services NPS 70> 0 0c1Lr;d iloini ! 26 U.S.Cities lD tnternatianai 50*Parznerrldvs'sor•a board, locations: ,Cow Government.LLC 2025.1 230 N. Milwaukee Ave. I'!Vernon Gills,IL.60061 T the extent allowable,all information and documents'hereby submitted in response to the Request for Proposal ("RFP.")furnished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC. Town of Southold, Infrastructure Upgrade Project RFP Dedicated Support Resources .:When you work with CDW Education CDW Government,',you,have access to,expertise:that:,' is not available within your organization. Our teams will tailor.a piece of equipment or an entire network to:deliver the most effective and sustainable.results, . AccountDaily Your account ma;na,gement.team is responsible for managing your procurement needs and overseeing all facets of your account. The team will establish a regular meeting cadence to discuss your current;needs, IT standards,and long-term goals. An elo.Cappetta,Account Manager P: (203) 851-7250, E: a'ngelo@cdwg.com . Sales Leadership Your sales leaders help develop strategies that best serve your long-term success. They are also responsible for building and maintaining strong partner relationships that we can . leverage to benefityour organization'. Dan Curtis, Sales Manager P::( 03) 851-7176, E: dancurt@cdwg.com; Pat,O'Brien,-Director of Area Sales P: (1847) 371-5584, E: patobri@cdwg.com Contract Management You r.program.manager will ensure compliance with our contract, as well as with all applicable government regulations. Presales IT Expert Your account.management team will engage our in-house resources as needed to help Town Of Southold develop the best solution for your unique needs,'challenges, and long-term goels.Trained in specifictechnologies, solutions,'and/or partner products, CDW's specialists work with you to offer advice on.the best fit solutions. ©CDW Government'LLC 2025 1'230 N.Milwaukee Ave. I Vernon Hills, W60061 To the extent allowable,all information and documents hereby submitted in response to the Request for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC. Tow of Southold; Infrastructure"Upgrade Project.RFP 'Str"ong Vendor Partnerships. :When it'comes to IT,' we know'Town of Southold'.has many ch'ices.:When you work with CDW Government CDW'Educati'on, we will-leverage our strong industry partnerships.with leading.manufacture,rs.and service providers to-,help yQp:o,bt,aih the best value for your. complete IT solution. With more than-1,000 industry4e'dding vendor partners; we give Town of Southold access'to one of the largest technology:portfolios in the industry. Our: part ership will also provide you with: Product'lnsight.-We work closely with the leading manufacturers to.review roadmaps and evaluate new:models. This enables us to develop strategies for' smo.oth:upgradesand'transitions, and directly inforihs-our advice and.- recommen'd'ations to Town'of Southold. In-House.Expertise:'Our.account managers and technical staff.are regularly trained and:certified by our manufacturing.partners :to ensure optimal product.deployment and.management in•your. environment.: ■" Expedited Access. Some of our top.vendor partners staff"representatives.at'CDW to facilitate.requests for in.formatiorr and assist.with solution d�esign,.giving you. direct-access to-their-exp.ertise,and: insight: ■. Seamless"Deployment.' Our,account teams.build strong relationships with our partners.through..regul:ar•com'munication a.nd:collabo:ra.tioh.:This helps ensure:a smooth deployment process from beginning to:end. . ■ RiskMitigatioh: We receive detailed.insight.into supply chain availability, . manufacturing delays; distribution shortages, overstocks, and other disruptions. This:allows us to.bRtter.fo.recast product'availability and plan for;,your..ne•e.ds... . Best Value Solutions..We leverage our relationships to secure competitive prices and ensure we deliver the best Value-to maximize your investments.: For.a'fullAist of our:vendor'part:ners, please visit. .,https://www.cdw.com%content/cdw/en%brand.html. CISCO DOLLTedutologt^, HewlenPacYard. Merakl NUTANDS. $'IVOT Peak Enterprise �PtYtiwar@; ;. \`lam ARsTA Azure aWS CITRIX' COHE)ITY .cradlepotnt; c�ovocsNlx. COMMVAULT Q drUVad @KandU eExtrerne' (�1 Fetnriner. dGtl�ca,a (IljHashilbrp I . f!. Gtgumon' . novo micro sott: nAsuri A NetApp�unPer InfoblOX ; intel. Red Hat . 'riverbed ' �u.brik i eucKus `°.... QnvIDIA, : -I1Paloalt_c PURESTORAGE (jrockspuce' y . . ." ©tterpomt veeAM " "( wosabi • . :servicenow splunk Surrxsooni ueipum ©CDW Government LLC 2025 1 ,230 N.Milwaukee Ave'. I Vernon Hills;,IL:60061 To the extent allowable,all.inforination and documents hereby submitted in,response.to the Request for Proposal (r'RFP..)furnished by Town of Southold are the Proprietary and Confidential property of CDw Government LLC. Tow of Southold-, Infrastructure Upgrade Project RFP 'Simolify Your IT Journey" A significant advantage we,offer,Town of.Southold is our ability to deliver the right- products; at the,right.value, right when you need them: CDW"ha"s two large, strategically located.distribiition centers controlled by a state-of-the-a'rt Warehouse.Management Systl m that ensures speed and accuracy throughout the order fulfillment and distribution. processes (Figure.2). The Vernon Hills.and North Las Vegas locations facilitate quick . distribution of products, as well as provide configuration capabilities in=house." VERNON IL T; f1 l0 i e . c • s B . . . • • . 1 I :Y r.t tf configurations per day It 9601,Quality I F&O 14'00'1 . S 1 e e CI Cr :eee .o Figure 2 Our distribution:and configuration centers help ensure speed and accuracy throughout the project.' To supplement our direct purchasing model, CDW:h.as deve.loped'strong affiliations with: pri �cipal.channe,l distributors. Our.distribution centers are close to "principal distributors; this enables us to quickly obtain competitively priced, non-stocked items. t eaMflne Y©ur- gperoence Your CDW Government CDW Education team works closely with Town of Southold's•key. stakeholders, as well as,your selected manufacturers (OEMs) and service,providers. We will be your single point of contact, facilitating communication"and simplifying your experience.: Hardwars OEMs ............. > ••• Single Point. of Contact CDW simplifies Full 0 v ^> Stacic solutions C) .......... Customer z�s Service Partners © CDW Government LLC 2025 I'230 N. Milwaukee Ave. I Vernon Hills,IL 60061 To the extent allowable,all information and documents hereby submitted in.response to the Request for Proposal ("RFP")furn•ished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC." Town of Southold, Infrastructure Upgrade Project RFP :AH in One Noce - Your OnNne CID . Account porW . CDW.com is a full-commerce=enabled website filterable by industry, with functions that incl de product search, browse and co.mpare;.checkout, and access to a digital account por.dal to rianage..your tech nology.investme' nts., You' customizabl.e..Rubi ortal serves as, ,our trusted di ital adviser.,An example of our p Y g customer-centric approach, Rubi is the evolution of your CDW Account Center, developed' in d;rect response to customer feedback.. Rubi helps you -plan, procure, and manage assets across your technology.lifecycle with. gre�ter confidence and less complexity. From one.ce'ntral.porta1, configurable for relevance you can simplify the ordering.process, access industry knowledge, and collaborate with technology experts to take more informed action on your investments. �DVI/'S DIGITAL PORTAL: RUBI • YOUR TRUSTED DIGITAL ADVISER Rubio Plan, buy and manage your technology with he convenience of a personalized portal.. r All in.One Place . ' Your CAW team,order history,asset details, ! _ technologystandards and pricing,all together P 9. 9 r Take Action Manage subscriptions,streamline repeat purchases and approve orders Insights Good'Aftemoon,Michelle Visibility.Into supply,chains and product ETAS 'ensures Weil-timed technology implementations + Rubl O . Adiun ittnns HEW! Rubi Mobile App Act on quotes and purchases,view and track orders,and approve f,. ': � a ; C= orders from anywhere a^•w . Good\[Deal i�.ihnma( �. au.t,w > tn•ixo N:er.,anra.avvti. ©CDw Government LLC:2025'I 230 N. Milwaukee Ave. I Vernon Hills;IL:60061 To the extent allowable,all information and documents he'reb.y submitted in response to the Request,for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDw Government LLC. Town of Southold, Town;of Southold - Infrastructure. Upgrade Project RFP - Cap Op 150403. • Additional,Sup'pdrt Resources Technology Specialists Our teams of technology specialists are highly trained and experienced products and. technologies including: l:ea ing andFinance Security Managed Print.Services . Servers and Storage Mobility Software Licensing and Management - Networking. Unified.Communications/Collaboration Power and:Cooling Voice and'Data . . Pr sales Systems.Engineers CDW has a large team of more than 100 presales systems engineers who hold Vendor- funded.positions and,provide presales support for.that partner's products. These experts assist with evaluating products based on your unique operational requirements and budgetary constraints. They review quotes.for product compatibility, functionality, and compliance. Solution Architects Ou teams of solution architects work closely with the vendor partners whose solutions the. design. They assess your environment and work with your IT staff to design plans for: sol tions that boost productivity and improve operational efficiencies. They are extremely. knowledgeable about the latest technologies and have important insight regarding different solutions. On site vendor'Representatives CDW has manufacturer and software publisher representatives onsite.at our sales 'offices to assist account.managers 'and :specialists with.requests for technology roadmaps'and other information, and to provide training on an ongoing basis. CDW°s strong relationships facilitate.presales consultation and timely notification regarding product :changes and products,going "end of life." Ongoing Customer Support CDW strives to provide outstanding customer support and resolve issues quickly. While your account manager can generally handle most issues and concerns, our Technical . Support; Customer Relations, and.Site Support staffs are available to help. CDW•G 'has cusl�tomer relations representatives who. are available to resolve post-sales-inquiries from 7:00 a:m. until 7:00 p.m. CT, Monday through Friday. We,service,customers through phone support; email, and live chat: Excellence in, customer service is a top priority for: CD : y sW Government We have many qualit control and metrics in place to ensure high © CDW Government LLC 2025 1 230 N. Milwaukee Ave. I Vernon Hills,IL 60061 To the extent allowable,all information,and documents hereby submitted in response to the Request for Proposal ("RFP.")furnished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC.. Town of Southold; Town of Southold - Infrastructure Upgrade Project RFP - Cap Op 150403, quality standards across';the'organization:. We track and monitor a .variety of-service metrics.and ratios daily to ensure that'we provide continuous, h,iigh-quality customer service:We adjust-and evaluate.process changes as needed when we see high volumes for , certain'types of issues, . . ©C®w Government LLC 2025 1 230 M. Milwaukee Ave. I Vernon Hills,IL 60061 To the extent allowable,all information and documents hereby submitted in response to the Request for Proposal ' RFP•")furnished by Town of Southold are the Proprietary and Confidential property of CDw.Govern ment'LLC.' Town of Southold; Town of Southold - Infrastructure, Upgrade Project RFP - Cap Op .150403. Envir.on:mental .Res. .6 sib�ilit p Y :CDW has long.b-een conscious.of our impact on the environment. Our approach is to be sus ainable and efficient in'our operational practices and seek to'.positively impact.the environmental performance of our value chain, Our environmental policies, procedures, and facilities management guide our day-to-day operations. Given'.CDW's �roleJn the technology sector as a�leading multi-brand technology solutions' . prod ider, our greatest opportunities to impact the'environme'nt lie incollaborating,witli ' :our supply chain and working with our partners and customers to help them achieve their'-' . :env ronmental,goals.:This includes continuing to expand our offering of sustainable and socially responsible technology:products and solutions. Ad itio.n'ally,:as part:of our commitment to. continuous improv,em:ent,.we.regularly. evaluate-the efficiency of our use of natural resources. We seek to identify and address oppVortu.nities to improve by reducing 'aste�to landfill through enterprise=wide recycling initiatives, implementing innovative packaging.solutions; and.integrating principles'of environmental:responsibility-throughout our business. . o�Ofts Cc 'All CDW distribution centers (two•in'the.U.S::and one in the U.K.), and•two of'our U.K..offices,.'hold:ISO 14001 certifications, the international standard for Environmental Managem.ent.Systems (EMS), These certifications ensure. 1.:consistency and effectiveness in our.EMS and demo.nstrate;ou:r Ion - SO' I Y g. . . . . established:.commitment to managing our business responsibly. . 140,01;2015 Thi year was our.most.impactful year.to date in formahzing.our;approach�to climate ;act on.:We-'significantly elevated our efforts to do our part to address the broader issue,of. climate change. We:furthered.our collaboration with partners.and bolstered sales ena�blement efforts for ESG solutions, empowering our customers to advance'climate action'd.eliberately arid,strategically. Notable highlights from,2023'include: ■ Announced Greenhouse.Gas (GHG) Reduction Targets: Under.the Ieadership.of our Climate Task Force,.and with support from.senior leadership;we committed-to set. near-term, company=wide emissions r.eductions,in line with climate science.:with the Science Based Targets initiative'(SBTi). We submitted our targets for validation. and are awaiting approval from SBTi. Outperform ed.Waste Diversion Goal (92%): For the fifth'year in a row, ourt: US distribution centers 'outperfo'rmed their waste diversion goal of 90% by recycling 1,700 tons of packaging material;7,494 tons of'cardboard, 3061ons of,paper; as well'aswood and plastic:pallets: ©:CDW Government LLC 2025.1 230 N.Milwaukee Ave. I veMon Hills;IL 60061 To the extent allowable,all information,and documents hereby submitted in response.to the Request for Proposal, "RFP")furnished'by Town'of Southold are the Proprietary and Confidential property of CDW Government LLC. Town of Southold, Town of Southold - Infrastructure Upgrade Project RFP - Cap Op 150403 ■ Created CDW Climate Action Committee. This committee evolved from our- Climate Tusk Force into an.ongoing cross-functional,global group of CDW leaders' to ,oversee projects and implement best practices.in support of_our GHG emissions reduction targets. In 2024, the Climate Action Committee will focus on developing : the workstrearns;and subcommittees of subject, matter experts.neede' d to help us deliver on our goals. Focus on Energy-Efficient Buildings. In 2023, we consolidated two Arizona. locations into one n:ew LEED Gold building in Tempe that provides a state-of-the.- art workplace that harmoniously incorporates sustainability principles, advanced. technology and a.esthetics.'Within 'CDW's real estate portfolio in North America, • this office stands,as one of. 10 LEED Gold-certified offices and one of 16 LEED . . . . .7 certified sites across the continent: For more information on,CDW's sustain.ability efforts, 'please'see our https://Webobi,ects2.cdW.com/is/content/CDW/cdw/on-domain-cdw/cdw- ''branded/esg/cdw-2023-esg-report-final.Of. ©CDW Government LLC•2025 1 230 N. Milwaukee Ave'. I Vernon Hills,'IL 60061' To the extent allowable,all information.and documents hereby submitted in response to the Request for Proposal �(".RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC.' Town'of Southold; Town of Southold - Infrastructure. Upgrade Project RFR - Cap Op 150403, Commitment to Strategic Partnerships Our commitment to strategically partner with qualified businesses enables CDW to contin.ue.deliveri.ng the best customer experience, while contributing to economic,growth in, local communities,. Since launching our program in 2007, we have spent more than $25 billion with small, community-based businesses; we currently'partner with more than 1,500 strategic partners, including, but not limited to, product manufacturers, distributors, and service providers. CDW has implemented a fair and transparent bidding and selection process that promotes equal access-and consideration for all suppliers. We actively engage strategic partners in . our solicitations, provide clear evaluation criteria, and offer support and guidance during the bidding process. In addition, we conduct supplier outreach sessions to educate our suppliers on our procurement. processes and foster stronger partnerships.. We can help Town of Southold meet your business spend goals by connecting you with qualified suppliers in our network that match your needs. We continually evolve our program to align with ou'r community, address our customers" needs, and endorse equal opportunity. In 2023, we achieved $3.2 billion in diverse spend, and it was our fifth straight.year as a member of the,Billion Dollar Roundtable — an exclusive group of U.S' based companies that each spend $1 billion or more with diverse suppliers on.a Tier:1 basis. @rganuzaU.ons We'Support CDW actively pa.rticipates.in various organizations that promote 'a resilient supply chain reflective of the community and customers we serve and support our efforts to meet and exceed our customer's.requirements. Through these affiliations, we stay'updated on best practices: network with a broad set of suppliers; and contribute to building stronger communities. CDW's long standing values and philosophies for success have defined us since the organization's inception. We are committed to fostering a Welcoming and respectful culture where every coworker can thrive, with-.a focus on growth, engagement;,and shared success:.We believe when:coworkers bring their authentic selves and unique . . . perspectives,to work, we all become better collaborators and.bold innovators. C.DW's Business.Resource Groups (BRGs) are vital to the coworker experience. These coworker-led groups encourage connection, allyship, and belonging, in addition to.: providing professional development opportunities across the globe. For further information visit: One CDW I CDW. ©CDW Government LLC 2023 1 230 N-. Milwaukee Ave. I Vernon Hills,IL 60061 To the extent allowable,all information and documents hereby submitted in-response to the Request-for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC. Town of Southold, Infrastructure Upgrade Project RFP CD'W:, Finanda[Information Annual Reports an:d. Quarterly Statements To pull the latest Annual Reports visit https://investor.cdw.cbm/financials/annual- ti reports/default.aspx . :To.pull the latest Quarterly 5tatements, visit: http's://investor.cdw.com/financials/gu:arterly-results/d6fault.aspx erect .Unks' to Rakent QCrilnual . R.e arty ■ 2023:https://s204.g4cdn.tom/970314424/files/doc .financials/2023/ar/cdw- 2023ar-final.pd.f 2022: https'://s20.4.g4cdn.tom/9:70314424/files/doc financials/2022/ar/CDW= 2022AR-FINAL.pdf ■ 2021: https://s204.g4cdn:com%970314424/files/doc financials/2021/ar/CDW AR2021. W EB-FINAL.pdf. ■ 2020:'https://s2o4.g4cdn.c6m/970314424/files/doc financials/2020/ar/CDW7 2020-Annual-Report-Form-10K.pdf: ©Cow Government LLC 2025 1 230 N. Milwaukee Ave. I'Vernon Hills,IL 60061 To the extent allowable,all information and documents hereby submitted in response'•to.the Request for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW•Government LLC. Town'of Southold; lrrf.rasaructure-Upgrade Project RFP Slummary Financial Information : Delivered.qua0erly, investor presentations offer financial summary reports.. To vie;w,ahe ' latest presentations;visit https://investor.cdw.com/events=and= . " :presentations/presentations/default.aspx. Investor Fact Sheet . :Another helpful summary are the investor fact t'sheets.These are also'produced quarterly, To.p,u.11 the latest'investor Fact Sheet visit: . https://investor.cd'w.com/overview/d'efault.aspx'and select,'Fact Sheet"-on the top right in the tabs list (Figure,T). Comied-Hine x 1 Q Home-cd.' _ -x•I Saes and Serrice Projects i C x CDW C.T.—ti--.1 v1 e• % 'fa=s.eeimdd X `� h7tPr/investor.cdw.com.rnrerne•:fde'avh.a;p. - . . A'' rr-`f q}. '{`= Qt] '.moo ®Mimeon My Ubray•e,Mi:,mo..Edge,12 CDWC=.,ner Suc.: ;] IU Jaggaer Portal_ ©Higher Education C... 1$'InfoSecPf,S,1esRe4... r$Pagner Center-,US... ,¢CDLB=Sidus Cry s•5...' r3r,Neaswire . . . . rJASDAQ CUW•S24139 Overview t\eJJs Gvents&Piesenfahons 'Stochlilorniatioii: Faiancials-.Governancx eesource' Fac'tShea: SG•: : 21 tM • Relations rIa ar as cistonters in the United States,the Unked KjWdom and.Caaada to help AVE, kq�"OD�npi&rTml,.tnd.i�"(zeret�nonthert6dihologyiwestments. cvu Figure 1'7 Visit CDw's Investor page on our website to access the most up to date Investor Fact Sheet. © CDw Governonent 4LC 2025.1 230 N. fylilwaukee Ave: I Vernon Hills,IL 60061 To-the'extent allowable,all information.and documents hereby submitted in response to the Request for Proposal ' ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDw GoVernment'LLC.: Town of Southold; Infrastructure Upgrade Project RFP Section 2 Vendor's Qualifications and' References Describe:similar projects the vendor has completed in'environments comparable to the Town of.Southold. . Provide at least five client references, including the names of the companies, individuals, phone numbers, addresses, and email addresses that the Town of Southold could contact. .' The.Town of Southold reserves the right to contact or visit any party listed as a reference.that has.previously used or is.presently using the vendor's products and/or services in. a manner similarto those proposed by the vendor. Southold also reserves 'the right to use other�sources to obtain information about the proposed products and services. © CDW Government LLC 2025 1 ,230 N.Milwaukee Ave'. I'vernori Bells,IL 60061 To the extent allowable,all information.and documents hereby submitted in response to the Request for Proposal ("RFP")furnished'by Town of Southold are the Proprietary and Confidential property of CDw Government LLC.: Town of Southold, fnfrasaructure Upgrade Project RFP Project Experience & References CDW Government has partnered with various,government entities including Otsego County, Florida Division:of Emergency-Mana.gerrient, City,of Lewiston, Delaware County,;and New York City Office of Technology and Innovation to 'upgrade and secure their IT infrastructure. These Projects involved deploying.next-generation edge security solutions with Cisco technologies, irinpl6mehting.firewal.ls,s intrusion prevention systems,zero-trust access controls, network segmentation,'and;migration services such as Cisco ISE. The engagements also included design, deployment, management, equipment replacements;and knowledge transfer to enhance network security and infrastructure across multiple locations and agencies. OTSEGO COUNTY CDW Government helped Otsego County, New York update their networking infrastructure and architecture. This challenging project involved multiple Original Equipment Manufacturers (OEMs).and spanned across two. locations. CDW Government services played a pivotal role in the design, deployment, and management of the entire solution. Our comprehensive services. included wireless surveys, Cisco ISE implementation, Palo firewall implementation, MOXA. Replacement, and Flexpod replacement and implementation. Each piece of the puzzle was expertly handled,ensuring a seamless integration and operation.The relevant services we delivered included Cisco Networking, Wireless Infrastructure, Palo;Alto Firewall;and Fle'xPod Architecture (including NetApp SANS and'VMware). This diverse range of.services highlights our ability.to manage and deliver sophisticated solutions that are tailored to.our client's needs. . . . . . . . . . . . . .. . . • Multiple.OEMS, two locations. • Design, Deployment,management. • ISE implementation, firewall implementation, MOXA Replacement, Flexpod replacement; implementation. Name: Brian Pokorny, Phone: 607-547-4241 Email:..pokoniyb(@otsegocounty.com Address: Otsego County 197 Main'St; Cooperstown, NY 13326 ©CDW Government LLC 2025 1 230 N. Milwaukee Ave. I Vernon Hills, IL 60061 To the extent allowable,all information and documents hereby submitted in response to.the Request for-Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW.Government LLC. Town of Southold, Infrastructure Upgrade Project RFP FLORIDA DIVISION OF EMERGENCY MANAGEMENT CDW Government successfully partnered with Florida Division of Eniergency.:Management.to. deploy a.Next-Generation Edge Security Solution designed to.protect mission.-critical systems.' • Next-Generatiop Edge Security Implementation; utilizing.Cisco Security infrastructure and route/switch components. • Deployed cutting-edge.security technologies, including advanced firewa'lls, intrusion prevention systems (IPS),and'ze'ro-trust access controls.. . • Integrated real-time monitoring tools to provide visibility across-the entire network, enhancing,earl.y detection and.prevention of potential threats. • Developed secure network segmentation to prevent lateral movement of threats between critical infrastructure supporting multiple agencies: • Knowledge Transfer for solutions delivered. •Contact:David Clark Phone Number: 810-815-4705 Email: David.Clark(@em.myflorida.com Address: 2555 Shumard Oak Blvd;.Tallahassee, FL 32399 CITY OF LEWISTON 'Brief Description: Infrastructure.upgrade,VMware, Flash Solution and networking. City,of Lewiston.has been,in need of:a.new all-flash storage solution that can seamlessly integrate into their existing environment.Additionally, it needs to be highly available; cost effective, and easily expandable. CDW proposed a Pure Storage solution. Pure Storage offers. high availability without any performance loss; making it ideal for Lewiston's mission-critical workloads.:Their FlashArray.models•a.re designed'for multi-application consolidation, ensuring consistency of performance even.with consolidated workloads. One of th.e standout features of Pure Storage is their,Evergreen//Forever.program-With this program, we can upgrade and expand our storage without incurring additional software.licensibg costs.This means we can protect,ou,r investment through trade-in credits for existing models'and flash media, transforming the array non-disruptively within the FlashArray//C family: Moreover, Pure Storage has extensive integration with vSph'ere,which is a:significant advantage.for us.Many customers. using FlashArray within a VMware environment.leverage Pure's vSphere plugin, allowing them 'cbw Government LLC 2025,l 230 N. Milwaukee Ave. l Vernon Bulls,IL 60061 To the extent allowable,all information and documents hereby submitted in response to the Request for•Proposal ("UP.")furnished'by Town of Southold are the Proprietary and Confidential property of CDW Government'LLC. Town of Southold,,Infrastructure Upgrade Project RFP to.manage every,day-to day aspect of the FlashArray seamlessly.within the vSphere, management interface.. Nam6:.Craig Starr. Number: 207-513-3129 x3253 Email: cstarr(@Iewistonrnaine.gov Address: 27 Pine St, Lewiston, ME 04240. . . . . . DELAWARE COUNTY CDW Government successfully partnered with Delaware County New York to deploy a Next- . 'Generation Edge Security Solution designed to protect mission-'critical systems supporting multiple state agencies: • Next;Generation Edge Security Implementation utilizing Cisco Security infrastructure and route/switch components. • Deployed cutting-edge security technologies, including advanced firewalls.; intrusion prevention systems (IPS), and-zero-trust access controls. • Integrated,real-time monitoring tools to provide visibility across the entire network, enhancing early detection and prevention.of potential threats. Developed secure network segmentation to prevent lateral movement of threats' between critical,infrastructure supporting multiple agencies. • Ongoing Support and Knowledge Transfer for solutions delivered'. Customer.Contract: Matthew Cucciarre Phone Number: 607-832.-5010 Email: Matthew.cucciarro(@co.delaware.ny.us Address: 111 Main St, Delhi,.NY 13753 © CDW Government LLC 2025.1 230 N. Milwaukee Ave. I Vernon Hills,IL 60061 To the extent allowable,all information.and documents hereby submitted in response to the Request for Proposal ("RFP")furnished'by Town of Southold are the Proprietary and Confidential property of CDW Government LLC. Town of Southold, fnfrastructure Upgrade Project RFP NEW.YORK CITY.OFFICE O.F TECHNOLOGY AND INNOVATION, Brief Description: Cisco ISE Implementation =Migration Services • Lead a design session to review Customer's use cases, existing architecture, upgrade path and hardware refresh.process • Basic System Health Check o Review Software Revision.and Patch Level o Review,a:nd Verify Synchronization-between all Personas. o Review Logs for existing Errors and Warnings. o Review,Authentication logs o R.eview and Verify Backups are working o Document NAC Agent Release o Finding.Report ■ Remediation may require additional hours before upgrade can occur ISE Software:Upgrades o Pre-Upgrade Process Export Certificates and Private Keys from all nodes ■ Create new FTP Repository Perform Full Backup = Configuration, Operational.Data,,and System:Logs Obtain Active Directory Admin Credentials. ■. Review Custom Guest.Portals ■ Record Profiler Configuration o Upgrade Process . - Bring to cu,rrent.release.patch before moving to latest recommended code. . Upgrade up.to 11 Nodes based on deployment model. o :Post Upgrade Process o Ensure Nodes are.communicating and synchronizing correctly o Validate users and devices are authenticating correctly © CDw Government LLC 262511,230 230 N. Milwaukee Ave. l Vernon Hills, IL 60061 To the extent allowable,all information and documents'hereby submitted in response to the Request for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDw Government LLC. Town of Southold, Infrastructure Upgrade Project .RFP o .Ensure Profiler, Posture, Guest•Portal, and BYOD is:working as inspected Knowledge Transfer . o. Provide:up'to.8 hours.of knowledge transfer to show new feature enhancements Customer Contact: Julio Moreno Phone-Number: 7187913-3820 Email•jumorenoPcIoitt.nyc.gov Address: 2 Metrotech, 4th-floor•- Brooklyn, NY, 11201. ©Cow Government LLC 2025 1 230 N. Milwaukee Ave. 1 Vernon Hills, IL 60061 To the extent allowable,all information and documents hereby submitted in response to the Request for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDw Government LLC.' Town of Southold; Infrastructure Upgrade 'Project, RFP Section 3:, Proposed Solution The proposed solution,must,al,so'show the following: ;• Provide proof of;'extensive experience with designing and implementing Cisco next- generation ASAs and Microsoft applications, as defined in this document.. . • A detailed project plan incorporating the project scope, clear objectives, key deliverables, detailed timelines with milestones, assigned responsibilities, start and completion dates, and a work breakdownstructure to.manage project tasks and.erisure successful completion effectively. Please note: Before'theservices are to.b.e'performed;CDW Government will provide.a finalized Statement of Work.(SOW) detailing the,exact scoping of the services.to`be provided, which will be executed by both parties prior to the start of services. The SOW, . ..will reflect terms and conditions as negotiated between the parties. ©CDW Government L'LC 2025.1 230 M. Milwaukee Ave. I Vernon Hills,IL 60061 To the extent allowable,all information and documents hereby submitted in response'to the Request for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC. Iok twn WE GET MICRO 4V 1 I I I 1 1 ' 1 in1i1 1 I ' 1VQ I' II you need Microsoft 1 I IT 1 1 i1 CDW is uniquely qualified to:design IT.solutions that help remove complexity and unnecessary costs from your organization: Our experts become part.of your team providing the support you need,when and where you need it.We help you navigate Microsoft's robust hybrid cloud offerings,from virtualization and desktop management to networking and collaboration solutions.We get Microsoft and we can share our knowledge with you so your organization can spend less time managing software and more time putting it to work. National Scale with Local Capabilities CDW has the Microsoft expertise you need—wherever you happen.to need it.We offer national scale coverage and local.capabilities if you need'a specialist to drop by your.office and answer questions,make recommendationor talk-about latest trends and s challenges.So,no matter.where you are,"we're thereto.bring.you our expertise.' .an Identifly e . . . . . . ,a Zu_I��t nti Management ,tLi;f4 a;n 3f.. . . . EON Microsoft. IF, Communications r , oo i` Portals ��. c ". Content Microsoft WHOLE 800.800.4239 I CDW.com GET IT' 'WE GET STRONGER TEAM MEANS BETTER RESULTS. Strategy&Assessment, Design&Development'• Deployment Adoption Managed Microsoft Office 365 Microsoft File Collaboration Tenant'to : Modernization BUSIne55' Microsoft M365 Roadmap and. Productivity Enablement Services for Tenant Development Microsoft OneDrive Applications Advisory Strategy. Microsoft Teams pp Migration Essential and Change Mergers&Acquisitions Management Azure Backup Storage Deployment Azure Site Recovery Azure Devops Automation Deployment Azure Disaster Recovery Deployment Managed Services for Azure Assessment Workshop Azure Governance Design Azure CSP Adoption Azure-Basic Azure Identity and Access Deployment Services Managed.Servicesfnr. Azure DevOps Assessment Microsoft Azure VMware CIOUd Advisory , Solution Azure Migration Deployment Azure Jumpstart Azure-Essential: Microsoft Azure Sentinel Azure ApP Modernization Azure Monitoring and Management Adoption : Managed;Services for, Assessment Development Deployment Azure-Premium Azure SQL-Migration Deployment Azure Tenant to Tenant Migration Deployment Azure TFS to;Azure DevOps Migration Deployment Microsoft 365,Best Practice Assessment Workshop Microsoft Teams Voice and Meetings Microsoft 365 Governance with Adoption 'Assessment Workshop Microsoft COmmUnieatiorrs. Microsoft 365 Network Microsoft Exchange Online Teams Amplified. Deployment Communications/ Performance Assessment Productivity Adoption'. . Workshop. ' MicrosoftEx6ange' . Microsoft Exchange On-Premise Deployment 'On-Premise Health-Check Microsoft 365 SaaS Security Design Workshop Microsoft 365 CISO Security Azure Identity Managed Services Assessment Workshop, Microsoft Active Directory Microsoft Active Directory Domain' Domain Services Design' Mi ration Microsoft 365 Security Assessment Wig ration Microsoft 365 Security Device Microsoft Identity Manager(MIM)Pilot Microsoft 365 Security Identity Protection Workshop Deployment, Identity and Protection Assessment Workshop Microsoft Privilege Identity . Microsoft Advanced Identity g y. Azure Identity ACCeSS' Microsoft 365 Security Information and Authentication Design Management(PIM)Deployment Manageent.�', • Protection Assessment Workshop Workshop Microsoft Azure Information Protection Managed Services m Microsoft Active Directory Domain (AIP)Deployment (MIM)De -Services Health Assessment Microsoft Identity Manager sign Microsoft Public Key Infrastructure Microsoft Public Key Infrastructure (PKI)Deployment (PKI)Assessment Microsoft Windows Server Microsoft Windows Hello for Business DirectAccess Design' Identity Governance Workshop Azure Tenant to Tenant Migration Microsoft Azure Active Directory �® : .m ►. PEOPLE ME WHO GET•IT' 800.800.4239 1 CDW.corri Strategy&Assessment: ,':Design&'Development Deployment Adoption';. Managed Microsoft Remote Desktop Services(RDS) . .. . . . . . . . . Pilot Deployment Management and..' Microsoft Windows 10 Security.Deployment, Microsoft Defender for Security:Mobile Microsoft Windows Virtual Desktop.: Endpoint Assessment Workspaces (WVD)Deployment , Microsoft Mobile App'Security Deployment Microsoft Cloud App Security Deployment Management. . Microsoft Endpoint Configuration Manager Deployment- and Security: .; . . . ' Microsoft Enterprise Mobility+ Microsoft Endpoint Configuration Manager Unified: Security Assessment Advisory Pilot Deployment Endpoint . Management Microsoft Enterprise Mobility+ g Security Deployment Messaging and Microsoft Teams Assessment Microsoft Skype for Business COnfereming._ and Jumpstart On-Premise Deployment Microsoft Active Directory Assessment Microsoft PKI Assessment Microsoft Active Directory' Microsoft Azure Migration Design Workshop Assessment Microsoft ADFS Deployment Microsoft Identity Manager Microsoft Azure Cloud Design Workshop Microsoft Azure SQL Deployment Workshop Start Basic Microsoft Azure Cloud Microsoft Azure Migration Microsoft DirectAccess Deployment . Start Essentials Microsoft PKI Deployment : . . . . . : . . Microsoft Azure Monitor . Microsoft Azure Cloud. Microsoft SCCM Deployment Start,Premium MI&osoft'Azure VMWare . Microsoft SCCM Deployment Op"erating Microsoft Azure Solution Microsoft SQL Server Deployment Systems,. Governance Workshop Microsoft Lightweight Edge Microsoft SQL Deployment gpplleatidns. Microsoft IaaS Design Connectivity , , and Services Assessment Microsoft Windows Server Deployment Microsoft Azure Microsoft Azure SQL Migration to Azure Workshop Microsoft Always On VPN Foundation Assessment ,: Microsoft SQL Server Planning Microsoft Azure App Innovation Microsoft Power BI Pilot' and Design Workshop Microsoft Azure DevOps Infrastructure Microsoft SQL Server as Code Pilot Microsoft-Azure App Health Check Modernization Workshop Microsoft Azure TFS to Azure Microsoft Azure.DevOps DevOps Migration Deployment Assessment Datacenter Modernization Essentials . . . ... Microsoft Azure TFS to DevOps Discovery and Assessment . Portal and • Microsoft SharePoint Planning&Design Microsoft SharePoint Content On-Premise Health-Check Microsoft SharePoint Online Intranet Collaboration- Microsoft SharePoint Migration Workshop Microsoft Microsoft Modern. Teams Voice and Communication Workshop Mlcrosoft Teams Business Voice Deployment Meetings Adoption. Voice and Video Microsoft Hybrid Work Microsoft Surface Hub Basic Deployment Microsoft Surface Workshop Hub Essential : ., . .. Adoption MicrosoftWHOLE 800:800.4239 I CDW.com I GET IT" J { :.CERTIFICATIONS . CDW has earned numerous certifications and awards from.Microsoft: . .,.Recent awards . Our.Gold Microsoft Competencies. FY19 Microsoft intelligent Comrhunitatlohs Paftner'bf the Year Finalist Application Development FY19 Microsoft Intelligent Communications U.S.Partner of the Year Application Integration FY20 U.S,Surface Hub Partner of the Year: Cloud Platform Cloud Productivity Microsoft Endorsements and Advanced Specializations Collaboration&Content Azure Expert MSP . . . . . Communications information Protection and Gove'rhance Data Analytics Jdentity and Access Management DataCenter Meetings and meeting rooms. DevOps Microsoft Windows Virtual Desktop Enterprise Mobility Management-: : . Adoption and'Change Maha'gement Messaging . Calling for.Microsoft Teams Project and Portfolio Management Teamwork Security Threat Protection : - i Small and Mid Market Cloud Solutions Windows and SQL Server migration Windows and Devices" Enterprise Resource Planning �E Microsoftt. WHOLE 1 �." 800.'800.4239 I CDW.com GET IT' " Amazing. happenswhen c p solutions from Cisco t . Security and CDW keepi your business safe.-' 11 11 11 1 1 ! 11 CDW has more than 20 years of experience delivering Cisco,solutions to enterprise .commercial and public sector organizations.CDW has the experience,experts and services.to,help Cisco customers build a combination-of the:right tools and the right plan'to mitigate security"risks,increase visibility and unlock the power of their solutions. Cisco Umbrella Cisco XDR Planning and Design Planning and Design Implementation Implementation Managed Services �j-O Managed Services(Upcoming) Cisco Secure Access / ` Cisco Secure Analytics Planning and Design Network/Cloud . . . . Implementationriy�, . . Planning and Design Implementation Cisco identity.Services Engine(ISE) �� •I 1 I 1 11 Wired/Wireless orAdvanced Planning and Design C I S C O Cisco Secure Workload Implementation(Advanced:Third-party lnta ration o Canningand,Design Set-up and SD-Access set-up Implementation Managed Services ` ' ,/. i- D Cisco Splunk Security J Cisco Po , Planning and Design Planning Design Implementation' , �' ' Implementation Managed Services Managed Services Cisco Secure Firewall+Threat Defense Planning and Design Implementation Managed Services 1 Cisco'Awards and'Recognition. Cisco,Technical Specializations • Partner of the Year Core Security 25 000+ Data Center Partner.of the Year Extended Detection and Response(XDR). SMb Partner of the Year Secure.Networking . Transactions with more.than Fed.Intelligence Partner:of the Year Secure Network Management 10,000;customers:;in the,'last Commercial Partner of the Year Solution Secure Access Service Edge(SASE) 12 months GoWLevel Partner and Integrator Advanced Customer Experience " 800.80.0.4239 CM.com Cisco : Partner SERVICES PROPOSAL PROJECT FUNDAMENTALS Project Name: Infrastructure Upgrade Project Requested By(Sales): Customer Name: Town of Southold Angelo Cappetta 203-851-7250 CDW Affiliate' CDW Government LLC angelo@cdwg.com Effeefive Dater September 24,2025 (Sr:ISA/Sr.SS): Version 1.0 Andrew Wall,Aaron Humphreys, Al Nelson,Abby Munn. CUSTOMER=DESIGNATED LOCATIONS Loeation(s) Services) ❑'Assessment 2 Knowledge Transfer ❑ Staff Augmentation Town of Southold El Configuration ❑✓ Project.Management ❑ Support Multiple ✓❑Design. ❑ Reconfiguration ❑ Training • Z Implementation El Reinstallation' ❑ Custom Work �DW Affiliate Proprietary and Confidential. TV160928,MV160122 SERVICES SUMMARY CDW will provide the following: • Deploy(3)Three PowerEdge Servers with Microsoft,Windows • _ Deploy(7)Seven Cisco Catalyst 9300 switches Deploy(6)Six new Active Domain.servers(one'pair at.each of the three locations) • 'Cisco,Security Firewall Refresh,'Cisco ISE Migration/Upgrade and.Cis co.Umbrella server migration Customer Locations: • Southold Town Hall 0 53095 Route 25, Southold,NY 11971 • Southold Town Hall Annex o 54375 Main Rd Southold,NY 11971 • Southold Police Department o, 41405 Route 25 Southol'd,.NY 1195.8 • Southold Highway Department o. 275 Peconic Ln,Peconic,NY.11958 • Southold Recreation Department o 970 Peconic Ln,Peconic,NY 11958 • . Southold Solid Waste-Landfill o . 6155 Cox Ln,Cutchogue,NY'11935 ' Southold Human Resource Center,—Katinka House o 750,Pacific St,Mattituck,NY 11952 o Southold'Peconic.Community.Cetiter ■ 1170'Peconic Lane,Peconic;NY 11958 DELL PROJECT SCOPE Deploy(3)Three PowerEdge Server(s)with Microsoft Windows: The following activities are included in the.scope'of this deployment: �. Unpack and inspect'hardware Physical Installations • Rack,mount,and/or'position the product&.components • Install solution specific chassis components • Install and route power cables • Install and route data cables Apply customer-provided labels to newly installed.cables • Power on equipment • Confirm server boots,check for error lights and obvious issues Update PowerEdge firmware as needed • Configure an IP address on CMC/iDRAC/iKVM • Configure first time boot info •' Update drivers;firmware,.and'BIOS; including-PowerEdge firmware if applicable • Conf guration of Intel Persistent Memory;Memory Mode,AppDirect Mode: creation of namespace and filesystem at.the OS level. • Configuration:of equipment(physical topology,firmware levels,IP address,running diagnostics) • Enter the RAID utility and.configure the local disks or chassis shared storage into one or more'RAID logical unit. number("LUN")according to CDW supported Customer specifications. Create.and assign Virtual Disks to servers that contain an operating system installed by CDW. •. Verify server(s)are connected to the Virtual Disks assigned to the OS installed by CDW. +DW Affiliate.—Proprietary and Confidential. TV160928,MV 160122 • Install and configure Operating System • Install and configure system software on deployed server. For Microsoft Hyper-V the following apply: o Cluster creation o Basic OS install to local storage using standard defaults. o Configuration,of standard virtual networking: Hyper-V Virtual Networking(2 switch independent native, teams;2:External Virtual Switches,4 VM Network adapters with VLAN access) . o' 'Creation of up to one Virtual Machine,with customer supplied media and license. o Configuration of lave Migration PROJECT ASSUMPTIONS • Onsite installation for(1)one day(s)included to get equipment racked,cabled,and powered on for each location.' DELIVERABLES •' Functioning hardware and/or software as outlined in the"Scope of Services"section Knowledge transfer . • As-Built Documentation CISCO NETWORK INFRASTRUCTURE PROJECT SCOPE . CDW will implement and:configure the hardware and software for the Network.Infrastructure solution at the Town of. Southold locations.;New Cisco,Catalyst 9300 switches are being provided for seven locations within the town as part of an infrastructure upgrade.In addition to deploying:the new switches,CDW will upgrade the software version to the latest ' recommended code and migrate existing Cisco configurations from old switches to the new. Switch configurations should adhere to CDW.best practices. Subject to the other provisions of this SOW,CDW will perform the following services: PLANNING AND DISCOVERY The planning phase will consist of the following.. • Project Kickoff—,The project team will be chartered,and staff will be assigned to project roles.The team will.meet to discuss/revise the project scope and assumptions and finalize any logistical details such as security clearance and wiring,closet access. • Discovery—The project team will perform a review of IDFs,MDFs;computer rooms,data centers and wiring closets,for power;rack space,UPS and fiber as needed per the discovery and design phases of the project. • Requirements Gathering—The project,team will,conduct interviews with selected Customer:staff to understand arid document feature and function requirements. The Planning and Discovery phase will be critical in determining the actual duration and overall cost of this project.The involvement of Customer staff in all phases will be necessary to ensure the success of this.project.This Statement of Work is subject to:revision pending the discovery portion of the engagement. DESIGN The Design phase is a critical step in,the project.During the Design Phase,CDW staff will document and review how the. resulting system will be built and configured:Iterative review and validation of requirements by Customer staff is,critical to the success of the project. Once the design is complete,any changes to the design shall be considered out of scope.Key.,, activities that will be completed in this phase include: Analysis—The project team will review information gathered during Discovery,the new hardware configurations and review industry-leading practices to•develop baseline design information. • Document Design —CDW 'staff will lead an effort to develop a final'design to Customer. This will include CDW recommendations.for changes to.existing network infrastructure. MDW A•ffliate.7 Proprietary. and Confidential. TV160928,MV160122 •, Configuration Development—Configuration templates for each type,of'hardware device will be developed from the finalized design.These templates will be used to facilitate the deployment of the network infrastructure.. s,. . Design:Review The design principles will be documented, and a final design review will be;conducted with all technical stakeholders. IMPLEMENTATION AND:TESTING . . During the Implementation and Testing phase,CDW staff will stage,build',configure and test'the following equipment per the design and the bill of materials for this project: Quantity Device Type Locations .7 C9300-48H-E. Town Hall,Annex,PD,Highway.Dept,Rec Center;Waste.Management,.HR Center As part of the.switch'implementation,CDW will configure,stage,place,.and test the hardware listed above based on the . following parameters as agreed,upon by the design phase of the project if applicable: • Configure Unicast Routing Interior Gateway Protocol(IGP) Configure Spanning Tree Protocol(STP) P Configure VLANs • Configure Switched Virtual Interfaces(SVI) • Configure Quality of Service(QoS), • Configure Physical or Virtual Switch Stacking •. Configure Link Aggregation Group(LAG) • Configure Flow Export(Netflow/lPFIX) • Configure Simple Network Management Protocol(SNMP) 4 'Configure applicable'phy'sical network interfaces • Configure applicable:network addressing . Configure secure,access to devices . . . Configure network management parameters • Other configuration parameters as necessitated.by.the environment. The project team will execute a defined test'plan'to verify implementation,and configuration of the hardware and software,,to test specific functionality;and to document the system configuration before turning the system over to Customer.'The testing. phase,will consist of the below items: • Test Plan:Creation-The project team will develop a mutually agreed upon test plan for the new,hardware configurations to create baseline testing information. o Test Plan will include items such as IP reachability tests,configuration verification,and hardware failure scenarios directly related to equipment implemented.in this project. Baseline Testing-Customer will create a baseline test,using created test plan,to ensure proper operation prior to. integration and cutover. . Test Plan Execution-After integration and cutover,the project team.will execute the test for the new hardware configurations and review,the Test Plan results with the Customer.technical staff. INTEGRATION In the integration phase the"new."network(all new Cisco devices implemented through the standard.implementation. process)will be connected to the existing'infrastructure: When the integration of the two networks is complete,the migration of clients,servers,and printers can:begin.The integration phase will consist of the following sub-phases: . • Integration.Planning.-The project team will plan for the integration of the new network to both the main campus' LAN and the WAN.The planning process will address physical connectivity,routing,bridging and addressing issues. gDW Affiliate.—Proprietary and Confidential. TV160928,MV160122 As part,of the planning process, an integration plan, a testing plan, and.a backout plan will be developed; and communicated through Customer location's change management process. •. Integration Cutover,—CDW.and Customer technical staff will complete the,integration of the two'networks according . to the plan developed in.the integration planning phase. CUTOVER AND"FIRST DAY OF SERVICE" . . Once the;system implementation activities as defined in the previous sections are complete,'production cut-over to'the'new. ' system.will take place and CDW will monitor the production system,track,and resolve incidents fort days(14 hours)at the . town locations that are part of this project. Once the-new system is in production and first day issues have been resolved,.Customer will move into:a Support Phase. POST-CUTOVER'SUPPORT AND PROJECT CLOSE. CDW will transition your support documentation to either a CDW Day Two Support Team or your System Administration staff.Customer will decide on Day Two Support options provided by your,CDW contact. If Day Two Support is'not selected . and'problems arise,CDW will be available for additional consultation.on a time-and-materials basis. If a CDW Support Contract is chosen,,a transition meeting will take place with that Support Team. CUSTOMER RESPONSIBILITIES Planning and Discovery • Provide the IP addressing and subnet mask plan for the proposed solution. • Mutually schedule with CDW the site review with'each Customer site contact. •'. Provide current'network diagrams listing existing size, capacity, utilization, and data traffic requirements for all current network facilities. • Confirmation of'the completeness and accuracy of the information provided to CDW during the network review. process. All designs,that need to be made as a result of incomplete or inaccurate network review information may result in changes to the.project fees. Design • Ensure attendance of appropriate personnel for Design Review meetings who have authorization to,approve design. Implementation and Testing • Receive equipment,inventory,record serial numbers and apply asset tags., • Procure and provide the LAN and WAN equipment listed in the provided Bill of Materials. •. Provide a staging room with adequate'table space, power, grounding, and'network infrastructure to allow:CDW to; . stage and configure'the equipment: • Provide proper 19"racks and screws for implementation. • Provide appropriate power.feeds to all-equipment from. either multiple UPS systems or separate electrical circuits within six feet of the switch. 0 Provide CDW:.access or.personnel with access to all locations that require switches to be implemented,in a timely. manner. • Provide necessary patch cables needed to complete implementation. • . .Provide.the proper equipment and personnel to operate and help implement the switches in a safe manner. •. Provide shipping addresses for,each site.along with contact names for shipment to Customer's specified locations, if . required., , • Participate in the development and execution of a comprehensive,functional(acceptance)test plan,which will be the basis for Customer's acceptance of the system: • Requesting appropriate,internal change control procedures. • Staff will.be on site and available during the implementation cut-over,migration and testing. ►DW A,ffiliate..—Proprietary and Confidential. TV160928,MV166122 CDW RESPONSIBILITIES Planning and Discovery' , • 'Mutually schedule the site review with your site contact. . . Conduct site review(s)for all proposed locations. • Evaluate andyalidate collected site review information with you. . • Evaluate site review .findings and: existing network diagram(s), then develop and provide the site readiness recommendations to you. •' Provide network design review recommendations to ensure all items have been properly'addressed and the network has been designed appropriately. • Work with you to understand that sufficient network capacity exists in your provided network design and based on your stated performance objectives along with traffic volumes. . Design • Work with Customer to.understand the environment and to validate the new networking hardware. • Review the proposed.infrastructure design with Customer. • Provide recommendations, for changes to existing network infrastructure based upon design requirements and, information collected during.Discovery. Implementation and Testing: . Onsite;for,cutovers. • Racking,mounting and connecting the Network Equipment at each IDF and MDF closet. 0 Moving all patch cables to the new equipment. • Configure implementation-specific switches. • Configure_system components per agreed upon'design and CDW best practice: • Execute.tests per test plan for system components within the scope of the project. PROJECT ASSUMPTIONS Hardware and Software • All WAN and.PSTN circuits will be terminated,provisioned,,and functioning properly. • Cabling will,be functioning and terminated. Preparation' • The current network must function properly(no adverse,conditions)prior to the implementation of new equipment.. • Cabling'to all switch and router equipment is properly implemented,.tested, and clearly labeled'prior to'the implementation of new equipment. Integration/Migration • Integration cutover work will be performed during business hours as plant runs 24 hours a day. • The new network will be designed and implemented in,parallel. to the'existing network. After the parallel implementation is complete,or nearly complete,the integration of the two networks will occur. • Any test conditions that fail and have a'related Cisco TAC case will not constitute failure of the test.. Acceptance and Changes All design changes will be required to be signed off on by the CDW senior engineer and'the Customer project manager. Changes that are requested following the design freeze may affect project fees.Any changes that are requested to be . made by CDW after the completion of the design freeze will be billed on a time-and-material basis. EDW Affiliate..Proprietary and Confidential. TV160928,MV160122 • All delays and extension of outage periods due to faulty hardware or software,problems as a result of hardware or software not.being covered by a lnanufacturer_support contract:will be billable on a time-and-material;basis. Support;. CDW will provide services only on Cisco's generally available release:hardware and software products. If any beta or controlled-introduction releases are introduced;into the project,CDW reserves the right to present a Change Order: if software and/or hardware bugs(defined as Cisco TAC cases that are not resolved within 24 hours)are.identified by: CDW to be manufacturer-related issues,the CDW team,may.temporarily disengage until the manufacturer.is able,to. resolve the bug. ACTIVE.DIRECTORY DOMAIN SERVICES'PROJECT SCOPE The:following activities are included in the scope of this deployment: q : . . Deploy six new servers(one pair at each of the three locations) •, Install,and patch Windows Server on all new systems • : Configure static IPs and DNS for replication and resolution •. • : Promote servers_to domain controllers via ADDS installation • Assign domain controllers to-appropriate AD sites •' Validate replication,SYSVOL,and Netlogon functionality .,. .. :Transfer or seize'FSMO roles to new,domain controllers. : Configure;DNS and Global Catalog for-availability and load distribution • Update client redirection and DNS settings • Decommission existing domain controllers per best practices. . • Update documentation,monitoring,and operational procedures . : CUSTOMER RESPONSIBILITIES • Provide Active Directory Domain Services with Domain Administrator privileges on the production domain + Provide Active Directory.Domain Services resource with remote access to all,3 newly configured servers CISCO SECURE RREWALL PROJECYSCOPE Seller will assist Customer with migrating from.existing Cisco fire walls to new Cisco Secure Firewall 1200 series frewall appliances.There will be a total of(3)HA.pairs and.(4-)standalone Secure Firewall'1200 series frewalls.The professional services engagement includes: • Cisco Secure Firewall Migration . • Deploy new Cisco Secure.Firewall Management Center • Cutover and First Day Support TIREWALL PROJECT OVERVIEW Site' Model' HA' . :NAT. ACLS L2L Tunnels RAVPN Profiles . Secure:Firewall. Town Hall A%S. 30: 9S : .4: 1 1200 series,. . . . CDW Affiliate Proprietary.and Confidential. T-V160028,MV160122 Town Hall Secure Firewall A/S 15 30 4 1 Annex 1200 series Police Secure Firewall A/S 85 .45 5 1 1200 series HRC Secure Firewall Standalone 10 25 6 0 1200 series Highway Secure Firewall. Standalone 10 20 6 0 1200 series Landfill Secure Firewall Standalone - 10 20 6 0 1200 series Secure Firewall' Rec Center 1200 series Standalone 8 20 6 0 APPROACH Seller will follow a phased.approach to deliver the'services shown above.The following phases will be utilized to achieve the objective stated:above. PROJECT KICK-OFF MEETING Seller will begin with a project kick-off meeting with Customer core project team.The.kick-off meeting-will last approximately(1)hours and will include: •. Introductions of Customer and Seller team members • Establishment of roles and the scheduling of the first engineering discovery session • Knowledge transfer and review of your company and vision • Review of Customer-provided information and clarification of questions; • Review of goals for the project FIREWALL DISCOVERY AND REQUIREMENTS GATHERING During the discovery and requirements gathering phase, Seller will work with the customer to identify pertinent information that.will drive the design and implementation of the Cisco Secure Firewall Solution.During this phase, Seller will work with key Customer project stakeholders to: •', Identify Customer's business and technical requirements • Review Customer's existing infrastructure that is relevant to the success of the project • Discuss Cisco Secure Firewall management,features,and capabilities • Discuss Customer's security policy and-methods for enforcement leveraging Cisco Firepower •. Review Customer's existing firewall configuration • 'Review requirements for f rewall policy migration leveraging Cisco's Firepower Migration Tool PLANNING AND DESIGN �Dw A#fliate.—Proprietary and Confidential. TV160928,MV160122 During.the Planning and Design phase, Seller will work with customer to design the Cisco Firepower Solution and plan the firewall implementation.This phase may include but is not limited to the following items: • _ Plan implementation activities based on informatiori collected during the requirements gathering phase • Review.of Firepower Management Center • Document the:proposed design and conduct a review.with key Customer project stakeholders . Plan Cisco,Firepower Migration Tool installation and setup IMPLEMENTATION AND TESTING Customer and Seller will implement the Cisco Secure Firewall solution to satisfy the requirements and design that were 'discussed in the Discovery phase of the project.This'phase may include but not limited to the following items: • . Configure and Implement Cisco Secure-Firewall Solution o Configure and Implement Cisco Secure Firewall Management Center:based on the design and planning phase ■ Basic settings and administrative access ■, ...Integration with physical Firepower appliances ■ integrate Cisco Secure Endpoint o . Configure and Implement Cisco Secure Firewall appliances based on the design and planning.phase. Perform any necessary,reimaging or updates to software.to accommodate design ■ Physical and logical connectivity Security Zones ■ Static and/or dynamic routing ■ High availability ■ Application Visibility'and Control policies ■ User'Identity ■ .IPS policies. Advanced Malware Protection and File policies ■ URL filtering policies Site to Site VPNs ■ Cisco Secure Client Remote Access VPN Implementation and Pilot-Seller will work with customer to implement,pilot,and test VPN profiles for up to(15)user(s) Migrate NAT/PAT policies ■ Migrate Access:Control policies o Upgrade(1)Cisco ISE-PIC.virtual appliance o Migrate existing firewall policy leveraging the Cisco Firepower Migration Tool • Test Cisco Secure Firewall Solution for proper.operations CUTOVER AND FIRST DAY SUPPORT. Cutover-Seller will.work with Customer to move the Cisco Secure Firewall Solution into production.The firewall cutover will,take,place,during a:scheduled.maintenance period:Once the cutover is,comple,te Seller will work with Customer to test. . the Cisco Secure Firewall.solution.for proper:operations.In addition, Seller.will assist Customer'with.required application testing to validate firewall policy and configurations. First Day of Support-On.the first product day following the cutover, Seller will provide'day-one.sup'port to assist the customer with any issues that may be present.. Seller will review confrgurations.and make modifications,to the firewall, configuration as needed to account for the Customer's unique environment. Firewall Tuning,-Seller will perform a Firepower tuning session.following the first day of support within(2)weeks of the initial firewall deployment..There will be an additional Firepower tuning session(3)months after the initial firewall deployment. KNOWLEDGE TRANSFER AND DOCUMENTATION Dw Affiliate,7 Proprietary and Confidential. TV 160928,MV 160122 Seller will provide up to(8)hours of basic knowledge transfer for the Cisco Secure Firewall deployment.Topics included,are operational tasks,configuring policies,and generating reports:The seller will also review deliverables created during the project: PROJECT CLOSURE The Seller project team will participate:in a project closure meeting where the project history will be reviewed,and the final project documentation will be delivered to the Customer. CUSTOMER RESPONSIBILITIES. . • Providing Seller staff with appropriate physical and/or network access to perform tasks defined in this statement of work. • . Providing.all change control procedures,notifications,'and maintenance windows that are necessary for the performance of this'project. • Providing.a resource who is familiar with the existing firewall solution. • Providing any hardware,software,certificates,and Smart licenses that are required for installation. • Racking,cabling,,and powering of all equipment. Verifying there is adequate power,UPS,rack.space,and network connectivity for the devices included on the bill of. materials. • Application testing to be performed during cutover(s). • Providing a supported virtualization environment for any Cisco Secure Firewall components that are to be virtualized. • Coordinating and communicating configuration changes to site-to-site VPN(s). • Production rollout and communication of Cisco Secure Client VPN services to their users.' PROJECT ASSUMPTIONS • Seller will review initial;low-level design with Customer.After mutual agreement,Customer will sign off on acceptance of the design.Any,subsequent changes to the design can be made by requesting a Change Order. Seller' implementation of the Change Order may be billed at.an additional cost on a Time and Materials basis., •_ Project will require Customer to.migrate firewall.policies from an old firewall to.the new Cisco Secure Firewall' platform.As a.part of the firewall migration effort;Seller assumes that: o up to(4)Interfaces/Zones per firewall deployment o up to(3)Application rules per security policy per firewall deployment o up to(3)IPS policy/ies per firewall deployment o ' up to(3).File policy/ies per firewall deployment o up to(3)URL policy/ies per firewall deployment o up'to:(3)DNS.inspection and Sinkhole policy/ids per firewall deployment o up to,(3)Remote Access VPN profiles o up to(420)-Objects o - up to(255)Acces's Control Rifles o up to(168)NAT/PAT statements o,, up to(37)Site to Site tunnels b The estimated hours to complete the project is based:on Seller leveraging Cisco's Firepower Migration Tool to convert-existing firewall interfaces; .N static routes,objects, AT/PAT,Access Control Rules and/or,L2L tunnels: o Existing firewall configurations will be migrated`as-is' and consists of: o Customer's existing ISE deployment will be leveraged for user identity policies. Seller assumes that . the Customer's existing ISE deployment'is configured and working as expected. • There is an existing.Cisco ISE deployment.(1)ISE Server version: 3.1.0.518 Personas:Administration,Monitoring, Policy'Service,pxGrid • . Work can be performed remotely. �DW Affiliate.—Proprietary and Confidential. TV160928,MV160122 'CISCO ISE MIGRATION PROJECT SCOPE Seller will migrate from.(1)existing Cisco ISE server version:3.1.0.518,to(2)ISE SNS-3715-K9 appliances. The professional services engagement includes: • Cisco ISE.Migration to(2)new SNS=3715-K9 appliances Cisco ISE code version upgrade • Cutover and First,Day,Support CUTOVER AND FIRST DAY SUPPORT. Cutover-Seller will work with Customer to move the new Cisco ISE servers into production.The cutover will take place ' during a scheduled maintenance period.Once the Cutover is complete Seller will work with Customer to test the.solution for proper:operations. First Day of Support-On the first product day following the cutover;Seller will provide day-one support to assist the customer with any issues that,may be present. . . PROJECT CLOSURE The Seller project team will'participate in a project closure meeting,where the project history will be reviewed;and the final project documentation will'be delivered to the'Customer. CUSTOMER RESPONSIBILITIES • Providing Seller staff with appropriate physical and/or network access to perform tasks defined in this.-statement of work. • Providing all.change control procedures,notifications,,and maintenance windows that are necessary for the performance of this project., •' . Providing a.resource who is familiar with Customer's environment • Providing any hardware;software,certificates,and Smart licenses that are required for installation. • Providing a repository for backups that will be performed prior,to;migrating/upgrading Cisco ISE PROJECT ASSUMPTIONS 'Work can.be performed remotely, • There'is an existing Cisco ISE deployment.(1)ISE Server(1)version:3.1.0.518 Personas:Administration, Monitoring,Policy Service,pxGrid CISCO UMBRELLA SERVER MIGRATION PROJECT SCOPE Seller will'migrate two(2)existing Umbrella virtual appliances'(VAs)to new Dell R360 servers and add(1)additional virtual appliance(VA) The professional services engagement includes:' • Cisco Umbrella Migration to new virtual appliances(VAs)hosted on new Dell R360 servers • Cutover and First Day Support . CUTOVER AND FIRST DAY SUPPORT �DW Affiliate.,-Proprietary and Confidential. TV160928,MV160122 Cutover-Seller will work with.Customer to move the new Umbrella virtual appliances(VAs)into production.'The cutover will:take place during a scheduled maintenance period. Once the cutover is complete Seller.will work with Customer to test the solution for proper operations. First Day of Support-On the first product day following the,cutover,Seller will.provide day-one support to assist the customer with any issues that may be present. PROJECT CLOSURE . The Seller project team:will.participate in a project closure meeting where the.project history will be reviewed,and the final project documentation will be delivered to the Customer. CUSTOMER RESPONSIBILITIES • Providing.Seller staff with-appropriate physical and/or network access to perform tasks defined in this.statement of work. • Providing all change control procedures,notifications,and maintenance windows that are necessary for the performance of this.project: ' ' Providing a resource who is fatriiliar with Customer's environment Providing,any hardware,software,certificates,and Smart licenses that are required for installation. PROJECT ASSUMPTIONS • Work can be performed remotely OUT OF SCOPE . Dell: . Migration Activities related to the existing customer data center environment such as de/installation,re/configuration,. connection,troubleshooting,etc • . Custom scripting,coding,performance tuning or optimization •: Installation,configuration,,or migration of any applications,web technologies,databases,virtualized networking,or other software,except when explicitly described in the Project Scope above • Migrations or movement of Physical to Virtual or Virtual to Virtual compute systems other than those explicitly described in the Project Scope above. • Data or Application migrations to/from unsupported products,remote data centers,to non-CDW Technologies products • Physical installation of computer components such as memory cards,internal storage devices,'expansion cards into non-CDW Technologies products e Installation or configuration of unsupported products.All CDW-and Customer-supplied components will be validated as supported or not during the planning process.Note that in some instances,CDW may provide guidance for installation and configuration of non-supported products to be completed by the,Customer •: Routing of cabling(Network,Power,or Fibre)'between racks,or.through walls,ceilings,floors,or between rooms • Installation of dense or heavy'enclosures higher than 2 1 u in a rack or mounting of enclosures higher than-the 44.0 position in any rack • Connection to Direct Current power'supplies.A:qualified electrician must perform all connections to DC.power and to safety grounds . Intel Persistent Memory configuration at application level • Configuration of graphics processing units(GPUs),accelerators,or similar DW Affiliate.,—Proprietary and Confidential. TV160928,MV160122 Cisco Networking: • :Removal of Packing Materials WAN Circuit Issue.Remediation and Troubleshooting • Copper and Fiber Cabling Remediation and Troubleshooting :• Remediation and troubleshooting:of-issues not related to implemented equipment . •, 'Removal of Electronic waste,(This can be done;via separate service fee) • Disaster Recovery—Failover procedures Cisco Firewall: • Training documentation,' • Configuration of any other network equipment not directly related to implementing and/or upgrading the Cisco Secure Firewall Solution .. Racking,cabling;'and.powering hardware equipment . • 'Custom Open-App ID creation • Configurations or designs not supported.by Cisco • Custom IPS signature creation or advanced IPS tuning beyond normal Firepower tuned recommendations Firewall•ConfigurationCleanup.and:Optimization • Certificate distribution'of certificates or configuration,of existing PKI solution Cisco Migration: • Training documentation • Configuration of any other network equipment not directly related to implementing and/or upgrading the Cisco ISE Solution Cisco Umbrella Server: • Training documentation Services not specified in this.SOW are considered out of scope and will be addressed with a separate.SOW or Change Order. This Services:Proposal is valid for 30 days from the above"Effective Date"., ITEM(S) PROVIDED TO CUSTOMER Table=Item(s)Provided to Customer Item Description Format Design Document Description of the approved design PDF Network Diagram Visual depiction of the approved design PDF Test Plan Description.of the test plan and success criteria PDF 'Project Plan Project plan showing'timelines and milestones PDF Active Directory' As Build Domain Services Documentation PDF Design and Deployment A document that outlines the firewall design and PDF, Document deployment details Migration Plan . A'document that details the firewall migration plan PDF As-built Documentation Firewall As-built information PDF �C•DUV Affiliate.—Proprietary and Confidential. TV]60928,MV 160122 Item Description Format Design and Deployment : : A.document that outlines the Cisco ISE design and PDF Document deployment details .: As-built Documentation Cisco ISE As-built information PDF As-builf Documentation Cisco Umbrella As-built information PDF PROJECT MANAGEMENT CDW will assign a project management resource to perform the following activities during the project: • Kickoff Meeting. . o Coordinate and.facilitate kickoff meeting o Review SOW including project objectives,schedule,and logistics o Identify and confirm project participants o :,Discuss project prerequisites o Create and distribute escalation and contact lists Project Schedule or Plan o Create a project plan that details the schedule and resources assigned to the project.The schedule should align with the:estimated.project duration as established in.the Project Scheduling section. o Monitor project scope and expectations . o Identify and manage'project risks o Monitor the status and progress of the project and the quality,of items provided o Communicate:at regular intervals as agreed upon o Ensure project timelines,dependencies,budgets,and closure are met within the project lifecycle 1 Status Meetings and Reports o . Status meetings will be conducted on a regular cadence,schedule to proactively identify any issues that may arise in order to mitigate risk o Scheduling will be based on agreement with stakeholders,the estimated project duration,and budget available. . . o CDW and Customer will discuss action.items,tasks completed,tasks outstanding,risks,issues,key decisions,and conduct a budget:review : o The.proje. management resource will document and distribute meeting notes and/or action items for all meetings,and will act as the main POC to Customer,if requested:. • Change Management o When a change to a project occurs,the CDW's project change control process will be utilized . o. .'. The project management.resource will facilitate any necessary'change order(s)and administrative,task(s)'as . necessary •' . Project Closure o. Once verbal scope completion is confirmed,'a written Project Closure Acceptance will be.provided for client to:formally:acknowledge o If desired,the project team.will meet to recap,answer any questions,and address project transition activities and next steps PROJECT SCHEDULING .Customer and CDW,who will jointly manage this project,will together develop timelines for an,anticipated schedule ('Anticipated Schedule'. based'on CDW's projectinanagement.methodology.Any dates,deadlines',timelines or schedules contained in the Anticipated Schedule, in this.SOW or otherwise;are estimates only,and the Parties will not rely on them for purposes'other than.initial,planning. �D,W Affiliate„.7 Proprietary and Confidential. TV 160928,MV160122 TOTAL FEES The total.fees'due and'payabl'e under this SOW("Total Fees")include-both fees for Seller's performance of work("Services' Fees")and,any other related costs and fees specified in the Expenses section("Expenses").Unless otherwise specified,'taxes will be invoiced but are not included in any numbers or calculations provided herein.. COW will provide,funding in the amount of$10;000.00("Funding"). The Funding will be applied to the Total Fees.Once the Funding has been exhausted,CDW's invoice(s)will reflect the " balance of any fees due: . SERVICES FEES Services Fees.hereunder are'FIXED FEES,meaning that the amount invoiced for'the Services Will be$229,031.00. The invoiced amount of Services Fees will equal the amount of fees applicable to each completed project milestone,as specified'in Table 1. . Table 1—Services Fees Project Milestones Percentage Fees. Signed SOW 50%' '$119,515.50 Coinpletion'of Work 50% $119,515.50 Subtotal $239;031.00. . Less Services Accelerated Funding. . ($10,000.00) Totals 100% ' $229,031.00 EXPENSES Neither travel time nor direct expenses will be billed for this project. Upon execution of this SOW,travel Will be scheduled to occur no less than two'(2)weeks after the date:of Customer's request,for travel. Should Customer request that,travel be expedited,Customer will be billed for any additional travel and expense costs that apply. «DW Affiliate.7 Proprietary,and Confidential. TV160928,MV160122 NOT FOR SIGNATURE . THIS DOCUMENT IS,A DRAFT INTENDED ONLY,FOR, USE I.N THE REVIEW OF TEXT APPLICABLE TO A POSSIBLE SERVICES ENGAGEMENT.IT DOES NOT CONSTITUTE A CONTRACT OR A PROPOSAL FOR A CONTRACT.THE CONTENT OF THIS DOCUMENT,AS IT MAY BE NEGOTIATED BY'THE PARTIES,IS INTENDED TO BE.INCORPORATED INTO A STATEMENT OF WORK,WHICH WILL INCLUDE OTHER PROVISIONS.AND WHICH WILL BE GOVERNED BY ADDITIONAL TERMS AND CONDITIONS'.A PARTY'S SIGNATURE. • OR OTHER INDICATION OF APPROVAL ON OR RELATED TO THIS DOCUMENT SHALL•HAVE NO BINDING OR CONTRACTUAL.EFFECT: *DW Afftliate-Proprietary and Confidential. TV160928,MV160122 SERVICES PROPOSAL PROJECT FUNDAMENTALS Project;Name:, Smart Hands Deployment Service Requested By(Sales): Customer Name: ,Town of Southold Angelo Cappetta 203-851-7250 • ' CDW Affiliate: CDW Government LLC angelo@cdwg.com Effective Dater September 24;2025 (Sr.FSA/Sr.SS): Version'-. 1.0 Dan Aguilar,Abby Munn. . CUSTOMER-DESIGNATED LOCATIONS Location(s) Services) ❑ Assessment ❑.Knowledge Transfer: ❑ Staff Augmentation Town of Southold ❑ Configuration Z Project Management ❑ Support 'Multiple, ❑'Design ❑ Reconfiguration" ❑ Training ❑ Implementation' ❑ Reinstallation. 0 Custom Work CDW Affiliate.-Proprietary and Confidential. TV160928,MV160122 SMART HANDS DEPLOYMENT SERVICE The following activities,are included in the scope of this deployment. Service Addresses: Project A • Fiber Optics connectivity between the Recreation Center and the Peconic Community Center. o Recreation Center;970 Peconic Lane,Peconic NY(Remote site) o Peconic:Comrnunity Center, 1170 Peconic Lane Peconic,NY(Remote site) Project B • Fiber Optics connectivity between the Human Resource Center and the Katinka House. o. . Human.Resources Center,750 Pacific St.,Mattituck;NY(Remote site o., Katinka.House,.750'Pacific:St.;Mattituck,NY:(Remote site) STRUCTURED CABLING SCOPE Budget is based upon the following Scope of Work(SOW): e Contact,One Call, •. Furnish and install(1) 1.25"HDPE SDR 11 conduit via horizontal directional drilling.Between each'of(2) buildings. •. Provide building entries at each building. • Furnish'&install(1)6-strand single mode Fiber between buildings. • Furnish&install Fiber lU shelf,fiber coupler panel,and LC'terminations in each building. • Test new fiber and provide results to the customer in PDF format. TECHNICIAN • Arrive onsite and check-in with local point of contact and/or remote customer support team. P The Customer will'supply adequate,parking close to the job site for the CDW Contractor. 'PROJECT ASSUMPTIONS • All dirt and spoilswill remain-on site: •. This proposal is based on'dirt boring/ekcavation only: • This proposal does not include rock boring or saw cutting. • In the event any existing utilities(marked or unmarked)or obstacles are too close in proximity to the proposed line and grade.of the,proposed casing path,or if impenetrable material of.any kind is encountered,an alternate means of boring will be required,therefore increasing the price of the.bore: • This proposal is based on work being performed continuously. • The price is based on one mobilization.Additional mobilizations will be billed at$4,700 each. • Damage to work installed by Instrata caused by"Others"shall be the responsibility of"Owner." • To avoid standby time,.Owner,CDW&Instrata will work together cooperatively. • All costs incurred for standby time will be.the responsibility of the Owner.' • CDW or Instrata is not subject to back charges or liquidated damages of any kind. • ' :CDW.or Instrata'is not responsible,for any costs incurred by the Owner on the job. • Environmental concerns and issues related to,or that may be encountered due to,any jobsite work is the responsibility of the Owner. •.' This proposal is based on Instrata's standard insurance_policy. • This proposal and schedule are based on the availability of Instrata's equipment,labor,and materials..' • CDW or Instrata are not responsible for any submittals-on material or any other subject since the Owner did not supply-them: ►DW Affiliate.—Proprietary and Confidential. TV160928,MV160122 • All materials are guaranteed to be as specified,and our work shall be performed in accordance with drawings and specifications submitted for this project. If there are any alterations or deviations to the scope of work,CDW' reserves the right to.bill accordingly.The labor price is,based upon an 9-hour workday,Monday through Friday '(7am—3:30pm),unless otherwise stated in this proposal. • All data lines will be pulled through drop tile ceiling and hollow walls. • Unless.otherwise stated in the scope of work,Category 5e/6/6A copper or fiber optic patch cables are not included in this scope of work.This includes'installation of patch cables supplied by customer. • Fire.Wall Penetration or Core Drilling is NOT part of this proposal. • In compliance,with Safety&OSHA.requirements;you the customer are required to notify CDW and its contracting partners(iinmediately)-of all hazardous'chemicals that may come.in.contacf within a given work'area.' • Conduit or EMT-is,not part of the network cabling quote of this project. • The statement of work includes only the.installation,testing and labeling of horizontal network cables from main communication.(MC)closet to input/output(I/O),locations.Unless otherwise stated,it does not include labor to patch or.connect equipment.on either end. This scope work and pricing is based on drop the ceiling,within 9-ft,with over 127inches of clear space above the drop tile. • Customer will provide a detailed'drawing upon acceptance of this statement of work. •: No specialized screening requirements are required for site access. • No.industry certifications or advanced engineering experience are required of technicians to complete the work clearly outlined in the above scope. • The installation location(s)will be clear of obstructions and have sufficient space for the scope of this'project. • Additional return visits to sites caused by access delays,misplacement of delivered hardware,or other items outside: the control.of'CDW or contractor may be subject to additional fees and/or change management: 4� Price may change if tariffs:are adjusted into cost of material prior to.purchase.. REMOTE PROJECT MANAGER SERVICES A project coordinator will be assigned to facilitate scheduling and dispatching resources for onsite work. • Collaborate on scheduled dates/times. . :- Staff and dispatch'resources for onsite work. o If a local technician within 30 miles is not available, travel time will,be billed at $125/hr. Travel time requirements will be communicated in advance of site visit. • Communicate schedule,expectations,and details'.to local technician(s)and client contact(s). o Customer will,facilitate.site communications and change,control process(es)as applicable. Onsite work will be scheduled two(2)weeks before the installation date.Minimum.three(3)hours of onsite labor per visit. Four.(4)hours.of labor will be charged for-cancellation or rescheduling of work within 48 hours.of the scheduled.work start. CUSTOMER RESPONSIBILITIES The customer is responsible for securing any necessary permits and covering all related costs before the start of work.Work will not begin until the Customer's designated point of contact has approved any expenses related to the permitting process. All private utility mark outs and mark outs not covered by One Call(811). Provide an indoor pathway and conduit pathway if required: • All traffic,control outside of signs and cones: Responsible for providing easy access for trucks and equipment to all work locations. • Provide.a laydown yard-for equipment and materials storage.. • Provide a water source and access to water to ,fill the water truck. •, . Provide'a:location,to dispose of bom mud within,15 miles of the;w,ork location. • The customer is responsible for any unforeseen circumstances,such as utility conflicts(marked or unmarked), obstructions,or any other.obstacles., • . Provide adequate access to:all work locations.:(Parking spaces to be blocked) CDW Affliate.—Proprietary and Confidential. TV160928,MV160122 •, Submit details of work via dispatch form or review details of scope and schedule with dispatcher. . . • . Deliver any equipment:and supplies in advance to the work site. • Ensure site has all required power connectivity-and access to the site prior to 48-hours.of start of project. . • Identify a local point of contact in advance to provide access to all necessary site areas during work window. • Provide PDF print of the facility, which is ediiable for CDW. This must be available within 48 hours of the 'start'of the project. • Provide local or remote validation of completed work prior to local Smart Hands tecluiician(s)leaving site. Project A Image,of:facilities at locations: • Recreation Center,970 Peconic Lane,Peconic NY(Remote site) • Peconic Community Center, 1170 Peconic Lane Peconic,NY(Remote site) Project B . • Fiber Optics connectivity between the Human Resource Center and the Katinka House. o Human Resources Center,750 Pacific St.,Mattituck,NY(Remote site o, K.atihka House;750 Pacific:St.,Mattituck,NY(Remote site). � r Y � 1 �y OUT OF SCOPE .e. This:scope does not include procurement of IT,hardware,network,switches;,or configuration. . DW Affiliated— Proprieiaryand Confidential TV160928,MV160122 • Disposal or Recycling.of IT equipment;including.existing structured cabling. Electrical installation,including.labor or materials. • Physical.Security,Access.Control&AudioNision equipment&installation,unless.otherwise stated. . • Union,Prevailing Wages,Core Drilling,Fire Walls Penetrations,or other specialized labor. • Removal of existing structured.cabling(copper or,fiber). • Bonding for this project is not included in this proposal. • Due to market volatility price is stibject to change due to increase*in material prices,fuel,labor&operating-costs. • Lift "rental and'any associated labor. . • Firewall Upgrade .Services not specified in this SOW are considered out of scope and will be addressed with a.separate SOW'orChange Order. This Services Proposal is valid for 30 days from the above"Effective Date". ITEM(S) PROVIDED TO'CUSTOMER Table—Item(s)Provided to Customer Item Description Format Documentation Closeout Documents PDF or Word PROJECT MANAGEMENT CDW will'assign a project management resource to perform the following activities during the project: • Kickoff Meeting o Coordinate and facilitate kickoff meeting o Review SOW including project objectives,schedule,and logistics o Identify and confirm project.participants o Discuss project prerequisites o Create and distribute escalation and contact lists •. Project Schedule or Plan o Create a project plan that details the schedule.and resources assigned to the project.The schedule should align with'the estimated project duration as established in the Project Scheduling section. . o Monitor project.scope and expectations o Identify and manage project risks o Monitor the status and progress of the project and the quality of items provided o Communicate at regular intervals as agreed upon o . Ensure project timelines,dependencies,budgets,and closure are met within the project lifecycle • Status Meetings and Reports o Status meetings will be conducted on a regular cadence schedule to proactively identify any issues that may arise in order to mitigate risk o Scheduling will be based on agreement with stakeholders,the estimated project duration,and budget available o CDW and Customer will discuss action items;tasks completed,tasks outstanding,risks,issues,key decisions,.and conduct a budget review o The project management resource will document and distribute meeting notes and/or action itemsTor all meetings,and will act as the main POC to Customer, if requested • Change Management o When a:change to,a project occurs,the CDW's project change control process will be utilized o The'project management resource will facilitate any necessary change order(s)and administrative task(s)as necessary. . • Project Closure . o Once verbafscope completion is confirmed,a written Project Closure Acceptance will be provided for client to:formally acknowledge �DUV Affiliate..—Proprietary and Confidential. TV160928,MV160122 o If desired,the project.team will.meet to recap,answer any questions,and address.project transition activities and nett steps PROJECT SCHEDULING- Customer and CDW,-who will jointly manage this project,will together•develop timelines for an anticipated schedule ("Anticipated Schedule")based on CDW's project managemenfmethodology.Any dates,deadlines,timelines or'schedules contained in the Anticipated:Schedule,in this SOW or,otherwise,are estimates only,,and the.Parties will not rely on them for . purposes other than initial planning. TOTAL FEES The total fees due and payable under this,SOW("Total Fees")include both fees for Seller's performance of work.("Services Fees")and any other related costs and fees•specified in;the.Expenses section("Expenses"):Unless otherwise specified,;taxes will be invoiced.but are not included in any numbers or calculations provided herein. Seller will invoice for the Total Fees. SERVICES'FEES Services Fees hereunder are FIXED FEES,meaning that the amount invoiced for the Services will be$143,530.00. The invoiced amount of Services Fees will equal the amount of fees applicable-to.each completed project milestone,as specified in Table'l. Table 1—Services Fees Project Milestones Percentage Fees', Peconic Site 50%: $72;780.00 Pacific Site 50% $70,750.00 Totals 100% $143,530.00 EXPENSES. Neither travel time nor direct expenses will be billed'for this project. Upon execution of'this SOW,travel will be'scheduled to occur no less than two(2)weeks after the date of Customer's request for travel. Should Customer request that travel be expedited,Customer will be billed for any additional travel and expense costs that apply. �DW Affiliate.—Proprietary and Confidential. TV160928,MV160122 NOT FOR SIGNATURE :THIS DOCUMENT IS;A DRAFT INTENDED ONLY FOR USE IN THE REVIEW OF TEXT APPLICABBLE TO A POSSIBLE SERVICES ENGAGEMENT:IT DOES NOT CONSTITUTE A CONTRACTOR A PROPOSAL FORA CONTRACT'.THE CONTENT OF THIS DOCUMENT,AS IT MAYBE NEGOTIATED BY THE PARTIES,IS INTENDED TO BE INCORPORATED INTO A STATEMENT OF WORK,WHICH WILL INCLUDE OTHER PROVISIONS AND WHICH WILL.BE GOVERNED BY ADDITIONAL TERMS AND CONDITIONS.A PARTY'S SIGNATURE. OR OTHER INDICATION OF'APPROVAL ON OR RELATED TO THIS DOCUMENT SHALL HAVE NO BINDING OR CONTRACTUAL:EFFECT: �DW Affiliate.—Proprietary,and Confidential. TVI60928,MV 160122 STATEMENYOF WORK •Project Name: Ad Hoc Seller.:Representative: . Customer Name: TOWN OF SOUTHOLD 'DATA PROCESSING Angelo Cappetta . . . . . . . . . .. . . . . . . . . .. . . . . CDW Affiliate: CDW'Govem'ment LLC +:1'(203),85.17250'. angelo@cdwg.com Solution Architect: Date:: :September 24,2025 Al Nelson :. . . . .Abby Munn. Drafted,By . This statement'of work("Statement of Work":or"SOW")'is made and entered into on the last date that this SOW is fully ` executed as set forth below("SOW Effective Date"),by and between the undersigned,_CDW.Government LLC(`.`Provider, and"Seller,")and TOWN.OF SOUTHOLD-.DATA PROCESSING("Customer,"and"Client,"), This SOW shall be governed:by that certain Sourcewell 121923-CDW Technology:Products and Services with . . . Related.Solutions Agreement between CDW Government LLC and::Sourcewell:effective'March 13,.2024(the "Agreement' If there is a conflict between this SOW-and the Agreement,then the Agreement will-contro1, except as expressly amended:in this SOW by specific reference to the Agreement. AD-HOC ENGAGEMENT .PROJECT:SC.OPE.. . This SOW can be used for'scheduled break/fix,installation,.configuration and maintenance engineering for up to,but not exceed 24 hours per call.This SOW is valid fora 12-month period from the date:of signature and cannot exceed$50,000.00. . -in a calendar year without:a new, SOW or Change Order: Subject to the other provisions of this SOW, Seller will perform the following services: . . • Scheduled-Break/Fix,Installation;Configuration and Maintenance Engineering and Consulting Services CUSTOMER RESPONSIBILITIES Customer i's.responsible for the.following: I? Providine-Seller remote access and credentials as needed to complete assigned tasks: -2. . Designating an administrative Single.Point of Contact for the.duration of the Services. : '•3.. Providing at least one technical resource'with system_administration privileges for:the duration of the Services.. 4,:. Coordination with any Service Provider(s.)or,third-party.Vendor(s),if required. 5. Scheduling.all Services with Seller in advance using available engineering resources. 6. - Provide Seller With timely.access to.available,documentation;as required,which may include but not limited,to: company,business•goals:and strategies;existing IT and security strategypolicies,and procedures;,any relevant regulatory considerations;:previous security or audit,assessments .7. Customer is required to verifydata/application integrity prior to any review of data:' Proprietary.and Confidential Page 1 SLED-49424 1 CDW Govemment LLC. SOW 176454 PROJECT ASSUMPTIONS 1: Seller may leverage multiple technical:resources.if deemed necessary 2. Customer maintains administrative control over their Microsoft Environment. 3. Customer.will have all appropriate licenses required for Seller to perform assigned tasks. 4.. Any remediation.or configuration-will be based on Manufacturer's and Seller's best practices. . 5. This SOW,is valid for multiple dispatch opportunities throughout the,term of the SOW. 6. Engineer dispatch is dependent,upon resource availability and will be determined by'Seller project coordinator. 7. Assigned Consultant.is not a dedicated resource. , 8. All discovery Services;are best effort and are dependent on the environment being fully functional. 9. . Customer has knowledge about,current environment including but not limited to:networking infrastructure,IT security systems,storage area network;Compute;Virtualization,and supporting infrastructure services. 10. Customer'will provide-remote access to systems,if required.If no remote access system is in place,Seller will use a remote access'solution'of their choice to remote control and assess the current environment. . OUT OF-SCOPE Tasks outside this SOW include,but are not limited to 1. Long-term.projects. 2. Custom code development. GENERAL RESPONSIBILITIES AND ASSUMPTIONS Customer is responsible for providing all access that is reasonably necessary to assist and.accommodate Seller's perforniance of the Services. • Customer will provide in advance and in writing and Seller will follow,all applicable Customer's facility's safety, and security rules and procedures. • Customer is responsible for security at all Customer-Designated Locations; Seller is not responsible for lost or stolen equipment,other than solely as a result of Seller's gross negligence and:willful misconduct: • Customer acknowledges that in order to efficiently and effectively perform the Services CDW.may need to collect information from Customer's systems by using software tools developed,or used by CDW(`.`Tools"). .In some cases, these Tools will need to be loaded onto the Customer's systems to gather necessary information,and CDW'may'also use them to make.changes,in the:Customer.'s systems consistent with the agreed upon scope., .Tools will be used only for pumoses'of performing the Services and will,be removed or automatically.deleted when CDW has completed use of them.Customer hereby.consents.to CDW's use of the'Tools as set forth.in this paragraph. •. Upon completion of the'Services,Customer is responsible for disabling or deleting-all CDW coworker access credentials and completing any other necessary steps to ensure that access to all of Customer's environments has been permanently terminated.for all'CDW coworkers and contractors that were part of this engagement.,,. • This SOW can be terminated by either party without cause upon at least fourteen(14)days' advance written notice. PROJECT MANAGEMENT Seller will assign a project management resource to perform the following activities during the project: . Proprietary and Confidential Page 2 SLED-49424 1 CDW Government LLC SOW 176454 1. Kickoff Meeting o Coordinate and facilitate kickoff meeting o. Review SOW including project objectives,schedule,and logistics o Identify and confirm project participants o Discuss project prerequisites o . . Create and distribute escalation and contact lists 2: Project Schedule or Plan = o Create a project plan that details the schedule and resources assigned to the project.The schedule should align With the estimated project:duration as established in the.Project Scheduling section. o Monitor;project scope and expectations, o Identify acid manage'prcject risks o Monitor the status and progress of the project and the quality of items provided o Communicate at regular intervals.as agreed upon o Ensure project timelines,dependencies,budgets,and closure are met.within.the'project lifecycle 3. ;Status M,eetings'and,Reports o . Status meetings will be conducted on a regular cadence schedule to proactively identify any issues that may arise in order to mitigate risk o Scheduling will be.based oft agreement with stakeholders,the estimated project duration,and,budget available o Seller'and Customer will'discuss action items,tasks completed,tasks outstanding;risks,issues,key. decisions,and conduct a budget review o The project management resource will document and distribute meeting notes and/or action items for all meetings,and Will-act as the main POC to Customer, if requested 4. Change Management o When a change to a project'occurs,the Seller's project change control process will be utilized o The project management resource will facilitate any necessary change order(s)and administrative,task(s)'as necessary 5. Project Closure o Once verbal scope completion is confirmed,a written Project Closure'Acceptance Will be provided,for' client to formally-acknowledge o If desired,the project team will,meet to recap,answer any questions,and address project transition activities and next steps CONTACT PERSONS Each Party will appoint a person to act as that Party's point of contact("Contact Person")as the time for performance.nears and will communicate that person's,name and information to the other Parry's Contact Person. ; Customer Contact Person is authorized to approve materials and Services provided by Seller,and Seller may rely on the decisions and approvals made by the Customer Contact Person(except that Seller understands that Customer may require a, different'persori to sign'any Change.Orders amending this SOW).The Customer Contact Person.will manage all communications with Seller,,and when'Services.are performed at'.Customer-Designated Location,the Customer Contact Person.will be present or available.The Parties' Contact Persons shall be authorized to approve changes in personnel and. associated rates for Services under this SOW. CHANGE MANAGEMENT This SOW may be modified or amended only,in a writing signed by both Customer and Seller,generally in the:form provided by Seller("Change Order"). Services not specified in this SOW are considered out of scope and will be addressed with a separate SOW or Change Order. Proprietary.and Confidential Page 3 SLED-49424 1 CDW Government LLC SOW i76454 In.the event of a conflict between the terms and conditions set forth in a fully executed Change.Order and those set forth in . this.SOW or a prior fully executed Change Order,-the terms and conditions of the most recent fully executed Change Order shall prevail. PROJECT SCHEDULING Customer and Seller,who will jointly manage this project,will together-develop timelines for an anticipated schedule (.'Anticipated Schedule")based on Seller'..s'project management methodology.Any dates,deadlines,timelines or schedules contained in the Anticipated:Schedule;in this.SOW or otherwis'e,:are estimates only,.and the Parties will not rely on.thein'for: Purposes other than initial planning, The following scheduling scenarios that trigger delays and durations to extend beyond what's been planned may require a Change Order: Site preparation,such as power,cabling,.physical access; system access,hardware/software issues,etc.must be completed in'a timely manner. Project tasks delegated to Customer PMs/Engineers/Techs/Management/Resources must be completed in a timely; manner. For example,in the event a project's prioritization'is demoted,and Customer resources are reallocated causing the project's schedule to extend on account of experiencing interruptions to its momentum requiring complete stops)and sfart(s). External projects/dependencies that may have significant impact on the timeline,schedule'and deliverables: Itis Seller's assumption that every reasonable attempt will.be made to mitigate such situations. TOTAL FEES The total fees due and payable under this SOW("Total Fees")include both fees for Seller's performance of work("Services Fees")and any other related costs and fees specified in the Expenses section("Expenses"). Seller will invoice for Total Fees. Customer wilf pay invoices containing amounts authorized by this SOW in accordance with the terms of the Agreement..Unless otherwise specified,taxes will,be invoiced but are.not included in any numbers or calculations provided herein.The pricing included in this SOW expires and will be of no force or effect unless it is signed by Customer and Seller within thirty(3O)days from the Date listed on.the SOW,except as otherwise agreed by Seller.Any objections to an invoice must be communicated to the Seller Contact Person within fifteen(15)days after receipt of the invoice. This SOW may include,multiple types of Services Fees;please reference below Services Fees.section(s)for further details. SERVICES FEES Services Fees,will be calculated oh a TIME AND MATERIALS basis. The invoice amount of Services Fees will equal the hours actually worked("Consultant Hours")multiplied,by the rate applicable for the consultant("Hourly Rate")(see Table below).. The;Total Estimated Services Fees of is merely an estimate and does not represent a fixed fee.Neither the Total Estimated Consultant Hours of,nor'the Total Estimated.Services'Fees are intended to limit the bound8'of what may be requested or required for performance of the Services. Proprietary.and Confidential Page 4 SLED-49424 1 CDW Govemment LLC, SOW 176454 The rates presented in the table below apply to scheduled Services that are performed during Standard Business Hours (meaning 8:00 a.m.to 5:00 p.m.local time,Monday through Friday,excluding holidays).When Seller invoices for scheduled Services that are not performed during Standard-Business Hours, Services Fees will be calculated at 150%of the-Unit Rates. For any unscheduled(i.e.,emergency)Services performed at any.time of the'day,Services Fees will be'Calculated.at 200%of the Unit Rates. When Services are performed at any Customer-Designated Location(s)(as'defined below),Consultant Hours will be ,measured in one(1)hour increments with a minimum of four(4)hours billed for each day.When Seller personnel must . travel more than two(2)hours a day to work at any Customer-Designated Location(s),there will be a minimum of eight(8) hours billed for each day(less travel time that is invoiced pursuant to the"Expenses"section below). -When Services are performed remotely,time will be calculated in one(1)hour increments,with a minimum of one(1)hour each day. Upon notice to Customer,-.Seller,may adjust the rates below,provided that the rates will remain fixed-for at least six(6) months.after the SOW Effective Date'and then.again.for at least six(6)months after any subsequent adjustment.. Theirates below only apply to Services specified in this SOW as it may be amended by one or more Change Order(s). Consultant Function Hourly Rate, Associate Engineer Cross-technology $183.75. Engineer . Cross-technology $225.75 Senior Engineer Cross-technology $236.25 Senior Project.Manager Cross-technology. $225:75. EXPENSES When.Seller's personnel are located more than 60 miles from the Customer-Designated.location,travel charges will,apply.. Seller will invoice Customer for the time Seller's personnel spend traveling to and/or from the Customer-Designated . Location(s)(or otherwise,as necessary)at a rate of$125/hour. Seller will make efforts to schedule appropriate personnel . from Seller's offices located nearest to the Customer-Designated Location(s)in order to minimize such expenses..Seller's ability to do so may depend on various factors(e.g.,specialized project skills needed,,personnel availability,and changes to, or challenges inherent in,the Anticipated Schedule). Seller will invoice Customer for Seller's reasonable,direct costs incurred in performance of the Services.Direct expenses include;but may not be limited to: airfare,lodging,mileage,meals,shipping,lift rentals,photo copies,tolls and parking. Seller will charge actual costs forthese expenses.Any projected expenses set forth,in this SOW are estimates only.. Travel Notice Two(2)weeks' advance notice from Customer is required for any necessary travel by Seller personnel. . Proprietary and Confidential Page 5 SLED-49424 1 CDW Government LLC. SOW 176454 CUSTOMER-DESIGNATED LOCATIONS Seller will provide Services benefiting the following locations("Customer-Designated Locations") Location Address Southold Town Hall 53095 ROUTE 25, Southold,NY 1197.1 Southold Town Hall Annex 54375 Main Rd, Southold,NY 11971 Southold Police Department 41405 Route 25,'Southold,NY 11958, Southold Highway Department, 275 Peconic Ln,Peconic,NY 11958 Southold Recreation Department 970 Peconic Ln,Peconic,NY 11958 Southold Human Resource Center 750 Pacific St,.1vlattituck,NY 1.1952 Southold Solid Waste, ' . 6155 Cox Ln;.Cutchogue,NY 11935 Proprietary.and Confidential Page 6 SLED-49424 1 CDW Government LLC SOW 176454 SIGNATURES In acknowledgement that the.parties below have.read and understood this Statement of Work and agree to be bound'by it, each party has caused this Statement of Work to be signed and transferred by its respective authorized representative. This SOW and any Change Order may be•signed in.separate counterparts,each of which shall be deemed an original and all of which•together will be deemed to be one original.Electronic signatures on.this SOW or on any Change Order(or copie's of signatures sent via electronic means)are the equivalent of handwritten signatures. CDW Government LLC 'TOWN OF SOUTHOLD-DATA PROCESSING By:. . : . . : By: Name: Services Coatracts,Manager, Name: Title: Services Contract Manager Title: Date: Date: Mailing Address: Mailing Address: .200 N.Milwaukee,Ave. PO BOX 1179,A/P Vernon Hills,IL 60061 SOUTHOLD,NY 11971-0959 Proprietary.and Confidential Page 7' SLED-494241 CDW Goverpment LLC SOW 176454 Town of Southold; Infrattructure-Upgrade Project RFP Section 4' .-.Co. 't 'Pr.oposa-,I The vendor's 'p.ricing must be all-inclusive to provide,the Town of Southold with a turnkey solution: Please note: Before the services are to be performed, CDW'Government will provide:a finaliied Statement of Work.(SOW) detailing the exact scoping of the services to be provided;which:will be:execute'd.by both parties prior to the start of services.•The,SOW will reflect:terms and conditions:as negotiated between the parties: SOWs'detailirig,CDW's.Services Proposals can.be found.in Section 3.:.Proposed.Solution. Terms •of Offer All information a:nd:documents:hereby submitted in re.spon,se:to the Request for Proposal ("RFP").furnished by Town,of Southold ("Customer").,are.the.property of and are proprietary to CDW Government, LLC("CDW Government"): Notwithstanding anything to.the-contrary'contained in the Proposal- CDW.Government= declares its,understanding.that the Terms and Conditions contained,in the. urgent . Sourcewell 121923-CDW Technology Products and Services Contract agreement, . constitute.the terms,an.d'.conditions co.ntrolli.ng•the transaction contemplated.b.y the:RFP, except as otherwise agreed upon in writing by'the parties. CDW Government requests that Cu.stomer;review and confirmacceptance of the T&C;or,'if necessary, negotiate with CDW a mutually agreeable final:contract. CDW Government shall not be bound to any.: term(s) of the RFP or the.Proposal or to'.any contract related to the RFP until or:unless:.(i) Customer confirms in writing its acceptance of the T&C; or (ii) authorized representatives :of CDW Government and,Customer execute a written conteact.that is separate from the Proposal;: Except as otherwise set.forth above; CDW Government agrees to maintain the validity of the;Proposal fora pe'riod.of thirty (30) days from the RFP-established,due .date,("Validity': Period");'provided that there are no extraordinary changes in:ppcing:due to unique market conditions,product discontinuation, manufacture,r.price•changes, or other -extenuating circumstances. In order to ensure CDW:Government''s commitment to.the pricing levels and other:proposedofferings contained in the Proposal, Customer may notify CDW.Government via mail'or a-mail that either: (i) Customer.accepts CDW Government's Proposal and agrees to be bound by,the.T&C, or (ii).Customer intendsto negotiate with CDW Governmenfa separate agreement during the Validity Period. CDW Gover.nmentwill:conduct a:ny'negot ation of a final.agr:eement,with Customer-in good faith. Notwithstanding tke foregoing; any. prices'or other privileges.conternplated in . the Prop.osal shall, commence onahe effeeti.ve date of agreement between the parties or. the date of-agreement or amendment to an exiisting.agreem.ent between the parties. ©CDW GovernMent LLC 2025,1:230 N.Milwaukee Ave: I veenori Hills,IL 60061 To the extent allowable,all information.and documents hereby submitted in response to the Request for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW Government LLC.: Cisco Hardware and Services Proposal �g11FFO[gco . �Da CDW Government Proposal:Cisco Equipment List Angelo Cappetta' Generated for.Lloyd Reisenberg _ (203)851-7290 Town of Southold,NY angelo@cdwg.com. Proposal Dater 9/23/2025 230 N Milwaukee Ave,Vernon Hills IL,60061 Expiration Date:10/23/2025 Remit To:CDW Government Inc- . Payment Type:NET30Terms 75 Remittance Drive Suite1515 Contract:'Sourcewell 121923 .Chicago,1160675 ApplianceNetwork Line Manufacturer Term' QTY Part 9 Description List Price Di-ol, Unit Price Exti Price 1. Cisco I FMC1700-K9 Cisco Secure Firewall Management Center 1700 Chassis S 40,941.51 55% $18,335.43 $18,335.43 2. Cisco 36m: 1 CON-SNTP-FMC1700K SNTC-24X7X4 Cisco Secure Firewall' $ 22,695.00 25% $16,926.32 $16,926.32 3. Cisco 2. SFP-10G-SR= 1OGBASE-SR SFP Module S 1,262.02 65%. $446.90• $893.80 4. Cisco 2. SNS-3715-K9 Small Secure Network Server for ISEApplication $ 20,446.00 52% $9,795.46 $19,590.92 5. Cisco 36m' 2 c6N-SNTP-SN3715K9 SNTC-24X7X4 Small Secure Network Server for ISEApp $ 9,912.00 25% $7,392.54 $14,785.08 6. Cisco 2 SNS-HD600010K12NM6 600GB 12G SAS 10K RPM SFF HDD $ 1,250.01 52% $598.86 S1,197.72 I. Cisc0 2 SFP:HIOGB-CU3M= IOGBASE-CU SFP+cable3Mecer - $ 134.48 44% $75:63 $151.26 •'Network Appliances Total: `=$T1,880.53 Line Manufacturer Term QTY Part# Description List Price Disc.% Unit Price Ext,Price B. Cisco 2 CSF1220CX-TD-K9 Secure Firewall 1220 Appliance,Compact,Threat Defense S 5,195.85 50% $2,597.52 $5,195.04 9. Cisco 36m 2 CON-SNTP-CSFIXTDK SNTC-24X7X4 Secure Firewall 1220 Appliance,Compact $ 1,920.00 25% $1,431.97 $2,863.94 10. Cisco 36m 2 L-CSF1220CX-TMC-3Y CSF 1220CX Threat Defense IPS,Malware&URL 3YSubs $ 6,150.60 50%- $3,074.81 $6,149.62 11. Cisco' 2 CSF12000-RACK-MNT= Secure Firewa111200 Series rackmount kit for compact'models $ 1,039.17 W/ $584.44 S1,168.88 12. Cisco 2 SFP-HIOGB-CUIM=- 1OGBASE-CU SFP+Cable 1 Meter $ 133.26 44% $74.95 $149.90 13. Cisco 7 C930048H-E Catalyst 930048-port UPoE+,Network Essentials $ '13,632.70 53% $6,389.36 $44,715.10 14. Cisco 36m 7 CON-SNTP-C930210L SNTC-24XTA Catalyst 930048-por S 4,536.09 25%' $3,383.03 $23,681.21 15. Cisco 36M 7 C9300-DNA-E-48-3Y C9300 DNA Essentials,48-port-3 Year Term License $ 1,324.83 40% $800129 $5.602.03 16. Cisco 14 SFP-lOG-LRM= lOGBASE-LRM'SFP Module $ 1,445.21 610/d• $556.92 $7,796.88 Town Hall Total:' $9T,332.60 Annex Line Manufacturer Term QTY Part 0 Description List Price Disc�O/b Unit Price Ext.Price 17.' 'Cisco 2 6SF1220CX-TD-K9 Secure Firewall 1226 Appliance,Compact,Threat Defense $ 5,195.85 50% $2,597.52 - $5,195.04 18. Cisco 36m' 2 CON-SNTP-CSFIXTDK SNTC-24X7X4 Secure Firewall 1220Appliance,Compact $ 1,920.00 25% $1,431.97 $2,863.94 ' 19. Cisco 36m 2 L-CSF1,220CX-TMC-3Y r CSF 1220CX Threat Defense IPS,Malware&URL 3Y Subs $ 6,150.69 50% $3,074.81 $6,149.6.2 20. Cisco 2 CSF12000-RACK-MNT= Secure Firewal11200 Series rackmount kit for compact models. $ 1,039.17 401X. S627.73 S1,255.46 21. Cisco 3 C9300-481-1-E Catalyst 930048-port UPoE+,Network Essentials S .13,632.70 53% $6,389.30 $19,167.90 22. Cisco 36m 3 CON-SNTP-C930230L SNTC-24X7X4Catalyst930048-port $ 4,536.00 25% $3,383.03 •S10,149.09 23. Cisco 1 36m. . 3. C9300-DNA-E-48-3Y C9300 DNA Essentials,48-port-3 Year Term License $ 1,324.83 40% 1 $800.29 $2,400.87 24. Cisco 1 6 SFP-16G-LRM= 1OGBASE-LRM SFP Module. 1$ 1 1;445.21 61% .S556.92 $3,341.52 Annex Total: _`$50,523.44Line Manufacturer Term QTY Part# Description List Price Di-0)o Unit Price Ext.Price . . .. 25. Cisco 2, CSF1220MTD-K9 Secure Firewal11220 Appliance,Compact,Threat Defense $ 5,195,85 50% $2,597.52 $5,195.04 26. Cisco 36m 2 CON-SNTP-CSFIXTDK SNTC-24X7X4 Secure Firewall 1220 Appliance,Compact $ 1,920.00 259/b $1;431.97 $2,863.94 27. Cisco 36m 2 L-CSF1220CX-TMC-3Y CSF 1220CX Threat Defense IPS,Malware&URL 3Y Subs $ 6,150.60 50% $3,074.81 S6,149.62 28. Cisco 2 CSF12000-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact models $ 1,039.17 44^/.' $594.44 $1,168.88 29. Cisco 2 SFP-HIOGB-CUIM 30GBASE-CU SFP+Cable'1 Meter S • 133.26 44% $74.95 $149.90 30. Cisco 1 5 C9300-48H-E Catalyst 930048-port UPoE+,Network Essentials S 13,632.70 53% $6,389.30 $31,946.50 31. Cisco 36m 5 CON-SNTP-C930230L SNTC-24X7X4 Catalyst 930048-port $ '4,536.00 - 25% $3,383.03 •$16,915.15 32. Cisco .36m 5 C9300-DNA-E-48-3Y C9300 DNA Essentials,48-port-3 Year Term License' $ 1,324.83 40% $800.29r $4,001.45 33. Cisco 10 SFP-10G-LRM= 30GBASE-LRM SFP Module $ 1,445.21 61% $556.92 $5,569.20 ' Police Department Total.• $73,959.68Highway Department Line Manufacturer Term QTY Part# Description List Price Disc..% Unit Price Eit.Price 34. Cisco 1 CSF1210CE-TD-K9 Secure Firewall 1210 Appliance,Compact,Threat Defense S 3,637.10 50%, ,$1,818.26 $1,818.26 35. Cisco 36m 1 CON-SNTP-CSFICETD SNTC-24X7X4 Secure Firewall 1210 Appliance,Compact $ 1;344.00 25% $1,002:38 S3,002.38 36. Cisco 36m 1 L-CSF121OCE-TMC-3Y CSF 1210CE Threat Defense IPS,Malware&URL 3Y Subs $ 4,305.42 50% $2,152.36 S2,152.36 37. Cisco 1 CSF120OC-RACK-MNT= - Secure Firewall 1200 Series rackmount kit for compact models' $ 1,039.17 44% $584:44 $594.44 38. Cisco 1 C9300-48H-E Catalyst 930048-port UPoE+,Network Essentials $ 13,632.70 53% S6,389.30 $6,389.30 39. Cisco 1 36m 1 1 CON-SNTP-C930210L I SNTC-24X7X4 Catalyst 930048-port, 1$. 4,536.00 25% $3,383.03 S3,383.03 40. Cisco 1 36m 1 1• C9300-DNA-E-48-3Y I C9300 DNA Essentials,48-port-3 Year Term License $ 1,324.83 1 40% $800.29 $800.29 Highway Department Total: $16,130.06 Recreation Cente Line Manufacturer Term QTY Part# Description List Price Disc.% Unit Price Ext.Price 41. Cisco 1 CSF1210CE-TD;K9 Secure Firewall 1210Appliance,Compact,Threat Defense $ 3,637.10 50% $1,818.26 $1,818.26 42. Cisco 36m• 1 CON-SNTP-CSFICETD SNTC-24X7X4 Secure Firewall 1210Appliance,Compact $, 1,344.00 25% ' $1,062.38 $1,602.38 43. Cisco 36m 1•. L-CSF1210CE-TMC-3Y CSF 1210CE Threat Defense IPS,Malware&URL 3Y Subs $ 4,305.42 50% $2,152.36 $2,152.36 44.. .Cisco 1, CSF120OC-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact models $ 1,039.17 40% $627.73 '$627.73 45.. .Cisco 1. C930048H-E Catalyst 930048-port UPoE+,Network Essentials - $-113,632.70 5M $6,389.30 $6,389,30 . 46. Cisco 36m 1 1 CON-SNTP-C9302101. I SNTC-24X7X4 Catalyst 930048-port $ 4,536.00 25% $3,383.03 $3,383.03 47. Cisco 36m' '•1 C9300-DNA-E-48-3Y C9300 DNA Essentials;48-port:3 Year Term License $ `1,324.83 .40% $800.29 48. 'Cisco 1' C9300-NM-8X I Catalyst 93008z LOGE IN Module S. 3,118.92 45%. $1,721.63 $1,721.63 49. Cisco 2 SFP=10G-LR= 10GBASE-LRSFP Module $ -5,048.17 61% $1,945.33 $3,890.66 - Recreation CenterTetal: $21,T86:64' Line manufacturer Term QTY Part 9 Description List Price Disc.% Unit Price Ext.Price 50.- 'Cisco 1• CSF1210CE-TD-K9 Secure Firewall 1210 Appliance,Compact,Threat Defense S -3,637.10 50%' $1,818:26 $1,818.26 51. Cisco 36m 1 CON-SNTP-CSFICETD S114TC-24X7X4 Secure Firewall 1210Appliance,Compact $- 1,344.00 25% $1,002.38 $1,602.38 52. Cisco 36m 1 L-CSF1210CE-TMC-3Y CSF 1210CE Threat Defense IPS,Malware&URL3Y Subs $ 4,305.42 50% $2,152.36 $2,152.36 53. Cisco 1 CSF1200C-RACK-MNT= Secure Firewa111200$efles rackmount kit for compact models $ •1;039.17 44% $584.44, $584.44 , •54. •Cisco 1' C9300-46H-E Catalyst 930048-port UPoE+,Network•Eisentials $. 13,632.76 ,53%' $6,389.30 $6,369.30 55.1Cisco I 36m, I JC9N-SNTP-C930210L I SNTC-24X7X4 Catalyst 930048-port 54,536.00 1 259�b •$3,383.03 $3,363.03 56. Cisco 36m 1 1 C9300-DNA-E-48-3Y I C9300 DNA Essentiats,48-port-3YearTerm License S 1,32.4.83 40%' 1 $800.29 $800.26 waste Management Total: $16;730,06 Human Res urces Center Line Manufacturer Term CITY Part Description List Price Disc.% Unit Price Ext.Price 57. 'Cisco 1 CSF1210CE-TD-K9", Secure Firewall 1216 Appliance,Compact,Threat Defense $ 3,637.10 .50% $1,818.26. $1,818.26 ' 58. Cisco 36m' 1 CON-SNTP-CSFICETD SNTC-24X7X4 Secure Firewall 1210 Appliance,Compact $. ' 1,344.00 .25% $1,002.38 $1,002.38 59. Cisco 36m 1 L-CSF1210CE-TMC-3Y CSF 1210Cli Threat Defense IPS,Malware•&URL 3Y Subs $' 4,305,42 5W $2;152.36,' $2,15236 60. Cisco 1' CS.P1200 C-RACK-MNT= Secure Firewall1200 Series rackmount kit for compact mod els $ 1,039.17 .44%' $584.44 -$584.44 61. Cisco,; 1 C9300-48H-E Catalyst 930048-port UPoE+,Network Essentials $„13,632.70 53% $6,389.30 $6,389.30 62. Cisco •36m 1 1 CON-SNTP-C930210L SNTC-24X7X4 Catalyst 930048-part $ 4;536.00 25%• '$3,383.031 $3,383.03 63. Cisco. . . . 36m, 1. C9300-DNA-E48-3Y C9300 DNA Essentials,48-port-3 Year Term License $ ,1,324.83 :40%, $800.29 -'$800.29 .64.. Cisco 1.' C9300-NM-SX Catalyst 93008 x 10GE Network Module $ .3,118.92 45% $1,721.63 $1,721.63 65.'• Cisco 1 2 SFP-10G-LR= 10GBASE-LR SFP Module $ 5,048.17 67% $1,682.45 : $3,364.90 ' .. Human Reaaurces CenterTotak. $21,21659 Subtotal: $368,958.60 Freight: '$0,00 Total: $368.958.60 This.quote is subject,to CDWs.Terms and Conditions of Sales and Service Projects at http://www.cdwg.com/contentIterms-conditions/product-sales:aspx - ©2025 CDWl3 LLC,200 N.Milwaukee Avenue,Vernon Hills,IL 60061 1800.808.4239 Dee Hardware Proposa. CDW Government•', Proposal:Dell Equipment List Angelo Cappetta Generated for.Lloyd Reisenberg (203)951.7250 •Town of Southold,NY angelo@cdwg.com Proposal Date:9/19/2025 236 N Milwaukee Ave,Vernon Hills IL,60061 Expiration Date:30/19/2025 - Remit To:CDW Government Inc ' Payment Type:NET 307ferms 75 Remittance Drive Suite 1515 Contract:Saurcewel1121923 Chicago,It 60675 Network jtail2uu;�s Li- Manufacturer QTY Part# Description Unit Price Ext.Price 1. Dell 3 210-13JTR PowerEdge R3605erver $609.49 $1,828.47 2. Dell 3. 461-AAIG Trusted Platform Module 2.0 V6 $32.48 $97.44 • 3. Dell 3 321-BKHP. 2.5"Chassis with up to 8.Hot Plug Hard Drives,Front PERC $128.63 $385.88 .. 4. Dell. 3 338-CMQZ Intel Xeon E-24682.6G,8C/I6T,24M Cache,Turbo,HT(65W)DDR5 S329.44 $98831 5. Dell 3" 412-BBHK Heatsink $13.32 $39.97 6. 'Dell •3 '370-AAIP, .Performance Optimized $0.00 $0.00 7. Dell 3 370-13CBM 5600MT/s UDIMMs $0.00 $0.00 8. Dell 3 780-BCDI No RAID $0.00 $0.00 9. Dell 3. .405-ABCQ PERC H355 Controller Front $533.20 $1,59959 . 10. '.'Dell'. 3 750-ACFR 'Front PERC Mechanical Parts,frontload ''$16.41 $49.22 11. Dell 3 384-BBBL Performance BIOSSettings' $0.00 $0.00 12: Dell 3 800-BBDM UEFI BIOS Boot Mode with GPT Partition $0.00 $0.00 .13. Dell 3 347-BBEY No Energy Star $0.00 $0.00 14. Dell: 3 384-BDMJ ;High Performance Fan $65.29 $195.88 15. Dell' 3 •450-AMDH Dual,(1*1)Redundant,Hot-Plug Power Supply,60OW MM(100-240Vac) $291.70 $875.09 16. Dell '3 336-BCMK Riser Config 2,Butterfly Gen4 Riser(x8/x8) $35.92 $30T.75 17. Dell 3 329-BJTG PowerEdge R360 Motherboard with LOM,MX $0.60 $0.00 18. Dell.• 3 325-BEVH -PowerEdge lU Standard Bezel $16.07 $48.22 , 19. Dell .3 350-BCTP Dell Luggage Tag R360 $0.00 $0.00 . 20, Dell' 3 403-BCRZ BOSS-Nl controller,card*with 2 M.2 960GB(RAID 1) $1,299.44 $3,89831' 21. Dell 3 470-BBJL BOSS Cables and Bracket for R360 $16.41 $49.22 22. Dell 3 634-CVGB Windows Server 2025 Standard,16CORE,FI,No Med,No CAL,Multi Language $695.63 $2,086.88 .23. Dell 3 379-BFXT Dell Connectivity Client-Disabled $0.00. $0.00. 24. Dell .3 634-CYDF Dell Connectivity Module $0.00 $0.00 , 25. Dell 3 528-CTIC 1DRAC9,Enterprise 16G $272.67 $818.00 26. Dell 3 528-COYT Secured CemponentVerificatlon $32.48 $97.44 27. Deli 3 379-BCRG iDRAC,Factory Generated Password,No OMQR $0.00 $0.00 ' 28. Dell 3 658-BFRK 1DRAC Service Module(ISM),Pre-Installed in OS $0.00 $0.00. 29. Dell 3 379-BCQY iDRAC Group Manager,Disabled $0.00 $0.00 .30. Dell .3. 618-BBEC Hyper-V role enabled with pre-installed Standard or Datacenter Ed OSon Intl Virtual $0.32 $0.97 31. Deli 3, 770-BCWN ReadyRails Sliding Rails Without Cable Management Arrim(Al2) $39.38 $118.13 32. Dell 3 770-BDMT Cable Management Arm $21.88 $65.63 33. Dell 3 631-AACK No Systems Documentation,No OpenManage DVD Kit $0.00 $0.00 34. Dell 3 340-DLXS 'PowerEdge R360 Shipping $16.67 $48.22 ' 35. .Dell •3 340-CWUJ PowerEdge R350/R360 Shipping Material for 2.5"Chassis $25.92 $77.75 36. Dell 3 389-FFNB PowerEdge R360 CCC Marking,No CE Marking $0.00 $0.00 37. Dell 3 707-6877 ProSupport 4-Hour 7x24 Technical Support and Assistance 3 Years S148.38 $445.13 38. Dell 3 707-6889 ProSupport4-Hour7x240nsite Service2Years Extended $63.94 $191.81 39. 'Dell' 3 707-6892 .ProSupport4-Hour7x240nsite SewicelYear' $4.92 $14.75' 40. Dell '3' 707-6946 Dell Hardware Limited Warranty Plus Onsite Service $42.32 $126.97 41: Dell 3 955-9041 Dell Hardware Limited Warranty Plus On Site Service Extended Year $0.00 '$0.00 42. .Dell 3 989;3439 Thank you choosing Dell ProSupport.For tech support,visit $0.00 $0.00 43. Dell• 3 841=5979 'Keep your Hard Drive For Enterprise 3Years - $118.13 $354.38 44. Dell 3900-9997 On-Site Installation Declined $0.00 $0.00 45: Dell '3 370-BBZF 32GB UDIMM,S600MT/s ECC $455.98 $1,367.94 46. Dell 1 3 1 400-AXTV 480GB SSDSATA Read Intensive 6Gbps 512e2.5in Hot-plug AG Drive,1 DWPD $343.88 $1,031.63 47. Dell 3 450-AALV Power Cord-C33,3M,125V,15A(North America,Guam,North Marianas,Philippines, $0.00• $0.00. 48. Dell 3 528-DHTW WindowsServer202S Standard,16CORE,DF Recovery Image,Multi Lang, $0.00 $0.00 •49. Dell �3 528-DHVH Windows Server2025 Standard,No'Media,WS2019 Std Downgrade DF Media,Multi $0.00 $0.00 ' .50. .Dell 3 634-CVBL Windows Server2025 Standard,No Media,WS2019 Stc1bowngradew/DVD $10.17 $30.50 51. Dell 3 634-CVGJ Windows Server2025 Standard,16CORE,Media Kit,Multi Lang,(Downgrade not $20.34 '$61.03 52. Dell 3 528-DHVD Windows semer2025standard,No Media,W52022Std Downgrade DFMedii,M.iti $0.00 $0.00 53. Dell 3 634-CVBQ Windows Server 2025 Standard,No Media,WS20225td Downgrade W1DVD $10.17 '$3050 . .. Unit TotoL• $5,710.32 . Subtol` " $17,130.97 Zlght: $0.00 , TctoL• $17,130.97 This.quote is subject to CDWs Terms and Conditions of Sales and Service Projects at http*./Avww.cdwg.comtmntent/terms-ronditionslpmduct-sates.aspx ®2025 CDWO LI.C,200 N.Milwaukee Avenue,Vernon Hills,IL 60061 1 800.808.4239 - . Town of'Southold, Infrastructure Upgrade Project RFP Bid Documents and Forms ©'CDW Government LLC 2025.1230 U. Milwaukee Ave. I Nernori Hills, IL 60061 To the extent allowable,all information and documents hereby submitted in response to the Request for Proposal ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDW.Government LLC.. TOWN, "OF SOUTHOLD REQUEST FOR PROPOSALS INFORMATION TECHNOLOGIES INFRASTRUCTURE. UPGRADE PROJECT AUGUST 2025 REVISION -REQUEST FOR BIDS: Information Technologies Infrastructure Upgrade 'The.Town 'of Southold is soliciting,competitive sealed bids from qualified and experienced ..professional firms for the upgrade of its.network and security infrastructure,.incorporating next- generation Cisco and Microsoft technologies. This:comprehensive.tumke 'tech,nologyproject aims,to modernize and enhance the performance of the Town of:the technology infrastructure, which supports critical municipal operations,: improves service delivery, and ensures a secure resilient scalable technology environment. The selected vendor will collaborate with Southold's. Information-Technologies staff and be responsible for the design,procurement, deployment; installation, configuration, testing, and documentation of all hardware, operating systems,,software, licenses and application upgrades. This government-funded project, sponsored by the.Town of Southold, must comply with all applicable local, state, and federal regulations governing public sector information technology. initiatives. All vendor bids must adhere to the terms, conditions, and'requirements outlined in this solicitation document. Project Scope Overview: :IT Infrastructure.and Security Upgrades 1. Firewall Infrastructure Modernization o Replace end-of-life Cisco ASA devices at seven (7) locations with next-generation Cisco . firewalls: . 2-. WAN Infrastructure Upgrade o Upgrade WAN connectivity, including bandwidth and security enhancements, to meet Southold's current and future operational demands. 3. Cisco Firepower Platform Upgrade o Upgrade Cisco Firepower.Threat Defense (FTD) servers and.Management Center Systems (MCS).for improved threat detection and. centralized management. o Integrate Firepower'MCS with.the existing Cisco AMP (Advanced Malware Protection) solution for enhanced endpoint protection. 4. . Cisco Identity Services Engine(ISE) Enhancements o Upgrade Cisco ISE-PIC Server and ISE Passive Identity Connector application to the latest supported-versions. 5. Active Directory and Domain Controller Modernization o Replace end-of-life domain controllers,at three (3) locations. o Upgrade Microsoft Active Directory, including raising the forest and domain functional levels. 6. .Email and Security Systems Integration o Integrate two (2) existing Microsoft Exchange Servers and two (2) GFI MailEssentials Servers into the upgraded Active Directory'structure. 7. Virtual Infrastructure Integration o I,ncorporate.existing VxRail clusters and VMware vSphere systems, into the new Active Directory architecture to streamline authentication and access management. 2 1 P:age . . : . : 8. Connectivity Redundancy o Implement core location connectivity redundancy to ensure.high availability and business continuity. 9. Cisco Umbrella Server Migration o Migrate existing Cisco Umbrella servers to the.infrastructure. 10. Fiber Optic Connectivity, o Install new fiber optic cabling enhancing speed and reliability. Applicants must submit written bids to the Southold Town Clerk's office.at Southold Town Hall,PO Box 1179, 53095 Main Road,'Southold, New York 11971, R 2:00 PM on 09/25/2025. Bid proposals must be in sealed envelopes and labeled":Infrastructure Upgrade.Project." Please copies of your proposal ensuring the original copy is marked as "ORIGINAL" on the.cover. Request for Bid Overview .Project Name: Infrastructure Upgrade'Project Bid ague Wate: 08/141202 -'id Due Date: 09/25/2025 200 .m Vendor Requirements • Certified Microsoft Gold Partner. Certified Microsoft Solutions'Expert (MCSE) Certified Cisco Meraki Solutions Specialist • ' 'Cisco CCNP Security Certification Cisco CCIE.Security Certification The vendor must have.performed similar Cisco and Microsoft upgrades • . The.vendor,must provide at least five (5) references of similar scope: • The vendor must provide all the necessary hardware, software, and services fora turnkey.solution. Locations 1., Town Hall, 53095.Main Rd., Southold, NY. (Core location) 2. Town Hall Annex,:54375 Main Rd., Southold; NY (Core location) 3. Police Department, 41405 Route 25; Peconic, NY (Core location) .4. Highway Department,'275 Peconic.Lane, Peconic, NY (Remote site) 5. - Recreation Center, 970 Peconic.Lane, Peconic NY (Remote site) 6. Peconic Community Center, 1170 Peconic Lane Peconic, NY (Remote site) 7. Solid Waste Department,.6155 Cox Lane, Cutchogue, NY (Remote site) 8.. Human Resources Center, 750 Pacific St., Mattituck, NY (Remote site) 9. Katinka House. 750 Pacific St.', Mattituck, NY (Remote,site) :Scope of Services • The selected vendor shall provide alternatives and solutions pertinent to upgrading the Town's network security infrastructure. These proposed solutions must adhere to industry standards and best practices. : . 3lPa9e • 'Project:pricing to include: o Implementation services.. o It is the vendors responsibility'to include all proposed equipment, cables and connections, operating systems, licenses, certificates, software, and applications for. this project..NOTE: Any and all new licenses and certifications must in the Town of Southold's name. o Maintenance:and support must be included for 24/7/4 and 24/7/NBD for distribution and access layer equipment for a duration of three (3) years. o Any equipment and/or services classified.as other or additional items. • Work with the Information Technologies staff and Southold's ISP to upgrade/increase the WAN 'con nectivity's:ban dwidth.to support'Southold's current,and future technology, initiatives. Evaluate the existing network infrastructure, make recommendations for improvements and incorporate these recommendations into'a more secure and,robust infrastructure. • . Review,, re-design,.upgrade; and replace the following: o All:seveh (7)ASA firewalls, Firepower services, and the ir'configurations. o ' The operation of the Firepower Management Center (FMC) and the FireSight Management Center. o. The ISE=PIC.deployment: o , The hardware and configurations of the Town's three (3) domain controllers. o Recommendations.for-the design,:performance, and redundancy of Active Directories, DHCP, DNS; and Group Policy are paramount: o Microsoft Active Directories, including the forest functional level. Making sure.that the. updated systems adhere.to industry.standards and best practices. o, All Town applications, systems, and interfaces using Active Directories must be tested for compatibility and proven'to perform efficiently. o .Review the configurations of the network's managed switches and implement any necessary modifications to support the upgraded.infrastructure. Particular,attention .must be:given to ensuring optimal connectivity.and integration with the Town's VxRail hyperconverged.infrastructure. . „ o Evaluate and ,update Microsoft Active Directory configuration for Microsoft Exchange and the VxRail cluster and vSphere systems. o Evaluate,and update third-party directory services integrations via LDAP and Kerberos.: o Examineeach location's LAN/WAN connectivity and.:provide recommendations. 'for improvement. . Install fiberoptiics connectivity between the Recreation Center and the Peconic Community Center. The firewall upgrade at the Recreation Center should be designed to include the Community. Center. (NOTE: This must be quoted as a separate item on the bid) •; : Install fiberoptics connectivity between the Human Resource Center and the Katinka House:The firewall,upgrade at the Human Resource Center should also include the Katinka House. (NOTE: This must be quoted as a.separate item on the bid)' Provide detailed project implementation timeline and test plans: • Provide advanced-level training and knowledge transfer to the Town's Information Technologies staff. .. • Provide a detailed.runbook that includes documentation of.the.updated hardware, software, applications; and systems upgrades and changes to the existing configurations. This document must also contain recommended maintenance and schedules, which should be documented and-illustrated. 4lP:age Vendors should strongly consider trade-in allowances for the old equipment; which sho.uld be listed separately on the bid.. Infrastructure Replacement and Deployment Plan The selected vendor ill:replace critical:components.of the Town's network infrastructure'to,ensure a Stable,,secure, and supportable environment for years:to come.,The vendor's engineering team will be responsible for developing,a detailed replacement plan for each site, coordinating installations. . during:approved maintenancewindow"s to..minimize disruption to Town operations. • Install a new,.highly available pair.of Secure Network Services (SNS) appliancesAohost the Town's Cisco Identity Services.Engine (ISE). . Deploy a new.Firepower Management Center (F.MC) appliance to centrally manage:the. : . . . . . .. . . Town's,Cisco Firepower.Threat Defense (FTD) firewalls: . Replace and deploy firewall systems, including:., o Three.(3) high-availability. redundant firewall pairs-(HA pairs): . o Four (4):standalone .firewall:units. • . Install.seven (7).building distribution switches. Each phase of,the implementation will,include structured.testing.and validation to,confirm:successful -deployment and ensure operational continuity before proceeding tothe next step.: •: Configure vSp,here Infrastructure to use the.updated-Active Directory authentication o Configure the Town's vSphere environment to,use Active Directory for authentication. Deploy-FMC 1700 appliances and.migrate: o Deploy one FMC,1700 appliance in the Town's data center: . o Upgrade the appliance's:software to support the,new and existing FTD firewails. o If there is n.o.software version available.that supports all'of the.FTD firewalls, upgrade . the FMC.to the latest, Cisco-recommended software version. o :Connect F.TD firewalls to.the new FMC appliance and test: Deploy:SNS 3715 Pair and migrate ISE Services. o. 'Deploy a pair of.SNS 3715.app.liances to provide.highly-available ISE services. o Upgrade the SNS..to the latest Cisco=recommended software version. o Reconfigure network devices to use the new.SNS appliances'for ISE services: Rack and Configure three Dell.Servers,to.be.u. sed to.host'the domain controllers. ., o Rack and-cable Dell R360 servers. One to be located in the Town Hall, Police, . Department; and.AnneX. o New server-installation: . ■, Set up-and configure each server With,the.latest.compatible release,of.Microsoft . . . .. . . Windows Server, ensuring it aligns with:the Town's existing IT environment: The Hyper-V role must be installed and properly configured on each server to support,; virtualization'requirements. ■. Build.a new Windows Server Hyper-V.VM and configure it as a domain:controller per location: These domain controllers must be setup for redundancy.to.ensure high availability fault tolerance'... :5 1 P.:a g e Deploy a Cisco Umbrella virtual'appliance and:updateahe DHCP scopes to use . the appliances as the DNS. resolvers: Deploy Three. Cisco Secure.Firewall HA Pairs o Deploy.:three (3) highly available pairs of Cisco Secure Firewalls (FTD) at the'Town Hall,: Annex, and Police Department.,Firewall reduridancyand failover,capability'must be treated as-a high prioritylo ensure con tinuous:network security:and'availability. o. Upgrade each firewall pair to the:latest; Cisco-recommended software version. o Connect each firewall pairto the new FMC appliance for management:. o Migrate;configurations:from existing ASA/FTD_:firewalls. o Test,and:cutover-to.the new,firewall pairsAuring a maintenance window. Deployfour (4) Standalone Cisco Secure Fire' Walls o Deploy four standalone Cisco Secure Firewalls (FTD)-at the Highway Department, Recreation Center,Waste:Management, and Human..Resources Center. o Upgrade each firewall to the latest, Cisco-recommended are version., o Connect each firewall to.th.e new FMC appliance,for management. . . -- o. Mi ' te:configu.rations:from,existing ASi4%FTD frewalls. o Test and cutoverto the-new firewall during'a maintenance window. Deploy.Seven Diistribution Switches o Deploy seven, (7) Catalyst.9300/9500 distribution switches, one per Town site. o Upgrade.each switch to.the latest,. Cisco-recommended.software version.:. .. . o Port the ezisting:'network configuration to the new switches, making only the changes required to support the latest hardware. o Cutover and Pest during a maintenance window.: Core Location Connectivity Redundancy . 0 1mplement redundant connectivity between.the three (3) core, locations using cellular connectivity: This;project intends to provide immediate failover redundant and.'secure: connections between'the three.(3) :core locations should the primary YVAN hosted. connection become.unavailable for any reason. • -Cisco-Umbrella Server Migration. o Migrate-two (2) and add one (1) 'Cisco Umbrella VM(s) to the new Dell-R36,0 servers: The objective is to introduce additional resiliency and availability by migrating one (1) VM:tofiown Hall,:.one (1) VM to the'Police Department, and adding one (1) VM to.the Annex. •. Decommission and.removal of.the.old,devices and equipment. . o After the new infrastructure is'completed, tested.and approved by the 13." staff all old:,, devices and equipment'will be.decommissioned and must be.physically'removed.,Data *sanitization-must-be performed on.all old equipment ensuring that all.sensitive data-and settings stored are, destroyed beyond.recovery. As-Built Documentation o 'Update the documents provided during the infrastructure,assessment project to 6lP:age match the final,: as=built state of the Town's network. o . The vendor will provide.a backup copy of all`in-scope configuration files at project completion. . Hand-off to Southold hTimediately after.the cutover, provide twelve.(12) hours of support, training, and SouthodsInf6rmion chlogies-staff. Demonstrating.. : .knowledgetransfer to T .diagnostics and troubleshooting techniques.for the newly implemented hardware, systems; and applications. • Pr6vide:one.(1) calendarweekof support-per location afterthe location,cutover is; corrmplete and.the new system,is online: • Create a detailed project runbook that includes, but is not,limited.to, system settings;: configuration', and specifications; as well as' an,overview of all updated and upgraded devices; operating,systems,.software;.'and applications involved with the'entire project. Perform a baekup.of'all of the new and upgraded devices and applications. The . backup files.will be turned over to Southold and'documented as.part of:the project runbook. Performance tuning=Three.(3) months after-the project has been.completed, analyze each frewa.11 and domain controller and optimize, tweak, and fine�tune settings.After this final step is completed to the satisfaction of the Town ofSouthold's Information . . 'Technologies staff, the.project:will beeligible:for project sign off., Gut.of.Scope. It,is the vendor's responsibility, to identify any deficiencies within the current environment that are relevant to the scope:of this project. If such.deficiencies are discovered and cannot be:addressed,: . Within the defined project scope, they must be: .-Clearly documented, . . . • :Categorizedas out=of-scope, Communicated promptly to the Town of Southold.Information Technologies, (IT) staff., These!items-will be jointly reviewed and addressed by theTown's IT staff and the vendor as soon as feasible. . .:'During the implementation phase, any work determined by the vendor to be out of scope must be: • Immediately:reported to the Town of Southold IT'staff,, Documented in writing with: o A clear description.of the issue; o. Justification for why. it-falls,outside,the,project scope,. . o -An itemized estimate.of costs:(labor and materials) required.to resolve the issue'. . .,. ..If-resolving the issue.requires a modification to the existing project scope,the vendor will prepare a formal,written change request. This.document must include: • 'A.detailed description of the-proposed change; Feasibility analysis, . • Impact assessment on timeline, resources, and system functionality, . .: :A,complete cost breakdown.(laborand. materials).,; . 7 1 P.:s.9 e Upon.approval,the change.request will,be.signed by the appropriate.parties, and- the Town of. .Southold will issue a purchase:order.: Upon.receipt.of the purchase order,'the vendor is expected to Act promptly to address the.issue as outlined in the approved change request: Hardware-and,Software. Hardware and: software specifications shall be based -on minimal standards found;: in, Appendix A. Domain Controller'Hardware and Software The project includes.an upgrade to.Southold's Active Directory structure and forest'level; to includ.61hree (3) new domain controllers: Configuration must provide immediate failover redundant and secure connections between the three;(3) core locationsshould the,primary WAN-hosted connection become unavailable for any reason..; • . .The current Active.Directo.ry infrastructure includes.three,(3) domain:controllers running. Windows Server 2012 R2:and a domain and forest functional level running Windows:: Server 20:12 R2.,This project is to upgrade the:domain controllers,the domain and . forest functional level to the latest compatible release of Microsoft Windows.Server, ensuring it aligns with-the Town's existing IT environment.The Hyper-V role must be installed and properly confgured on:each serverto support'virtualization'requirements. fthalty..Claage . Timeliness of Completion The vendor shall.:complete the'full scope'of work outlined in this RFP within;six (6) months:of the contract.start date. For each thirty (30) days or portion thereof that the project extends beyond the six.(6) month .deadline; the_vendor shall.incur:a financial penalty:of-$10,000.00, . 'Which will be deducted from the.,consideration.due to the vendor. Performance Standards The vendor's.work shall meet or exceed all performance standards and technical specifications detailed in the.RFP. If, at.any point during the projector within six.(6) months.of the completion date,.the Information Technologies.Department determines that.the:contract. .. . has failed to meet one,or"inore of the stated performance requirements, the vendor-shall be:: subject to the following penalties: . For each performance deficiency.identified;;a penalty of$5,000;00 shall;be- deducted from the contract price due to the vendor: If the cumulative performance.penalties exceed 10% of:the-.total contract price, the Town. of'Southold has the rightto terminate the contract for cause. . . . . . 8lPage Termination for Convenience. Notwithstanding any.other provision, the.Town of Southold reserves the right.to terminate this contract for convenience at any time upon 30 days written notice. In the event.of such termination for convenience, the Town of Southold shall be responsible for payment of all work completed to date. Still, it shall not be liable for any termination fees or penalties. This penalty clause is designed to incentivize the vendor to complete the project on time and . to thefull performance standards outlined in the RFP. The timeliness and performance penalties.provide financial disincentives, while the termination for.convenience clause protects the Town of Southold's ability to terminate the contract if the municipality deems:it:: necessary. Liquidated Damages The timeliness 'and performance penalty presented above represent liquidated.damages as a. reasonable estimate.of the Town of Southold's actual damages in the event of delay or deficiencies. Reporting.and.Documentation The vendor shall provide regular progress reports and documentation demonstrating. compliance with the RFP to the municipality's satisfaction. This section shall deem.failure . . to provide regular progress reports a performance deficiency as outlined above.: Communication/Questions Vendors are expected to raise any questions or make any additions they have concerning the BID document'as soon as they become aware of them. Any questions or requests for clarificafions. rnust be directed in:writing to Lloyd Reisenberg at . Iloyd.reisenberg(aD_town.southold.ny.us'no later than 9/'18/202 @ 4:00 PM. The subject line of the email must be labeled "BID: Infrastructure Upgrade Project Question." The only contact allowed'.with the Town of Southold I.T. staff is through,email, as stated above. Unauthorized contact of any Town of Southold employee is cause for rejection of the bid. Any additional information or clarifications that are provided to one bidder will be provided to all bidders as an addendum. Calendar of.Events The dates set forth below are for informational purposes only. All dates are tentative-and subject to change. Milestone Date Mgurel MD: 08/14/202 .91P.age eadline for Submission of Vl/ritten INuestionMEW'910 4:00 PM ro osal Due Date: 09/,25/2025 - 200 PM PM Submission of the Response The respondent must submit two sets. Clearly mark the original copy as "ORIGINAL" on the cover: Southold Town Clerk PO Box 1179 53095 Route 25, Southold,.,New:York 1 .1974 All responses must be.packaged and,sealed..The outside of the package should show the, following information,-and a Non-Collusive Bid.Certificate should include.the respondent's name, address, and the request for proposal number and title. Response Requirements: .The Town of Southold will evaluate responses based on.the following criteria: Section 1: Vendor's Financial stability.(10%):. Provide a description of the vendor's firm, including.history,, number of years the vendor has been in business, type.of services provided, and legal status of vendor's organization, i.e., 'corporation; partriership,'etc. Provide documentation that verifies.the vendor has sufficient financial support, assets, and organizational.structure, to,deliver the'products and services requested in the RFP. : . Acceptable documentation may include financial statements, credit ratings, lines of credit; or other financial arrangements that demonstrate the vendor's ability to meet the requirements. outlined in this'RFP'. Section 2:,Vendor's Qualifications.and References (25%) Describe similar projects the vendor has completed in:environments comparable to the Town of Southold. . Provide at least five client references; including the names of.the companies, individuals,: phone numbers;,addresses,'and email addresses that the Town of Southold could'contact.. The Town of Southold reserves the right to contact or visit any party listed as,a reference . .that.has previously used or is presently using the ve.ridor's products and/or services.in a manner similar to those proposed by the vendor. Southold also reserves the right to use other sources to obtain information about the proposed products and services.. 10IP:a9e . . 'Section 3: Proposed:Solution.(40%) . The proposed solution must also'show the following: Provide proof.of extensive experience'with designing and implementing Cisco next generation.ASAs and..Microsoft applications, as,defined in this document. -. A detailed project plan incorporating the project scope, clear objectives; key deliverables;., detailed timelineswith:milestones, assigned responsibilities,'start and completion:dates, and a work breakdown structure to manage project.tasks and-ensure successful completion effectively. . Section 4: Cost Proposal (25%) The vendor's pricing must be all-inclusive to provide the Town of Southold with a turnkey. solution: 11, P:age Appendix A. Equipment List with Part Numbers and Quantities and Support,,Options Equipment,. applications, .software," and labor .must be itemized .in detail individually, in. the . proposal. . . Responses will include �a 24x7x4 "support contract for .each product '(where' offered 'by the " manufacturer) for a thirty-six (36) month term: Part Number Description MY I Network Appliances !-.FMC1700-K9 . .Cisco Secure Firewall Management Center.1700 Chassis i CON-SNTP-FMC1700K SNTC-24X7X4 Cisco Secure Firewall ' 7 1, 36 Months. SFP-10G-SR i 1OGBASE=SR.SFP Module : 2 �'SNS-371'5-K9 Small Secure Network Server.for.ISE Application � .: s .2. . . i CON SNTP-SN3715K9 SNTC-24X7X4 Small Secure Network Server for ISE App 2, 36 Months SFP-H10Q,B7-CU3M=, " 1 OGBASE-CU•SFP+ C6ble.3 Meter. 2. : . .Town Hall CSF1220CX-TD-K9 I•Secure Firewall 1220 Appliance; Compact, Threat Defense ` 2 CON-SNTP=CSFIXTDK SNTC-24VX4 Secure Firewall 1220 Appliance, Compact i • 2, 36:Months CSF120OC-RACK-MNT= I Secure Firewall.1200 Series rackmount kit•for compact 2 models SFP=H10GB-CU1M= 1 1OGBASE-CU SFP+•Cable 1 Meter i 2. i C9500-24Y4C-E Catal sf'9500:24x1/10/25G and 4- ort;40/1'OOG, Essential CON-SNTP-C9.5024EY_ SNTC-24X7X4 Catal st 9500 24- ort 25/1 OOG onl Esse 1 Y P Y, 1, 36 Months 6930048H-E r:Catalyst 9300:48-port UPoE+,.Network.Essentials . CON SNTP C930210L. SNTC-24X7X4 Catalyst 9300 48-por, 7; 36 Months I 'SFP-10G-LRM 10GBASE-LRM SFP Module' 14 I"Annex CSF1220CX-TD4 i Secure Firewall 1220 Appliance, Compact, Threat Defense 2 { . -- CON SNTP-CSF1XTDK. ; SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact . .2, 36 Months CSF120OC-RACK-MNT= i Secure Firewall 1200 Series rackmount kit for compact 2 models SFP H10GB WOW •1OGBASE CU SFP+:Cable 1 Meter II` 2 C C9500-24Y4C E + Catalyst 9500 24xl/10/25G and-4-port.40/100G, Essential . 12iPege:: CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/100G only, Esse 1, 36:Months .C9300-48H-E !-:Catalyst:9300 48=port UPoE#, Network Essentials 3 CON-SNTP-C93021 OL TSNTC-24X7X4 Catalyst 9300 48-por. 3, 36.Months SFP-10G-LRM 10GBASE=LRM;SFP Module ' 6 1._Police Department i CSF1220.CX-TD-K9 'Secure Firewall 1220.Appliance,Compact, Threat Defense iv CON SNTP CSF1XTDK I SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact . 2,36 Months. : . . . . . . CSF1200C-RACK-MNT= Secure Firewall 1200,Series rackmount kit for compact 2 models-- -•- --• -- ---�__-.:�_._. _. .._.-- --- - - - - ! SFP-H10GB-CU1M •1 1OGBASE-CU SFP+ Cable 1 Meter. 2. . . . . . 1•69500-24WC-E 1 Catalyst 9.500'24x1`/1'0/25G.and 47port'40/1000, Essential i SNTP-C9 SNTC-24=4.Catalyst 9500 24-port 25/100G only, Esse iCON- 5024EY !. 1, 36.Months . .C9300-48H-E• Catalyst 9300 48-port UPoE+; Network Essentials m ,..CON-SNTP-C93021OL• . 1 $NTC-24X7X4.Catalyst.9300 48-por 5,_36 Months SFP-10G-LRM= 10GBASE-LRM SFP Module 10 i`:Highw4 Department CSF1210CE TD-K9 !,Secure Firewall 1210,Appliance, Compact, Threat Defense 1 I f CON:SNTP-CSF1'CETD SNTC-24X7X4 Secure Firew8ll1220 Appliance, Compact, 1, 36 Months ! CSF120OC-RACK-MNT= Secure Firewall 1200,Series rackmount kit for compact f 1 models C9300-48H=E ::Catalyst 9300 48-port,UPoE+, Network Essentials . _ :., I CON SNTP-C93021.OL j SNTC-24X7X4 Catalyst 9300 48-por 1, $6 Months . Recreation Center_ _ CSF1210CE-TD-K9: �:�i Secure.Firewall 121.O.Appliance, Compact,.Threat Defense CON-SNTP-CSF1 CETD ! SNTC-24X7X4.Secure Firewall 1220 Appliance, Compact i 1, 36.Months . . . CSF.1200C-RACKMNT= I Secure Firewall 1200 Series rackmount kit for compact . . ' I1 !models �..C930048H-E ; Catalyst 9300 48-port UPoE+, Network Essentials ; 1 i. .. .. - .-. I'4. . j . o-N -8X Catalyst 9300 Series 8x 10G/ wdule;(tC9300 S , I'support hew connection between Rec and Center). 1 __ 1 SFP-10G-LR 10GBASE-LR SFP+module (to support new fiber { 1 connection between'.Rec and.Communi Center). 2 . i CON=SNTP=C93021 OL T SNTC-24X7X4 Catalyst 9300 48-por- 1 &.3 Year Options 1, 36 Months 'i.Waste'Management. i : I .CSF1210CE-TD-K9 F Secure Firewall 1210 Appliance, Compact,'Threat Defense 1 CON-SNTP-CSF10ETD SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 1, 36 Months.:.' • 13IPage':: . ::. CSF1200C=RACK-MNT= I Secure Firewall 1200 Series rackmount kit for compact Models C9300-48H-E" . . j Catalyst 9300.48-port UPoE+, Network Essentials. { CON-SNTP-C930210L ! SNTC-24X7X4 Catalyst 9300 48-por, ;" 11 36 Months , Huinan_Resources Center CSF1210CE-TD-K9 i Secure Firewall 1210 Appliance, Compact, Threat'Defense 1 . ICON-SNTP-CSF10ETD' ; SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 11 36 Months i CSF1200C-RACK-MNT= . Secure Firewall 1200 Series eackmount kit for compact'' j.models 1 . C9300-48H-Ej Catalyst 9300 48-port UPoE+ Network Essentials 1 k E C9300-NM-8X 1 Catalyst 9300:Series 8x 10G/1 G Network Module (to j .support new fiber connection.'between:Rec and HR-Center) SFP=10G-LR' I' 10GBASE-LR SFP+ module(to support new fiber I':connection.between Katinka House:an_d HR Center) ' CON-SNTP=C93021'0L i,SNTC-24X7X4 Catalyst 9300:48-por �� 1, 36 Months Dell PowerEq 'e R360 MFG`Part# . „Description " MY, 21 0-BJTR PowerEdge R360 Served w3 461--AAIG Trusted Platform Module"2.&V3 3 321.-BKHP 2:5" Chassis with up to 8 Hot Plug Hard.Drives, Front PERC 11 3: 338-CMQZ Intel'Xeorr E-2468 2.6G 8C/16T 24M Cache Turbo HT(65W.) DDR'5'. 3 .412=BBHK Heatsink: 3 370=AAIP' Performance Optimized 3 " 370-BCBM 5600MT/s UDIMMs . . . .3 7807BCDI C1,'No RAID for HDDs/SSDs (Mixed Drive.Types Allowed) 3. 405=ABCQ, Front PERC H355 Front Load 3: ' . 75.0-ACFR 384-BBBL Performance BIOS Settings 3. '800-BBDM IJEFI BIOS Boot Mode with GPT Partition 3 387-BBEY, : No.Energy Star. 3 . 384-BDMJ High Performance.Fan. 3 4507AMDH Dual, (1+'1) Redundant, Hot-Plug Power Supply,,600V1/MM (100-240Vac) '3' .: 3.30-BCMK Riser Config.2,'Butterfly'Gen4.Riser(x8/x8) 3 . PowerEdge R360 Motherboard with Motherboard with Broadcom 5720 Dual'Port 329-8JTG 1Gb On-Board LOM, MX 3, 325-BFVN, PowerEdge-R360 filter bezel. 3. 350-BCTP 403-BCRZ, BOSS-N1 controller card-:wifh.2:M.2 960GB (RAID 1). :3 470-8BJL Windows Server Standard 16CORE FI No Med No CAL'Multi Language S. ' 14•I IP,a g e Windows Server Standard,16 CORE, DF Recovery Image, Multi Lang, (Downgrade not included) 3 Windows Server Standard No Media WS2019 Std Downgrade DF Media Multi 3 Language Windows Server Standard,16CORE, Media Kit, Multi Lang;(Downgrade not 3 included) 379-BFXT, Dell Connectivity Client Disabled 3 634-CYDF 528-CTIC iDRAC9 Enterprise 16G . 3 528-COYT Server.Secured:Comp' onent Verification 3. 379-BCRJ iDRAC,Factory'Generated Password, No OMQR '3 658-BFRK iDRAC Service Module(ISM), Pre-Installed in OS 3, 379-BCQY iDRAC Group.Manager Disabled 3 618-BBEC Hyper-V role enabled with pre-installed Standard or.Datacenter Ed OS on incl 3. Virtual HDD 770=13CWN. ReadyRails Sliding Rails with Cable Management Arm (Al2) 3 770-BDMT 631-AACK No Systems Documentation No OpenManage DVD Kit 3 340-DLXS PowerEdge R360 Shipping 3. 340-CWUJ PowerEdge R350/R360 Shipping Material for 2.5"Chassis 3 389-FFNB PowerEdge R36.0 CCC Marking No,BIS or CE Marking. 3 707-6877, 707-6889, 707-6892, 3 Years ProSupport and 4-Hour Onsite Service 3 707-6946, 955-9041, 989-3439 841-5979 Keep your Hard;Drive For Enterprise 3 Years 3 900-6997 On-Site Installation Declined 3. 370-BBZF 32GB UDIMM 5600MT/s ECC 6 400=AXTV. 480.GB SSD.SATA Read Intensive 6Gbps 512 2.5in Hot-plug AG Drive 1 DWPD 3 450-AALV., Power Cord -,C-13 3M 125V'15A(North America Guam;North Marianas 6 Philippines Samoa Vietnam) 15IRage ; Appendix B Enterprise architecture drawings depicting the Town of Southold network topology: Town Hall Optimum. Ring WAN SOUTHOLD5525-TH .y SG300-52 SG300-28 SG300-28 SG300 52 Cisco SG300- Dell EMC 3Com Baseline 10PP' S521 F-ON 2928 SFP Plus ' Netg ear. MS1080P Figure 1::Townhall Topology 16 I.P.a g e:: Town Hall Annex Optimum Ring WAN . . . . . . . SOUTHOLD5525x-ANNE X i . . . �. SG300-20 � . F.� SG500-28 SG500-28 WS-C2960L-48TS-LL Figure 2:Annex Topology Police'Department s . Optimum: Ring WAN SOUTHOLD5525-PD i SG300 28 SG300-28 SG300-28. SG300-28 SG300-28 SG300-10 . Figure,3:Police Topology . . . . • • 17 1 p.a g e: . . Highway Department Optimum SOUTHOLD5508x-HW SG350X-24P F ; SG300-28 Figure 4:Highway Topology Recreation Department Optimum SOUTHOLD5525x-REC. i ♦ y SG102-24 SG11 OD-08 Net gea�M5108UP Figure 5:Recreation Topology 18 age., Solid Waste-Landfill . . . . . . . . . . . . . Optimum • SOUTHOLD5525X-LF SG102-24 Figure 6:Landfill Topology • � 19I,Page : Human'Resource Center= Katinka'House' Optimum . . . . A . : SOUTHOLD5508x HR �" . "�. Netgear MS1080P : ' SG300-28 Figure 7.Senior-Katinka Topology .. Peconic..Community Center, Cable Internet ISP Provided Wireless Router . . 201Page:: �: Figure 8:Community Center Topology WAN Community Center Waste Rec _ I Senior 'il1C AO Internet only ( I — 4 GG66�ilLJJ S2S Highway^ 1 I _ 1 - ---- Z --�:' 52S I � � I I " ti ty I I ti fi i. Fi Fi I I Ta I fire F� dFMC I I ► ti I I t Annex • ISE-PIC t► Fi Figure 9:WAN Topology 21 STATEMENT OF NON-COLLUSION (To be completed by each Bidder). In accordance with Section 103-d General.Municipal.Law, effective September '1, 1966, every bid or proposal hereafter made to a political subdivision of the State of any public,department, agency, or official thereof or to a fore district or, any agency or official thereof for work or services performed or to be performed;or goods sold or to be'sold, shall contain the following statement subscribed.to by'the bidder and , ' affirmed by such bidder as true under the penalties of perjury;:non-collusive bidding certification. A.. By subriiission of this bid, each bidder and each person signing on behalf of any bidder certifies, and in the.case of a joint.bid; each party thereto certifies as to its own organization, under penalty of perjury,that to the best of knowledge and belief: (1) The prices in this bid have been arrived at. independently without .collusion; consultation,, communication, or. agreement, for the purpose of.restricting competition, as to any matter relating to such prices with any other bidder or any competitor. (2) Unless otherwise required.by law, the prices. which have been quoted in this bid have not been knowingly disclosed by the bidder and will not knowingly be,disclosed by the bidder prior to opening, directly or indirectly,to any other bidder or to any competitor. ;(3) No attempt -has been:made or will be made .by the bidder to induce any other person, partnership; or corporation to submit or not to submit a bid for the ,purpose of restricting competition: B.: : The person signing this bid or proposal certifies that he has,fully informed himself regarding the, accuracy of the'statements contained in this certification, and under the statements contained in this certification, and under the.penalties of perjury, affirms the .truth thereof, such penalties being - applicable to the bidder, as well as the person signing in its behalf. C. That attached hereto (if a corporate bidder) is a certified copy of resolution authorizing.the execution . of this certificate by the signature of this'bid or proposal on behalf of the corporate bidder. RESOLUTION. Resolved that Justin.Schwier.-Manager,Proposals of the . (Name of signatory) CDW Government LLC Be authorized,to sign and submit the.bid, ... .(Name of Corporation) Or proposal of this corporation for the following Project: Infrastructure Upgrade Project and to include'in,such bid or proposal the certificate as to non-collusion required by section one-hundred-three- d (1'03-d) of the General Municipal Law as the act and deed of such corporation, and for any inaccuracies or miss-statements in such certificate this corporate bidder shall be liable under the penalties of perjury. -The,foregoing is true and 'correct copy of the resolution adopted by CDW Government LLC corporation ' . , . of .20 Please see attached letter of signing authority (SEAL OF THE CORPORATION) +;`' �? Laws of New York;.1965 =o,- SEAL F. Ch. 751,.Sec. 103-d as amended.& _ ILLINOIS _ effective on September 1, 1965. 2009 Signa re Appointment of Authorized Representative with.Limited Signing Authority. . In accordance with the authority .,.delegated to the undersigned, Robert F,.Kirby, SVP,Public Sales 'of `CDW GovernmentLLC • (the' .`Companies"),, the, undersigned.,hereby .delegates t .Justin 'Schwier (`.`Authorized . Representative") holding the..title, Manager, Proposals ("Authorized Title"),:of Company or its affiliate; the authority solelg to review and execute certain.Contract,documents,subject to certain limitations, as set forth; in the table below ("Restricted Authority") Contract Types: Agreements and purchase orders related to marketing- select type of agreement. ' Nondisclosure and other forms of confidentiality agreements and non-binding letters one or more'ma- a .l ( ' y pp y)' of intentin connection with.potential M&A o ortunities: Non-disclosure and other forms of confidentiality agreements with customers and partners. :. Agreements with customers to provide IT products and professional services(to the :extent such services are authorized-by the undersigned);and all such accompanying: forms(attestations and disclosures)that are generally required to form a complete contract including memorandums of understanding,and subcontracts with partners. ' on the Agreements described ab ove,but excluding:software beta test and early adoptee agreements,.and any agreements out ofahe ordinary course of Company's. . business: . X Bids&Proposals to provide IT products and professional services, (to the extent such services are authorized by the undersigned),and all such accompanying forms (attestations and disclosures)that are generally required,to form a complete offer for contract.package,butexcluding software beta test and'early adoptee offers,and any offer out,of the ordinary course of Company's business. SOWs and Change Orders with customers to provide IT professional services'(to the extent such services are authorized by the undersigned);but excluding:software beta. test and earlyadoptee contracts,and any contracts out:o f the ordinary course of. Company's business. Agreements with partners to purchase IT products and professional services(to'the extent such services are.authorized by the undersigned),but excluding-software-beta.. . :test and early adoptee agreements;:and any agreements out of the ordinary;course of . Company's business. Agreements,including but not limited to,Participation Agreements and Teaming' Agreements with PartnersNendors to provide IT products and professional services: to customers(to-the extent,such services are authorized by the undersigned),but excluding agreements for software beta.test,and early adoptee agreements;•and any '. agreements out of the ordinary course of Company's business' SOWs with.partners/vendors to.provide IT professional services to customers(to the extent such services are authorized.by the undersigned),but excluding agreements for software beta test and early adoptee agreements,and any agreements out of the ordinary course of Company's business. Check other: r.Click to fill in description] Territorial Limit U.S.Only Not to Exceed Dollar : Up,to$$5,000,000 (This is total value,not annual value;of a contract.) Value Limit Not to Exceed Contract Up to three(3):year(s) Duration for.Services. Required Approvals Compliance with Company Legal Departmentmandated contract process. and Other Conditions Compliame'with Company policies. • Capital expenditures approval,if applicable:: General Counsel review,if Contract is with any,principal stockholder;director or.officer (or immediate.family member)of a CDW company.. • Treasurer review of any grant of a.security interest or lien. • Legal approval of any contract with a foreign entity. Delegation in the Agilofttool as backup for you while out must only be provided to an individual'coworker•with the same-title and'level of signing authority as you,bryour manager. . [Signature Page Follows] Version 2023-12-08 Authorized Representative shall use.the following signature block, or one.that indicates in a substantially similar,manner . that the Authorized Representative:is�authorized when executing'Contracts on behalf of Company: CDW Government.LLC By: its Authorized.Representative This appointment.is effective on the date specified below and shall remain in effect until the earliest of:.(a) the date, . . December 31, 2026,.when this.Restricted Authority expires; (b) the.date when the Authorized Representative no:longer holds the Authorized Title; or'(c) the date When the Restricted.Authority:is terminated by:the undersigned: Authorized Representative may not assign or delegate the Restricted Authority to any other.person. Effective Date:January 1;2024 j G � Robert F.Kirby.SVP,'Public.Sales CDW Government LLC Received and Approved by Cor porate-Paralegal: JaneUNeI n(Decz,zozai3sacsT) Janell Nelsen. Received and Approved by,the:Corporate'Secretary's.Offce: HuaryMafine( 2e,202330:57.CST) Hilary Malin : . . . Version 2023-12-08 Town of Southold, Town of Southold —Infrastructure, Upgrade Project RFP - Cap Op ,150.403. ©CDW Government LLC 2025.1.230 N. Milwaukee Ave. I Vernon Bills,IL 60061 To the extent allowable,all information and documents hereby submitted in response to the Request for Proposal. ("RFP")furnished by Town of Southold are the Proprietary and Confidential property of CDw Government LLC. The*uffalk Timm SUFFOLK COUNTY AFFIDAVIT OF PUBLICATION ;ADVERTISEMENTFOR,BID :-OWN-OE_S0 WHO LID: LEGAL NOTICE, The Suffolk Times RECLJ.ES_LF_OR'PROP,C SAL PO Box 1500, Mattituck, NY 11952 (518)730-4551 NOTICE IS HEREBY GIVEN.that sealed proposals are sought and. requested for the following: State of New Jersey, County of Camden, ss: Information Technoloaies . infrastrUctUre U,pgrsde" The'Town of Southold invites I, Jesse Sassaman, of lawful age, being duly sworn upon oath competitive sealed bids from, depose and say that I am an agent of Column Software, PBC, qualified professional;flmis,for the upgrade of its:netWbrk and duly appointed and authorized agent of the Publisher of The securltyinfrastructure.to the next, Suffolk Times, a Weekly newspaper of general circulation, generation disco's and-Microsoft's, printed and published in Mattituck, Suffolk County, New York, technologies. designated by the County Clerk of Suffolk County as a This;comprehensiye turn.(sey. newspaper of record;that the publication, a co of which is technology project,aims to p � copy modernize'and:.enhance'the, attached hereto,was published in the said newspaper on the perf4rnance,6f the Town.of- following dates. tlieaechiidlogy infrastructure; Which supports critical nnunicipal. operations;.improves service, Publication Dates: delivery;and ensures a secure • Aug 14, 2025 resilient scalable technology environment. Notice ID: OTAVRbmYmEJBM8sfRJ7i The.selected yendorwili work, Notice Name: IT Infrastructure Upgrade uviti,�_$outhoid's liformation Technologies staff and be Publication Fee: $85.77 responsible'for;the design,, procurement deployment, installation configuration,festlng; Jesse 6'arramah and documentation of'all hardware; operating S,y'terns,software,and application upgrades. Agent SHARONN E THOMAS-POPE NOTARY PUBLIC This-government`project,funded STATE OF NEW JERSEY by the Town of Southold,must VERIFICATION My Commission Expires January 23,202 comply,with all.applicahle local, state;and federahregulations, State Of New Jersey governing public se ctor,irifomiation technology projects.Vendor bids County of Camden must'also adherelb all terms and conditions described in this Signed or attested before me on this:08/14/2025 document. Definite'specifications'may be. J a obtained at the Southold Town, Clerk's Office beginning August 14, Notary Public 2025: PLA_CErQjOPEN(NQS Notarized remotely online using communication technology via Proof. Southold Town'Clerk's Office 53095 Main Road Southold,NY 111971- DATE&TIME OF OPENING: Sep%rnber.25,.2025.at 2:00 PM CONTACT PERSON: Lloyd Reisenberg ; Town of Southold,631-765-1891 VENDORS MUST SUBMIT BIDS 1N. SEALED ENVELOPES. PLEASE PRINT ON THE FACE'OF ENVELOPE: 1)NAME&ADDRESS OF BIDDER 2)BID.NAME It`is'the;bidder's'resp'onsibiiity to,read the RF,P Specifications,. and General Conditions,which outline RF.P rules of the Town IT Infrastructure Upgrade I Page 1 of 2 V Southold:Upon submission of RFP,it is understood that the bidderhas read,lully understands and.will comply with said General Conditions and-specification requirements. Questions may bd sent,to Lloyd: reisenberg@town.south old ny.us' before,Sedtember 18,2025 at 4:00 p>r• . The Town of Southold welcomes and`encdurages minority and women-owned businesses to participate in the bidding process: Dated:August5,2025 Denis Noncarrow,Town Clerk IT Infrastructure Upgrade Page 2 of 2 The'*UffO1h Timm Invoice Times Review Media Group Invoice number UQG6HQOZ-0004 PO Box 1500 Notice ID OTAVRbmYmEJBM8sfRJ7i Mattituck,NY 11952 Publisher The Suffolk Times Ibazata@times review.com Date of issue Aug 11,2025 (631)354-8021 Date due Sep 11,2025 Bill to Amount due $85.77 Southold Town Clerk Description Qty Unit price Amount 08/14/2025:Public Notice-With 1 60.77 60.77 Affidavit Notice Affidavit Fee 1 25.00 25.00 __= Notes=_= Net Subtotal $85.77 Notice Name:IT Infrastructure Upgrade __= How to pay this invoice=_= Tax 0.00 Column Software PBC accepts online payment via credit or debit card,or ACH bank transfers.Please click here to pay online: https://www.co Iumn.us/i nvo ices/RJXiga iZPAHS Ptk5AvZE/per Amount due $85.77 Please note that,once paid,the merchant name on your billing statements will be Column Software PBC. Select organizations may also payvia check.Checkswill result in processing delays and should not be used if your notice requires upfront payment.Please pay the exact amount due,write your invoice number UQG6HQOZ-0004 on the memo,include a printed copy of your Invoice PDF,make the check payable to Times Review Media Group,and mail to the address above. Pay here: https://www.column.us/invoices/RJXigaiZPAH5Ptk5AvZE/pay Questions? Contact us at IbazataCa)timesreview.com or(631) 354-8021 UQG6HQOZ 0004 - Page 1 of 1 Rudder, Lynda . From: Column Support <support@column.us> Sent: Monday, August 11, 2025 10:09 AM To: Rudder, Lynda Subject: [SPAM] - Notice Order Confirmed Attachments: notice_OTAVRbmYmEJBM8sfRJ7i_proof.pdf C -Au Hi Lynda, The Suffolk Times just confirmed that they have received your notice order.Your order is being reviewed. Notice Name: IT Infrastructure Upgrade Notice ID:OTAVRbmYmEJBM8sfRJ7i Receipt Confirmed:Aug. 11, 2025 Publication Dates:08/14/25 You will receive updates if the publisher makes any changes to your notice before publication, including,the finalized cost on an updated proof and invoice. v f. Supported by Column If you'd like to unsubscribe from any emails from Column,you can do so in your user settings. ATTENTION: This email came from an external source. Do not open attachments or click on links from unknown senders or unexpected emails. 1 �fje�uffor�.�irrYe�. INTERIM AD DRAFT This is the proof of your ad scheduled to run in The Suffolk Times on the dates indicated below. If changes are needed, please contact us prior to deadline at (518) 730-4551. Notice ID: OTAVRbmYmEJBM8sfRJ7i I Proof Updated: Aug.11,2025 at 10:05am EDT Notice Name: IT Infrastructure Upgrade See Proof on Next Page This is not an invoice. Below is an estimated price,and it is subject to change.You will receive an invoice with the final price upon invoice creation by the publisher. FILER FILING FOR Lynda Rudder The Suffolk Times lnda.rudder@town.southold.ny.us Columns-Wide: 1 Ad Class: Legals 08/14/2025: Public Notice-With 60.77 Affidavit Affidavit Fee 25.00 Subtotal $85.77 Tax% 0 Processing Fee $0.00 Total $85.77 IT Infrastructure Upgrade - Page 1 of 2 SUFFOLK COUNTY Southold.Upon submission of ADVERTISEMENT FOR RFP,it is understood that the bidder has read,fully understands T_O_WN QF_SOUTH.0LR. and will comply with said General LEGAL NOTICE Conditions and specification BtsQl1_ESI FO_B�CI PO5AL, requirements. NOTICE IS HEREBY GIVEN that Questions may be sent to Lloyd. sealed proposais.are sought and' reisenberg5town.scuthold.ny.us' requested for the following: before September 18,2025 at 4:00 "Information Technologies pm, lnfrastructure._Upgr_ade" The Town of Southold welcomes The Town of Southold invites and encourages minority and competitive sealed bids from women-owned businesses to _qualified professional firms for participate in the bidding process. the upgrade of Its network and security infrastructure to the next Dated,August 5,2025 generation Cisco's and Microsoft's Denis Noncarrow,Town Clerk technologies. This,comprehensive turnkey technology project aims to' - modernize and enhance the performance of the Town of the technology infrastructure,, which supports critical municipal .operations,improves service delivery,and ensures a secure resilient scalable technology environment. The selected.vendor will work with Southold's lnformatiorn Technologies staff and be responsible for the design, procurement,deployment, installation,configuration,testing, and documentation of all hardware, operating systems,software,and application upgrades. This government project,funded by the Town of Southold,must comply with all applicable local, state,and federal regulations governing public sector information technology projects.Vendor bids must also adhere to all terms and conditions described in this document Definite specifications may be obtained at the Southold Town Clerk's Office beginning August 14, 2025. PL AQE_OF QPENINQS; Southold Town Clerk's Office 53095 Main Road Southold,NY 11971 DATE&TIME OF OPENING: September'25,2025 at 2:00 PM CONTACT PERSON: Lloyd Reisenberg Town of Southold,631-765-1891 VENDORS MUST SUBMIT BIDS IN.. SEALED ENVELOPES. ,PLEASE PRINT ON THE FACE OF ENVELOPE: 1)NAME&ADDRESS OF BIDDER 2)BID NAME It is the bidder's responsibility to read the RFP Specifications, and General Conditions,which outline RFP rules of the Town IT Infrastructure Upgrade - Page 2 of 2 -TOWn c�Py TOWN OF SOUTHOLD REQUEST FOR PROPOSALS INFORMATION TECHNOLOGIES INFRASTRUCTURE UPGRADE PROJECT AUGUST 2025 REVISION REQUEST FOR BIDS: Information Technologies Infrastructure Upgrade The Town of Southold is soliciting competitive sealed bids from qualified and experienced professional firms for the upgrade of its network and security infrastructure, incorporating next- generation Cisco and Microsoft technologies. This comprehensive turnkey technology project aims to modernize and enhance the performance of the Town of the technology infrastructure, which supports critical municipal operations, improves service delivery, and ensures a secure resilient scalable technology environment. The selected vendor will collaborate with Southold's Information Technologies staff and be responsible for the design, procurement, deployment, installation, configuration, testing, and documentation of all hardware, operating systems, software, licenses and application upgrades. This government-funded project, sponsored by the Town of Southold, must comply with all applicable local, state, and federal regulations governing public sector information technology initiatives. All vendor bids must adhere to the terms, conditions, and requirements outlined in this solicitation document. Project Scope Overview: IT Infrastructure and Security Upgrades 1. Firewall Infrastructure Modernization o Replace end-of-life Cisco ASA devices at seven (7) locations with next-generation Cisco firewalls. 2. WAN Infrastructure Upgrade o Upgrade WAN connectivity, including bandwidth and security enhancements, to meet Southold's current and future operational demands. 3. Cisco Firepower Platform Upgrade o Upgrade Cisco Firepower Threat Defense (FTD) servers and Management Center Systems (MCS) for improved threat detection and centralized management. o Integrate Firepower MCS with the existing Cisco AMP (Advanced Malware Protection) solution for enhanced endpoint protection. 4. Cisco Identity Services Engine (ISE) Enhancements o Upgrade Cisco ISE-PIC Server and ISE Passive Identity Connector application to the latest supported versions. 5. Active Directory and Domain Controller Modernization o Replace end-of-life domain controllers at three (3) locations. o Upgrade Microsoft Active Directory, including raising the forest and domain functional levels. 6. Email and Security Systems Integration o Integrate two (2) existing Microsoft Exchange Servers and two (2) GFI MailEssentials Servers into the upgraded Active Directory structure. 7. Virtual Infrastructure Integration o Incorporate existing VxRail clusters and VMware vSphere systems into the new Active Directory architecture to streamline authentication and access management. 2 1 P a g e 8. Connectivity Redundancy o Implement core location connectivity redundancy to ensure high availability and business continuity. 9. Cisco Umbrella Server Migration o Migrate existing Cisco Umbrella servers to the infrastructure. 10. Fiber Optic Connectivity o Install new fiber optic cabling enhancing speed and reliability. Applicants must submit written bids to the Southold Town Clerk's office at Southold Town Hall, PO Box 1179, 53095 Main Road, Southold, New York 11971, by 200 P'M on 09/25/2025. Bid proposals must be in sealed envelopes and labeled "Infrastructure Upgrade Project." Please copies of your proposal ensuring the original copy is marked as "ORIGINAL" on the cover. Request for Bid Overview, Project Name: Infrastructure Upgrade Project Bid Issue Date 08/1;4/2025 Bid Due Date m n_ 09/25/2025 @ 2. p mw Vendor Requirements • Certified Microsoft Gold Partner. • Certified Microsoft Solutions Expert (MCSE) • Certified Cisco Meraki Solutions Specialist • Cisco CCNP Security Certification • Cisco CCIE Security Certification • The vendor must have performed similar Cisco and Microsoft upgrades • The vendor must provide at least five (5) references of similar scope. • The vendor must provide all the necessary hardware, software, and services for a turnkey solution. Locations 1. Town Hall, 53095 Main Rd., Southold, NY. (Core location) 2. Town Hall Annex, 54375 Main Rd., Southold, NY (Core location) 3. Police Department, 41405 Route 25, Peconic, NY (Core location) 4. Highway Department, 275 Peconic Lane, Peconic, NY (Remote site) 5. Recreation Center, 970 Peconic Lane, Peconic NY (Remote site) 6. Peconic Community Center, 1170 Peconic Lane Peconic, NY (Remote site) 7. Solid Waste Department, 6155 Cox Lane, Cutchogue, NY (Remote site) 8. Human Resources Center, 750 Pacific St., Mattituck, NY (Remote site) 9. Katinka House, 750 Pacific St., Mattituck, NY (Remote site) Scope of Services • The selected vendor shall provide alternatives and solutions pertinent to upgrading the Town's network security infrastructure. These proposed solutions must adhere to industry standards and best practices. 3 1 P a g e • Project pricing to include: o Implementation services. o It is the vendors responsibility to include all proposed equipment, cables and connections, operating systems, licenses, certificates, software, and applications for this project. NOTE: Any and all new licenses and certifications must in the Town of Southold's name. o - Maintenance and support must be included for 24/7/4 and 24/7/NBD for distribution and access layer equipment for a duration of three (3) years. o Any equipment and/or services classified as other or additional items. • Work with the Information Technologies staff and Southold's ISP to upgrade/increase the WAN connectivity's bandwidth to support Southold's current and future technology initiatives. • Evaluate the existing network infrastructure, make recommendations for improvements and incorporate these recommendations into a more secure and robust infrastructure. • Review, re-design, upgrade, and replace the following: o All seven (7) ASA firewalls, Firepower services, and their configurations. o The operation of the Firepower Management Center (FMC) and the FireSight Management Center. o The ISE-PIC deployment. o The hardware and configurations of the Town's three (3) domain controllers. o Recommendations for the design, performance, and redundancy of Active Directories, DHCP, DNS, and Group Policy are paramount. o Microsoft Active Directories, including the forest functional level. Making sure that the updated systems adhere to industry standards and best practices. o All Town applications, systems, and interfaces using Active Directories must be tested for compatibility and proven to perform efficiently. o Review the configurations of the network's managed switches and implement any necessary modifications to support the upgraded infrastructure. Particular attention must be given to ensuring optimal connectivity and integration with the Town's VxRail hyperconverged infrastructure. o Evaluate and update Microsoft Active Directory configuration for Microsoft Exchange and the VxRail cluster and vSphere systems. o Evaluate and update third-party directory services integrations via LDAP and Kerberos. o Examine each location's LAN/WAN connectivity and provide recommendations for improvement. • Install fiberoptics connectivity between the Recreation Center and the Peconic Community Center. The firewall upgrade at the Recreation Center should be designed to include the Community Center. (NOTE: This must be quoted as a separate item on the bid) • Install fiberoptics connectivity between the Human Resource Center and the Katinka House. The firewall upgrade at the Human Resource Center should also include-the Katinka House. (NOTE: This must be quoted as a separate item on the bid) • Provide detailed project implementation timeline and test plans. • Provide advanced-level training and knowledge transfer to the Town's Information Technologies staff. • Provide a detailed runbook that includes documentation of the updated hardware, software, applications, and systems upgrades and changes'to the existing configurations. This document must also contain recommended maintenance and schedules, which should be documented and illustrated. 4 1 P a g e Vendors should strongly consider trade-in allowances for the old equipment, which should be listed separately on the bid. Infrastructure Replacement and Deployment Plan The selected vendor will replace critical components of the Town's network infrastructure to ensure a stable, secure, and supportable environment for years to come. The vendor's engineering team will be responsible for developing a detailed replacement plan for each site, coordinating installations during approved maintenance windows to minimize disruption to Town operations. • Install a new, highly available pair of Secure Network Services (SNS) appliances to host the Town's Cisco Identity Services Engine (ISE). • Deploy a new Firepower Management Center (FMC) appliance to centrally manage the Town's Cisco Firepower Threat Defense (FTD) firewalls. • Replace and deploy firewall systems, including: o Three (3) high-availability redundant firewall pairs (HA pairs). o Four (4) standalone firewall units. • Install seven (7) building distribution switches. Each phase of the implementation will include structured testing and validation to confirm successful deployment and ensure operational continuity before proceeding to the next step. • Configure vSphere Infrastructure to use the updated Active Directory authentication o Configure the Town's vSphere environment to use Active Directory for authentication. • Deploy FMC 1700 appliances and migrate. o Deploy one FMC 1700 appliance in the Town's data center. o Upgrade the appliance's software to support the new and existing FTD firewalls. o If there is no software version available that supports all of the FTD firewalls, upgrade the FMC to the latest, Cisco-recommended software version. o Connect FTD firewalls to the new FMC appliance and test. • Deploy SNS 3715 Pair and migrate ISE Services. o Deploy a pair of SNS 3715 appliances to provide highly-available ISE services. o Upgrade the SNS to the latest Cisco-recommended software version. • o Reconfigure network devices to use the new SNS appliances for ISE services. • Rack and Configure three Dell Servers to be used to host the domain controllers. o Rack and cable Dell R360 servers. One to be located in the Town Hall, Police Department, and Annex. o New server installation: ■ Set up and configure each server with the latest compatible release of Microsoft Windows Server, ensuring it aligns with the Town's existing IT environment. The Hyper-V role must be installed and properly configured on each server to support virtualization requirements. ■ Build a new Windows Server Hyper-V VM and configure it as a domain controller per location. These domain controllers must be setup for redundancy to ensure high availability fault tolerance. 5 1 P a g e ■ Deploy a Cisco Umbrella virtual appliance and update the DHCP scopes to use the appliances as the DNS resolvers. • Deploy Three Cisco Secure Firewall HA Pairs o Deploy three (3) highly available pairs of Cisco Secure Firewalls (FTD) at the Town Hall, Annex, and Police Department. Firewall redundancy and failover capability must be treated as a high priority to ensure continuous network security and availability. o Upgrade each firewall pair to the latest, Cisco-recommended software version. o Connect each firewall pair to the new FMC appliance for management. o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall pairs during a maintenance window. • Deploy Four (4) Standalone Cisco Secure Firewalls o Deploy four standalone Cisco Secure Firewalls (FTD) at the Highway Department, Recreation Center, Waste Management, and Human Resources Center. o Upgrade each firewall to the latest, Cisco-recommended software version. o Connect each firewall to the new FMC appliance for management. o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall during a maintenance window. • Deploy Seven Distribution Switches o Deploy seven (7) Catalyst 9300/9500 distribution switches, one per Town site. o Upgrade each switch to the latest, Cisco-recommended software version. o Port the existing network configuration to the new switches, making only the changes required to support the latest hardware. - o Cutover and test during a maintenance window. • Core Location Connectivity Redundancy o Implement redundant connectivity between.the three (3) core locations using cellular connectivity. This project intends to provide immediate failover redundant and secure connections between the three (3) core locations should the primary WAN-hosted connection become unavailable for any reason. • Cisco Umbrella Server Migration o Migrate two (2) and add one (1) Cisco Umbrella VM(s) to the new Dell R360 servers. The objective is to introduce additional resiliency and availability by migrating one (1) VM to Town Hall, one (1) VM to the Police Department, and adding one (1) VM to the Annex. • Decommission and removal of the old devices and equipment. o After the new infrastructure is completed, tested and approved by the I.T. staff all old devices and equipment will be decommissioned and must be physically removed. Data sanitization must be performed on all old equipment ensuring that all sensitive data and settings stored are destroyed beyond recovery. • As-Built Documentation o Update the documents provided during the infrastructure assessment project to 6 1 P a g e match the final, as-built state of the Town's network. o The vendor will provide a backup copy of all in-scope configuration files at project completion. Hand-off to Southold • Immediately after the cutover, provide twelve (12) hours of support, training, and knowledge transfer to Southold's Information Technologies staff. Demonstrating diagnostics and troubleshooting techniques for the newly implemented hardware, systems, and applications. • Provide one (1) calendar week of support per location after the location cutover is complete and the new system is online. • Create a detailed project runbook that includes, but is not limited to, system settings, configuration, and specifications, as well as an overview of all updated and upgraded devices, operating systems, software, and applications involved with the entire project. • Perform a backup of all of the new and upgraded devices and applications. The backup files will be turned over to Southold and documented as part of the project runbook. • Performance tuning—Three (3) months after the project has been completed, analyze each firewall and domain controller and optimize, tweak, and fine tune settings. After this final step is completed to the satisfaction of the Town of Southold's Information Technologies staff, the project will be eligible for project sign-off. Out of Scope It is the vendor's responsibility to identify any deficiencies within the current environment that are relevant to the scope of this project. If such deficiencies are discovered and cannot be-addressed within the defined project scope, they must be: • Clearly documented, • Categorized as out-of-scope, • Communicated promptly to the Town of Southold Information Technologies (IT) staff. These items will be jointly reviewed and addressed by the Town's IT staff and the vendor as soon as feasible. During the implementation phase, any work determined by the vendor to be out of scope must be: • Immediately reported to the Town of Southold IT staff, • Documented in writing with: o A clear description of the issue, o Justification for why it falls outside the project scope, o An itemized estimate of costs (labor and materials) required to resolve the issue. If resolving the issue requires a modification to the existing project scope, the vendor will prepare a formal written change request. This document must include: • A detailed description of the proposed change, • Feasibility analysis, • Impact assessment on timeline, resources, and system functionality, • A complete cost breakdown (labor and materials). 7 Page Upon approval, the change request will be signed by the appropriate parties, and the Town of Southold will issue a purchase order. Upon receipt of the purchase order, the vendor is expected to act promptly to address the issue as outlined in the approved change request. Hardware and Software Hardware and software specifications shall be based on minimal standards found in Appendix A. Domain Controller Hardware and Software The project includes an upgrade to Southold's Active Directory structure and forest level, to include three (3) new domain controllers. Configuration must provide immediate failover redundant and secure connections between the three (3) core locations should the primary WAN-hosted connection become unavailable for any reason. • The current Active Directory infrastructure includes three (3) domain controllers running Windows Server 2012 R2 and a domain and forest functional level running Windows Server 2012 R2. This project is to upgrade the domain controllers, the domain and forest functional level to the latest compatible release of Microsoft Windows Server, ensuring it aligns with the Town's existing IT environment. The Hyper-V role must be installed and properly configured on each server to support virtualization requirements. Penalty Clause Timeliness of Completion The vendor shall complete the full scope of work outlined in this RFP within six (6) months of the contract start date. For each thirty (30) days or portion thereof that the project extends beyond the six (6) month deadline, the vendor shall incur a financial penalty of$10,000.00, which will be deducted from the consideration due to the vendor. Performance Standards The vendor's work shall meet or exceed all performance standards and technical specifications detailed in the RFP. If, at any point during the project or within six (6) months of the completion date, the Information Technologies Department determines that the contract has failed to meet one or more of the stated performance requirements, the vendor shall be subject to the following penalties: • For each performance deficiency identified, a penalty of$5,000.00 shall be deducted from the contract price due to the vendor. If the cumulative performance penalties exceed 10% of the total contract price, the Town of Southold has the right to terminate the contract for cause. 8 1 P a g e Termination for Convenience Notwithstanding any other provision, the Town of Southold reserves the right to terminate this contract for convenience at any time upon 30 days written notice. In the event of such termination for convenience, the Town of Southold shall be responsible for payment of all work completed to date. Still, it shall not be liable for any termination fees or penalties. This penalty clause is designed to incentivize the vendor to complete the project on time and to the full performance standards outlined in the RFP. The timeliness and performance penalties provide financial disincentives, while the termination for convenience clause protects the Town of Southold's ability to terminate the contract if the municipality deems it necessary. Liquidated Damages The timeliness and performance penalty presented above represent liquidated damages as a reasonable estimate of the Town of Southold's actual damages in the event of delay or deficiencies. Reporting and Documentation The vendor shall provide regular progress reports and documentation demonstrating compliance with the RFP to the municipality's satisfaction. This section shall deem failure to provide regular progress reports a performance deficiency as outlined above. Communication/Questions Vendors are expected to raise any questions or make any additions they have concerning the BID document as soon as they become aware of them. Any questions or requests for clarifications must be directed in writing to Lloyd Reisenberg at Iloyd.reisenbergpa town.southold.ny.us no later than 09/18/2025'@ 4:00 PM..The subject line of the email must be labeled "BID: Infrastructure Upgrade Project- Question." The only contact allowed with the Town of Southold I.T. staff is through email, as stated above. Unauthorized contact of any Town of Southold employee is cause for rejection of the bid. Any additional information or clarifications that are provided to one bidder will be provided to all bidders as an addendum. Calendar of Events The dates set forth below are for informational purposes only. All dates are tentative and subject to change. Milestone Date Issue BID _..` � 08114/2025 9 Page Deadline for,:Submission of Written Questions D9/18/2025 @.400 PM- Proposal Due Date _ .. .._ .._ . _.. _ ,,;.. 09/25/2025 @ 2 00 PM PM Submission of the Response The respondent must submit two sets. Clearly mark the original copy as "ORIGINAL" on the cover: Southold Town Clerk PO Box 1179 53095 Route 25, Southold, New York 1 1 9 71 All responses must be packaged and sealed. The outside of the package should show the following information, and a Non-Collusive Bid Certificate should include the respondent's name, address, and the request for proposal number and title. Response Requirements: The Town of Southold will evaluate responses based on the following criteria: Section 1: Vendor's Financial Stability (10%): Provide a description of the vendor's firm; including history, number of years the vendor has been in business, type of services provided, and legal status of vendor's organization, i.e., corporation, partnership, etc. Provide documentation that verifies the vendor has sufficient financial support, assets, and organizational structure to deliver the products and services requested in the RFP. Acceptable documentation may include financial statements, credit ratings, lines of credit, or other financial arrangements that demonstrate the vendor's ability to meet the requirements outlined in this RFP. Section 2: Vendor's Qualifications and References (25%) Describe similar projects the vendor has completed in environments comparable to the Town of Southold. Provide at least five client references, including the names of the companies, individuals, phone numbers, addresses, and email addresses that the Town of Southold could contact. The Town of Southold reserves the right to contact or visit any party listed as a reference that has previously used or is presently using the vendor's products and/or services in a manner similar to those proposed by the vendor. Southold also reserves the right to use other sources to obtain information about the proposed products and services. 101Page Section 3: Proposed Solution (40%) The proposed solution must also show the following: • Provide proof of extensive experience with designing and implementing Cisco next- generation ASAs and Microsoft applications, as defined in this document. • A detailed project plan incorporating the project scope, clear objectives, key deliverables, detailed timelines with milestones, assigned responsibilities, start and completion dates, and a work breakdown structure to manage project tasks and ensure successful completion effectively. Section 4: Cost Proposal (25%) The vendor's pricing must be all-inclusive to provide the Town of Southold with a turnkey solution. 111Page Appendix A Equipment List with Part Numbers and Quantities and Support Options Equipment, applications, software, and labor must be itemized in detail individually in the proposal. Responses will include a 24x7x4 support contract for each product (where offered by the manufacturer) for a thirty-six (36) month term. PattNumber �� ti ' DesCript10" - c...�,._...xo..,.......,......�.-.aew..-.......w.....w..........,m4a�Y......-..m..wrw..,'.,;4.,e,...w..........a....awm�..o...sw.2,,:9.efvoa..�."i..mw-�+u$�tvi�:....:....u.+..... "�wnLw «'w.wel°'�'wa �.es.e.-aS -.m...+,......a... ......... .... .- ., e t yn; FMC1700-K9 Cisco Secure Firewall Management Center 1700 Chassis _ 1 CON-SNTP-FMC1700K SNTC-24X7X4 Cisco Secure Firewall 1, 36 Months SFP-10G-SR= 10GBASE-SR SFP Module 2 ........_._..._..............._........_...._.__...........................................-............................................................_.._..........................._......................._._.................._...................._..............................__....--.-..............................................._...............-......... ..................................__..__........_...._.._........._........ ......._... SNS-3715-K9 Small Secure Network Server for ISE Applications 2 CON-SNTP-SN3715K9 SNTC-24X7X4 Small Secure Network Server for ISE App 2, 36 Months ...._......._._..._......_..------.........---._........_..._.............._.....----....._..........._..............._.._.......................__..._..._.........._................................_.._._._.......---..._.............-..................................._.._............._.............._.........._.............._..................._..........;........._..................----..................._........._................. - SFP-H10GB-CU3M= 10GBASE-CU SFP+ Cable 3 Meter 2 s CSF1220CX-TD-K9 Secure Firewall 1220 Appliance, Compact, Threat Defense 2 _.._...----..._-......_....-----...._---....._.._._......_..........-_...--...............__....—---._._._...-------- --...-------------._..—_............__._..._....._......._........................................................._.........._..._........._.._._.............. CON-SNTP-CSF1XTDK SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 2, 36 Months -----------.._...-..----------------------__...------.._-...........-_.._..---.----- -- --------------- CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact 2 models .. ---............—-.......---._..--.------..................----............._......_.._...----.._......._......_......_-----..—.__._.....---............ -._...-- .....----..-----------__.........._......................---................---_._...-------..........._........__............_.__._..__...--- SFP-H10GB-CU1 M= 10GBASE-CU SFP+ Cable 1 Meter 2 _.................... ._..................................................................................................._..._.............__....__..........................................._....................................................................................................._._..............._................................................................................_.........................._............................................................................ ..... C9500._24Y4C-E Catalyst 9500 24x1/10/25G and 4-port 40/100G, Essential 1 I CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/100G only, Esse 1, 36 Months I C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials 7 i .........................................._..................-.-..................................................................................................__.._.................._..................__.._......_........._.........................._........................._...._................................................................................................._..._.................................................._..........................................._._................._.._._. I CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 7, 36 Months SFP-10G-LRM= 10GBASE-LRM SFP Module 14 Annex lam_ CSF1220CX-TD-K9 Secure Firewall 1220 Appliance, Compact, Threat Defense 2 ....................................................................................................................................................................................... ........................................................................................................................................................................................................................................................................................................................................................ CON-SNTP-CSF1XTDK SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 2, 36 Months ..................................................................................................................................................................................................................................................................................................................._.....................................................................................................................o....................................................................:.................................... CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact 2 models ................................................................................................................................................................................................................... ...................... ...................................................................................................................... ...................................................................... SFP-H10GB-CU1 M= 10GBASE-CU SFP+ Cable 1 Meter 2 C9500-24Y4C-E ' Catalyst 9500 24x1/10/25G and 4-port 40/1000, Essential' 1 12 Page CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/100G only, Esse 1, 36 Months ...................................._............................................................................................................e........................................................................................................................_......................................................................................................._..................._.._..........._............_.................._...................................................................................... C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials 3 ..........................................................................................................................................................................................................._......_................................................._..................__................................................__...._....._.................._................._............................................................................................_............. CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 3, 36 Months ?......................................................__......_...._............._....._................._.................................;............_.._................----._..._..__.._.....__..._..---.......---- ----............._................................................................................_......................................................................................................... _.__.. SFP-10G-LRM= 10GBASE-LRM SFP Module g -,- CSF1220CX-TD-K9 � Secure Firewall 1220 Appliance, Compact, Threat Defense � � � 2 ......_...........__...__.................................._._..................................................................._.............._..._........_.._._.__.._.................---._...............__..._...._.._...._._..._._.._._._._.-_._......................_._.._..__... .._......................................._._......................_..............._...__.._........._..._......._..................................... ................... CON-SNTP-CSF1XTDK SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 2, 36 Months CSF1200C-RACK-MNT= I Secure Firewall 1200 Series rackmount kit for compact 2 models ................................._...._.................---..............................................._.......................__..............-----...._........_.........................._-..................................................._............_........................_.__..........._................................................................._.._............__......___................_.................................................._.._..---........ SFP-H10GB-CU1M= 10GBASE-CU SFP+ Cable 1 Meter 2 ---------------............................................................................................................................._.._......................_.._...._.....--.....--.............................................--._...................----......---..._....-.........................................................................................................._............._.._............._........------------- ..--- . C9500-24Y4C-E ; Catalyst 9500 24x1/10/25G and 4-port 40/1000, Essential 1 CO SNTP C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/1000 only, Esse I1, 36 Months C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials 5 I CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 5, 36 Months SFP-10G-LRM= 10GBASE-LRM SFP Module I 10 artiment 'A I! ` :a. -z _ .a,.:3a;:,..,,.. ....w..,. __,._.u..,..<�.:.�..,:M.:-: z1uw.w._. :r�, 5;3•� �•p ,.« + Y" n,�•,, CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense 1 i CON-SNTP-CSF10ETD SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 1, 36 Months i CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmount kit for compact 1 models .....................................................................-........................................................................................................_...._...................._..._..................._........----------- ._._..........__............................_......................_.._..........._.._._..-------- ..._.............._......._........................_..........._..........__..._.__... C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials 1 I CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 1, 36 Months RecreCe e 1 WU �aN j � ,•, CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense 1•.a.. s CON-SNTP-CSF10ETD SNTC 24X7X4 Secure Firewall 1220 Appliance, Compact 1, 36 Months CSF1200C-RACK-MNT= ; Secure Firewall 1200 Series rackmount kit for compact 1 models _.._...................--............._-.._...........__..-............................._......................................_......_...._.........................._......_.._......_...._.....--..............._................._._...................__.............-- - - - ---..........._.......;.................................._............................................................... C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials 1 __....._.._._.. _..._........_...._...._.........._........................_........................._............----.............................--............. C9300-NM-8X Catalyst 9300 Series 8x 10G/1 G Network Module (to support new fiber connection between Rec and HR Center) 1 SFP-10G-LR 10GBASE-LR SFP+ module (to support new fiber 2 connection between Rec and Community Center) ............................ _........................................................_..................................................................._........................_............................................................................_..............................._......................................................................_..................._......................_.._.._...;.........._...._......................................................................_._----- CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por- 1 & 3 Year Options 1, 36 Months 07, CSF1210CE-TD-K9� Secure Firewall 1210 Appliance, Compact, Threat Defense I1 : ............................................................................................................._................_..........................._..................__........._....................................................................._.................................................................................................................................................__......................... CON-SNTP-CSF10ETD SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 1, 36 Months 131Page CSF1200C-RACK-lVlNT= I Secure Firewall 1200 Series rackmount kit for compact models ............................................................................................................................................................................................................................................................. ............... ..............- ........- ........................... C9300-48H-E 1 Catalyst 9300 48-port UPoE+, Network Essentials .................. .................................................................................................................................................................................................................................................................................................................................................................. ...................................................... ............. CON-SNTP-C93021 OL SNTC-24X7X4 Catalyst 9300 48-por 1, 36 Months FlUifi�jirRds6U C 'rqea. en CSF1210CE-TD-K9 Secure Firewall 1210 Appliance, Compact, Threat Defense CON-SNTP-CSF10ETD I SNTC-24X7X4 Secure Firewall 1220 Appliance, Compact 1, 36 Months CSF1200C-RACK-lVlNT= Secure Firewall 1200 Series rackmount kit for compact models C9300-48H-E Catalyst 9300 48-port UPoE+, Network Essentials C9300-NM-8X Catalyst 9300 Series 8x 1 OG/1 G Network Module (to support new fiber connection between Rec and HR Center) 1 SFP-1 OG-LR 10GBASE-LR SFP+ module (to support new fiber 2 connection between Katinka House and HR Center) CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 1, 36 Months ........................................................................................................................................................................................................................................................................................................................................................................................ ................................... ............................................ ............... P't All A� 21 O-BJTR PowerEdge R360 Server 3 461-AAIG Trusted Platform Module 2.0 V3 3 321-BKHP 2.5" Chassis with up to 8 Hot Plug Hard Drives, Front PERC 11 3 338-CMQZ Intel Xeon E-2468 2.6G 8C/16T 24M Cache Turbo HT (65\/V) DDR5 3 412-BBHK Heatsink 3 370-AAIP Performance Optimized 3 370-BCBM 5600MT/s UDIMMs 3 780-BCDI C1, No RAID for.HDDs/SSDs (Mixed Drive Types Allowed) 3 405-ABCQ, Front PERC H355 Front Load 3 750-ACFR 384-BBBL Performance BIOS Settings 3 800-BBDM UEF1 BIOS Boot Mode with GPT Partition 3 387-BBEY No Energy Star 3 384-BDMJ High Performance Fan 3 450-AMDH Dual, (1+1) Redundant, Hot-Plug Power Supply, 600W MM (1 00-240Vac) 3 330-BCMK Riser Config 2, Butterfly Gen4 Riser(x8/x8) 3 329-BJTG PowerEdge R360 Motherboard with Motherboard with Broadcom 5720 Dual Port 3 1Gb On-Board LOM, MX 325-BFVN, PowerEdge R360 filter bezel 3 350-BCTP 403-BCRZ, BOSS-N1 controller card +with 2 M.2 960GB (RAID 1) 3 470-BBJL Windows Server Standard 16CORE FI No Med No CAL Multi Language 3 14 Page Windows Server Standard,16 CORE, DF Recovery Image, Multi Lang, 3 (Downgrade not included) Windows Server Standard No Media WS2019 Std Downgrade DF Media Multi 3 Language Windows Server Standard,16 CORE, Media Kit, Multi Lang, (Downgrade not 3 included) 379-BFXT, Dell Connectivity Client- Disabled 3 634-CYDF 528-CTIC iDRAC9 Enterprise 16G 3 528-COYT Server Secured Component Verification 3 379-BCRJ iDRAC,Factory Generated Password, No OMQR 3 658-BFRK BRAC Service Module (ISM), Pre-Installed in OS 3 379-BCQY iDRAC Group Manager Disabled 3 618-BBEC Hyper-V role enabled with pre-installed Standard or Datacenter Ed OS on incl 3 Virtual HDD 770-BCWN ReadyRails Sliding Rails with Cable Management Arm (Al2) 3 770-BDMT 631-AACK No Systems Documentation No OpenManage DVD Kit 3 340-DLXS PowerEdge R360 Shipping 3 340-CWUJ PowerEdge R350/R360 Shipping Material for 2.5" Chassis 3 389-FFNB PowerEdge R360 CCC Marking No BIS or CE Marking 3 707-6877, 707-6889, 707-6892, 3 Years ProSupport and 4-Hour Onsite Service 3 707-6946, 955-9041, 989-3439 841-5979 Keep your Hard Drive For Enterprise 3 Years 3 900-9997 On-Site Installation Declined 3 370-BBZF 32GB UDIMM 5600MT/s ECC 6 400-AXTV 480GB SSD SATA Read Intensive 6Gbps 512 2.5in Hot-plug AG Drive 1 DWPD 3 450-AALV Power Cord -C13 3M 125V 15A(North America Guam North Marianas .6 Philippines Samoa Vietnam) 15 Page Appendix B Enterprise architecture drawings depicting the Town of Southold network topology. Town Hall Optimum Ring WAN SOUTHOLDS525-TH -� SG300-52 SG300-28 SG300-28 5G300-52 Cisco SG300- Dell EMC 3Com Baseline 10PP 5521 F-ON 2928 SFP Plus F� Netgear MS1080P Figure 1:Townholl Topology 16 Page Town Hall Annex Optimum Ring WAN SOUTHOLD5525x-ANNEX 4� SG300-20 i i i SG500-28 SG500-28 WS-C2960L-48TS-LL Figure 2:Annex Topology Police Department Optimum Ring WAN SOUTHOLDS525-PD .� SG300-28 4. SG300-28 SG300-28 SG300-28 SG300-28 SG300-10 Figure 3:Police Topology 17 Page Highway Department Optimum SOUTHOLD5508x-HW SG350X-24P SG300-28 Figure 4:Highway Topology Recreation Department cf:Optimum i SOUTHOLDS525x-REC SG102-24 SG11 OD-08 Netgear MS108UP Figure 5:Recreation Topology 18 Page Solid Waste-Landfill Optimum SOUTHOLD5525x-LF f � SG102-24 F Figure 6:Landfill Topology 19 Page Human Resource Center— Katinka House Optimum SOUTHOLD5508x-HR Netgear MS108UP SG300-28 Figure 7:Senior-Katinka Topology Peconic Community Center Cable Internet i ISP Provided Wireless Router 20 Page Figure 8:Community Center Topology WAN Community Center Waste .� Rec dXh } F Senior ,.> — EE S25 S� Internet Only g as 1 S2S Highway.. .. tM ce fire FIVIC o Z H ,,. - - - -� a I I Annex ' ISE-PIC ti f� i 'L L ... _.. Figure 9:WAN Topology 21 Page RFP — Information Technologies Infrastructure Upgrade Project 0. N Submitted to: Town of Southold Prepared by: Core BTS, Inc., d/b/a NRI AE Information: Matthew Vetro Senior Account Executive Matthew.vetro(@nri-na.com W' Copyright©2025 NRI All rights reserved.Proprietary and Confidential Material. This document contains proprietary information owned by Core BTS,Inc.,d/b/a NRI(herein"NRI")and should be regarded as confidential. Table of Contents FinancialStability................................................................................................................................................2 Qualifications and References.............................................................................................................................4 ProposedSolution................................................................................................................................................5 CostProposal.....................................................................................................................................................17 Statementof Non-Collusion..............................................................................................................................19 Termsand Conditions.................................................................................................................................:....34 1lPage NRI Financial Stability NRI, formerly known as Core BTS, is a business and technology solutions consultancy that specializes in digital transformation, optimizing technology strategies, and harnessing data- driven insights. We solve the most pressing challenges by delivering integrated solutions that connect people,processes,and technology to defined business outcomes.As of April 7,2025,Core BTS, ITSA, and NRI-A have united under the NRI brand as NRI's North American operations. This rebranding reflects our deepened expertise, expanded capabilities, and renewed commitment to innovation. Parent,Company:NRI r Founded in r - 5 Billion ,. 1965. in Annual Revenue *1 . "• •l $17 Billion 1:7k Market Capitalization i Employees. , North America f 16 , United State s �.�' Europe Asia/Oceania Locations Countries&Regions. Denmark united Kingdom, Australia•, India Philippines Taiwan Ireland China Indonesia 'Singapore Thailand, ,. Luxembourg Hong Kong, New Zealand South Korea - Since 2005,we have used a proprietary methodology to simplify complex technical scenarios and deliver holistic solutions. The NRI team holds multiple top-level certifications and partnerships with IT industry leading companies, allowing us to provide customers with expertise across multiple technologies. With NRI,you will benefit from deeply knowledgeable technical resources passionate about delivering the highest quality results. NRI story is one of convergence—bringing together the right people and organizations to build a leading provider of business technology solutions. • NRI-NA Origin: began as CTi in 2004,aiming to build a leading voice and data services integration company.With equity commitment from Founders Equity,CTi acquired three companies in the Northeast: o Open Systems Technologies LLC(Clifton Park,NY) o WorldNet Technology Consultants, Inc. (Reading, PA) o AAA Networks (Falls Church,VA) • Expansion and Acquisitions: CTi acquired Core Business Technology Solutions,LLC, headquartered in Indianapolis, IN, and merged under the Core identity. Core BTS expanded further by acquiring Inacom Information Systems in Wisconsin in 2009, and the Cisco sales and support team in New Jersey in 2012 • Private Equity and Further Growth: Tailwind Capital acquired Core BTS in 2oi8. NRI continued to grow by acquiring the Microsoft business o SADA Systems in Los Angeles, CA in 2019 o Blue Chip Consulting Group in Cleveland, OH in 2020 -� ---- 2 1 P a g e NRI o Skyline Technologies in Green Bay,WI o Aptera in Fort Wayne,IN in 2021 • Rebranding: In December 2021, Core BTS was acquired by Nomura Research Institute Holdings America, Inc. (NRI-HA). In April 2025, Core BTS rebranded to NRI North America Our service offerings are now clearly defined into strategic areas including: • Inform&Advise:Delivering strategic insights through data-driven analysis and tailored advisory services. • Build & Transform: Driving precision transformations with intelligent data, AI solutions, and modern application integrations. • Protect & Manage: Ensuring robust cybersecurity and continuous resiliency with comprehensive risk management and managed services This alignment eliminates market confusion, fosters knowledge sharing, and positions us for continued growth and innovation. Clients benefit from expanded capabilities, deeper expertise, and financial stability for long-term strategic projects, while partners gain access to larger opportunities and investments in emerging technologies. In North America,NRI is a business and technology solutions consiitancy.Guiding our clients from insight to execution,we design and deliver solutions that fuel grovvtli; . 1 growprofitability,and deliver innovation w ;with impact. ...U`�r V h Q, V Yr e Are 50 years driving innovation -- 650 hands-on experts purpose-drivWhy en clients i Organizations Choose NRI BusInass-Pirst Approach—Strategy leads, Industry Expertise—Specialization in Automotive, Education,Energy,Finance,Gaming&,HospitaUty. Government,HealthcaTe,and manufacturing, End-,to,'End Solutions—From advisory to execution to optimization. 5 Delivering Our People—Top architacts,engineers,and problem-stIvors driving business transformation. - 31Page NRI The Company has been in business since 2004 offering a diverse portfolio of cloud,infrastructure, and security solutions to commercial and public sector clients. The company has an annual estimated revenue of$220 million and continues to show growth year over year.Additionally,the parent company is very well-capitalized and strongly supports strategic objectives. Past performance across other contracts has been strong.The company possesses a strong presence in this specific region to fulfill contract requirements. Financial Statements can be provided upon request. Number of years in business: 20 years Type of Business: Corporation Employees: 650-700 Qualifications and References References Company • Email/Phone Services Provided RPI Frank Hill-Senior Frank.Hill@rpi.edu Exchange Systems Manager 518-276-6708 Migration to 0365. Over 1oK mailboxes.Cisco W/Lan,Edge. NetApp Data Storage, Commvault backup Hamilton Jesse Thomas jthomas@hamilton.edu SCCM upgrades, College Director of 315-859-4211 full Cisco Information W/LAN, Edge, Services Security,Voice, NetApp Data Storage Bellmore- Joe Innaco Jinnaco@bellmore- W/LAN, Cisco Merrick Director of merrick.kl2.ny.us core and access CHSD Administrative& 516 9921057 layer switching, Instructional security, Technology and storage, firewall Data upgrades over 14 Protection/Security years, MS AD - MECM Exchange Camden Richard Behm Richard.behm@camdencounty.com Strategy& County Information 856-365-3228 Roadmapping, Technology& Switching, Communication Security Westchester Lennox Harris ldhl@westchestergov.com Switching, County Deputy CIO 914 995 8013 wireless, MS Exchange, Voice, Security 41Page NRI Proposed Solution I NETWORK UPGRADE NRI engineers will replace key components of the Town's network infrastructure.This will ensure that the Town has a stable and well supported network for years to come. NRI engineers will develop a plan to replace the infrastructure at each Town site during available maintenance windows. Following the plan, NRI engineers will install a new, highly-available pair of Secure Network Services(SNS) appliances to host the Town's Identity Services Engine(ISE) and a new Firepower Management Center (FMC) appliance to manage the Town's Firepower Threat Defense (FTD) firewalls. Once complete, the engineers will deploy a new, highly-available firewall pair (3 pairs total) at the Town Hall, Policy Department, and Annex, along with standalone firewalls at the remaining four(4) sites. At the conclusion of the project,NRI will update the documentation created during the network assessment project. The updates will incorporate the final, as-built state of the network. The documentation will be added into a runbook which will also include recommended maintenance tasks and schedules.NRI will provide a backup copy of all in-scope configuration files at project completion.. This project will take approximately six weeks to complete. The specified timeframe does not encompass project dependencies, including task interdependencies within or outside the project scope, NRI customer access, customer change management windows, or any hardware or software acquisitions beyond the purview of this project managed by NRI. NRI personnel will work closely with Customer's IT staff to perform the following services. Plan • Project Kickoff o Review project objectives. o Define an initial project work schedule. o Identify key Town and NRI personnel. o Document issue escalation paths. • Develop a Plan for Upgrades o Develop plans for equipment replacement using the information gathered during the infrastructure review. o Work with Town personnel to schedule maintenance windows and create a cutover plan for each location. o Town personnel will confirm the schedule with all Town departments. Implement • Configure vSphere Infrastructure to use Active Directory authentication o Configure the Town's vSphere environment to use Active Directory for authentication. o This includes the Town's VxRail cluster. The Town will open a support case with Dell for technicians to work with NRI resources to complete this task. • Define New Subnets and a New Town-Wide IP Addressing Scheme o Create a new IP addressing and subnet layout for the Town's network. o Solicit feedback and sign-off on the new addressing from Town IT resources before continuing to later project tasks. o Changes to the subnet layout and IP addressing scheme after sign-off will require a PCR. 5 1 P a g e — -- -NRI o Define new DHCP scopes. o Incorporate the new IP addressing scheme into the new device configurations. o Update NAT/PAT and ACLs on firewalls to reference the new subnets. • Prepare New Dell Servers for Configuration o Rack and cable three (3) new Dell R36o servers at the Town Hall, Police Department, and Annex. o The servers'iDRAC(baseboard management controller)will be configured with an IP address and access credentials in preparation for further configuration tasks by the Microsoft engineers.Test virtual KVM access for remote configuration. o The servers' integrated network ports (LOMs) should be cabled for use once the operating system is configured. • Deploy the FMC 170o Appliance and Migrate o Deploy one FMC 170o appliance in the Town's datacenter. o Upgrade/downgrade the appliance's software to support the new and existing FTD firewalls. o If there is no software version available which supports all of the FTD firewalls, upgrade the FMC to the latest, Cisco-recommended software version. o Connect FTD firewalls to the new FMC appliance and test. o Decommission the old FMC appliance. • Deploy the SNS 3715 Pair and Migrate ISE Services o Deploy a pair of SNS 3715 appliances to provide highly-available ISE services. o Upgrade the SNS to the latest, Cisco-recommended software version. o Reconfigure network devices to use the new SNS appliances for ISE services. o Decommission the old ISE nodes. • Deploy Three Umbrella Virtual Appliances o Deploy Cisco Umbrella Virtual Appliances (VA) on Hyper-V hosts located at the Town Hall,Police Department, and Annex. o Add the VAs to the Town's Umbrella instance and replicate the policies from the existing VAs. o Configure the new VAs as the primary DNS resolvers in the Town's DHCP scopes. o Decommission any VAs which are no longer required after updates to the DHCP scopes are complete. • Deploy Three Cisco Secure Firewall HA Pairs o Deploy a highly-available pair (a total of three pairs) of Cisco Secure Firewalls (FTD) at the Town Hall,Annex, and Police Department. o Upgrade each firewall pair to the latest, Cisco-recommended software version. o Connect each firewall pair to the new FMC appliance for management. o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall pairs during a maintenance window. • Deploy Four Cisco Secure Firewalls o Deploy standalone (a total of four) Cisco Secure Firewalls (FTD) at the Highway Department, Recreation Center, Waste Management, and Human Resources Center. o Upgrade each firewall to the latest, Cisco-recommended software version. o Connect each firewall to the new FMC appliance for management. o Migrate configurations from existing ASA/FTD firewalls. o Test and cutover to the new firewall during a maintenance window. • Deploy Seven Distribution Switches o Deploy seven(7) Catalyst 9500/930o distribution switches, one per Town site. o Upgrade each switch to the latest, Cisco-recommended software version. 6 1 P a g e NRI o Incorporate the new subnet and IP addressing scheme into the configuration of the switches. o Cutover and test during a maintenance window. • Fiber Installation o Excavate trench from South Building to North Building approximately 2o"deep. o Install schedule 40 PVC conduit, necessary sweeps and (i) Pull Boxes 14" x 19" x 12"deep(see attached) o Backfill o Sawcut and repair asphalt in kind and AC joint o New RCA base and compaction in 4"lifts o Restore Lawn with topsoil and seed o Install 1/4"ideal Pull Rope o Repair irrigation as required o Install&Furnish(1)new 12-Strand OM4 Armored fiber in new conduit connecting from the Human Resource Center to the Katinka House o Terminate,Test and label each strand of fiber at each location o Trench and Conduit Work:Install fiberoptics to connect the Recreation Center and the Peconic Community Center. o Excavate trench from South Building to North Building approximately 2o"deep o Install schedule 40 PVC conduit, necessary sweeps and(2) Pull Boxes 14"x 19"x 12" deep (see attached) o Backfill o Sawcut and repair asphalt in kind and AC joint o New RCA base and compaction in 4"lifts-Restore Lawn with topsoil and seed o Install 1/4"ideal Pull Rope o Repair irrigation as required o Install&Furnish(1)new 12-Strand OM4 Armored fiber in new conduit connecting from the Recreation Center and the Peconic Community Center o Terminate,Test and label each strand of fiber at each location General Notes: o All work to be performed by non-union labor force on straight time at PW rate. o All work to be performed in one phase. o Owner to provide access to all locations on a timely manner. • As-Built Documentation&Post Cutover Support o Update the documents provided during the infrastructure assessment project to match the final, as-built state of the Town's network. o Create a detailed runbook which includes documentation, updated hardware, software, and application configurations. This document will also contain recommended maintenance schedules. o Provide post cutover support during the twelve (12) hour period following each cutover. o Provide one calendar week of support per location after the location cutover is performed.This support is provided on a best effort basis,without an SLA. o NRI will provide a backup copy of all in-scope configuration files at project completion. o Three months after the main project is completed,NRI engineers will analyze the performance of each firewall and domain controller,then optimize,tweak,and fine tune settings. 7 1 P a g e NRI Delivery Team: Roles and Responsibilities NRI will provide the core resources required to plan and execute this project and ask that Town of Southold provide the complementary resources required to assist in the planning and execution of this project. NRI will require access to several subject matter experts and managed services staff to complete this engagement. NRI Project Monitoring This engagement will leverage the assistance of a Project Monitor that will work with the Town of Southold's personnel to perform the following activities: Project Initiation&Logistics • Coordinate and conduct the client project kickoff meeting. • Complete essential project initiation activities including validating entry criteria. Scope, Timeline, and Budget Management • Create and maintain project outline(milestones) and budget. • Initiate and manage Project Change Request (PCR). Communication and Stakeholder Management • Prepare and distribute project status reports. Quality and Risk Management • Serve as the primary contact between the NRI project team and the client. • Track identified risks,issues, and decisions. Project Closeout NRI offers full Project Management as an additional service that can be added to this engagement if there are complex dependencies, or otherwise more comprehensive project management is preferred. I MICROSOFT CONSULTING Town of Southold ("Southold") has put for an RFP for an upgrade of their Active Directory and Exchange environments. Active Directory has three (3) domain controllers currently running Windows Server 2012 R2 and a domain and forest functional level of Windows Server 2012 R2. Southold would like to upgrade the domain controllers to Windows Server 2022 and the domain and forest functional levels Windows Server 2016. The two(2)Exchange servers are currently running Exchange 2019 CU14.Southold would like to upgrade these servers to Exchange 2019 CU15. Upon conclusion of this initiative,Southold envisions upgraded AD and Exchange environments. Core BTS, Inc., d/b/a NRI (herein "NRI") would like to position its experience in these technologies, as well as its status as a Microsoft Cloud Solutions Partner and Azure Expert Managed Services Provider ("MSP"), as evidence that it can be a trusted advisor to Southold to provide guidance, expertise, and implementation execution. PROJECT WORK ESTIMATE AND TIMELINE 8 1 P a g e NRI Southold - Active Directory and Exchange Upgrade Project . • . 01 Microsoft • UiscoverandPlan Build Stabilize Deploy Project Initiation The Project Initiation phase is the critical first step to set the foundation of success for this engagement by engaging key stakeholders and ensuring that both technical and organizational prerequisites are met before the project starts.The technical work focuses on deploying tools for discovery, gathering detailed insights into the source and/or destination environments, enabling efficient planning and identifying potential challenges. High-level tasks that may be performed during the Project Initiation phase: ORGANIZATIONAL READINESS • Validate project entry criteria: Assess readiness by reviewing access, accounts, configurations, and remote access requirements to ensure project prerequisites are met. • Refine schedule: Set initial schedules and agendas to align with project milestones. • Define project team:Identify and assign owners or subject matter experts for each relevant technology or workload.This person is responsible for providing information and making decisions on their assigned technology/workload. TECHNICAL DISCOVERY • Deploy Migration Tools and Run Discovery Reporting • Use tools to analyze the existing technology environment, capturing key configurations and identifying data sources for analysis, enabling efficient planning for migrations. • Validate environmental access OUTCOMES • Ensure all entry criteria are met for project kick-off readiness. • Technical data collection is in-progress to support Discover&Plan phase. Project Monitoring The key goals of this workstream include monitoring project activities (such as scope, timeline, and budget) and providing routine status communications to stakeholders throughout the duration of the project. Project Monitoring Activities This engagement will leverage the assistance of a Project Monitor that will work with the Southold personnel to perform the following activities: • Project Initiation and Logistics o Coordinate and conduct the project kickoff meeting o Complete essential project initiation activities including validating entry criteria • Scope,Timeline, and Budget Management --- -- 9 1 P a g e NRI o Create and maintain project outline(milestones) and budget o Initiate and manage Project Change Request(PCR),if needed • Communication and Stakeholder Management o Prepare and distribute project status reports • Quality and Risk Management o Serve as the primary contact between the NRI project team and the client o Track identified risks,issues, actions, and decisions • Project Closeout NOTE: NRI offers full Project Management as an additional service that can be added to this engagement if there are complex dependencies or if more comprehensive project management tasks are preferred. Project Monitoring Assumptions Assumptions made surrounding this workstream's work efforts include: i. NRI and Southold will confirm the timeline during project initiation to ensure proper alignment and preparedness of sequential tasks. 2. Southold will coordinate with NRI technical resources for hardware, accounts, or access as needed. 3. Southold will provide a resource to manage client resources and project-related tasks. Project Monitoring Timeline Project Monitoring F IF] Project Initiation and Logistics Scope, Timeline, and Budget Management Communication and Stakeholder Management Quality and Risk Management Microsoft consulting Workstream The key goals of this workstream include upgrading the domain with two new Windows Server 2022 domain controllers,upgrading Exchange to Exchange 2019 CU15, and implementing a Windows Server 2022 FTP server in the DMZ. Discover and Plan Phase The Discover and Plan phase of this workstream will establish the foundation for the remainder of the project.This phase will solidify the plan for the remaining efforts and bring together the various aspects of this workstream into a cohesive vision and solution. High-level tasks that may be performed during this phase for this workstream include: • Define business and functional requirements o Prepare requirements to support the desired functionality • Identify priorities for each of the requirements • Discovery: Domain Services Current State to I P a g e NRI o Conduct discovery workshops with subject matter experts o Run custom AD scripts and tools to determine health and collect data against each domain o Discover all application installations on domain controllers o Complete initial analysis of AD DS o Identify any AD DS dependent applications • Analysis and Design: Domain Services Future State o Complete Core Infrastructure Analysis o Complete Forest and Domain Structure Analysis o Verify domain replication is performed using DFS-R o Assess business continuity strategies (backup,recovery,monitoring) o Conduct a best practice analysis against gathered data o Create AD upgrade plan • Review and consolidate login scripts • Review the Exchange environment • Plan for implementation of Windows FTP server in the DMZ o Determine windows server version and VM specs for CPU,memory, and disk o Determine IP addressing and networking o Plan for testing of FTP • Create AD and Exchange upgrade plan and Windows FTP Server implementation plan • Present AD and Exchange upgrade plan and Windows FTP Server implementation plan Deliverables This phase will be complete when NRI has completed all outcomes and documents listed below and they have been reviewed with the Southold Program Manager. Phase Outcomes • Discovery and planning for AD upgrade to Server 2022,Exchange upgrade to 2019 CU15, and implementation of a Windows Server 2022 FTP server in the DMZ Phase Documents Document Name Revision Document Content AD and Exchange Initial . Executive Summary YT r Desin' ent'State Review':pgradean ur flan , Document arget,State.Architectural Model • =High=level,Roadmap Build Phase The Build phase of this workstream primarily involves developing the solutions and content required for go-live.During this phase, all key elements of the technical solution and deployment process must be carefully engineered and validated. High-level tasks that may be performed during this phase for this workstream include: • Upgrade the to Windows 2022 Domain Controllers o Select one domain controller to perform upgrade o Move FSMO roles to,another server if applicable o Demote the domain controller o If doing a new install,remove the server from the domain. iiIPage NRI o Install Windows Server 2022 on the server(new install or in-place upgrade). Upgrade to Windows Server 2019 will need to take place before moving to Windows Server 2022 if doing an in-place upgrade. o If doing a new install,add the server to the domain with the same name and IP address. o Promote the server back to domain controller . o Configure AD DS services on new domain controllers o Configure DNS o Configure DHCP if applicable o Configure NTP if applicable o Client will configure other applications if applicable o Configure AD DS sites and services with new domain controllers o Validate new domain controller functionality o Repeat the process for up to three(3)domain controllers • Upgrade the domain and forest functional level to Windows Server 2016 • Install Exchange 2019 CU15 update to all Exchange servers • Build Windows FTP server in the DMZ o Virtual Machine Setup: ■ Provision a new Windows Server(latest supported version,e.g.,Windows Server 2022)VM in the DMZ network. ■ Configure VM with appropriate CPU,memory, and storage specifications based on expected FTP workload(e.g.,4 vCPUs, 8 GB RAM, 1oo GB storage). ■ Install and configure the latest service packs and security updates for the Windows Server operating system. o IIS Configuration: . ■ Enable and configure IIS features on the Windows Server VM. ■ Install and configure the FTP Server role within IIS to support secure file transfers. ■ Configure FIT site settings,including directory structure, authentication (e.g., anonymous or basic authentication),and SSL/TLS for secure connections. o Network and Security Configuration: ■ Assign a static IP address within the DMZ subnet for the VM. ■ Configure firewall rules to allow FTP traffic(ports 20, 21, and passive mode port range)to the VM. ■ Implement security best practices,including disabling unnecessary services, enabling Windows Defender, and configuring user access controls. ■ Ensure the VM is isolated from the internal network, adhering to DMZ security policies. Deliverables This phase will be complete when NRI has completed all outcomes and documents listed below and they have been reviewed with the Southold Program Manager. Phase Outcomes • Windows 2022 domain controllers servers deployed,AD upgraded successfully, and Exchange upgraded successfully • Windows Server 2022 FTP server built in the DMZ and ready for testing 121Page NRI Phase Documents Document Name Revision Document Content FTP As-built Document Initial,' 'High level capture of configuration settings for the FTRserve'r Stabilize Phase The Stabilize phase of this workstream involves testing the technologies configured during the Build phase-and performing any necessary reconfiguration based on testing feedback.The goal of the Stabilize phase is to ensure that all implemented technologies are operating to specification and ready to support the Deploy phase activities. High-level tasks that may be performed during this phase for this workstream include: • Validate domain health • Validate DNS health • Validate DHCP health • Validate Exchange functionality • Testing and Validation of the Windows FTP server o Test FTP server functionality,including file upload/download, authentication, and SSL/TLS connectivity. o Verify accessibility from external networks while ensuring no unauthorized access to internal network resources. o Document test results and confirm compliance with security and performance requirements. Deliverables This phase will be complete when NRI has completed all outcomes and documents listed below and they have been reviewed with the Southold Program Manager. Phase Outcomes • AD and Exchange upgrades validated successfully • FTP successfully tested Phase Documents Document Name Revision Document Content FTP As-built Document, Updated High level capture of configuration.•` rver etting5 for the;I�TP se Deploy Phase The Deploy phase of this workstream involves implementing the technologies built and tested in the previous phases.The goal of the Deploy phase is to successfully execute the plans and solutions created throughout this workstream with minimal impact to the business. High-level tasks that may be performed during this phase for this workstream include: • Deploy the FTP server into production • Documentation and Handover o Provide documentation detailing the VM configuration,IIS settings,FTP server setup, and firewall rules. 131 Page NRI o Conduct a knowledge transfer session with the Town's IT team to ensure operational understanding. Deliverables This phase will be complete when NRI has completed all outcomes and documents listed below and they have been reviewed with the Southold Program Manager. Phase Outcomes • Documentation delivered and FTP server is deployed Phase Documents Document Name Revision Document Content FTP As built'Document. Final • .High level capture of configuration settmgsfor theFTP server Microsoft Consulting Assumptions Assumptions made surrounding this workstream's work efforts include: i. Three(3)AD domain controllers will be upgraded either in-place or via new installation. Efforts will be made to keep the names and IP addresses of the servers. 2. Two(2).Exchange servers will be upgraded. 3. One(i)FTP server will be deployed. 4. Southold's virtualization infrastructure(e.g.,VMware, Hyper-V)is already in place and has sufficient capacity to host the new VM. 5. The DMZ network is pre-configured with necessary routing and firewall capabilities to support external FTP traffic. 6. Southold will provide necessary administrative credentials and access to the virtualization platform and DMZ network 7. Southold's IT team will handle post-deployment management,including user account setup and ongoing server maintenance. 8. Any software licenses required(e.g.,Windows Server) are already available or will be provided by Southold. 9. The expected FIT workload is within the capacity of the specified VM resources; any performance issues requiring resource scaling will be addressed post-deployment. lo. External testing of the FTP server will be conducted in a controlled manner to avoid service disruptions. 14 1 P a g e NRI Microsoft Consulting Timeline Microsoft . Discover Project setup and kickoff Discovery: Domain Services Current State Analysis and Design: Domain Services Future State Review and consolidate login scripts Review Exchange environment Plan for implementation of Windows FTP server in the DMZ Create AD and Exchange upgrade plan and Windows FTP Server implementation plan Present AD and Exchange upgrade plan and Windows FTP Server implementation plan Upgrade the to Windows 2022 Domain Controllers , Upgrade the domain and forrest functional level to Wdinwos Server 2016 Install Exchange 2019 CU1S update to all Exchange servers Build Windows FTP server in the DMZ Stabilize Validate domain health Validate DNS health Validate DHCP health Validate Exchange functionality Testing and Validation of the Windows FTP server . . Deploy the FTP server into production Documentation and Handover Conduct a completion meeting NRI Microsoft and Cisco Qualifications: 15 Page NRI One of the World's Top Ktrosoft: `Partners AtNRI,We believe that successful evolution requires comprehensive understanding outo/ �ti Microsoft �- o'yMycrosoft" N'Microsoft"` _ •� ��Micrns Part v SoA*lwae Partner t Soh&Vw P.,U� 1 SolutlonPartner Advanced Specializations-', Microsoft MVPs S�,yry t(arimnmt Digitay&nppwaraGon pesignations on Staff I Arure 300+ Microsoft Certified Years of - PAC Memberships- Consultants - -- — --- ; Delivering Value :CMicrosoocftn osura b Microsoft Partner Azure Expert MSP Winner kwards MSUS Partner/ Microsoft Make the'--Most of Your Cisco°Solution Our focus is on always helping our clients maximize the value of Cisco products and service get the most of your business. Partnelship'Makes Anything Possible Cisco Certifications&Specializations NRI`ls one of,theieading Cisco partne s in the United NRl is amonglust a handful of Cisco Gold Certified Partners to tiotd the Integrator Provider;and'CX Advanced States:We've been recognized for our proven ability.to L Specialization Certifications.This distinction putus among the verytiest Cisw Channel Partners in the munlry. build Innovative.enterprise-wide digital solutions that deliver better business outcomes. From Initial product procurement to end user training and adoptionrour Cisco expertise enables us to provideyou w th''the design'implementation.and support services needed to successfully leverage Pisces timciuctsulte and' ' maxim ize your IT investment.' Cisco Gold Certified Partner since 4 6 'Environmental i Full-Stack Hybrid Work Solution Hybrid Cloud ' Sustainabibty observablhty,Solution Computing Solution Cisco Career Certified i 2005 _ _. _ Individuals staff Hybrid Cloud " Advanced Collaboratmn Ativanced,Enterprise Advanced Security' Networking Solution Architecture` Networks.Architecture I Architecture 6' / Customer Experience Master CiscoF Cisco Advanced;', CCIE Collaboration j Hype rf_ex IoT Specializations'• Certifications. Master_ i Cisco Unified Contact ` Cisco Webex`' Collaboration, Networking, Center Express, Contact center - SaaS 16 Page NRI Cost Proposal I INVESTMENT SUMMARY Network Appliances $237,725.41 Servers $31,644•87 Fiber Installation/Trenching $57,000.00 Microsoft Consulting $39,150.00 Implementation Services $61,355.00 Professional Services Pricing Summary Service Description Price Fixed Fee: $61,355.00 NRI Fixed Fee Billing Terms • Town of Southold agrees to compensate NRI for the effort required to deliver all items outlined in this Statement of Work. Modifications to this project via the Change Management Process may change the associated fees. • This engagement will be performed on a fixed-fee basis,with phased billing.This fixed fee project will be invoiced at the phased completion stages,specified below. • This fixed fee price is inclusive of all travel related expenses. o Payment Schedule • $15,338.75 Upon Completion of the Planning Phase of the Project and Before the Start of the Implementation Phase(25%) • $15,338.75 Upon Completion of Implementation Work at the Town Hall,.Police Department, and Annex(25%) • $15,338•75 Upon Delivery and Review of Project Documentation (25%) • $15,338.75 Upon Completion of the Post-Deployment Performance Tuning(25%) Component Pricing Deliveiy Services Total Price $39,150 Invoice Schedule Invoice# Invoice Milestone Invoice Amount 1 Upon,acceptance of proposal . $20,600 17 Page NRI Invoice# Invoice Milestone Invoice Amount 2 Upon completion of Deploy phase $19,150 Total to be Invoiced $39,150 Pricing and Minimums • Pricing is for work performed during normal business hours(Monday—Friday, 8 AM— 5 PM Eastern time zone,excluding holidays). • Pricing is based on a continuous work effort for each role per the plan outlined in this SOW.To maintain resource continuity and a consistent level of progress, dedicated resources will be assigned.Most roles are full-time,unless otherwise noted within the project timeline.Deviations from this schedule may result in a PCR. • Southold will be invoiced upon completion of milestones as detailed in the Invoice Schedule. • Pricing is for NRI professional services only, and does not include Cloud hosting, software licensing,or other fees.NRI assumes no responsibility for the monitoring or optimization of Client spending on IaaS(Infrastructure as a Service) and PaaS (Platform as a Service)unless explicitly detailed and agreed upon in this Statement of Work.Any tasks or services beyond the defined scope related to monitoring or optimizing Client costs on IaaS and PaaS may require a PCR. 18 Page NRI Cisco Hardware/Software Qty Item Number Description Term(Months) Billing Price Ext Price Frequency 1 FMC1700-K9 Secure Firewall Management Center 1700 Chassis Prepaid $19,119.69 $19,119.69 1 CON-SNTP-FMC1700K SNTC-24X7X4 Cisco Secure Frewall 36 Prepaid $16,930.47 $16,930,47 2 FMC-M6-PS-AC- FMC 105OW AC Power Supply Prepaid $0.00 $0.00 1050W 2 CAB-9K12A-NA Power Cord,125VAC 13A NEMA 5-15 Plug,North America Prepaid $0.00 $O.00 1 FMC-M6-NIC-SFP FMC X71 O-DA2 dual-port 1OG SFP+NIC Prepaid $0.00 $0.00 2 FMC-M6-HOD-240G8 FMC 240GB SATA M.2 Prepaid $0.00 $0.00 1 FMC-M6-HWRAID FMC M6 Boot optimized M.2 Raid controller Prepaid $0.00 $0.00 1 FMC-M6-TPM-2.0 FMCTnisted Platform Module 2.0 Prepaid $0.00 $0.00 1 FMC-M6-CPU-A7232P FMC AMD 3.1GHz 7232P 120W SC132MB Cache DDR4 320OMHz Prepaid $0.00 $0.00 2 FMC-M6-MEM-X-16GB FMC 16GB 16GS RDIMM SRx4 3200(SGb) Prepaid $0.00 $0.00 1 FMC-M6-MRAID-12G FMC 12G Modular RAID controller with 2GB cache Prepaid $0.00 $0.00 2 FMC-M5-HDD-I.2TB FMC M61.2TB 12G SAS 10K RPM SFF HOD Prepaid $0.00 $0.00 1 FMC-M6-O-ID10GC FMC Intel X7 1 0T2LOCPV3G1 L 2x1 OGbE R145 OCP3.0 NIC Prepaid $0.00 $0.00 1 FMC-M6-OCP3-KIT FMC C2XX OCP 3.0 Interposer W/Mech Assy Prepaid $0.00 $0.00 1 SF-FMC-7.4-K9 Firewall Management Center Software v7.4 Prepaid $0.00 $0.00 2 SFP-10G-SR= 10GBASE-SR SFP MODULE Prepaid $5B9.36 $1,178.72 2 SNS-3815-K9 Small Secure Network Server for ISE Applications Prepaid $10,566.93 $21,133.86 2 CON-SNTP-SN53ASK9 SNTC-24X7X4 Small Secure Network Server for ISE Appl 36 Prepaid $9,749,30 $19,498.76 2 SNS-NVMEG4-M960-0 960GS 2.5in U315mm P74SO Hg Peif Med End NVMe Prepaid $634.03 $1,268.06 2 SNS-PSU1-120OW-D 1200w AC Titanium Power Supply for C-series Rack Servers Prepaid $0.00 $0.00 2 SNS-PSU1-120OW-02 1200w AC Titanium Pourer Supply for C-series Rack Servers Prepaid $252.35 $504.70 2 SW-38X5-ISE-K9 ISE Software Load on SNS-38xS-K9 appliance Prepaid $0.00 $0.00 2 SNS-CPU-A9115 AM 9115 2.6GHz 125W 16C/64MB Cache DDR5 6000MT/s Prepaid $0.00 $0.00 4 SNS-MRX32G1RE5 32GB DDR5-6400 RDIMM 1 Rx4(16Gb) Prepaid $0.00 $0.00 2 SNS-0-ID10GC-D Intel X710T2L0CPV3G1L2x1OGbER145OCP3.0NiC Prepaid $0.00 $0.00 2 SNS-QCP3-1<IT-D C2XX OCP 3.0Interposer W/Mech Assy Prepaid $0.00 $0.00 2 SNS-RIS1A-225MB C225 M81U Riser 1A PCIe Gen4 x16 HH Prepaid $0.00 $0.00 ig I P age NRI Qty Item Number Description Term(Months) Billing Price Ext Price Frequency 2 SNS-TPM2-002D-D TPM 2.0 FIPS 140-2 MSW2022 compliant AMD MS servers Prepaid $0.00 $0.00 18 SNS-BBLKO-MB UCSC-SedesM6&,M8SFF drive blanking panel Prepaid $0.00 $0.00 2 SNS-CBLFNVME- C22S M8 NVME Cable,Mainboard to backplane Prepaid $0.00 $0.00 225M8 4 CAB-9K12A-NA Power Cord.125VAC 13A NEMA 5-15 Plug,North America Prepaid $0.00 $0.00 2 SNS-PGEIQ10GF-D Intel X710 quad-port 10G SFP+NIC Prepaid $0.00 $0.00 2 SFP-H10G8-CU3M= 10GBASE-CU SFP+CABLE 3 M Prepaid $52.80 $125.60 2 CSF12200X-TO-K9 Secure Frewall 1220 Appliance,Compact Threat Defense Prepaid $2,426.46 $4,852.92 2 CON-SN7'P-CSF1XTDK SNTC-24X7X4 Secure Frewall1220 Appliance.Compact 36 Prepaid $1,432.32 $2,864.64 2 CSF12200XT-TM CSF 1220CXThreat Defense IPS&Malware Defense License 36 Prepaid $0.00 $0.00 2 L-CSF1220CX-TM-3Y CSF1220CX Threat Defense lPS&Malware Defense 3YSubs 36 Prepaid $1.914.89 $3,829.78 2 CSF120OC-PWR-AC Secure Frewall1200 Series external PSU for compact models Prepaid $0.00 $0.00 2 CAB-AC PowerCord,110V Prepaid $0.00 $0.00 2 SF-F1200-TD7.6-K9 Threat Defense software 7.6 for 1200 Sedes Frewall Prepaid $0.00 $0.00 2 CAB-CONS-USB-C 6FT Console cable,US8-C to USB-C Prepaid $0.00 $0.00 2 CSF12200X-BSE Secure Frewall 1220C Essentials License Prepaid $0.00 $0.00 2 CSF1200C-RACK-MNT= Secure Frewall1200 Series rackmountkit for compact models Prepaid $485.29 $970-98 2 SFP-14IOGB-CU1M= CISCOSFP+COPPER TWINAX CABLE TWINAXAL CAB LE-SFP+SFP+ Prepaid $62.23 $124.46 3.3 FT 1 C9500-24Y4C-E Catalyst 9500 24x1/10/25G and 4-port 40/100G,Essential Prepaid $12,708.96 $12,708.96 1 CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 950024-port25/10OG only,Esse 12 Prepaid $0.00 $0.00 1 C9500-DNA-24Y4C-E C9500 DNA Essentials,Term License 36 Prepaid $0.00 $0.00 1 C9500-DNA-L-E-3Y 36 months-DNA Essentials 3 Year License 36 Prepaid $552.41 $552.41 2 CAB-9K12A-NA Power Cord,125VAC 13A NEMA 5-15 Plug,North America Prepaid $0.00 $0.00 1 C9K-PWR-650WAC-R 65OW AC Config 4 Power Supply front to back cooling Prepaid $0.00 $0.00 1 C9K-PWR-650WAC-R/2 65OW AC Config 4 Power Supply front to back cooling Prepaid $1,286.02 $1,286.02 1 C9K-F1-SSD-BLANK Cisco pluggabie SSD storage Prepaid $0.00 $0.00 2 C9K-Ti-FANTRAY Catalyst 9500 Type 4 front to back cooling Fan Prepaid $0.00 $0.00 1 C9500-NW-E C9500 Network Stack.Essentials Prepaid $0.00 $0.00 1 S95000K9-1715 CAT9300/9400/9500196000NIVERSAL Prepaid $0.00 $OA0 1 C9500-SSD-NONE No SSD Card Selected Prepaid $0.00 $0.00 1 C95OG-RFID RFIDSelected Prepaid $0.00 $0.00 1 NEf WORK-PNP-LIC Network Plug-n-Play License for zero-touch device deployment Prepaid $0.00 $0.00 1 C9300-48H-E Catalyst 9300 48-port UPoE+,Network Essentials Prepaid $6,366.47 $6,366.47 1 CON-SNTP-C930210L SNTC-24X7X4 Catalyst 9300 48-por 36 Prepaid $3,383.86 $3,383.86 1 C9300-DNA-E-48 C9300 DNA Essentials,48-Port Term Licenses 36 Prepaid $0.00 $0.00 1 C9300-DNA-E-48-3Y C9300 DNA Essentials,48-port,3Year Term license 36 Prepaid $618.70 $618.70 1 C9300-NW-E-48 C9300 Network Essentials,48-port license Prepaid $0.00 $0.00 1 SC93000K9-1712 Catalyst 9300 XE 17.12 UNIVERSAL Prepaid $0.00 $0.00 1 PWR-C1-1100WAC-P 1 10OW AC 80+platinum Config 1 Power Supply Prepaid $0.00 $0.00 1 C9300-SPS-NONE No Secondary PowerSupply Selected Prepaid $0.00 $0.00 1 C9300-SSD-NONE No SSD Card Selected Prepaid $0.00 $0.00 20 Page NRI Qty Item Number Description Term(Months) Billing Price ExtPrtce Frequency 1 C9300-STACK-NONE No Stack Cable Selected Prepaid $OAO $0.00 1 C93DO-SPWR-NONE No Stack Power Cable Selected Prepaid $0.00 $0.00 1 C9K-NONE Smart Building Application Opt Out SKU Prepaid $0.00 $0.00 1 C9KACC-RBFT RUBBER FEET FOR TABLE TOP SETUP 9200 and 9300 Prepaid $0.00 $0.00 1 CAB-GUIDE-1RU 1 RU CABLE MANAGEMENT GUIDES 9200 and 9300 Prepaid $0.00 $0.00 1 C9300-NM-SX Catalyst 9300 8 x 10GE Network Module Prepaid $1,456.54 $1.45654 1 NETWORK-PNP-LIC Network Plug-n-Play License for zem-touch device deployment Prepaid $0.00 $0.00 1 CSK-ACC-SCR-4 12-24 and 10-32SCREWS FOR RACK INSTALLATION,QTY4 Prepaid $0.00 $0.00 1 CAB-TA-NA North America AC Type A Power Cable Prepaid $OAO $0.00 2 SFP-IOG-LR-S= Cisco 1OGBA5E-LRSFP+Module for SMF-For Data Networking, Prepaid $1,187.28 $2,37456 Optical Network-1 x 1OGBase-LR-Optic 2 CSF1220CX-TD-K9 Secure Firewall 1220 Appliance,Compact,Threat Defense Prepaid $2,426.46 $4,85222 2 CON-SNTP-CSFIXTOK SNTG24X7X4 Secure Firewall1220 Appliance.Compact 36 Prepaid $1,43232 $2,864.64 2 CSF1220CXT-TM CSF 1220CXThreat Defense IPS&Malware Defense License 36 Prepaid $0.00 $OAO 2 L-CSF1220CX-TM-BY CSF1220CX Threat Defense lPS&imp;Malware Defense 3YSubs 36 Prepaid $1,914.89 $3,829.78 2 CSF120OC-PWR-AC Secure Firewall 1200 Series external PSU for compact models Prepaid $0.00 $0.00 2 CAB-AC Power Cord,110V Prepaid $0.00 $0.00 2 SF-F1200-TD7.6-K9 Threat Defense software 7.6 for 1200 Series Firewall Prepaid $0.00 $0.00 2 CAB-CONS-USB-C 6FT Console cable,USB-C to USB-C Prepaid $0.00 $0.00 2 CSF12200(BSE Secure firewa11220C Essentials License Prepaid $0.00 $0.00 2 CSF1200GRACK-MNT= SecureFrewall1200 Series rackmountkit for compact models Prepaid $485.29 $97058 2 SFP-HIOGB-CU1M= CISCOSFP+COPPER TWINAXCABLETWINAXALCABLE-SFP+SFP+ Prepaid $62.23 $124AG 3.3 FT 1 C9500-24Y4C-E Catalyst 9500 24 0110/2 5Gand4-port40/100G,Essential Prepaid $12.708.96 $12,70896 I CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 9500 24-port 25/10013 only,Esse 12 Prepaid $0.00 $0.00 1 C9500-DNA-24Y4C-E C9500 DNA Essentials,Term License 36 Prepaid $0.00 $0.00 1 C9S00-DNA-L-E-3Y 36 months-DNA Essentials 3 Year License 36 Prepaid $552.41 $552.41 2 CAB-9K12A-NA Power Cord,125VAC 13A NEMA 5-15 Plug,North America Prepaid $0.00 $0.00 1 CBK PWR-650WAC-R 65OW AC Con6g 4 Power Supply front to back cooling Prepaid $0.00 $0.00 1 C9K-PWR-650WAC-R/2 65OW AC Config 4 Power Supply front to back Cooling Prepaid $1,286.02 $1,286.02 1 CSK-F7-SSO-BLANK Gsco pluggable SSD storage Prepaid $0.00 $0.00 2 C9K-TI-FANTRAY Catalyst 9500 Type 4 front to back cooling Fan Prepaid $0.00 $0.00 1 C9500-N W-E C9500 Network Stack,Essentials Prepaid $0.00 $0.00 1 S95000K9-1715 CAT9300/9400/9500196000NNERSAL Prepaid $0.00 $0.DO 1 C9500-SSD-NONE No SSO Card Selected Prepaid $0.00 $0.00 1 C9500-RFID RFID Selected Prepaid $0.00 $0.00 1 NETWORK-PNP-LIC Network Plug-n-Play License for zero-touch device deployment Prepaid $0.00 $0.00 1 CAB-TA-NA North America AC Type A Power Cable Prepaid $0.00 $OAO 1 C9300-48H-E Catalyst 930048-portUPoE+,Network Essentials Prepaid $6,366,47 $6,366.47 1 CON-SNTP-C9302101. SNTC-24X7X4 Catalyst 930048-por 36 Prepaid $3,374.78 $3,374.78 1 C9300-ONA-E-48 C9300 DNA Essentials,48-Port Term Licenses 36 Prepaid $020 $0.00 1 C9300-DNA-E-48-3Y C9300 DNA Essentials,48-port,3 Year Term license 36 Prepaid $618.70 $618.70 211Page NRI Qty Item Number Description Term(Months) Billing Price Eat Price Frequency 1 C9300-NW-E-48 C93oo Network Essentials,48-port license Prepaid $0.00 $0.00 1 SC93000K9-1712 Catalyst 9300 XE 17.12 UNIVERSAL Prepaid $0.00 $0.00 1 C930D-SSD-NONE No SSD Card Selected Prepaid $0.00 $0.00 1 C9300-SPWR-NONE No Stack Power Cable Selected Prepaid $0.00 $0.00 1 C9KNONE Smart Building Application Opt Out SKU Prepaid $0.00 $ODO 1 C9KACC-RBFT RUBBER FEET FOR TABLE TOP SETUP 9200 and 9300 Prepaid $0.00 $0.00 1 NETWORK PNP-LIC Network Plug-n-Play License for zero-touch device deployment Prepaid $0.00 $MOO 2 SFP-IOG-LR-S= Cisco 10GBASE-LR SFP+Module forSMF-For Data Networking; Prepaid $1,187.28 $2,374.56 Optical Network-1 x 1OGBase-LR-Optic 1 PWR-CI-1100WAC-P 1100WAC8D+platinum fonfigI Power Supply Prepaid $0.00 $O.00 1 C9300-SPS-NONE No Secondary Power Supply Selected Prepaid $0.00 $0.00 1 C9300-STACKNONE No Stack Cable Selected Prepaid $0.00 $0.00 1 C9KACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLATION,QTY 4 Prepaid $DUO $0110 1 CAB-GUIDE-IRU 1 RU CABLE MANAGEMENT GUIDES 92W and 9300 Prepaid $0.00 $0.00 1 C930O-NM-8X Catalyst 93008x10GE Network Module Prepaid $1,456.S4 $1,456.54 2 CSF1220CX-TD-K9 Secure Frewall 1220 Appliance,Compact,Threat Defense Prepaid $2,426A6 $4,852.92 2 CON-SHTP-CSF1XTDK SNTC-24X7X4 Secure Frewall1220 Appliance.Compact 36 Prepaid $1,432.32 $2.864.64 2 CSF12200Xi TM CSF 1220CXThreat Defense IPS&Malware Defense License 36 Prepaid $0.00 $0.00 2 L-CSF1220CX-TM-3Y CSF 1220CXThreat Defense lPS&,Malware Defense 3Y Subs 36 Prepaid $1,91429 $3.829.78 2 CSF12000 PWR-AC Secure Firewall 1200 Series external PSU for compactmodels Prepaid $0.00 $0.00 2 CAB-AC PowerCord,11OV Prepaid $0.00 $0.00 2 SF-F7200-TD7.6-K9 Threat Defense software 7.6 for 1200 Series Firewall Prepaid $0.00 $0.00 2 CAB-CONS-USB-C 6FT Console cable,USB-C to USB-C Prepaid $0.00 $0.00 2 CSF1200C-RACK-MNT= Secure Frewall1200SeAesrackmountkitforcompactmodels Prepaid $485.29 $970.58 2 SFP-HIOGB-CUIM- CISCOSFP+COPPER TWINAXCABLETWINAXAL CABLE-SFP+SFP+ Prepaid $6223 $124,46 3.3 FT 1 C9500-24Y4C E Catalyst 950024xl/10/25G and 4-port40/100G,Essential Prepaid $12,70856 $12,7OB96 1 CON-SNTP-C95024EY SNTC-24X7X4 Catalyst 950024-port25110BGonIy,Esse 12 Prepaid $0.00 $0.00 1 C9500-DNA-24Y4C-E C9500 DNA Essential%Term License 36 Prepaid $OAO $0.00 1 C9500-DNA-L-E-3Y 36 months-DNA Essentials 3 Year License 36 Prepaid $552.41 $552.41 2 CAB-9K12A-NA Power Cord,125VAC 13A NEMA 5-15 Plug,North America Prepaid $0.00 $0.00 1 CSK-PWR-650WAC-R 65OW AC Config 4 Power Supply front to back cooling Prepaid MOO $0.00 1 C9K-PWR-650WAC-R/2 65OW AC Config 4 Power Supply front to back cooling Prepaid $1,286.02 $1,286.02 1 C9KF1-SSD-BLANK Cisco pluggable SSO storage Prepaid $0.00 $0.00 2 C9K T1-FANTRAY Catalyst 9500 Type 4 front to back cooling Fan Prepaid $0.00 $0.00 1 C9500-NW-E C9500 Network Stack,Essentials Prepaid $0.00 $0.00 1 S95000K9-1715 CAT9300/9400/9500/96000NIVERSAL Prepaid $0.00 $OAO 1 C9500-SSD-NONE No SSD Card Selected Prepaid $0.00 $ODD 1 C95OD-RFID RRD Selected Prepaid $0.00 $0.00 1 NETWORK PNP-LIC Network Plug-n-Play License for zero-touch device deployment Prepaid $0.00 $0.00 1 CAB-AC PowerCord,110V Prepaid $0.00 $0.00 1 NETWORK-PNP-UC Network Plug-n-Play License for zero-touch device deployment Prepaid $ODO $0.00 22 1 Page NRI qty Item Number Description Term(Months) Dining Price ExtPrice Frequency 1 CSF1210CE-TD-K9 Secure Firewall 1210 Appliance,Compact,Threat Defense Prepaid $1.69853 $1,69853 1 CON-SNTP-CSFICETD SNTC-24X7X4 Secure Firewall 121OAppliance,Compact 36 Prepaid $1,002.62 $1,002.62 1 CSF1210CEi-TM CSF 1210CEThreat Defense IPS&,Malware Defense License 36 Prepaid $0.00 MOD 1 L-CSF1210CE-TM-3Y CSF 1210CEThreat Defense IPS&,Malware Defense 3Y Subs 36 Prepaid $1,340.42 $1,340,42 1 SF-F7200-TD7.6-K9 Threat Defense software 7.6 for 1200 Series Frewall Prepaid SM00 $OAO 1 CSF120OC-PWR-AC Secure Firewall 1200 Series external PSU for compact models Prepaid $0.00 $0.00 1 CAB-CONS-USB-C 6FT Console cable,USB-C to USB-C Prepaid $0.00 $0.00 1 CSF1210CE-OSE Secure Firewall 1210CE Essentials Umnse Prepaid $0.00 $0.00 1 CSF12000-RACK-MNT= Secure Frewall1200 Series rackmountldt for compactmodeis Prepaid MS29 $48529 1 C9K-ACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLATION,CITY 4 Prepaid $0.00 $0.00 1 PWR-Cl-1100WAC-P 11ODWACBDr platinum Con6g1 Power Supply Prepaid $0.00 $0.00 1 C9300-SPS-NONE No Secondary Power Supply Selected Prepaid $0.00 $0.00 1 CAB-TA-NA North America AC Type A Power Cable Prepaid $0.00 $0.00 1 C9300-STACK-NONE No Stack Cable Selected Prepaid $0.00 $0.00 1 CAB-GUIDE-1RU 1RU CABLE MANAGEMENT GUIDES 9200 and 93GO Prepaid $0.00 $0.00 1 C9300-NM-BX Catalyst 9300 8 x 10GE Network Module Prepaid $1.456.54 $1,456.54 1 09300-48H-E Catalyst 9300 48-port UPoE+,Network Essentials Prepaid $6,365.47 $6.366.47 1 CON-SNTP-C9302101. SNTC-24X7X4 Catalyst 930048-par 36 Prepaid $3,383.86 $3,383.86 1 C9300-DNA-E-48 C9300 DNA Essentials,48-Port Term Licenses 36 Prepaid $040 $0.00 1 C9300-13NA-E-48-3Y C9300 DNA Essentials,48-porgy 3 Year Term license 36 Prepaid $618.70 $618.70 1 C9300-NW-E-48 C9300 Network Essential,48-port license Prepaid $O.00 $0.00 1 SC9300UK9-1712 Catalyst 9300 XE 17.12 UNIVERSAL Prepaid $0.00 $0.00 1 C9300-SSO-NONE No SSO Card Selected Prepaid $0.00 $OAO 1 C9300-SPWR-NONE No Stack Power Cable Selected Prepaid $0.00 $0.00 1 C9K-NONE Smart Building Application Opt Out SKU Prepaid $0.00 $0.00 1 C9K-ACC-RBFT RUBBER FEET FOR TABLE TOP SETUP 9200 and 9300 Prepaid $0.00 $O.00 1 CSF1210CE-TO-K9 Secure Firewall 1210 Appliance,Compact,Threat Defense Prepaid $1.69853 $1,69853 1 CON-SNTP-CSF10ETD SNTC-24X7X4 Secure Firewall 1210 Appliance,Compact 36 Prepaid $1.002.62 $1,002.62 1 CSF1210CET-TM CSF 1210CEThreat Defense IPS&,Malware Defense License 36 Prepaid $0.00 $0.00 1 L-CSF121OCE-TM-3Y CSF 121OCE Threat Defense IPS&,Malware Defense 3YSubs 36 Prepaid $1,34OA2 $1,340.42 1 CSF12COC-PWR-AC Secure Firewall 1200 Series external PSU for compact models Prepaid $0.00 $0.00 1 CAB-AC PowerOord,110V Prepaid $0.00 $0.00 1 SF-F120O-TD7.6-K9 Threat Defense software 7.6 for 1200 Series Firewall Prepaid $0.00 $0.00 1 CAB-CONS-USB-C 6FT Console cable,US8-C to USB-C Prepaid $0.00 $0.00 1 CSF1210CE-BSE Secure Firewall 1210CE Essentials License Prepaid $0.00 $0.00 1 CSF1200GRACK-MNT= Secure Rrewall1200 Series rackmountkit for compact models Prepaid $485.29 $48529 1 C93DO-48H-E Catalyst 930048-portUPoE+,Network Essentials Prepaid $6.366.47 $6,366.47 1 CON-SNTP-C93021OL SNTC-24X7X4 Catalyst 9300 48-por 36 Prepaid $3,383.86 $3,383.86 1 C9300-DNA-E-48 C9300 DNA Essential,48-Port Term Licenses 36 Prepaid $0.00 $0.00 1 C9300-DNA-E-48-3Y C9300 DNA Essentials,48-port,3 YearTerm license 36 Prepaid $618.70 $618.70 1 C9300-NW-E-48 C9300 Network Essentials,48-pertlicense Prepaid $0.00 $0.00 231 Page NRI Qty Item Number Description Term(months) Billing Price Ext Price Frequency 1 C9K-NONE Smart BuildingAppQwtion Opt OutSKU Prepaid $0.00 $OAO 1 NETWORK-PNP-LiC Network Plug-n-Play License for zero-touch device deployment Prepaid SO.00 $0.00 1 SC93000K9-1712 Catalyst 9300 XE 17.12 UNIVERSAL Prepaid $0.00 $0.00 1 PWR-CI-II00WAC-P 1100WACBO+platinum tonrigIPowerSupply Prepaid $0.00 $0.00 1 C9300-SPS-NONE No Secondary Power SupplySelected Prepaid $0.00 $0.00 1 CAB-TA-NA North America ACType A Power Cable Prepaid $0.00 $0.00 1 C9300-SSD-NONE No SSD Card Selected Prepaid $0.00 $0.00 1 C9300-STACK-NONE No Stack Cable Selected Prepaid $0.00 $0.00 1 C93OD-SPWR-NONE No Stack PowerCable Selected Prepaid $0.00 $O.00 I C9K-ACC-RBFT RUBBER FEET FORTABLETOP SETUP 9200 and 9300 Prepaid $0.00 $0.00 1 C9K-ACC-SCR-4 12-24 and 10-32 SCREWS FOR RACK INSTALLATION,QTY 4 Prepaid $0.00 $OAO 1 CAB-GUIDE-1RU 1 RU CABLE MANAGEMENT GUIDES 9200 and 9300 Prepaid $0.00 $0.00 1 C9300-NM-BX Catalyst 9300 8 x 10GE Network Module Prepaid $1.456.54 $1.45654 1 CAB-AC Power Cord,11OV Prepaid $0.00 $0.00 1 CSF121 OCE-TD-K9 Secure Frewall 1210 Appliance.Compact.Threat Defense Prepaid $1,69853 $1.698.53 1 CON-SNIP-CSFICETD SNTC24X7X4 Secure Firewall1210 Appliance,Compact 36 Prepaid $1,002.62 $1,002.62 1 CSF1210CET--TM CSF 121 OCE Threat Defense IPS&Malware Defense License 36 Prepaid $0.00 $0.00 1 L-CSF1210CE-TM-3Y CSF 121OCE Threat Defense IPS&,Malware Defense 3YSubs 36 Prepaid $1,340.42 $1.340,42 1 SF-F1200-TD7.&K9 Threat Defense software 7.6 for 1200 Series Firewall Prepaid $0.00 $0.00 1 CSF120OC-PWR-AC Secure Frewall1200 Series external PSU for compact models Prepaid $0.00 $0.00 1 CAB-CONS-USB-C 6FT Console cable,USB-C to USB-C Prepaid $0.00 $0.00 1 CSF1210CE-BSE Secure Frewall 1210CE Essentials License Prepaid $0.00 $0.00 1 CSF1200C-RACK-MNT= Secure Firewall 1200 Series rackmaunt kit for compact models Prepaid $485.29 $485.29 1 CSF121 OCE TO-K9 Secure Frewall 1210 Appliance,Compact,Threat Defense Prepaid $1,69853 $1,69853 1 CON-SNTP-CSFICETD SHTC 24X7X4SecureFuewall1210Appliance,Compact 36 Prepaid $1,002.62 $1.002.62 1 CSF121OCET TM CSF 121OCEThreat Defense IPS&Malware Defense License 36 Prepaid $0.00 $0.00 1 L-CSF1210CE-TM-3Y CSF 1210CE Threat Defense IPS&,Malware Defense 3YSubs 36 Prepaid $1,340.42 $1,340.42 1 CSF12000-PWR-AC Secure Frewall1200 Series external PSU for compact models Prepaid $0.00 $0.00 1 CAB-AC PowerCord,110V Prepaid $0.00 $0.00 1 SF-FI200-TO7.6-K9 Threat Defense software 7.6 for 1200 Series Firewall Prepaid $0.00 $0.00 1 CAB-CONS-USB-C 6FT Console cable,USB-C to USB-C Prepaid $0.00 $0.00 1 CSF1210CE-BSE Secure Firewall 1210CE Essentials License Prepaid $0.00 $0.00 1 CSF1200C-RACK-MNT- Secure Frewall1200 Series rackmountkitforcompactmodels Prepaid $485.29 $485.29 1 CG522-E 5GSub-6GHz Cisco Cellular Gateway Prepaid $1,130.73 $1.130.73 1 CON-SNT-CG522EWN SNTC-BXSXNBDSGSub-6GHz Cisco C 36 Prepaid $626.64 $626.64 1 PWR-30W-1-AC 1109M2M Power Supply Temp30WattAC Prepaid $0.00 $0.00 1 SCG-1712 IDS CG 17.12 image for Catalyst Cellular Gateways Prepaid $0.00 $0.00 4 5G-ANTM-SMA-0 56Sub-6&.LTE Advanced Pro Capable Dipole Antenna Prepaid $0.00 $0.00 1 CG-POE-AT PoE option for Cisco Cellular Gateway(EIO)-non FRUable Prepaid $85.68 $85.68 1 FW-EM919O-Vz Frrmwarefor EM9190Verizon Prepaid $0.00 $0.00 1 CG-BRACKET 1 Cellular Gateway Low Profile Mounting Bracket(Default) Prepaid $0.00 $0.00 24 1 Page NRI qty Item Number Description Term(Months) Billing Price Ext Price Frequency 1 AIR-AP-TRAIL-R CeitingGrid Clip for A'uonetAPs-Recessed Mount(Defauld Prepaid $0.00 $0.00 1 POE-STICKER-X POE Sticker for POECG522-E Prepaid $0.00 $0.00 1 AIR-PWRINI6 Power Injector(802.3at)for Aimnet Access Points Prepaid $85.11 $85.11 1 AIR-PWR-CORD-NA AIR line Card Worth America Prepaid $0.00. $0.00 1 MGMTCG-3Y Cellular Gateway 3Y Management License 36 Prepaid $154.00 $154.00 1 SVS-MGMTCG-SWSS Support Standard for SW-Gateway Management License 36 Prepaid $0.00 $0.00 1 MGMT CG Cellular Gateway Management 36 Prepaid $0.00 $0.00 1 CG522-E 5G Sub-6 GHz Cisco Cellular Gateway Prepaid $1,130.73 $1,130.73 1 CON-SNTCG522EWN SNTCBXSXNBDSGSub-6GHz Cisco C 36 Prepaid $626.64 $626.64 1 PWR-3OW-I-AC 1109 M2M Power Supply Memp 30 Watt AC Prepaid $0.00 $0.00 1 SCG-1712 IDS CG17.12 image for Catalyst Cellular Gateways Prepaid $0.00 $0A0 4 5G-ANTM-SMA-O 5G Sub-6&LTE Advanced Pro Capable Dipole Antenna Prepaid $0.00 $0.00 1 CG-POE-AT PoE option for Cisco Cellular Gateway(EIO)-non FRUable Prepaid $85.68 %5.68 1 FW-EM9190-VZ Firmware for EM9190Verizon IPrepaid $O.DO $0.00 1 CG-BRACKET 1 Cellular Gateway Law Profile Mounting Bracket(Default) Prepaid $0.00 $0.00 1 AIR-AP-TRAIL-R Ceiling Grid Clip for AironetAPs-Recessed Mount(Default) Prepaid $0.00 $0.00 1 POE-STICKER-X POE Stickerfor POE CG522-E Prepaid $0.00 $0.00 1 AIR-PWRINI6 Power Injector(SO2.3 at)for Alronet Access Points Prepaid $85.11 $85.11 1 AIR-PWR-CORD-NA AIR Line Cord North America Prepaid $0.00 $DAD 1 MGMT-CG-3Y Cellular Gateway 3Y Management License 36 Prepaid $154.00 $154,00 1 SVS-MGMTCG-SWSS Support Standard for SW-Gateway Management License 36 Prepaid $0.00 $DAD 1 MGMT-CG Cellular Gateway Management 36 Prepaid $0.00 $DAD 2 CSF1220CX-BSE Secure Frewall 1220C Essentials License Prepaid $0.00 $MOO 1 NETWORK-PNP-LIC Network Plug-n-Play License for zero-touch device deployment Prepaid $0.00 $0.00 1 CG522-E SG Sub-6 GHz Cisco Cellular Gateway Prepaid $1,130.73 $1,130.73 1 CON-SNT CG522EWN SNTC 8X5XNBDSGSub-6GHzCiscoC 36 Prepaid $626.64 $626.64 1 PWR-30W-1-AC 1109 M2M Power Supply Temp 30 Watt AC Prepaid $0.00 $0.00 1 SCG-1712 IOS CG 17.12 image for Catalyst Cellular Gateways Prepaid $0.00 $OAO 4 SG-ANTM-SMA-D SG Sub-6&.LTE Advanced Pro Capable Dipole Antenna Prepaid $0.00 $0.00 1 CG-POE-AT PoE option for Cisco Cellular Gateway(EIO)-non FRUable Prepaid $85.68 $85.68 1 F W-EM9190-VZ Firmware for EM9190 Verizon Prepaid $O.00 $0.00 1 CG-BRACKETI Cellular Gateway Low Profile Mounting Bracket(Default) Prepaid $0.00 $0.00 1 AIR-AP-T-RAIL-R Ceiling Grid Clip for AironetAPS-Recessed Mount(Default) Prepaid $0.00 $0.00 1 NETWORK-PNP-LIC Network Plug-n-Play License for zero-touch device deployment Prepaid $0.00 $U.Oo 1 POE-STICKER-X POE Sticker for POECG522-E Prepaid $DAD $0.00 1 AIR-PWRINIG Power Injector(802.3at)for AironetAocessPoints Prepaid $85.11 $8S.11 1 AIR-PWR-CORD-NA AIR Line Cord North America Prepaid $0.00 $0.00 1 MGMTCG-3Y Cellular Gateway 3Y Management License 36 Prepaid $154.00 $154.00 1 SVS-MGMT-CG-SWSS Support Standard for SW-Gateway Management License 36 Prepaid $OAO $0.00 1 MGMTCG Cellular Gateway Management 36 Prepaid $0.00 $0.00 1 CAB-AC PowerCord,11OV Prepaid $OAO $0.00 25 1 Page NRI Qty Item Number Description Term(Months) Billing Price Ext Price Frequency 1 CAB-AC PowerCord,110V Prepaid $0.00 $0.00 1 CAB-AC Power Cord,110V Prepaid $0.00 $0.00 1 NETWORK-PNP-LIC Network Plug-n-Play License for zero-touch device deployment Prepaid $0.00 $0.00 Subtota4 $237,72S.41 Training Credits Qty Item Number Description Term(Months) Billing Price FA Price Frequency 5 TAN-CLC-000 10 Prepaid Trdbft CreditsRedeem W/Cisco Learning Partners Prepaid $0.00 $0.00 Subtotal: $0.00 Services Qty Item Number Description Term(Months) Billing Price Ext Price Frequency 20.00 PS-SNY-END-111 Enterprise Network Consultant III Prepaid $235.00 $4,700.00 211.00 PS-SHY-ENO-111 Enterprise Network Consultant III Prepaid $227.18 $47,93498 44.00 PS-SNY-ENC Enterprise Network Consultant Prepaid $150.00 $6,600.00 1.00 PS-SNY ENGII Enterprise Network Consultant If Prepaid $2,120.00 $2,120.00 1 NY-CONTRACT NYSOGS Cisco Umbrella contract0PM20800 Prepaid $0.00 $0.00 PM20800 Subtotal: $61,3S498 QuoteSubtotah $299.08t1.39 EstlmatedSalesTdc $0.00 QuoteTotal: $299.080.39 Qty Item Number Description Tenn(Months) Billing Price ExtP(Ice Frequency 228.00 PS-SNY END-111 Enterprise Network Consultant III Prepaid $250.00 $57,000.00 1 NYCONTRACr- NYSOGS Cisco Umbrella contrdct#PM20800 Prepaid $0.00 $0.00 PM20800 Subtotal: $57,000.00 Quote Subtotal: $S7,000.00 Estimated Sales Tax: $0.00 QuoteTotah $57,000.00 26 Page NRI Qty Item Number Description Term(Months) Bi0in8 Price Ext Price Frequency 3 210-BFMO PowerEdgeR7625 Prepaid $Z730116 %192.88 3 379-BDTF 2.Sm Chassis Prepaid $0.00 $0.00 3 379-BOSS SAS/SATABackplane Prepaid $0.00 $0.00 3 379-ROTE NORFARSTORAGE Prepaid $0.00 $0.00 3 461-AAIG TRUSTED PLATFORM MODULE 2.0 V3 Prepaid $34AO $103.20 3 321-BIDG Z5 Chassis withupto16SAS4/SATA Drives Smart Flow Front PERC Prepaid $17133 $51359 11 3 338-CGXG AMDEPYC9224Z50GHz24CI48T64MCache(200114ODRS-4800 Prepaid $787.17 $Z361.51 3 338-CGXG AMDEPYC9224250GHz24CI48T64M Cache(20OVV)DORS-48M Prepaid $787.17 $2,36151 3 379-BDCO Additional ProcessorSelected Prepaid $0.00 $0.00 3 412-ABDI Standard Heatsink for 2 CPU Configuration Prepaid $66.77 $200.31 3 370-AHLL Performance Optimized Prepaid $0.00 $0.00 3 370-BBRX 560OMT/S RDIMMS Prepaid $0.00 $0.00 3 780-BCOS Unconfigared RAID Prepaid $0.00 $0.00 3 405-AAZB PERC H755 SAS FRONT Prepaid $1,14653 $3.439.59 3 750-AOWP Front PERC Mechanical Parts,rear load Prepaid $1738 $52.14 3 384-BBOL Performance BIOS Settings Prepaid $0.00 $0.00 3 800-BBOM UEFl BIOS Boat Made With GPTPartition Prepaid $0.00 $0.00 3 750-ADRE High Performance Fan x6 Prepaid $69.15 $207.45 3 450-AIHG Dual,HotPlugPower Supply Redundant(1+1),1400W,Mixed Mode Prepaid $485.20 $1.458.60 3 330-BCBH Riser Confrg26x8FH+2x16LP Prepaid $354.07 $1.062.21 3 338-CQQG PowerEdge R7625 Motherboard V4-338-CQQG Prepaid $0.00 $0.00 3 540-BCOC Broadcom 57414 Dual Port 10/25GbE SFP2%OCP NIC 3.0 Prepaid $246AO $739.20 3 540-BDHD Broadcom 5720 Dual Port 1GbE LOM Prepaid $4831 $144a3 3 470-AEYU No Cables Required Prepaid $0.00 $0.00 3 321-61-XZ Luggage Tag Prepaid $0.00 $0.00 3 325-BEVI PowerEdge 21.1 Standard Bezel Prepaid $17.03 $51.09 3 329-BERC Assembly BOSS Blank Prepaid $059 $1.77 3 611-BBBF No Operating System Prepaid $0.00 $0.00 271 P age NRI Qty Item Number Description Term(Months) Billing Price ExtPdce Frequency 3 605-BBFN No Media Required Prepaid $0.00 $0.00 3 379-BFXS Connectivity Client-Enabled Prepaid $0.00 $0.00 3 634-CYDF Connectivity Module Prepaid $OAO $Q.00 3 528-CTIJ lORAC9,Express 16G Prepaid $147.28 $441.84 3 350-BM No Quick Sync Prepaid $0.00 $OAO 3 379-SCSF iDRAC,Fattory Generated Password Prepaid $0.00 $0.00 3 379-BCQY WRAC Group Manager;Disabled Prepaid $0.00 $0.00 3 770-BBBS No Rack Rails Prepaid $0.00 $0.00 3 631-AACK No Systems Documentation,No OpenManage DVD IGt Prepaid $0.00 $0.00 3 340-DCWB PowerEdge R7625 Shipping Prepaid $0.00 $0.00 3 340-DCXY PowerEdge R7625 Shipping Material Prepaid $51.78 $15534 3 389-EFMI PowerEdgeA7625NoCEorCCCMarking Prepaid $0.00 $O.00 3 817-BBBP None Required Prepaid $0.00 $0.00 3 883-7022 ProSupport 7x24 Technical Support and Assistance 3 Years 12 Prepaid $1,243.91 $3.731.73 3 883-7032 ProSupport Next Business Day On-Site Service After Problem 12 Prepaid $0.00 $0.00 Diagnosis 3 Years 3 SM-7034 Hardware Limited Warranty Plus On-Site Service 12 Prepaid $8653 $25959 3 989-3439 Thank you choosing Dell ProSupport.For tech support visit/ Prepaid $0.00 $0.00 www.dell.com/supporter call 1-800-945-3355 3 900-9997 On-Site Installation Declined Prepaid $0.00 $0.00 6 370-BBRY 32GB RDIMM,56OOMT/s,Dual Rank Prepaid $73295 $4,397.70 3 400-AXSW 960GBSSOSATA READ INTENSIVE 6GBPS5122.SIN HOT-PLUG AG Prepaid $589.43 $1.768.29 DRIVQ 1 DWPD 6 450-AAL1 NEMA 5-15P to C13 Wall Plug,125 Volt 1S AMP,10 Feet(3m),Power Prepaid $0.00 $0.00 Cord,North America 6 414-BBIB PCIe Blank Faller Law Profile Prepaid $0.00 $0.00 1 OMNIA-CONTRACT TOSYNNIXOmnia Partners contract#R200803CyberSecurity Prepaid $0.00 $0.00 R200803 Solutions and Associated Products&Services 1 CORE-NOFGHT No freight charge to client Prepaid $0.00 $0.00 Subtotal: $31,64437 Quote Subtotal- $31,644.87 EstimatedSalesTaro $0.00 Quota Total: $31.644S7 281Page NRI Cisco Cisw Systems,Inc.Additional Terms and Conditions for Authorised User Aereements under GROUP 73600 AWARD 22802 INFORMATION TECHNOLOGY UMBRELI.A CONTRACT-MANUFACTURER BASED (STATEWIDE] Contract Number PM20800 Cisco Systems, Inc. ("Cisco"or"Contractor") is pleased to offer Cisco Products and Services ("Cisco Technology")to the Authorized User issuing a RFQ or similar bid document("RFQ")under the terms and conditions of the NYS OGS Contract Number PM20800 ("Contract") as further set forth below. For purposes of this Authorized User Agreement, Cisco Technology shall refer to Cisco's Hardware, On- Premise Software,Cloud Products and Services. Whereas the parties intend to enter into an Authorized User Agreement that Includes additional and/or alternative terms and conditions that result in a transaction which is,on an overall basis,more favorable to the Authorized User than if the transaction did not include such additional or alternative terms and conditions,the parties agree to the terms and conditions setforth herein.By accepting a Cisco authorized Reseller response to RFCL Authorized User hereby agrees that the conditions set forth in subsections(1) through(iii)of Appendix B,Section 28(b)of the Contract are met and further accepts and agrees that the following terms and conditions are hereby incorporated into the Contract: A. The Cisco End User License Agreement ("EULW), available at httos://w%vw.cisco.com/c/en/us/aboulBegalLSIoud-and- �oftware%nd user license aereement_html_ is hereby incorporated into the Contract by reference and applies to Authorized User's usage of Cisco Technology acquired under the Contract.As setforth in the EULA,and for the avoidance of doubt,any changes to the EULA apply only to Cisco Technology acquired or renewed after the date of the EULA's modification.In the event of a conflict between the Contract and the EULA as it relates to the Authorized,User's usage of Cisco Technology,the terms and conditions of the EULA shall take precedence,unless and only to the extent a term or condition in the EULA conflicts with a substantially similar applicable term or condition in a provision referenced In Appendix B,Section 28(c)of the Contract. 2. The Contracts definition of"Data"is replaced in its entirety with the following definition of "Data": any information,text,audio,video,formula,or algorithms thatthe Authorized User may provide to Contractor pursuant to Authorized Users use of Cisco Technology under the Contract. Notwithstanding the foregoing, "Data" excludes "Systems Information" as that term is defined In Contractor's Systems Information Data Brief("Systems Information Data Brief°)available at httas://trustaortal.cisco.com/c/r%ta/home.html("Cisco's Trust Portal'). 3. In order to procure certain Cisco Technology offered under the Contract that stores,acts upon and/or locates Data OCONUS,the Authorized User may agree to Data location outside of the Continental United States(OCONUS").i Accordingly,if Authorized User specifies that Data may r Far the convenience of Authorized Users when procuring Cisco Technology under RFQs that specify OCONUS, Cisco Technology is included on the Contract that may store,act upon,and/or locate Data in Data Centers 291Page NRI Cisco be located OCONUS in a RFQ or otherwise procures Cisco Technology that stores, acts upon and/or locates Data OCONUS pursuantto the RFQ,Authorized User agrees to allow Data(in transit and at rest)to be stored,acted upon,and located in Data Centers OCONUS.if Authorized User specifies that Data is to be located in the Continental United States ("CONUS") in a RFQ or otherwise procures CONUS Cisco Technology pursuant to the RFQ, an Authorized User who properly configures its organization for U.S. based location will have its Data acted upon, located,and stored at rest in data centers physically located within the United States.To facilitate certain operations and aspects of CONUS Cisco Technology,certain exceptions to the foregoing exist, specifically, cross-border transfers of Data may occur when 1) a user engages in collaboration with users outside of the United States,2)a user travels to a location outside of the United States,and/or 3)a user shares Data with a Cisco employee,subcontractor or agent who provides support and/or maintenance services,including helpdesk,online and support services, in a Follow-the-Sun model globally- Data will be secured as set forth in Cisco's Information Security Exhibit available at https:/Itrustportal.cisco.com/c/r/ctp/trust- portal.html#/1604543381171981("Information Security Exhibit°)and in accordance with Cisco Privacy Data Sheets applicable to the Cisco Technology("Privacy Data Sheets")located at Cisco's Trust Portal.For the avoidance of doubt,this paragraph applies to Lots 1,2 and 3 of the Contract and does not apply to services covered under Lot 4 of the Contract 4. Notwithstanding anything to the contrary, unless Authorized User procures Cisco Expert Care National Services,Authorized User and Contractor hereby acknowledge and agree that Clsco's support and maintenance services,including but not limited to Cisco SmartNet Total Care(SNTC) and Software Support Services,may be provided in a Follow-the-Sun model by Cisco's Technical Assistance Centers (TAC) and other support personnel located globally who may access Data directly,or indirectly,from OCONUS.If Authorized User procures Cisco Technology that includes support,support shall be a Follow-the-Sun model by personnel located globally unless Cisco offers and Authorized User procures applicable Expert Care National Services. For the avoidance of doubt, unless Authorized User procures Cisco Expert Care National Services, Authorized User consents to the global delivery of all Cisco helpdesk,online and support services. S. Cisco's standard Data handling,retention and security processes,procedures and policies as set forth in Cisco's Information Security Exhibit and applicable Privacy Data Sheets shall apply to the Authorized User's usage of Cisco Technology for orders placed under the Contract and shall take precedence over any related requirements in the Contract, including,without limitation those found in Section 2.72 (Security) or Section 3 for Contractor's Cloud Solutions where they are consistent with or exceed such requirements in Section 2.72 and/or Section 3 of the Contract. Notwithstanding the foregoing,any time periods set forth in Section 2.72 and/or Section 3 shall not apply unless required by applicable law or as modified herein.As related to Cloud Solutions and Section 3 terms,Contractor will encrypt Data in transit and at rest,retain and return Data, and store,process and retain Data in the locations indicated and only to the extent and as set forth in Contractor's Privacy Data Sheet for the applicable Cloud Solution purchased by Authorized User.In particular,the parties further acknowledge and agree to the following: OCONUS. Upon Authorized User's request prior to the issuance of a RFQ.Cisco and/or its Resellers will inform the Authorized User if a Cisco Technology intended to be procured stores,acts upon,and/or locates Data OCONUS, 301 Page NRI IIIlol '1 $ Cisco a. Pursuant to Section 2.72.2 (Security) of the Contract, Contractor Security Incident notification policy is as follows: Contractor shall notify Authorized User at the email address(es) designated by Authorized User in the RFQ within 48 hours or sooner if required by applicable law of Cisco's confirmation of a Security Incident.The Contract's definition of'Security Inddent"is replaced in its entirety with the following definition of "Security incident": a successful or imminent threat of unauthorized access,use,disclosure,breach, modification, or destruction of information or Data; or interference with information technology operations. b. Section 2.72.2 (Data Breach-Required Contractor Actions) of the Contract is hereby revised as follows:in the event of a Data Breach,the Contractor shall:(i)notify the NYS Cyber Command Center at cycom@its.ny.govand(518)242-SO45(normal business hours or(518)292-2200(after hours,weekends,holidays),DHSES GIRT at cirt@dhses.ny.gov, and the affected Authorized Users'representative(s)at the email address(es)designated in the RFQ as soon as possible,but no greater than 48 hours or sooner if required by applicable law,from the time the Contractor confirms Data Breach.Cisco's commitment to notify the NYS Cyber Command Center by telephone number is conditioned upon NYS Cyber Command Center adequately staffing such phone number with a 24x7 call center designated to field Data Breach notifications;(ii)include a description of the incident,the effect of the incident and the procedure for rectifying the incident In the content of any notice to affected parties to whom notice of the Data Breach is required herein; (iii) coordinate all communication regarding the Data Breach with the NYS Cyber Command Center,DHSES CIRT,and Authorized User(including possible communications with third parties); (iv) cooperate with the Authorized User, NYS Cyber Command Center, DHSES CIRT, and any Contractor working on behalf of the Authorized User or the NYS Cyber Command Center in attempting(a)to determine the scope and cause of the breach and (b) to prevent the future recurrence of such security breaches; and(v) promptly take commercially reasonable steps to mitigate the effects and minimize any damage resulting from the Data Breach.Contractor shall provide written notice to the Authorized User of initial remedial action taken by the Contractor to mitigate the Data Breach.if Contractor is unable to mitigate the Data Breach within a reasonable timeframe as required by applicable law and services become unavailable as a result of Contractor's inability to timely mitigate the Data Breach, Authorized User may contract with a third party to provide the required services and the Contractor will be responsible for the reasonable costs of those directly related services. c. Section 2.72.4(Security Reports):Contractor's written descriptions of its physical and/or virtual security and/or internal control processes are available on Cisco's Trust Portal for the Authorized User's review. d. Pursuant to Section 3.4.3(Contractor Access to Data)of the Contract,the parties agree that Data may be used, including copied, transferred, accessed, and monitored, in accordance with Contractor's Privacy Data Sheets for applicable Cisco Technology. Additionally,Systems Information shall be used in accordance with Contractor's Systems information Data Brief and Personal Data,as that term Is defined in Contractor's Personal 311Page NRI Cisco Data — Data Brief available at Cisas Trust Portal, shall be used in accordance with Contractor's Personal Data—Data Brief_ e. Section 3.7(Encryption)of the Contract-Data will be encrypted as set forth in the Privacy Data Sheet for the applicable Cisco Technology.Upon reasonable request of Authorized User, Contractor will provide additional information on the level of encryption that a particular Cisco Technology implements to enable the Authorized User to make an informed decision based on its dskassessmentasto the sufficiency ofthe encryption level that Contractor uses for a particular Cisco Technology. This Agreement represents the entire understanding of the parties with respect to its subject matter and supersedes any prior oral orwritten communications or understandings with respectto thesubject matter herein.This Agreement may only be amended by a written document signed by the Authorized User and Contractor_Any conflict between the Contract and this Agreement shall be resolved by giving priority to the additional and/or alternative terms and conditions of this Agreement_ 321Page NRI Statement of Non-Collusion STATEMENT OF NON-COLLUSION (To be completed breach Bidder). In accordance with Section 103-d General Municipal Law, effective September 1, '1966, every bid or proposal hcreaftor made to a politicat..subdivision of the State of any public department,agency,.or official thereof or to a fore district or any agency or official-thereof for work or services performed or to be performed.or goods sold or to be sold,shall contain the following statement subscribed to by the bidder and affirmed by such bidder as true under the penalties of perjury;non-collusive bidding certification. A. By submission of this.bid,each bidder and each person signing on behalf of any bidder certifies,and in the case of a joint'bid, each party thereto certifies as to its own organization, under penaltyy of perjury,that to the best of knowledge and belief. (1) The prices,in this bid have been arrived at independently without collusion, consultation, communication,or agreement, for the purpose of restricting compedtion, as to any matter relating to such.prices with any othcr,bidder or Fury competitor. (2) Unless.otherwise required by law,the prices which have been quoted in this bid have not been knowingly disclosed by the bidder and will not knowingly be disclosed by the bidder prior to opening,directly or indirectly,to any other bidder or to any competitor. (3) No attempt has been made or wilt be made by the bidder to induce any other person, partnership, or corporation to submit or not to submit a bid for the purpose of restricting campetitioq. B. The person signing,this bid or proposal certifies that,he has fully informed himself regarding the accuracy of the statements contained in.this certification,and tindetVi6 statements contained in'this certification; and under the penalties of perjury, affirms the truth thereof, such penalties being applicable to the bidder,as Weil as the person signing in its behalf. C. That attached liorcto(ifa corpotatc.bidder)is a certified copy of resolution-authorizing the execution of this certificate by the signature of this bid or proposal on behalf ofthe'corporate bidder. RESOLUTION Resolved that JasonEickmann of the (Ni mo.,ofsignatory) Core BTS,inc.,Wa NRI Be authorized to sign and submit the bid (Name of Corporation) Or proposal of this corporation for the following Project: Infrastructure Upgrade PEo ect Bid.20250512102935 August 2025 Revision and-to include in such bid or proposal the certificate as'to non-collusion required by section one-hundred-three- d(103-d)of the General Municipal Law as'the act and deed of such corporation,and for any inaccuracies or miss-statements in such certificate this corporate bidder shall be liable under the penalties of perjury. The foregoing is true and,correct copy of.the resolution adopted by Core BTS,Inc.,d/ la NRI corporation at a meeting of the Board of Directors jield on the 2 day of (SEAL OF THE CORPORATION), Lawsaf New York,1965 _ Ch.751,Sec.103-d,as amended& ; eSTectiveon September lQlRGS Q�' � '� Signature: 33 P a g e NRI Terms and Conditions 1. Payment Terms.Payment is due within thirty(3o)days of invoice date.After this time period,interest accrues at the lesser of the maximum rate permitted under applicable law or one and one-half percent(1.5%)per month from the date due until paid.We shall have a purchase money security interest in the products delivered by us to secure payment of the purchase price and any installation charges until they are paid in full by you.If invoice is not paid by you after 6o days, you authorize us to file all documents(including UCC financing statements)deemed necessary by us to protect and maintain our security interests. 2. Independent Contractor:Taxes.We will perform all services hereunder in our capacity as an independent contractor and not as an employee or agent of yours.Our employees shall not be entitled to any privileges or benefits that you may provide to your employees,and we shall be responsible for payment of all unemployment,social security,federal income(state and local income where applicable)and other payroll taxes imposed by any governmental body on us in regard to our employees who are engaged in the performance of the services.Pricing set forth herein is exclusive of applicable sales,use and similar taxes assessed on the performance of any services.You agree to reimburse,indemnify and hold us harmless from and against any such tax,penalty and interest thereon levied against us for the provision of services to you hereunder. 3. No Hirine.For the term of the project and for a period of one year thereafter,you agree not to hire,solicit or accept solicitation of,through employment or otherwise,directly or indirectly,any of our employees or independent contractors with whom you have had any contact during the project,unless you obtain our prior written consent.Should you hire an employee or independent contractor of ours through employment or otherwise within this time period without our prior written consent,you will immediately pay as liquidated damages to us an amount equal to the relevant person's then current annual compensation(or the amount paid to or on behalf of the person in the last 12 months,in the case of an independent contractor). 4. Warran . a. We warrant and represent that the services will be performed in a skillful and workmanlike manner according to those standards generally prevailing among consultants performing similar services under similar circumstances.To the extent that we are not the manufacturer of any hardware or software products that you may purchase as a result of or relating to our Services,we do not provide any warranty on such products,whether with respect to their design, performance,functionality or compatibility with your existing system.Any warranty with respect to product must come from the manufacturer.Our product procurement distributor or we will pass through to you any applicable warranties of the manufacturer,to the extent permissible. b. EXCEPT FOR THE EXPRESS WARRANTIES STATED IN THIS SECTION,WE DISCLAIM ALL WARRANTIES INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FORA PARTICULAR PURPOSE. 5. Our Indemnity.We will indemnify,defend and hold you harmless from and against any claims,liabilities, losses,expenses or damages(collectively,"Damages")caused by the services performed or the work delivered by us under these terms infringing any copyright,trade secret or any other proprietary right of any third party.Excluded from such indemnification are any claims related to(i)services performed on equipment or software which you covenanted that we had the rights to modify as set forth in Section 7 below,(ii)services performed to your specification or design and(iii) infringement resulting from or caused liy your misuse or unauthorized modification of systems or product.We will also indemnify,defend and hold you harmless from and against any Damages resulting from our willful misconduct or negligent acts or omissions in performing the services which are the subject of these terms,except to the extent such Damages are caused by the willful misconduct or negligence of you,your employees or agents.Our obligation to indemnify and defend you with respect to any claim shall be subject to(i)your providing us with prompt notice of such claim,(h)our having sole control over the defense and settlement thereof,(iii)your providing us with the information and assistance necessary to defend or settle such claim as reasonably requested by us,and(iv)the limitations on liability set forth in Section 6 below. 6. Limitations of Liability.WE WILL NOT BE LIABLE FOR INCIDENTAL,SPECIAL,PUNITIVE, INDIRECT OR CONSEQUENTIAL DAMAGES,INCLUDING FOR LOSS OF DATA OR ITS USE OR LOST PROFITS OR OTHER ECONOMIC DAMAGES,EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.With the exception of indemnification for intellectual property infringement,your right to recover Damages from us in aggregate of all claims is limited to the amounts paid to us by you in the preceding twelve(12)months.You acknowledge that this limitation of liability is part of the consideration and was considered by us in establishing the prices and rates to be charged to you,which,but for this limitation,would have been higher. 7. Your Covenants.You covenant that:(i)you have the authority to agree to these terms and the funding necessary to pay for the requested services;(ii)you have title to or license or rights to use or modify any software or products which you have requested us to modify as part of such services;and(iii)you will provide us necessary access to your personnel, appropriate documentation and records and facilities in order for us to timely perform such services. 8. Requests for Changes.No change in the services provided hereunder will be performed until we receive a properly issued and executed Change Order;provided,however,that nothing herein will relieve you of the obligation to pay us for services rendered which were requested by you but are not documented in such a properly issued and executed Change Order or within the applicable scope of work. 9. Confidentiality.Each party acknowledges that it and its employees or agents may,in the course of the project,be exposed to or acquire information that is proprietary or confidential to the other party.Each party agrees to hold such information in strict confidence and not to discuss or disclose any such information to any third party for a period of three years.The parties acknowledge that the provisions of this paragraph shall not apply to:(a)information which at the time of disclosure is,or without fault of the recipient becomes,generally available;(b)information which either party can show was in its possession at the time of disclosure or was independently developed by it;(c)information received from a third 341Page NRI party which had the right to transmit same without violation of any secrecy agreement with the other party;and(d) information which is required to be disclosed pursuant to court order or by law. 10. Termination of Agreement.Either party may terminate our engagement at any time upon 3o days prior written notice to the other.Unless otherwise expressly stated in the body of this Agreement or related order(s), termination for convenience or default by Customer of any(i)licensing or subscriptions,(ii)products ordered from NRI that NRI cannot cancel with NRI's vendors,or(iii)services with a fixed term,shall incur a termination fee equal to i00%of the unpaid price of the product and/or the unpaid remainder of the term,payable to NRI in full upon the effective termination date. In the event of termination for convenience or default by Customer for products or services not subject to the preceding paragraph,Customer shall within thirty(30)days of the date of termination pay NRI all amounts owed for Products and Services provided by NRI during the Term of this Agreement up to and including the date of termination. 11. Entire Agreement:Amendment.These terms and the accompanying engagement letter sets forth the entire understanding of the parties with respect to the subject matter hereof and is binding upon both parties in accordance with its terms and may be amended only by an entry signed by both parties.There are no understandings,representations or agreements other than those set forth herein. 12. Assignment.You may not assign any of the rights or obligations hereunder without the prior written consent of NRI. 13. Notices.Any notice or communication from one party to the other concerning the terms hereof shall be in writing and shall be sent by certified mail,return receipt requested and postage prepaid or by commercial overnight mail to the most recent address that either party has specified in writing to the other. 14. Governing Law.These terms shall be governed by and construed in accordance with the laws of the State of Delaware. 15. Force MWeure.Neither party shall be liable to the other for any failures or delays arising out of conditions beyond its reasonable control,including,without limitation,work stoppages,fire,civil disobedience,delays associated with product malfunction or availability,riots,rebellions,storms,electrical failures,delays caused by the other party,and acts of God and similar occurrences. 16. Waiver:Severability.Any waiver of any right or default shall be effective only in the instance given and if in writing and signed by the party against whom it is sought to be enforced and shall not operate as or imply a waiver of a similar right or default on any other occasion.If any term or provision hereof should be declared invalid by a court of competent jurisdiction,the remaining terms and provisions hereof shall be unimpaired,and the invalid terms or provisions shall be replaced by such valid terms and provisions as come closest to the intention underlying the invalid term or provision. RFP Exceptions - Town of Southold Penalty Clause Timeliness of Completion The Vendor shall complete the full scope of work outlined in this RFP within six(6)months of the contract start date. ar each t irly(3s) a, a portca Cher that the . jest e e,ds eadli ; t MEall eur nanc'a enal 3 o 000.00 hieh w l be deduce cam th o ati�n du tc�the verado . NRI Exception: Given the current economic and supply chain conditions,NRI cannot agree to this item as written.All products and/or services are subject to availability at the time of the order, and product backorders are not uncommon for products in high demand. Additionally, manufacturers periodically discontinue products and introduce new models; NRI has no control over the timing of any product obsolescence, discontinued availability, and price changes. Per company policy, NRI accepts liability for direct damages only. NRI will not agree to"a financial penalty." Limitations of Liability. NRI WILL NOT BE LIABLE FOR INCIDENTAL, SPECIAL, PUNITIVE,INDIRECT OR CONSEQUENTIAL DAMAGES, INCLUDING FOR LOSS OF DATA OR ITS USE OR LOST PROFITS OR OTHER ECONOMIC DAMAGES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. With the exception of indemnification for intellectual property infringement, the Town of Southold's right to recover Damages from NRI in aggregate of all claims is limited to the amounts paid to NRI by the Town of Southold in the preceding twelve (12) months. The Town of Southold acknowledges that this limitation of liability is part of the consideration and was considered by NRI in establishing the prices and rates to be charged to the Town of Southold, which, but for this limitation, would have been higher. 35 1 P a g e NRI Performance Standards The vendor's work shall meet or exceed all performance standards and technical specifications detailed in the RFP.If,at any point during the project or within six(6)months of the completion date,the Information Technologies Department determines that the contract has failed to meet one or more of the stated performance requirements,the vendor shall be subject to the following penalties: For each pei or ,ance def cien-. i eratif ed, a enal, of . . .4-M)o shall b cieduc ed� o, :a rice ciu tc�the. e der.. If e cu. ulati erformance pe aloes exceed Yo° of th contract rice the `own of Sour ci a i ht to tetanus t flee co tract fn cause. NRI Exception: Per company policy,NRI accepts liability for direct damages only. NRI will not agree to performance penalties. Limited Warranty NRI warrants to the Town of Southold that the Services will be performed in a professionally diligent manner by qualified personnel and that the Services will materially conform to all applicable requirements and specifications identified in the RFP.If NRI fails to perform the Services as warranted,the Town of Southold shall so notify NRI within fifteen(i5)business days after the date such nonconforming Services were rendered. Such notification shall include a reasonably detailed description of the nature of the nonconformity with the above limited warranty. Within thirty(3o)days after receipt of such written notification,NRI will re-perform such nonconforming Services at no additional charge to the Town of Southold or,if such re-performance still does not provide Services as warranted,NRI will refund any moneys paid to NRI with respect to such nonconforming Services. Termination for Convenience Notwithstanding any other provision,the Town of Southold reserves the right to terminate this contract for convenience at any time upon thirty (3o) days written notice. In the event of such termination for convenience,the Town of Southold shall be responsible for all work completed to date. -:till i shal not 1a irk e for an e m nano fees or enalttes. is penal, c se is designs to i centivie e vendor tea cc�mplete e roject n time an to e ; erfar. ante s artdard utlitted in + The time mess a d perfct .;ance pe ties p c�vide fin isincent es, ile e tex xinatiot for conveme--- wn clause rcttec Tca of .TURF'old s Wili�v t ermfln e t e contract the tnttn al`t dee- it necess NRI Exception: Unless otherwise expressly stated in the body of this Agreement or related order(s),termination for convenience or default by the Town of Southold of any(i)licensing or subscriptions or (ii) products ordered from NRI that NRI cannot cancel with NRI's vendors(inclusive of vendor services with a fixed term),shall incur a termination fee equal to i00%of the unpaid price of the product and/or the unpaid remainder of the term,payable to NRI in full upon the effective termination date. Liquidated Damages e time ess and per ormance penalty re resented a t�ve repress t li uidate da na es as reasonabl s,:mate of the Td of South<ld s actual dame in the ev nt o ela, or sciences NRI Exception: Per company policy, NRI accepts liability for direct damages only. NRI will not agree to liquidated damages. Limitations of Liability. NRI WILL NOT BE LIABLE FOR INCIDENTAL, SPECIAL, PUNITIVE, INDIRECT OR CONSEQUENTIAL DAMAGES,INCLUDING FOR LOSS OF DATA OR ITS USE OR LOST PROFITS OR OTHER ECONOMIC DAMAGES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. With the exception of indemnification for intellectual property infringement,the Town of Southold's right to recover Damages from NRI in aggregate of all claims is limited to the amounts paid to NRI by the Town of Southold in the preceding twelve (12) months. The Town of Southold acknowledges that this limitation of liability is part of the consideration and was considered by NRI in establishing 36 1 P a g e NRI the prices and rates to be charged to the Town of Southold, which, but for this limitation, would have been higher. 371Page NRI