REQUEST FOR INFORMATION (RFI) - Professional Integration Services for Enterprise Network Monitoring System Upgrade

rt expended in the preparation of a response by any vendor. Submission of a response to this RFI notice will not affect any potential offeror�s ability to submit a quotation/proposal in the future should funding become available and a solicitation is issued. There is no solicitation document associated with this RFI. There is no obligation on the part of the Government to acquire any product or service as a result of this RFI. Submissions made to the Government will not be returned. Information provided in this RFI is subject to change and is not binding upon the Government. INTRODUCTION and BACKGROUND The U.S. International Trade Commission�s (USITC or Commission) is an independent, quasi-judicial Federal agency with broad investigative responsibilities on matters of trade. The USITC�s mission is to: (1) administer U.S. trade remedy laws within its mandate in a fair and objective manner; (2) provide the President, the United States Trade Representative (USTR), and Congress with independent, quality analysis, information, and support on matters relating to tariffs and international trade and competitiveness; and (3) maintain the Harmonized Tariff Schedule of the United States. The Office of the Chief Information Officer (OCIO) is responsible for supporting the mission of the USITC by providing information technology leadership, comprehensive services and applications support portfolio, and a sound technology infrastructure to the USITC and its customers. Within the OCIO, the Network Services Division (NSD) provides Tier 0 through 3 support for the USITC�s network, server, storage, and virtualization infrastructure (altogether referred to as �ITCNET�). Within the ITCNET, USITC maintains a large amount of Controlled Unclassified Information (CUI). The CUI maintained by the USITC includes, but is not limited to, Confidential Business Information (CBI), Business Proprietary Information (BPI), and Personally Identifiable Information (PII). USITC relies heavily on its IT infrastructure for daily operations, communication, and data management. Given the critical nature of our network, it is essential to monitor its performance proactively, identify potential issues, and ensure optimal functionality. USITC currently uses WhatsUp Gold as its IT Network Monitoring System (NMS) solution. The capabilities of our current NMS are inadequate and require an upgrade to meet the growing demands and complexities of our network environment. Major deficiencies in our current NMS include: Unintuitive user interface Dashboard customization is inadequate No predictive monitoring capabilities Lack of effective API integration Inadequate automation capabilities Inadequate notification rules and customization options Rising costs PURPOSE & GENERAL REQUIREMENTS The purpose of this Request for Information (RFI) is to outline the requirements for procuring a comprehensive Network Monitoring System (NMS) along with the professional services necessary for its installation, configuration, and ongoing support. This initiative aims to enhance our network's reliability, security, and performance through a state-of-the-art monitoring solution: Objectives Procurement of a Network Monitoring System: Acquire a robust and scalable NMS that can provide real-time monitoring, alerting, and reporting of network performance, traffic, and security incidents. Professional Services for Installation and Configuration: Engage qualified professionals to install and configure the NMS to seamlessly integrate with our existing IT infrastructure. Training and Knowledge Transfer: Ensure that our IT staff receive adequate training on the new system to effectively utilize its features and capabilities. Ongoing Support and Maintenance: Establish a support agreement for ongoing technical assistance, updates, and maintenance of the NMS. Scope: Assessment of current network environment and requirements. Selection and procurement of a suitable NMS that meets the specified objectives. Installation and configuration of the NMS, ensuring compatibility with existing systems. Customization of monitoring parameters, alerts, and reporting features. Conducting training sessions for IT staff on the operation and management of the NMS. Providing configuration documentation and user manuals for reference. Establishing a support and maintenance plan for the NMS. 1. Network Monitoring System: The USITC requires monitoring coverage for a number of enterprise infrastructure technologies. These systems include, but are not limited to: Microsoft Windows Server Red Hat Enterprise Linux Red Hat Ansible Automation GitLab Cisco networking devices Fortinet firewalls VMware virtualization platform Nutanix virtualization platform Cloud platforms (IaaS, PaaS, SaaS) such as Azure and Amazon Web Services Identity platforms such as Active Directory Domain Services and Entra ID Backup platforms such as Commvault and Druva Container platforms, such as Kubernetes (Amazon Kubernetes Services, Amazon Elastic Kubernetes Services, Nutanix Kubernetes Platform), OpenShift, and other common services used to support container services Database services such as Microsoft SQL Server and PostgreSQL Web servers such as Apache, Tomcat, and Microsoft IIS Storage platforms such as TrueNAS, vSAN The vendor shall provide an enterprise-grade network monitoring system with the following capabilities: Real-time network-wide monitoring of usage, performance, and availability Alerting and notification for incidents. Alerting requirements include but are not limited to: E-mail alerts Microsoft Teams messages Ticket system integration (ServiceNow) Alerts to be sent within five minutes of incident detection Reminder alerts to be sent within configurable escalation time frames if an incident is not acknowledged Detailed reporting, analytics, dashboards. Capabilities include but are not limited to: Network bandwidth capacity and usage dashboards Historical performance and usage trending reports Filterable availability reports with trending Predictive capacity and usage reporting Role-based per-user and per-group private and shareable dashboards Relational/interconnectivity system diagrams Integration with existing IT infrastructure. Types of systems the NMS must provide integration with include but are not limited to: Ticketing systems (Service Now) Entra ID integration for Single Sign-On API-based monitoring integration capabilities Enterprise SIEM services such as Splunk and Sentinel Types of monitoring capabilities for systems must include, but are not limited to: ICMP monitoring for measuring uptime and network latency Performance monitoring for common metrics, such as CPU performance, disk space utilization, memory capacity, bandwidth, etc. Network service availability and health monitoring for services such as HTTP, SSH, SMTP, LDAP, and other common network services Ability to monitor TLS services for proper configuration, including certificate expiration Webpage Integrity Monitoring to detect possible defacement, code injection, or unauthorized page skimming attacks API-based monitoring capabilities with common cloud platforms, such as Azure and Amazon Web Services Ability to monitor cloud resource health and availability in common platforms such as Azure and Amazon Web Services, to include expiration of API tokens and certificates Event log monitoring Service and process