Wireless Network Deployment at Peterson Space Force Base

Other / Unclassified

This document is a DoD Instruction (DoDI) titled "Commercial Wireless Local-Area Network (WLAN) Devices, Systems, and Technologies." It establishes policy, assigns responsibilities, and provides procedures for the use of commercially procured wireless local-area network devices, systems, and technologies that transmit, receive, process, or store unclassified and classified information.

Key aspects include:

• Establishing Wi-Fi Protected Access 3 (WPA3)-Enterprise using 192-bit mode as the DoD encryption standard.
• Specifying minimum security measures for DoD-owned and operated WLAN-enabled portable electronic devices (PEDs).
• Clarifying the use of non-DoD WLAN systems.
• Promoting reciprocity for authorized DoD users to access unclassified WLANs with a DoD WLAN-enabled PED.

This instruction is highly relevant for any vendor or entity involved in providing or supporting wireless local-area network (WLAN) devices, systems, or technologies for the Department of Defense. It outlines the mandatory security standards, encryption protocols (WPA3-Enterprise 192-bit mode), certification requirements (NIST, NIAP), and operational procedures that must be adhered to. Understanding these requirements is crucial for developing compliant products and services, and for bidding on opportunities related to DoD WLAN infrastructure and security.

Other / Unclassified

This document, "Continuous Monitoring Annex 1.1.0," published by the National Security Agency (NSA) Central Security Service, provides guidance for implementing Continuous Monitoring (CM) within Commercial Solutions for Classified (CSfC) environments. It details the architecture, monitoring points (MPs), data sources, and requirements for collecting and analyzing network and security data to maintain ongoing awareness of security posture, detect anomalies, and support risk management decisions.

This annex is crucial for any bidder or integrator involved in CSfC solutions that require continuous monitoring. It outlines the specific requirements and configurations necessary for monitoring various network segments (Black, Gray, Red) and components, including End User Devices (EUDs). Understanding these requirements is essential for designing, implementing, and validating CM capabilities that meet CSfC standards. The document specifies the roles of different monitoring points (MPs), the types of data to be collected, and the importance of Security Information and Event Management (SIEM) systems. Bidders should pay close attention to the detailed requirements for each MP, logging, SIEM integration, and specific Capability Packages (CPs) like Mobile Access (MA), Multi-Site Connectivity (MSC), and Campus WLAN, as these will directly impact solution design and compliance.

Other / Unclassified

This document is the "Commercial Solutions for Classified (CSfC) Campus Wireless Local Area Network (WLAN) Capability Package V3.1", dated January 28, 2025. It provides guidance for implementing secure campus wireless networks using Commercial Off-the-Shelf (COTS) products. The document outlines a reference architecture and configuration information to protect classified data in transit through layered encryption (WPA3 and IPsec).

This document is highly relevant for potential bidders as it details the technical requirements and architecture for a secure campus WLAN. It specifies the components, network configurations, security protocols (WPA3, IPsec), authentication methods (MFA), and operational requirements necessary to achieve the required level of assurance for protecting classified data. Bidders can use this document to understand the government's technical expectations and to design solutions that meet these stringent security standards. Key areas include network segmentation (Red, Gray, Black Networks), End User Device (EUD) requirements, infrastructure components, and configuration guidelines. The document also includes a change history detailing updates across various versions, which can inform bidders about the evolution of these requirements.

Performance Work Statement (PWS)

To design, develop, and implement a Commercial Solutions for Classified (CSfC) Wireless Local Area Network (WLAN) Capabilities Package (CP) architecture to extend both SIPRNet and NIPRNet over a government-controlled network at the SOCNORTH HQ building on Peterson Space Force Base, Colorado. The solution must be NSA-compliant and nested within the USSOCOM CSfC wireless solution.

The contractor shall provide all labor, materials, equipment, and services for a phased approach:

• CLIN 0001 – Study and Design: Conduct pre-onsite assessments, site surveys, and deliver a High-Level Design (HLD) and Low-Level Design (LLD) for government approval. A Notice to Proceed (NTP) is required for this phase.
• CLIN 0002 – Equipment Procurement and Installation: Procure, install, configure, and test equipment based on the approved HLD/LLD, leveraging Government Furnished Equipment (GFE). An NTP is required.
• CLIN 0003 – Testing and Validation: Perform testing and validation of the installed network to ensure performance and security compliance. This phase is evaluated by government personnel.
• CLIN 0004 – Deliverables (NSP): Deliver all final documentation, including as-built documentation, heatmaps, and configuration files.

Includes a kick-off meeting, project schedule maintenance, regular progress reports, and serving as the primary technical liaison.

• Signal Coverage: 95% of designated area must achieve RSSI of -65dBm or better.

• Channel Interference: Minimize co-channel interference, maintain SNR of at least 25dB.

• Security Compliance: Adherence to NSA CSfC WLAN CP, DoD STIGs, and NSA Common Criteria.

• Schedule Adherence: On-time delivery of milestones.

• Period of Performance: 60 days after receipt of award.

• Place of Performance: SOCNORTH HQ building on Peterson Space Force Base, Colorado.

• Compliance with NSA CSfC standards, USSOCOM Enterprise Solution CSfC, DoD STIGs, and NSA Common Criteria.

• Personnel may require required clearances.

• Cable runs to APs must not exceed 100 meters.

• Wireless project must not disrupt daily operations.

• A Site Wireless Security Operating Plan (SOP) will be required.

Form / Attachment / Pricing Sheet

This document is an Excel spreadsheet listing on-hand equipment required for the SOCNORTH opportunity. It details specific hardware and software components, quantities, and delivery dates.

• Manufacturer Name and Part Number: Identifies the vendor and specific product.
• Item Description: Provides a brief description of the equipment (e.g., encryption platforms, servers, network switches, access points).
• Quantity: Specifies the number of units required for each item.
• Requested Delivery Date: All items are requested for delivery by October 31, 2025.
• Delivery Destination: All items are to be shipped to 371 VANDENBURG ST, BLDG 30 PETERSON SFB, CO 80914.
• Ordering DODAAC and ShipTo DODAAC: H92176 for all listed items.
• Additional Information: Includes details such as TAA compliance, service periods (e.g., 36 Months), and specific software bundles.

This attachment is crucial for bidders to understand the specific hardware and software components required for the opportunity. It outlines the exact items, quantities, and delivery timelines, which are essential for accurate pricing, procurement planning, and proposal development. Bidders must ensure they can source and deliver these items as specified by the requested delivery date and to the designated location.

Statement of Work (SOW) / Performance Work Statement (PWS)

The objective of this effort is to design, develop, and implement a Commercial Solutions for Classified (CSfC) Wireless Local Area Network (WLAN) Capabilities Package (CP) architecture to extend both SIPRNet and NIPRNet over a government-controlled network at the SOCNORTH HQ building on Peterson Space Force Base, Colorado. The solution must be NSA-compliant and nested within the USSOCOM CSfC wireless solution.

The contractor shall provide all labor, materials, equipment, and services for a phased approach:

• CLIN 0001 – Study and Design: Conduct pre-onsite assessments, site surveys, and deliver a High-Level Design (HLD) and Low-Level Design (LLD) for government approval. A Notice to Proceed (NTP) is required for this phase.
• CLIN 0002 – Equipment Procurement and Installation: Procure, install, configure, and test the CSfC WLAN solution based on the approved HLD/LLD, leveraging Government Furnished Equipment (GFE). An NTP is required.
• CLIN 0003 – Testing and Validation: Perform testing and validation of the installed network to ensure it meets performance and security requirements. This will be evaluated by government personnel.
• CLIN 0004 – Deliverables: Provide all final documentation, including as-built documentation, heatmaps, and configuration files.

The contractor will also provide project management support, including a kick-off meeting, schedule maintenance, progress reporting, and serving as the primary technical liaison.

• Signal Coverage and Strength: 95% of the designated coverage area must achieve an RSSI of -65dBm or better.

• Channel Interference: Minimize co-channel interference, maintaining an SNR of at least 25dB.

• Security Compliance: Adherence to NSA CSfC WLAN CP, DoD STIGs, and NSA Common Criteria standards.

• Schedule Adherence: Timely delivery of all milestones.

• The delivery date is 60 days after receipt of award.

• The location is the SOCNORTH HQ building on Peterson Space Force Base, Colorado.

• Compliance with NSA CSfC Capabilities Package standards, USSOCOM Enterprise Solution CSfC Capability Packages, DoD STIGs, and NSA Common Criteria.

• Personnel may require security clearances (DD254 and NISPOM compliance mentioned).

• Cable runs to APs must not exceed 100 meters.

• The wireless project must not disrupt SOCNORTH's daily operations.

• A Site Wireless Security Operating Plan (SOP) will be required.

Form / Attachment / Pricing Sheet

This document is a bid schedule, likely intended for bidders to provide pricing for CLINs (Contract Line Item Numbers) associated with an opportunity.

• CLIN 0001: Study and Design (Fixed Price - FFP)
• CLIN 0002: Equipment Procurement and Installation (Not-to-Exceed - NTE)
• CLIN 0003: Testing and Validation (Not-to-Exceed - NTE)
• CLIN 0004: Deliverables (Not Specified - NSP)
• Contract Total: $500,000.00

Bidders should use this schedule to understand the cost breakdown expected for the opportunity. It outlines the different phases or components of the work and provides a framework for submitting pricing. The "Unit Price" and "Amount" columns indicate expected costs for specific CLINs, with a total contract value of $500,000.00.