Loading...
The URL can be used to link to this page
Your browser does not support the video tag.
Home
My WebLink
About
Upgrades to Firewall
ELIZABETH A.NEVILLE,MMC ooFOL �o! Town Hall,53095 Main Road TOWN CLERK W-1 P.O.Box 1179 Southold,New York 11971 REGISTRAR OF VITAL STATISTICS 0 ® Fax(631)765-6145 MARRIAGE OFFICER ,y ��. Telephone(631)765-1800 RECORDS MANAGEMENT OFFICER 0,( ,�`� www.southoldtownny.gov FREEDOM OF INFORMATION OFFICER OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD June 1.0, 2019 Sharon Hofmann Custom Computer Specialist 70 Suffolk Court Hauppauge,NY 11788 Dear Ms. Hofmann: At the regular Town Board meeting held on June 4, 2019, the Town Board accepted the bid of CORE for the Cisco Firepower Server &ASA Update. A certified copy of the resolution is enclosed. Thank you for your bid. Very truly yours, Lynda M Rudder Deputy Town Clerk Ens. �'IoWFOL ® ELIZABETH A.NEVILLE,MMC ® �� Town Hall,53095 Main Road TOWN CLERK P.O.Box 1179 co Southold,New York 11971 REGISTRAR OF VITAL STATISTICS � Fax(631)765-6145 MARRIAGE OFFICER ,�i Telephone(631)765-1800 RECORDS MANAGEMENT OFFICER � www.southoldtownny.gov FREEDOM OF INFORMATION OFFICER OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD June 10, 2019 Steven Scheitel CORE 1393 Vets Memorial Highway Suite 408N Hauppauge, NY 11788 Dear Mr. Scheitel: Congratulations. At the regular Town Board meeting held on June 4, 2019, the Town Board accepted the bid of CORE for the Cisco Firepower Server &ASA Update. A certified copy of the resolution is enclosed. Thank you for your bid. Very truly yours, '0 a(�—' Lynda M Rudder Deputy Town Clerk Ens. Southold Town Board - Letter Board Meeting of June 4, 2019 RESOLUTION 2019-515 Item # 5.21 ADOPTED DOC ID: 15293 THIS IS TO CERTIFY THAT THE FOLLOWING RESOLUTION NO. 2019-515 WAS ADOPTED AT THE REGULAR MEETING OF THE SOUTHOLD TOWN BOARD ON JUNE 4,2019: RESOLVED that the Town Board of the Town of Southold hereby accepts the bid of CORE BTS, Inc., 1393 Vets Memorial Highway, Suite 408N, Hauppauge, NY 11788 in the amount of $16,500.00 for the Cisco Firepower Server&ASA Update for the Town of Southold, all in accordance with the Town Attorney. Elizabeth A. Neville Southold Town Clerk RESULT: ADOPTED [UNANIMOUS] MOVER: William P. Ruland, Councilman SECONDER:Louisa P. Evans, Justice AYES: Dinizio Jr, Ruland, Doherty, Ghosio, Evans, Russell Generated June 5, 2019 Page 34 �uFF®`� ELIZABETH A. NEVILLE,MMC ®� ®�� Town Hall,53095 Main Road TOWN CLERK P.O.Box 1179 Southold,New York 11971 REGISTRAR OF VITAL STATISTICS � Fax(631)765-6145 MARRIAGE OFFICER ®,f, ® �� Telephone(631)765-1800 RECORDS MANAGEMENT OFFICER ®,( �,�0 www.southoldtownny.gov FREEDOM OF INFORMATION OFFICER OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD REQUEST FOR PROPOSAL OPENING Cisco Firepower Server & ASA Update May 23, 2019 2:00 PM Two (2) bids received Custom Computer Specialist $32,200.00 70 Suffolk Court Hauppauge,NY 11788 Sharon Hofmann 631/761-1467 CORE $16,500.00 1393 Vets Memorial Highway Suite 408N Hauppauge, NY 11788 Steven Seheitel 631/982-4781 .r Town of Southold Attn:,Southold Town Clerk Director of Technology PO Box 1179 53095 Route 25 \ Southold, New York 11971 RE: Cisco Firepower Server and ASA Update 1 n^k Cis May r. May 22, 2019 Submitted by: Sharon Hofmann Account Executive Mo�;f,J'E.;11�L'L' �� c_ 1�i��drlir_ [0M Pho n,e: 631-761-1497 M „ 3 70 Suffolk Court Hauppauge, NY 11788 6 Blackstone Valley Place, Suite 402 Lincoln, RI 02865 Phone: 800.598.8989 T,�,� i�c e!§pgq'Waf.%K@-ccs'a Cf',�.,�,_� ,".,.'K�:fT?TY+.�w`r'f.`S;�C";� �p'YV i� s Table of Contents Introduction.............................................................................................................................................3 Understandingof Your Needs...............................................................................................................3 Section1—Financial Stability...............................................................................................................4 Section2-Qualifications/References..................................................................................................4 Section 3—Proposed Solution..............................................................................................................5 Section4—Cost Proposal......................................................................................................................6 Conclusionand Next Steps....................................................................................................................7 Appendix A: Financial Documents.......................................................................................................8 Appendix B: Estimated Project Schedule............................................................................................9 AppendixC:Statement of Non-Collusion...........................................................................................10 Appendix D:Standard Terms and Conditions....................................................................................11 Proprietary and Confidential P a g e t Cisco Firepower Town of Southold Server and ASA Update Introduction Thank you for the opportunity to submit this Cisco Firepower Server and ASA Update proposal to Town of Southold in support of your IT goals. Custom Computer Specialists, Inc. ("Custom") prides itself on consistently providing the right people to meet our client's technology design,deployment and support requirements. Much of our success comes from our ability to hand-pick individuals for"best-fit"in client organizations from our full-time technical staff of over 180 individuals. Our ultimate goal ''` has, and will continue to be, to provide the best combination of technical skills, relevant experience and cultural fit in the people we staff at our client accounts.We believe that our flexible Custom Computer Specialists, Inc. business model, a proven staffing and 70 Suffolk Court management practice, and 40 plus years of Hauppauge, NY 11788 experience set us apart from the competition. It Contact Person:Sharon Hofmann has allowed us to consistently provide tangible 631.761-1497 benefits to our clients while maintaining a 95% www.customonline.com client renewal rate over the last 10 years. Thank you for this opportunity and we invite you to review our proposal. IUnderstanding of Your Needs Custom understands that Town of Southold would like to update its current Cisco Firepower Server,Firepower Management Center Suite of Applications,AMP for Network and Desktops and Cisco ASA Security Appliances.The project shall include updating the operating systems, software application updates and any release updates to these devices/applications to the latest updates/releases from Cisco. The project will also include the analysis of the configuration the settings, rules and polices of these devices/applications with the intent to make recommendations and implement changes to improve the current installation. Proprietary and Confidential P a g e 13 Cisco Firepower Town of Southold Server . . . Update Section 1—Financial Stability Please see the financial documents in Appendix A. Custom Computer Specialists was incorporated in 1979 and has no pending legal matters. Section 2—Qualifications/References 1. Cullen and Dykman-Cisco Firepower&ASA Update 100 Quentin Roosevelt Blvd, Garden City NY 11530 E, Joseph DeSario: Phone 516-296-9142 Jdesario@cullenanddykman.com 2. Valley Stream Central High School District-Cisco Firepower&ASA Update 1 Kent Rd,Valley Stream NY 11580 Steve Caruso: Phone 516-872-5641' carusos@vschsd.org 3. Northwell Health-Cisco Firepower&ASIA Update 2000 Marcus Ave, New Hyde Park IVY 11042 • Ginni Gandhi: Phone 516-321-8139 ggandhi@northwell.edu i Proprietary and Confidential P a g e 4 Cisco Firepower Town of Southold ServeranclASA Update Section 3—Proposed Solution I. Review and update current infrastructure • Review and evaluate the current configuration of the Firepower Server, Firepower • Management Center,AMP, Umbrella and all seven (7)existing ASAs. • Analyze and identify any potential perfc rmance issues relating to possible bandwidth ' ,-4 limitations of the ASAs. e • Implement recommendations, making approved changes to the configuration, rules and policies on the Firewalls, Firepower Server, Firepower Management Center,AMP, and Umbrella. • Incorporating all design changes required and any recommendations as per the design and configuration outlined in this document. • Identify/Analyze current Cisco ESX environment on the management server. • Upgrade ESX software as needed to Support the proposed firewall upgrade. • FPMC version 6.3.0.2 is compatible with existing ESXi version 6.5 II. Upgrade preparation • Backup ASA configurations • Backup all Firepower policies configurations • Update all seven (7)ASA operating systems and releases to the latest from Cisco. • • Create internal repository for ASA codes, FPMC codes and Firepower Module Codes • Our suggested approach is to create a new VM for FPMC version 6.3.0.2 f • Create new Install with a new FPMC software version • Upload firepower policies into the new FPMC version from existing setup. III. Upgrade Tasks • Create New FPMC version 6.3.0.2 install • Existing version 6.2.2 would continue working in parallel. o Southold staff will manage the existing environment as of today. • Firepower licenses may have to be in eiraluation mode until upgrade to all locations is finished. IV. Choose one location with client as Prototype to the test upgrade process • Upgrade Firewall Code • Install new Firepower 6.3.0.2 to the Firepower module o Register FP module into FPMC. • Verify functionality • Verify event logs on FPMC Proprietary and Confidential P a g e 15 FirepowerCisco Town of Southold Server ASA Update V. Lessons learned with client • Verify process effectiveness • Make appropriate changes as needed VI. Remote Locations 5508 upgrades • Schedule the upgrade of the remaining,four(4) remote locations. • Once all remote 5508 locations have been upgraded, proceed with the 5525 (larger remote locations) VII. Larger Remote Locations 5525 Upgrades • Select one of the three (3) 5525 locatic ns. • Proceed with ASA code upgrade o Install FP module OS code 6.3.0.2 • Register to FPMC 6.3.0.2 console • Verify functionality • Verify event logs on FPMC • Schedule the remaining locations until each of them have been migrated to new FPMC 6.3.0.2 console. • Decommission previous FPMC console version VIII. Handoff to Southold • As we are migrating each location into the new FPMC version, Custom's engineer is going to review configuration and operations tabs with Town of Southold staff in order to prepare them for operation cc ntinuity. • Custom will replicate the same configurations and notifications:email notifications, backup schedules, reports,etc.from the existing environment and translate them to the new one. • Custom will recommend the use of new features in the updated Firepower version when applicable to the customer environment. • Prepare and deliver as built documentation. Please see Estimated Project Schedule in Appendix B. Section 4—Cost Proposal Total Cost For Service's Provided In Custom's Proposed Solution $32,200.00 Proprietary and Confidential P a g e 6 Cisco Firepower Town of Southold Server'and ASA Update Conclusion and Next Steps Thank you for providing Custom the opportunity to offer this proposal for Cisco Firepower and ASA Updates and for your confidence ii our organization. We are confident we will provide you with the highest level of professional service,while exceeding the specifications and requirements outlined in our discussions. We take great pride in forming strategic relationships with our valued customers and business partners, and hope that you decide to proceed with us. Should you have any questions regarding the materials presented in this proposal, please do not hesitate to contact me directly at 631.761.1497. Thank you for your consideration, I look forward to hearing from you. Best regards, Sharon Hofmann Account Executive Custom Computer Specialists, Inc. I www.customonline.com Right People, Right Results since 1979 (P) 631.761-14971 (M) 631.624.4118 shofmann@customonline.com � 1 Proprietary and Confidential P a g e l FirepowerCisco Town of Southold Server • ASA Update Appendix A: Financial Documents " q I Oki Proprietary and Confidential P a g e 8 J 1 i CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY CONSOLIDATED FINANCIAL STATEMENTS AND SUPPLEMENTARY INFORMATION Years Ended December 31, 2017 and 2016 J - r l TABLE OF CONTENTS Page No. INDEPENDENT AUDITORS' REPORT....................................................................................... 1-2 CONSOLIDATED FINANCIAL STATEMENTS , Consolidated Balance Sheets .................................................................................................. 3 Consolidated Statements of Operations and Comprehensive Income(Loss) .......................... 4 Consolidated Statements of Changes in Stockholder's Equity ................................................ 5 Consolidated Statements of Cash Flows.............:.................................................................... 6-7 Notes to Consolidated Financial Statements............................................................................ 8-18 SUPPLEMENTARY INFORMATION Consolidated Schedules of Selling, General and Administrative Expenses..................:........... 19 r c n l `` = fes CERTIFIED PUBLIC ACCOUNTANTS INDEPENDENT AUDITORS' REPORT To the Stockholder of Custom Computer Specialists, Inc. and Subsidiary Hauppauge, New York Report on Financial Statements We have audited the accompanying consolidated financial statements of Custom Computer Specialists, Inc. and Subsidiary(the "Company'), which comprise the consolidated balance sheets as of December 31, 2017 and 2016, and the related consolidated statements of operations and comprehensive income (loss), changes in stockholder's equity, and cash flows for the years then ended, and the related notes to the consolidated financial statements. Management's Responsibility for the Financial Statements Management is responsible for the preparation and fair presentation of these consolidated financial statements in accordance with accounting principles generally accepted in the United States of America; this includes the design, implementation, and maintenance of internal control relevant to the preparation and fair presentation of consolidated financial statements that are free from material misstatement, whether due to fraud or error. Auditors'Responsibility Our responsibility is to express an opinion on these consolidated financial statements based on our audits.We conducted our audits in accordance with auditing standards generally accepted in the United States of America. Those standards require that we plan and perform the audits to obtain reasonable assurance about whether the consolidated financial statements are free from material misstatement. An audit involves performing procedures to obtain audit evidence about the amounts and disclosures in the consolidated financial statements. The procedures selected depend on the auditors' judgment, including the assessment of the risks of material misstatement of the consolidated financial statements, whether due to fraud or error. In making those risk assessments, the auditor considers internal control relevant to the Company's preparation and fair presentation of the consolidated financial statements in _ order to design audit procedures that are appropriate in the circumstances, but not for the purpose of - expressing an opinion on the effectiveness of the Company's internal control. Accordingly we express = no such opinion. An audit also includes evaluating the appropriateness of accounting policies used and the reasonableness of significant accounting estimates made by management, as well as evaluating the - overall presentation of the consolidated financial statements. - We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for _ our audit opinion. - BEYOND THE NUMBERS— ALBRECHT,VIGGIANO,ZURECK&COMPANY,P.C. - - 245 PARK AVENUE,39TH FLOOR 25 SUFFOLK COURT NEW YORK,NY 10167 HAUPPAUGE,NY 11788-3715 T:212 792.4075 T 631 434.9500 F. 631,434.9518 www,avz com INDEPENDENT MEMBER OF BKR IN fERNATIONAI -2 - Opinion In our opinion, the consolidated financial statements referred to above present fairly, in all material respects, the financial position of Custom Computer Specialists, Inc. and Subsidiary as of December 31, 2017 and 2016, and the results-of its operations and its cash flows for the years then ended in accordance with accounting principles generally accepted in the United States of America. Report on Supplementary Information Our audits- were conducted for the purpose of forming an opinion on the consolidated financial statements as a whole. The consolidated schedules of selling, general and administrative expenses, is presented for purposes of additional analysis and is not a required part of the consolidated financial statements. Such information is the responsibility of management and was derived from and relates directly to the underlying accounting and other records used to prepare the consolidated financial statements. The information has been subjected to the auditing procedures applied in the audits of the consolidated financial statements and certain additional'procedures, including comparing and reconciling such information directly to the underlying accounting and other records used to prepare the consolidated financial statements or to the consolidated financial statements themselves, and other additional procedures in accordance with auditing standards generally accepted in the United States of America. In our opinion, the information is fairly stated in all material respects in relation to the consolidated financial statements as a whole. t/.i�r�w.,r Z Hauppauge, New York March 26, 2018 1 -3- CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY CONSOLIDATED BALANCE SHEETS December 31, 2017 and 2016 2017 2016 ASSETS Current Assets Cash and cash equivalents $ 1,812,870 $ 1,756,896 Certificates of deposit 1,399,707 -0- Marketable securities 1,928,032 1,526,282 Accounts receivable 7,461,301 8,305,519 Other receivables 871,072 997,854 Inventories 223,386 314,042 Prepaid expenses and taxes 350,800 304,524 Deferred service contract costs 2,838,838 2,241,490 Total Current Assets 16,886,006 15,446,607 Fixed Assets 813,585 1,593,223 Other Assets Security deposits 159,232 159,232 $ 17,858,823 $ 17,199,062 LIABILITIES AND STOCKHOLDER'S EQUITY Current Liabilities Notes payable $ 3,021 $ 7,328 Accounts payable 2,415,799 1,518,055 Accrued expenses ' 2,346,063 3,319,675 Deferred service contract and project revenue 7,675,013 7,517,399 Total Current Liabilities 12,439,896 12,362,457 Long-Term Liabilities Notes payable 83,800 86,800 Accrued compensation 321,678 257,371 Loan payable to stockholder 251,959 235,004 13,097,333 12,941,632 Commitments and Contingencies Stockholder's Equity Common stock, no.par value, 200 shares authorized, 120 shares issued and outstanding 50,000 50,000 Additional paid-in capital 471,171 471,171 Retained earnings 3,856,074 3,503,799 Accumulated other comprehensive income 384,245 232,460 4,761,490 4,257,430 $ 17,858,823 $ 17;199,062 r See notes to consolidated financial statements. -4- CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY,- CONSOLIDATED STATEMENTS OF OPERATIONS AND COMPREHENSIVE INCOME(LOSS) Years Ended December 31, 2017 and 2016 n 2017 2016 Revenues Product revenues $ 26,059,065 $ 31,886,810 Service revenues 23,554,664 24,465,585 Total Revenues 49,613,729 56,352,395 Cost of Revenues 37,619,287 42,661,253 Gross Profit 11,994,442 13,691,142 Selling,General and Administrative Expenses 11,765,121 14,822,234 S Income (Loss)from Operations 229,321 (1,131,092) Other Income and (Expense) Interest and dividend income - 62,261 52,139 Interest expense (19,058) (70,622) Realized gain (loss) on sale of marketable securities (4,044) 19,903 Phantom stock compensation 1 (64,306) (257,371) Miscellaneous 157,901 (50,702) Total Other Income (Expense) 132,754 (306,653) Income (Loss) Before Provision for Taxes 362,075 (1,437,745) Provision for Taxes 9,800 6,871 Net Income (Loss) 352,275 (1,444,616) Other Comprehensive Income ' Unrealized gains on securities: Unrealized gains arising during the period: 178,027 67,435 Reclassification adjustment for gains included in net income (loss) (26,242) (13,899) I Other Comprehensive Income 151,785 53,536 Total Comprehensive Income (Loss) $ 504,060 $ (1,391,080) See notes to consolidated financial statements. - J -5- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY CONSOLIDATED STATEMENTS OF CHANGES IN STOCKHOLDER'S EQUITY Years Ended December 31, 2017 and 2016 Accumulated Other - Additional Paid-in Comprehensive Total Stockholder's i Common Stock - Capital Retained Earnings Income Equity BALANCE, January 1, 2016 $ 50,000_ $ 471,171 $ 4,948,415 $ 178,924 $ 5,648,510 Net loss (1,444,616) (1,444,616) Other comprehensive income 53,536 53,536 BALANCE, December 31, 2016 50,000 471,171 3,503,799 232,460 4,257,430 Net income 352,275 352,275 Other comprehensive income 151,785 151,785 BALANCE, December 31,2017 $ 50,000- $ 471,171 $ 3,856,074 $ 384,245 $ 4,761,490 J See notes to consolidated financial statements. -6- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY CONSOLIDATED STATEMENTS OF CASH FLOWS Years Ended December 31, 2017 and 2016 2017 2016 Cash Flows from Operating Activities Net income (loss) $ 352,275 $ (1,444,616) Adjustments to reconcile net income (loss)to net cash provided (used) by operating activities: Depreciation and amortization 862,163 924,532 Bad debts 446,399 2,222 Realized gain (loss)on sale of marketable securities_ 4,044 (19,903) (Increase)decrease in: Accounts receivable 397,819. (704,907) Other receivables 126,78,2 (36,279) Inventories 90,656 750,597 Prepaid expenses and taxes (46,276) (104,870) Deferred service contract costs (597,348) 522,125 Security deposits -0- 49,238 Increase (decrease)in: Accounts payable 897,744 (790,270) Accrued expenses (973,612) (270,866) Deferred service contract and project revenue 157,614 222,926 Accrued compensation 64,307 209,371 Net Cash Provided (Used) by Operating Activities 1,782,567 (690,700) Cash Flows from Investing Activities Purchase of marketable securities (4091,606) (476,580) Proceeds from sale of marketable securities 155,597 917,211 Purchases of certificates of deposit (1,399,707) -0- Purchases of fixed assets (82,525) (613,349) Net Cash Used by Investing Activities (1,736,241) (172,718) Cash Flows from Financing Activities Proceeds of loan payable to stockholder 1,500,000 -0- Repayments of loan payable to stockholder, (1,483,045) -0- Proceeds of notes payable-related party -0- 2,000,000 Principal reduction of notes payable - related party -0- (2,000,000) Principal reduction of notes payable (7,307) (7,970) Net Cash Provided (Used) by Financing Activities 9,648 (7,970) Net Increase (Decrease)in Cash and Cash Equivalents •55;974 (871,388) Cash and Cash Equivalents at Beginning of Year 1,756,896 2,628,284 Cash and Cash Equivalents at End of Year $ 1,812,870 $ 1,756,896 See notes to consolidated financial statements' -7- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY CONSOLIDATED STATEMENTS OF CASH FLOWS Years Ended December 31, 2017 and 2016 2017 2016 Supplemental Disclosure of Cash Flow Information Cash paid during the year for: Interest $ 2,103 $ 63,573 Taxes $ 15,750 $ 5,241 c l r f See notes to consolidated financial statements. -8 - CUSTOM COMPUTER SPECIALISTS, INC:AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 1 —Nature of Business ' Custom Computer Specialists, Inc., and Subsidiary (the "Company') is one of the Northeast's largest, privately owned technology solutions providers. For over 35 years, they have been offering an extensive range of IT services including consulting, onsite support, network monitoring, project management, professional development, deployment and implementation and hardware and software product sales and procurement. Note 2—Summary of Significant Accounting Policies Princioles of Consolidation- The consolidated financial statements include the accounts of Custom Computer Specialists, Inc. and its wholly-owned subsidiary ConexSys, Inc. All significant intercompany accounts and transactions have been eliminated. Revenue Recognition Revenue is recognized when persuasive evidence of an arrangement exists, the fee is fixed or determinable, and collectability is probable. The Company enters into certain arrangements where it is obligated to deliver multiple products and/or services (multiple elements). The Company allocates revenue to each element based on a selling price hierarchy based on its vendor specific objective evidence ("VSOE"), if available, third party evidence ("TPE"), if VSOE is not available, or estimated selling price ("ESP") if neither VSOE nor TPE is available. The Company recognizes revenue on project services upon completion of specific milestones and contracted services over the life of the contract period. Product sales are recognized when merchandise is shipped. The Company evaluates each deliverable in an arrangement to determine whether they represent separate units of accounting. A deliverable constitutes a separate unit of,accounting when it has standalone value and there is no customer-negotiated refund or return rights for the delivered elements. If the arrangement includes a customer-negotiated refund or return right relative to the delivered item, a separate unit of accounting is established if the delivery and performance of the undelivered item is considered probable and substantially in the Company's control. In instances when the aforementioned criteria are not met, the deliverable is combined with the undelivered elements and the allocation of the arrangement consideration and revenue recognition is determined for the combined unit as a single unit. Allocation of the consideration is determined at arrangement inception on the basis of each unit's relative selling price. The Company establishes VSOE of selling price using the price charged for a deliverable when sold separately or a price established by management. TPE of selling price is established by evaluating similar competitor products or services in standalone sales to similar customers. The best estimate of selling price is established considering internal factors such as margin objectives, pricing practices and controls, and product life cycle. Consideration is also given to market conditions such as competitor pricing strategies and,industry technology life cycles. Cash and Cash Equivalents The Company considers all cash investments with an original maturity of three months or less to be cash equivalents. Cash equivalents consists of money market funds and certificates of deposits. -9- CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note'2—Summary of Significant Accounting Policies(continued) Certificates of Deposit Certificates of deposit totaling approximately$1,400,000 were held by the Company at December 31, 2017. The certificates of deposit are recorded at fair value and have various maturities ranging from January 2018 through April 2018, with interest rates ranging from 1.10% to 1.20%. Certificates of deposit are classified as current assets based on their liquidity. There were no certificates of deposit as of December 31, 2016. Marketable Securities Marketable securities, which consist of equities and mutual funds, have been classified by management as available for sale securities. Securities classified as available for sale are carried in the consolidated financial statements at fair value. Realized gains and losses, determined using the first-in, first-out (FIFO) method, are included in earnings, with the unrealized holding gains and losses reported in other comprehensive income(loss). The Company has no investments classified as other than available for sale. Securities, in general, are exposed to various risks such as interest rate, credit and overall market volatility. Due to the level of risk associated with certain investment securities, it is at least reasonably possible that changes in the values of investment securities will occur in the near term, based upon the market declines, and that such changes could materially affect the amounts reported in the consolidated financial statements. 1 Accounts Receivable The Company routinely addresses the financial strength of its customers, and, as a consequence, believes that its receivable credit risk is limited. Accounts receivable, principally trade, are generally due between thirty days and ninety days and are stated at amounts due from customers net of allowances for doubtful accounts. The Company performs ongoing credit evaluations of its customers and adjusts credit limits based upon payment history and the customer's current creditworthiness, as determined by a review of their current credit i information. The Company continuously monitors agings, collections and payments from customers and a provision for estimated credit losses is maintained based on its historical experience and any specific customer collection issues that have been identified. While such credit losses have historically been within the Company's expectations and the provisions established, the Company cannot guarantee that the same credit loss rates will be experienced in the future. The Company writes off accounts receivable when they become uncollectible. The allowance for doubtful accounts at December 31, 2017 and 2016 was approximately $515,000 and $76,000, respectively. Inventories Inventories are stated at the lower(of cost or market, on a first-in, first-out basis. The entire inventory consists of finished goods and service parts. r - 10 - CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 2—Summary of Significant Accounting Policies(continued) Deferred Service Contract Costs Deferred service contract costs consist of payments made in advance relating to various licenses that extend past the year end.r Amounts paid on these licenses are recorded as deferred costs and are recognized as expenses on a pro rata basis over the license period. Deferred service contract costs at December 31, 2017 and 2016 was approximately$2,839,000 and $2,241,000 respectively. Fixed Assets Furniture and fixtures and equipment are recorded at cost net of accumulated depreciation. Depreciation is computed using the straight-line and the declining balance methods over the estimated useful lives which range from three to seven years. Leasehold improvements are recorded at cost net of accumulated amortization and are amortized over the term ofthe lease or estimated life whichever is shorter, on a straight-line basis. Expenditures for maintenance and repairs which do not add to the economic life of the assets are expensed as incurred. Capitalized Software Certain software development costs incurred subsequent to the establishment of technological feasibility may be capitalized and amortized over the estimated lives of the related products. The Company determines technological feasibility to be established upon the internal release of the working model. Upon the general release of the products to customers, development costs for that product are amortized over periods not exceeding,three years, based on the estimated economic life'of the product. Capitalized software costs amounted to approximately $2,352,000 as of December 31, 2017 and 2016, respectively, and costs, net of accumulated amortization, amounted to approximately $411,000 and $1,050,000 as of December 31, 2017 and 2016, respectively, and are included within fixed assets. Impairment of Long-Lived Assets The Company reviews the carrying values of long-lived assets for possible impairment whenever events or changes in circumstances indicate that the carrying amount of the assets may not be recoverable. Any long-lived assets held for disposal are reported at the lower of their carrying amounts or fair value less cost to sell. Management has determined that there have been no impairments of long-lived assets through December 31, 2017. Deferred Service Contract and Proiect Revenue 'Deferred service contract and,project revenue consist of billings in advance of being earned relating to various customer contracts that extend past the year end. Billings on these contracts are recorded as deferred revenues and are recognized as revenue on a pro rata basis over the contract period or as earned. Deferred service contract and project revenue at December,31, 2017 and 2016 was approximately$7,675,000 and $7,517,000 respectively. t CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 2=Summary of Significant Accounting Policies(continued) Comprehensive Income(Loss The Company accounts for comprehensive income (loss) in accordance with FASB ASC 220, which establishes standards for reporting and display of comprehensive income (loss) and its components in a full set of financial statements. r l All items recognized under this statement of accounting standards as components of comprehensive income (loss) are required to be disclosed in the financial statements. Comprehensive income (loss) is defined as the change in equity during a period from transactions and other events from non-owner sources. Comprehensive income (loss) is the total of net income (loss) and other comprehensive income (loss) which, for the Company, is comprised entirely of the unrealized gains and losses on securities. Income Taxes The Company has elected, with consent of its stockholder, to be taxed as an S Corporation for Federal and State tax purposes. Under those provisions, the Company does not pay Federal or New York State corporate income taxes on its taxable income. 'Instead, the stockholder is liable for individual Federal and New York State income taxes on the Company's taxable income. The City of New York does not recognize S Corporation status and therefore the Company is subject to regular corporation tax rates. The Company is subject to a state franchise tax in states in which the Company does business. Accordingly, these New,York City and other state taxes are reflected in the consolidated financial statements. The Company accounts for the effect of any uncertain tax positions based on a "more likely than not" threshold to the recognition of the tax positions being sustained based on the technical merits of the position under scrutiny by the applicable taxing authority. If a tax position or positions are deemed to result in uncertainties of those positions, the unrecognized tax benefit is estimated based on I a "cumulative probability assessment" that aggregates the estimated tax liability for all uncertain tax positions.' Interest and penalties assessed, if any, are accrued as income tax expense. The Company has identified its tax status as a corporation electing to be taxed as a pass through entity as a tax position; however, the Company has determined that such tax position does not result in an uncertainty requiring recognition. In addition to its tax status, the Company has other tax positions that have been determined to be highly certain and therefore no reserve for unrecognized tax liability is deemed necessary. The Company.is not currently under examination by any tax jurisdiction. Federal, state and local income tax returns are generally open for examination for three years. Advertising Costs The Company follows the policy of charging the costs of advertising to expense as incurred. Advertising expense was approximately$74,000 and $70,000 for the years ended December 31; 2017 and 2016, respectively. Shipping and Handling Costs J The Company records shipping and handling costs in selling, general and administrative expenses. These expenses were approximately $13,000 and $19,000 for the years ended December 31, 2017 ( and 2016, respectively. 1 r - 12 - CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS ' Note 2–Summary of Significant Accounting Policies (continued) Certain Leasinq Arrangements with Entities under Common Control The Company has adopted the accounting alternative offered to private companies in FASB ASC 810-10 for certain leasing(arrangements with entities under common control. In accordance with this alternative, the Company does not evaluate entities that meet the requirements in the variable interest entities subsections of FASB ASC 810-10. Instead, the Company discloses the leasing arrangements as required by the accounting alternative. See Note 8. Presentation of Certain Taxes The Company collects various taxes from customers and remits these amounts to the applicable taxing authorities. The Company's accounting policy is to exclude these taxes from revenues and cost of revenues. Use of Estimates The preparation of consolidated financial statements in conformity with accounting principles'generally accepted in the United States of America requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities and disclosures of contingent assets and liabilities at the date of the consolidated financial statements, and reported amounts of revenues and expenses during the reporting period. Actual results could differ from those estimates. Recent Accounting Pronouncements In May 2014, the FASB issued Update 2014-09, Revenue from Contracts with Customers, which replaced the existing accounting standards for revenue recognition. This guidance requires a Company to recognize revenue to depict the transfer of goods or services to customers in 'an amount that reflects the consideration it expects to be entitled to receive in exchange for those -goods or services. Subsequent to the release of this update, the FASB has issued additional Updates relating to revenue recognition to further clarify and define specific elements of this accounting standard and to defer the effective date by one year. These Updates are effective for all nonpublic entities for annual reporting periods beginning after December 15, 2018 and interim periods within annual periods beginning after December 15, 2019 (early adoption is permitted with certain restrictions) and may be adopted by restating all years presented in the Company's consolidated financial statements or by recording the impact of the adoption as an adjustment to retained earnings at the beginning of the year the Update is adopted. Management is currently assessing the potential impact on the Company's consolidated financial statements. In January 2016, the FASB issued Update 2016-01, Financial Instruments—Overall: Recognition and Measurement of Financial Assets and Financial Liabilities, which is intended to make improvements to accounting standards related to the recognition, measurement, presentation and disclosure of financial instruments. This Update amends several aspects of the accounting for financial instruments, and includes the following requirements: (i) present in other comprehensive income (OCI)the changes in instrument-specific credit risk for financial liabilities measured using the fair value option; (ii) present financial assets and financial liabilities by measurement category and form of financial asset; (iii) calculate the fair value of financial instruments for disclosure purposes based on an exit price, and; (iv) assess a valuation allowance on deferred tax assets related to unrealized losses on debt securities in combination with other deferred tax assets.' - 13 - CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 2—Summary of Significant Accounting Policies,(continued) Recent Accounting Pronouncements(continued) The Update also requires that entities measure equity investments with readily determinable values at fair value and recognize the changes in fair value in net income, as opposed to the'current practice of recognizing such fair value changes in OCI. The Update further provides an election to subsequently measure certain nonmarketable equity investments at cost less any impairment and adjusted for certain observable price changes, and requires a qualitative impairment assessment of such equity investments, and amends certain fair value disclosure requirements. The new standard is effective for all nonpublic entities for annual reporting periods beginning after December 15, 2018 and interim periods within annual periods beginning after December 15, 2019. Ealy application is only permitted for the provision related to instrument-specific credit risk and the fair value disclosure exemption provided to nonpublic entities. Management is currently assessing the potential impact on the Company's consolidated financial statements. In February 2016, the FASB issued Update 2016-02, Leases, which replaced the existing accounting standards for accounting for operating leases. This guidance requires a Company to recognize lease assets and lease liabilities on the balance sheet and disclose key information about leasing arrangements. The Update is effective for all nonpublic entities for annual reporting periods beginning after December 15, 2019 and interim periods within annual periods beginning after December 15, 2020 (early adoption is permitted). Management is currently assessing the potential impact on the Company's consolidated financial statements. Reclassifications Reclassifications are made to the prior year's,consolidated financial statements whenever necessaryto conform to current year's presentation. Such reclassifications have had no effect on net income as previously reported. Subseauent Events Management has evaluated subsequent events through the date of the report, which is the date the consolidated financial statements were available to be issued. i Note 3—Marketable Securities At December 31, 2017 and 2016, the Company's investment securities were comprised of securities classified as available for sale,which are required to be carried at market value. The amortized cost and fair values of marketable securities at December 31, 2017 were: Gross Gross Amortized Unrealized Unrealized Fair Cost Gains Losses Value Equities $ 1,013,421 $ 386,313 $ 1,270 $ 1,398,464 Mutual funds-Closed end 530,366 2,740 3,538 529,568 $ 1,543,787 $ 389,053 $ 4,808 $ 1,928,032 - 14- CUSTOM 14-CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 3—Marketable Securities(continued) The amortized cost and fair values of marketable securities at.December 31, 2016 were: Gross Gross Amortized Unrealized Unrealized Fair Cost Gains Losses Value Equities $ 772,653 $ 236,969 $ -0- $ 1,009,622 Mutual funds-Closed end 521,169 -0- 4,509 516,660 $ 1,293,822 $ 236,969 $ 4,509 $ 1,526,282 'The Company uses the specific identification method to 'determine the cost of securities sold. Net realized losses on sales of investment securities available for sale during 2017 were approximately $4,000. Net realized gains on sales of investment securities available for sale during 2016 were approximately$20,000. Note 4—Fair Value Measurements The Company records certain assets and liabilities at fair value.using framework provided by accounting principles generally accepted in the United States of America. Fair value is defined as the price that would be received to sell an asset or paid to transfer a liability in an orderly transaction between market participants at the measurement date. Various inputs are used in determining fair value. These inputs are summarized in the three broad levels listed below: Level 1: Quoted prices (unadjusted) of identical assets or liabilities in active markets that the entity has the ability to access as of the measurement date. Level 2: Significant other observable inputs other than Level 1 prices such as quoted prices for similar assets or liabilities; quoted prices in markets that are not active; or other inputs that are observable or can be corroborated by observable market data. I I I , Level 3: Significant unobservable inputs that reflect a reporting entity's own assumptions about the assumptions that market participants would use in pricing an asset or liability. The Company records all of its investments in marketable securities at fair value. The fair values of marketable securities owned by the Company are determined by obtaining quoted prices on nationally recognized securities exchanges (Level 1 inputs). There were no Level 2 or Level 3 type inputs as of December 31, 2017 and 2016, respectively. Fair Value Measurements Using: Quoted Prices,in Active Markets for Identical Assets (Level 1) 2017 2016 Equities $ 1,398,464 $ 1,009,622 Mutual Funds-Closed end 529.568 516.660 1.92 $ 1.526.282 - 15- CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS \ t Note 5—Fixed Assets Fixed assets at December 31, consist of the following: 2017 2016 Furniture and fixtures $ 1,350,083 $ 1,350,083 Computer equipment 2,676,887 2,635,948 Transportation equipment 122,278 122,278 Leasehold improvements 2,065,104 (2,065,104 Capitalized software 2,352,265 2,352,265 8,566,617 8,525,678 Less: Accumulated depreciation and amortization 7,753,032 6,932,455 $ 813,585 $ 1,593.223 Note 6—Indebtedness to Finance Corporation The Company has two agreements with Wells Fargo Commercial Distribution Finance, LLC("WFCDF") which provides for borrowings of up to $5,000,000 and $12,000,000 at December 31, 2017 and 2016, respectively. The agreement with WFCDF dated November 9, 2004 was amended in April 2017. The first agreement is an accounts receivable credit facility (line-of-credit) of up to $3,000,000 in 2017 which was decreased from the 2016 amount of$5,500,000. This agreement dated November 9, 2004 as amended April 2017,will continue in effect for a one year.period and for successive•one year periods upon renewal. The Company may cancel the agreement upon 90 days' notice prior to the end of each one year period upon payment of all obligations on or before the termination date; WFCDF may terminate upon 30 days'notice. The accounts receivable facility provides for the payment of interest on the average daily outstanding balance at the LIBOR rate, as defined, plus 2.25% at both December 31, 2017 and 2016. Under the facility,the borrowing base is 850/6of eligible accounts receivable, as defined. As part of the agreement, the Company has a lock box account with a WFCDF designated bank. Under this agreement; available cash balances are applied against the Company's line-of-credit. The Company had no outstanding balance on this line-of-credit at December 31, 2017 and 2016, respectively. In addition, the Company has a wholesale financing agreement, also dated November 9, 2004 as amended in April 2017, whereby the Company may purchase inventory from approved vendors and for other purposes. Under this facility, amounts of up to $5,000,000 may be advanced provided the aggregate borrowings under this and the accounts receivable facility do not exceed $5,000,000 at December 31, 2017 and $12,000,000 at December 31, 2016. At December 31, 2017 and 2016, indebtedness to WFCDF under the wholesale financing agreement for inventory totaled $1,290,000 and $769,000, respectively, which is included in accounts payable. The interest on the wholesale financing agreement varies depending on the terms that WFCDF has with the specific vendor. Obligations of the Company under both agreements are secured by accounts receivable, inventory, property and equipment. In addition, the stockholder of the Company has guaranteed payment of all such indebtedness to WFCDF. V - 16- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 7-Notes Payable Notes payable as of December 31, consist of the following: 2017 2016 SOCIETY OF INTERVENTION RADIOLOGY,(SIR) Note dated March 31, 2010 in the amount of.$10.8,000, ,payments commencing June 30, 2010 in quarterly installments in the amount of $1,250 through March 31, 2040; interest rate is imputed at 2.31% per annum, this note has been guaranteed by the Company and SIR has reserved software rights under this agreement. $ 86,821 $ 89,753 CHASE CREDIT Note dated October 19, 2012 in the amount of $34,801, payments of $8,221 down and $443 monthly, commencing November 28, 2012 through October 2017; interest rate of 3.25% per annum, collateralized by transportation equipment. -0- 4.375 86,821 94,128 Less: Current portion 3.021 7,328 Long-Term portion $ 8 -80P $ 86 800_ Aggregate maturities of notes payable are as follows: Years ending December 31,2018 $ 3,021 2019 3,092 2020 3,164 2021 3,237. " 2022 3,313 Thereafter 70.994 Note 8-Commitments and Contingencies Operating Leases The Company leases its facility from Triple G, LLC ("Triple G), a limited liability company owned by the Company's only stockholder. Triple G purchased a building on December 22, 2000 and entered.into an operating lease with the Company for its facility for a period of ten years commencing on that date. The Company has been entering year to year leases through 2015. In December 2014, the Company entered into a lease agreement which extended the lease through 2017 and was subsequently amended in January 2016 and again in May 2017, which-extended the lease through 2021. Under this new lease, rent for 2016 and 2017 shall be approximately $766,000 and rent for 2018 shall be approximately $838,000 with annual increases through 2021 of the greater of 3% or the percentage increase in the average consumer price index. The Company is also responsible for real estate taxes and maintenance. - 17- CUSTOM COMPUTER SPECIALISTS,-INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS i Note 8—Commitments and Contingencies (continued) Operating Leases (continued) In March 2013, the Company leased office space in Rhode Island for a 5 year period which commenced on August 1, 2013 at an annual rental of approximately $144,000. Subsequent to year end, in February 2018, the Company extended the lease for an additional 5 years expiring in July 2023 at an annual rental of approximately $144,000 for the"first year and increasing '1% each year thereafter. Rent expense, including real estate taxes, for the years ended December 31, 2017 and 2016 was approximately$1,078,000 and$1,083,000, respectively, for both of these facility leases. The Company also entered into various lease agreements for office equipment and transportation equipment. Future minimum commitments required under the operating leases are approximately as follows: Years ending December 31, 2018 $ 1,038,000 2019 1,014,000 2020 1,035,000 2021 1,063,000 2022 149,000 Thereafter 87,000 $ 4,3885.0 00 Minimum lease payments in this schedule exclude contingent rentals and rentals under renewal options, which, as of December 31, 2017, are not reasonably assured of being exercised. 'Cash Concentration The Company maintains cash in certain financial institutions that may exceed the Federal Deposit Insurance Corporation (FDIC)insurance limit. The Company has not experienced any loss to date as a result of this policy. Note 9—Retirement Plan r The Company sponsors a 401(k) deferred compensation plan that covers all employees who are eligible for entry into the plan on quarterly entry dates after hire. The Company has the option to match a percentage of employee's contributions at a discretionary rate. For the years ended December 31, 2017 and 2016, retirement plan expense was approximately $100,000 and $27,000, respectively. Note 10—Related Party Transactions Loan Payable to Stockholder The loan payable to the Company's stockholder amounted to approximately$252,000 and $235,000 at December 31, 2017 and 2016, respectively. Interest of approximately$7,000 was incurred for each of the years ended December 31, 2017 and 2016, at a rate equivalent to the Company's borrowing rate of prime. - 18 - CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS `Note 10—Related Party Transactions(continued) Loan Payable to Stockholder(continued) The loans are due on demand, however, the Company has subordinated $200,000 of this indebtedness to WFCDF, and therefore no portion of these loans is expected to be repaid within the next twelve months. In May 2017, the Company's stockholder loaned $1,000,000 to the Company at an annual interest rate of.3%. In June 2017, the Company's stockholder loaned an additional $500,000 at an annual interest rate of 3%. 1 Both of these loans were paid back in full during the year. Interest of approximately $10,000 was incurred for the year ended December 31, 2017 related to these notes and'was added to the principal balance of the loan payable to stockholder. Other At December 31, 2017 and 2016, the Company has net advances receivable from related parties of approximately $1,000 and $6,000, respectively, which are included in other receivables on the consolidated balance sheets. These amounts are non-interest bearing and due on demand. In February 2016, the Company received $1,000,000 from a related party in the form of a note payable, at an annual interest rate of 5%. This note payable was paid back in full in 2016. In March 2016, the Company received an additional $1,000,000 from the same related party in the form of a note payable, at an annual interest rate of 5%. Interest of approximately $61,000 was incurred for the year ended December 31, 2016.'This note payable including the accrued interest was paid back in full in 2016 Note 11 —Phantom Stock Plan r In January 2012, the Company adopted a Phantom Stock Plan. The purpose of this Plan is to benefit the Company through increased incentives to key employees of the Company and to enable the Company to retain and attract into its employ persons of outstanding'competence. Awards under this plan shall be granted to a participant in the form of units. The award of units does not entitle the recipient to any dividend or voting rights or any other rights of a shareholder with respect to such units. The units awarded under this Plan shall entitle the participant to the right to receive certain cash payments upon a change in control, upon separation from service or upon death. The Company shall pay to the participant an amount equal to the book value of the equivalent number of shares of common stock represented by the vested units held by the participant. Such amount shall be payable in cash in five equal annual installments without interest. In February 2012, there were four key employees granted 1.26 units each and on January 1, 2013, one additional employee was also granted 1.26 units which became 100% vested on January 1, 2015. In May 2013, four key employees were granted an additional .68 units each which became 100% vested on January 1, 2016. As of December 31, 2017 and 2016, a liability was recorded for approximately $322,000 and $257,000, respectively, related to this Plan and is included within long-term liabilities under accrued compensation on the consolidated balance sheets. Such long-term liability will be re-measured i based on the book value of the Company at each reporting date until settlement. SUPPLEMENTARY INFORMATION -19- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY CONSOLIDATED SCHEDULES OF SELLING, GENERAL AND ADMINISTRATIVE EXPENSES Years Ended December 31, 2017 and-2016 2017 2016 Salaries $ 5,625,580 $ 7,506,456 Payroll taxes and fringe benefits 557,910 1,169,548 Advertising and promotion 73,840 69,920 Travel and entertainment 226,909 424,067 Shows and conventions 115,502 132,612 Sales and service training 116,756 43,435 Shipping 12,510 18,698 1 Business relations 164,236 149,559 Rent and real estate taxes 1,077,611 1,083,301 Office supplies and postage 116,574 173,067 Utilities 224,308 230,142 Telephone 115,334 109,890 Communications 137,738 173,467 Repairs and maintenance 261,266 348,315 Dues and subscriptions 111,245 ,106,287 Insurance 235,744 223,898 Professional fees 450,446 929,219 Recruitment 119,318 125,050 Employee relations 96,465 147,541 Vehicle 183,818 . 178;667 Outside services 26,526 29,387 'Bad debts 446,399 2,222 Retirement plan 99,551 27,129 Sales and other tax 41,599 37,098 , Contributions 19,785 85,998 Licensing fees 232,872 308,814 Depreciation and amortization 862,163 924,532 Other 13,016 63,915 Total Selling, General and Administrative Expenses $ 11,765,121 $ 14,822,234 See independent auditors' report. Cisco Firepower Town of Southold Server ASA Update Appendix B: Estimated Project Schedule S l 4 Proprietary and Confidential P a g e 9 mown M oft 'Analyze E)dstihg EnM ontnent 613 0 " } Design and'P?anning 6J5J20�5 � � ' ` - P's1ot,144grgljbn of 508. Process'RevieyrandiLesSon 6J .; 'Learned ,4: w;." .;7. fir,-.�s � t� 'q•„ '�_ r, — .I i Site2,Cutouer 00 �M4 - =�^ - *'+fit•r ^ , } a us ��° -,4, 4H;..'.. "'Aa '' "m -fi'''i. k t YCes�t��view � w' YX +",?,y 11 MY',"Nol"I ",M 5 s �www", ; ;�, !2o,", � Custom Co ° mputer Specialists • ® Right People.Right Resultsp Cisco Firepower - Town of Southold Server ® . . Update Appendix C:Statement of Non-Collusion j ! S r Proprietary and Confidential P a g e 10 STATEMENT OF NON-COLLUSION (To be completed by each Bidder) In accordance with Section 103-d General Municipal Law, effective September 1, 1966, every bid or proposal hereafter made to a political subdivision of the State of any public department, agency, or official thereof or to a fore district or any agency or official thereof for work or services performed or to be performed or goods sold or to be sold, shall contain the following statement subscribed to by the bidder and affirmed by such bidder as true under the penalties of perjury; non-collusive bidding certification. A. By submission of this bid, each bidder and each person signing on behalf of any bidder certifies, and in the case of a joint bid, each party thereto certifies as to its own organization, under penalty of perjury, that to the best of knowledge and belief- (1) elief(1) The prices in this bid have been arrived at independently without collusion, consultation, communication, or agreement, for the purpose of restricting competition, as to any matter relating to such prices with any other bidder or any competitor. (2) Unless otherwise required by law, the prices which have been quoted in this bid have not been knowingly disclosed by the bidder and will not knowingly be disclosed by the bidder prior to,opening, directly or indirectly,to any other bidder or to any competitor. (3) No attempt has been made or will be made by the bidder to induce any other person, partnership, or corporation to submit or not to submit a bid for the purpose of restricting competition. B. The person signing this bid or proposal certifies that he has fully informed himself regarding the accuracy of the statements contained in this certification, and under the statements contained in this certification, and under the penalties of perjury, affirms the truth thereof, such penalties being applicable to the bidder, as well as the person signing in its behalf. C. That attached hereto (if a corporate bidder) is a certified copy of resolution authorizing the execution of this certificate by the signature of this bid or proposal on behalf of the corporate bidder. RESOLUTION Resolved thatAr-W)KU0 . 0_10/d of the e of signatory) Be authorized to sign and submit the bid (Name of Corporation) Or proposal of this corporation for the following Project: and to include in such bid or proposal the certificate as to non-collusion required by section one-hundred-three- d (103-d) of the General Municipal Law as the act and deed of such corporation, and for any inaccuracies or miss-statements in such certificate this corporate bidder shall be liable under the penalties of perjury. The foregoing is true and correct copy of the resolution adopted by _corporation at a meeting of the Board of Directors, held on the day of , 20 (SEAL OF THE CORPORATION) Laws of New York, 1965 "h. 751, Sec. 103-d, as amended& All fective on September 1, 1965. V Pinature 1 Appendix D:Standard Terms and Conditions Pricing,Payment and Credit Terms:Client agrees to pay Custom the purchase price as specified in this Agreement and if applicable, agrees to pay all applicable taxes that may be levied on such purchase price whenever billed. Unless specified otherwise, Custom has calculated pricing based upon a standard eight(8)hour work day with the hours between 9am and 6pm.Credit terms are subject to the approval by Custom,and Custom reserves the right, at its sole discretion, to require cash in advance payment for any purchase. However,it is the intent of Custom to provide credit terms to Client at the outset of this Agreement,subject to satisfactory credit-underwriting. Unless specified otherwise in this proposal,a deposit equal to 50%of the fees for services is due upon acceptance of this Agreement, and the remaining 50%of theJees for services will be invoiced upon completion of the Project. Product and equipment will be invoiced upon delivery. Invoices are due within 30 days of date of invoice. Payment for monthly services is due quarterly in advance. If applicable,all other payments are due within 30 days(upon approval) from date of'invoice. If Client is provided with credit terms,any payment not received within thirty days of the date of invoice shall accrue interest at the rate of one and one-half percent per month or the maximum rate allowed by law, if less,and any associated collection or attorney's fees.In the event of Client's non-payment of an invoice when due,Custom reserves the right to immediately suspend service and shipment of any outstanding Client orders until such invoices are paid in full. Confidentiality: This proposal is the confidential property of Custom. The Client agrees that no part of this proposal shall be disclosed to any third party without the prior,written consent of Custom. The Client and Custom each agree to keep confidential and not to disclose to any third party any trade secrets,business secrets,marketing data,or technical information of the other. 1 Warranties: ,The manufacturer's warranty on all computer hardware, software and related products is given to Client, to the maximum extent allowed by the manufacturer, upon delivery. Custom further warrants that all services will be performed in a professional manner by personnel with.the degree of training required to provide such services. No other warranties express or implied,shall be deemed to have been made by Custom. Any other warranties,including any implied warranties of merchantability and fitness for a particular purpose,are hereby disclaimed by Custom. Limitation of Liability: Custom shall not be liable to Client or any third party for any special,incidental or consequential damages or commercial loss,whether or not foreseeable,arising out of,or in conjunction with this Project. The aggregate liability of Custom to Client for any cause of action or claim(whether contract or tort)shall be limited to the amounts paid to Custom by Client hereunder with respect to the service or products that are the subject of such action or claim. Recruitment of Personnel: For the longer of three years from the date of this Agreement or two years following'Client's last use of Custom's services,Client and Custom shall not directly or indirectly solicit for employment the other party's employees or agents,or 'hire or engage such employee or agent without the prior written consent of the other parry. Notwithstanding this prohibition,should one party hire the employee or agent of the other within this timeframe without the prior written consent of the other parry, the hiring party shall pay the other parry as liquidated damages for the loss of such employee or agent an amount equal to twice the hired employee's annual compensation previously paid by the non-hiring party. Timing: Unless specified otherwise,this proposal will be valid for 30 days. Custom has a cost of preparedness and must schedule the appropriate technical resources to'complete a project. Custom plans to begin no earlier than 20 and no'later than 30 business days from the date of acceptance. Other:These terms and conditions may be amended,but only by a written amendment signed by both of the parties i Custom Computer Specialists, Inc. Proprietary and Confidential . c o r- e suslnESs TrzCmno LOC,Y sQLUTlons O'KiqT- N hL Cisco Firepower Server and ASA Update Town of Southold tlffOC�C®i Of v- PRESENTED BY: Steven M.Scheitel,Sales Account Executive Core BTS, Inc. 1393 Veterans Memorial Highway,Suite 408N Hauppauge, NY 11788 631.219.7104 steven.scheitel@corebts.com fYi:z 1 IT. STARTS HERE I COVER LETTER May 23rd, 2019 Ms. Elizabeth A. Neville Southold Town Clerk Town of Southold 53095 Main Road Southold, NY 11971 Ms. Neville, Core BTS, Inc.(Core)is pleased to submit our proposal in response to the Request for Bids: Firepower and Firewall Update. Core BTS has read and understands the specifications and is firmly committed to performing the work in accordance within those specifications. Since 1991, Core BTS has helped local government agencies, healthcare Institutions, school districts and businesses successfully maintain, repair and install technology solutions as well as develop technology visions, create technology plans and implement a comprehensive technology infrastructure to their environments. Core BTS customizes a comprehensive set of technology planning and management services that address a wide range of client requirements. Typically, Core's services are delivered as part of a team of resources comprised of personnel, hardware and software vendors, architects and engineers,service providers and our partners. Core's primary role is to design and manage the entire technology implementation effort for the client. Our technology management methodology is based on many years of experience working with some of the most technologically and advanced in the country. In addition to sharing "best technology practices" from other institutions,Core's management focus directed toward the development of plans and recommendations that are technologically achievable and financially realistic for each individual client. Core offers a comprehensive range of professional services that are available to the Town of Southold. Our capabilities and services are detailed on our website www.corebts.com. Our technology services include: Security Services • Enterprise Infrastructure Security Assessment • Internal/External Vulnerability Assessment • Penetration Testing • Risk Assessment • Wireless Security Assessment • Web Application Vulnerability Assessment • Social Engineering • Information Security Policy Review and Gap Analysis CORE BTS,Inc. 2 I May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update w o r e- ,a L STARTS HERE Technology Planning Services • Strategic Technology Evaluation Process(STEP) • Administrative and instructional application planning • Staff development planning • Technology Plan development • Professional Development Technology Design Services • Capital project design and development • LAN and infrastructure design • Telecommunications design for voice, data and video • Wide-area network and Internet design services • Physical and electronic security design Technology Management Services • Technology project management and scheduling • Network Operational Center Services • Technical installation and support services • - Establishment of on-going operational and support procedures • On-site technical personnel Highest buying power with major manufacturers • Cisco—Gold • EMC—Signature • Microsoft—Gold • Symantec—Gold • Others available upon request Thank you for this opportunity to participate in this process and we look forward to our continued partnership with the Town of Southold. Should you have any questions or concerns please feel free to contact me. Sincerely, Steven M. Scheitel,Sales Account Executive Core BTS, Inc. 1393 Veterans Memorial Highway,Suite 408N Hauppauge, NY 11788 631.219.7104 steven.scheitel@corebts.com CORE BTS,Inc. 3 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i .e o re !T STARTS HERE CONTENTS CoverLetter...............................................................................................................................................................'2 Responses to Client Requirements............................................................................................................................5 StaffBiographies.......................................:..............................................................................................................19 Non-Collusive Bid Certificate...................................................................................................................................25 CompanyInformation..............................................................................................................................................27 Partners................................................................................................................................................................28 FocusAreas..........................................................................................................................................................29 Project Management Plan—Methodology Overview.........................................................................................32 CORE BTS,Inc. 4 I May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i c o r e aoo® IT STAR-IS MERE. IRESPONSES TO CLIENT REQUIREMENTS Vendor Requirements • The Vendor must be a certified Microsoft Gold Partner. • The Vendor must be a certified Cisco Gold Partner. • Local Cisco Certified Internet Expert (CCIE) Presence. • Cisco Advanced Security Architecture. • Certified Information Security Systems Professional (CISSP). • The Vendor must have performed similar Cisco ASA updates and have references. • The Vendor must provide at least 3 references of similar scope. Core BTS Response: For Microsoft and Cisco partnership information, please see the certification info provided below: For information regarding individual certifications and experience, please see the information provided in the Staff Biographies section below,as well as the Partnerships listing in the Company Information section below. For references, please see the information provided in response to Section 2 below. For"turnkey solution" information please see the information provided in response to Sections 3 and 4 below. CORE BTS,Inc. 5 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i e gra. ,Q IT STARTS tiEitr Microsoft Gold Certification -� - ---------------- ---------- -------- - - - --- - - 7lpartner.mlaosoRcart✓±n-us/perlpartntrhtp/campetertc�es f enclies tw,_.��..x__..,s�'p_-,., t•s Competencies `a`.x.;�: L Competency performance report y Download skills report Your network membership entitles you to one or more additional membership benefits 'packages Your company can qualify to buy membership upgrades by meeting silver or } gold requirements in one or more of these corresponding partner competencies. Learn more about Silver and Gold memberships and benefits Your status Gold i I i As of 14-Feb-2019 ISV competency is no longer available for enraliment or renewal.Checkout all competencies available to your company. i In progress(0) At risk(0) :Meet(5 Not started(16) All(19) i 1 Name 9herrequimment status Gottlregwrcmentsta" Campeier,y level Cloud Productivity, Complete Complete xr,Gold v .• = ------------- --- --------- --------- ---- -------------P------ ----------- - -- --- ------ --- - ----- ----- ------ -------------- -- Collaboration and Content Complete Complete 2 Gold u ,Cloud Platform Complete Not started 2 Silver .b Messaging Complete Not started 2 Silver v <4 Small and Midmarket Cloud Solutions Complete Not started 2 Sliver v V Cisco Gold Certification. c,is�o �rQs®ltCisco Channel Partner Partner Program Gold Certified Partner Awarded to CORE BTS, INC. IDSA valid t Pill September I,2019 Vu wt.'4s M,11—ac C—PatwEcc !Gm PTip—S c�seo.comlgorpattnerlacator C=-,iI Panner CIO a W4 CORE BTS,Inc. 6 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update s' ..00.-c o r e ,s 4T, STARTS HERE Cisco Advanced Security Architecture Partner. �a�ab Cisco, Cisco Channel Partner Partner Program Advanced Security Architecture Specialized Partner Awarded to CORE BTS, INC. USA vGhtl anal Augpst 31,tat a Va'datr mu—fkctrt sr Na,`uq va.mac Pcnsystrm f'mgmns _ claw eomrgolparmarbeator MA- 1-CORE BTS,Inc. 7 i May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update 0oo-c o rL= •0 1 L STARTS HERO Section 1: Proposer's Financial Stability (10%): Provide a description of the Proposer's firm, including history; number of years the Proposer has been in business; type of services provided; and legal status of Proposer's organization, i.e. corporation, partnership, etc. Provide documentation to verify the Proposer possesses adequate financial support, assets, and organization to provide,the products and services required in this BID. This may take the form of financial statements, credit ratings, a line of credit, or other financial arrangements sufficient to enable the offer or to be capable of meeting the requirements of this BID. Core BTS Response: Cti,the predecessor organization to Core BTS,was established in 2004 to acquire and build a leading voice and data services integration company.As companies became more reliant on sophisticated technologies to meet their business needs,CTI leadership identified an opportunity to deliver high-value, integrated converged voice and data solutions to address this burgeoning market.Securing an equity commitment from Founders Equity in 2004-2005,CTi acquired three companies who were already providing voice and data services and products to expanding markets in the Northeast: • Open Systems Technologies LLC(Clifton Park, NY),founded in 1991 • WorldNet Technology Consultants, Inc. (Reading, PA), providing expansion into the state of Pennsylvania • AAA Networks(Falls Church,VA),founded in 1992, providing voice and data services in the Washington, DC,area CTi then acquired Core Business Technology Solutions, LLC,a business technology consulting and integration company headquartered in Indianapolis, IN,with offices in Exton, PA, Reston,VA,and Nashville,TN. The Indianapolis-based Core was founded in 1994 under the name KSM Consulting. The merged companies consolidated under the Core identity,incorporating Core's business practices and back-office operations. Core BTS, Inc.was incorporated in the State of Delaware in December, 2005. In July 2009,Core BTS announced the acquisition of Inacom Information Systems, an award-winning integrated solutions provider who operated three locations in Wisconsin with headquarters located in their Madison,WI,office. In the fall of 2012, Core acquired the Cisco sales and support team from another value added reseller in New Jersey,and so now has an office in that state. Then in 2014,Core opened an office in Las Vegas,NV,and in 2015 opened another office in St. Paul,MN as well.In September 2018,Tailwind Capital,a leading middle market private equity firm investing in growth-oriented companies, announced its acquisition of Core BTS. On March 1St of 2019, Core BTS, Inc. announced the acquisition of the Microsoft business unit of SADA Systems, and so Core now has an office in the Los Angeles, CA area. Core BTS, Inc. has annual revenues of more than$180M,with no debt. Core is one of the 25 largest Cisco partners in North America and is nationally managed. Core's D&B number is 14-601-1643. As Core is privately held detailed financial info is confidential. However that information can be provided for review directly to specifically designated individuals at the Town of Southold. Contact Steven Scheitel, Core BTS Account Manager,and he will work with Katy Perrotta,Core BTS Controller to make this information available to these individuals at the Town of Southold. For information regarding the types of services provided by Core, please see the Focus Areas listing in the Company Information section below. CORE BTS,Inc. 8 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i e. Q& c o r a I.T. STARTS HERL Section 2: Proposer's Qualifications/References (25%) Provide descriptions,of like projects Proposer has done in environments comparable to Town of Southold. Provide at least five client references from the above listed project including the names of the individual(s) you would propose Town of Southold contact, together with phone numbers, company names, and addresses. Town of Southold reserves the right to contact or visit any party listed as a reference that has previously used, or is presently using your products or services in a manner similar to those proposed by the vendor. Southold also reserves the right to use other sources to obtain information about the proposed products and services. Core BTS Response: The Brooklyn Navy Yard Development Corporation 141 Flushing Avenue Building 77/8th Floor Contact:Ari Schneiderman/Vice President of Technology Email:ASchneiderman@bnydc.org Phone:(718)907-5974 Campus-wide ASA55XX Deployment with Firepower/AMP/Umbrella/ISE Bayport Blue Point UFSD 189 Academy Street Bayport NY 11705 Contact: Carolyn Kiefer Email: ckiefer@bbpschools.org Phone:631-472-7860 ext 8092 Cisco 5545 firewalls with 3 Year subs for AMP, URL and IPS CORE BTS,Inc. 9 l May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update �J o rEl,® t.% STARTS MERE South Country Central School District 189 Dunton Ave. East Patchogue,NY 11772 Contact:Sam Gergis Email:sgergis@southcountry.org Phone: (631)730-1510 Cisco 5525 firewalls with 1 year subs of AMP, IPS and URL North Babylon UFSD 5 Jardine Place North Babylon NY 11703 Contact: Dan Rose Email:drose@northbabylonschools.net Phone: 631-620-7080 Cisco 5545 firewalls with 1 year subs of AMP, IPS and URL Mineola Union Free School District 121 Jackson Ave. Mineola, NY 11501 Contact: Dr. Michael Nagler,Superintendent Email: MNAGLER@mineola.kl2.ny.us Phone: (516)237-2080 Cisco 5525 firewalls with 1 year subs of AMP, IPS and URL CORE BTS,Inc. 10 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i e�gpa. �Q a o rL= IT STARTS 6ERE Section 3: Proposed Solution (40%) Proposed solution must also show the following: • Proof of extensive experience with designing and implementing Cisco Firepower Management Center and next generation ASAs. • Detailed project plan including estimated hours for each mandatory requirement with start and finish dates. Core BTS Response: For proof of extensive experience designing and implementing Cisco Firepower Management Center and next generation ASAs, please see the information provided in response to Section 2 above,and also the information provided below in the Staff Biographies section. Detailed Project Plan: JD 1 Task Task Name Duration Stan imsh rredernsor'lun 2,'19 �1u�9,'39 len 16'19 I Made � 5 M T Y! T F S S M T 1 W T F 5 5 M T I 3 O,sravery 1 day Mon WAS Man 6/3/19 2 R Discovery and analysis ofenshng Ne-1,Security design 05 days Mor 613/19 Mon 6/3119 and the existing Secunty network infrastructure 1 3 w, Dacenantatlon of the existing Network 5ecunty deyicas OS days Mdn 6/3/19 Mon 6/3119 2 }f 1; nold-gn Dlneces.,Y) q ' 4 u Upgrade 2days Tue 6/4/19 ,Wed 6/S/191 �1 5 , Upgrade ESX VfAvare Hosmto latest code supported try 05 days Tue 6/4/19 Tue WAS Wacca, Fhapown,MdnagamentCenter I 6 / Upgrade Firepower5ever-Town Hall,53095 Main Rd, 15 days Tue 6/4119 Wed 615119 S �I Southold,NY 7 { �: Review and evaluate the curenlconhge,anon of the 05days Tue 6/4/19 Tie 614/19 Maul 1 Fper.—Serker(le Frepower Management Center), i _ AMP for the Ncuvorkfwallseven QJoxe4ogASM f 9 Identify any potential performance issues relating to 05days Wed 6/5/19 Wed 6/5/19 7 , passlble bandwidth h—berss of the ASAs and make —nooendAmnfor mprav0mcnts on system drslgn f and performancecnhanc anna. _ _ ) 4 „ Impinr 1 recommendations,making approved changes 05 days Wed 6/5119 Wed 6/5129 g l to theconf�Ruradan,soles and pWxues on the F-1h, Foepewer5ermces,Firepower Management Center I (firepower Saver) 10 j a AMP 2 days Thu 6/0/19 �irf 617/19 9 11 r. Rev'ww AMPfor Desktops(AMP Far bndpnlnts)Dashb,,d 025day, Thu616/10 Thu 616/19 1 t �_ 12 1 aa� Ren¢wAMPfar Nemrorks cn Firepower devices 035 days Thu6/61[9 Thu 6l6J19 31 a 1 13.; no, Reviewand evaluate current contgurauon,and pdines 025 days Thu 616119'Thu 6/6/19 12 , is I a Prowderecommend changes on improvements litany),and 025 days Thu 616/19 Thu 616/19 I7 j _ti imp'ement those approved changes - { Y IS v Lnwre AAlPslnse'led on all required host machines,a 9 US days Fri 617/19 rd 6/7/19 14. l PCs,Id Servers 1 116 i v Update appilcatlan exrlusbn pato H req_uned _ 05dcVs Fr.6/7J19 Fri 6/7/19 15 Tkak L"_� a. Additional Tasks 05days Man 6110/19 Man 6/10/1910 �1 1_19 I I Meansaft Windows 10 Pro Test PC 05days Maio 6110119 Mon6/10/19 19 1 W. Cut—tasks 325 days MW6110119Thu6/1311917 20 r Cutover/Upgrade-ASA 5525%with Ran--Town Hall 05days Mon 6/10/19 Mon 6/10/19 1T- _ ) and Annex 21 a on One snppmt 025 days Toe6/11/19 TuaW11/19 20 " 22 1 P, Cutover/Upgrade-ASA 5525X with Firepower-Pace 05 days Tue 6/11/19,Tue 6/11%19 21 1 _ Oepanment 13 ) Ca[averlupgradc-ASA 5508%with Frepvver Hlghw,ty OSdays Tuc 6(11/14\Yeti 6/12/t922 { { Department 1dCutaretlUpgrada-ASA 5508%vnth Hrepmvnr-Rrcreahon 05days Wed 6/12/19 Wed 611211923 , I [nrtar 115 Catwer/Upgrade-ASA 55D9X Wdh Fenn' r-Solid Wasle OS days Wed6112/19Thu 6/13)19 24_ lett. a Department ; - 26 � Cutov¢r/Upgrade-ASA 5508%edh Frepmver Human OSdays Thu6/13/19,Thu 6/13/19 25 � �----- ---------�---- --1 _ Rewurea,Caerer 37 )¢ Pralett dose Out MS days Mon 6/1711 Man 6/17/1926 Ronbook Creation/As$udls OS days Mon 6/17119 Man 6117/19 I 1 Task Pnxe S mmary r; Inuctne Mlestutw MenudSummary PaaUP Wad- 8 Proles TownafSeeteld Spin Ex:enwl T.* Inact--memory I ----I Manual S._ry r-------1 %oyma iWt,Mon 5/20/19 Mle4are 0 E.-IMlleone 11 Manual Task Stan y I M-1Preg— Sams.) r-1 inazore Task Derahan-arty - rinuh-ly l Pncel CORE BTS,Inc. 11 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i oe� ,a c o r e LT STARTS HERE Section 4:, Cost Proposal (25%) Vendor's pricing must be all inclusive to provide the Town of Southold a turnkey solution. Core BTS Response: Please see the pricing information provided in the Statement of Work below. Town of Southold (Network Security Upgrade) Network Infrastructure Implementation Services Agreement for ASA and Firepower Upgrade • - : - • - - . ,provid,f2dcrcumgnta:t[006,ptanl;r-fiogii,nst:a,jf�3to Core BTS Network Infrastructure Implementation Service.The Network Fixed Fee Service Description Infrastructure implementation Service Agreement Is designed to provide Implementation services to design,document,plan,install and configure a Network Security Infrastructure solution,services for Town of Southold In Southold,New York Service Description Cisco Network Infrastructure and Core BTS will perform a detailed review and assessment of Town of Southold current Implementation Network Security deployment and Secul ity environment and determine the requirements customer contact Uoyd Reisenberg for the new Network Security Implementation,and upgrade Core BTS will,also document core BTS Account the current Network Security configuration for Town of Southold.Based on Core BTS' Manager. Steven Scheitel experience and'established industry best pi actices,and Town of Southold's RFP,Core BTS core BTS solution Will recommend a Network Security design and configuration Core BTS'implementation Architect Lordly Mathews team will then work with Town of Southold IT operations team to review the design recommendations and finalize the Network Security configurations and implementation Total Project Cost: $16,5QQ plan Core BTS will then Implement the approved configuration and design Core BTS understands the goal of this protect is to plan and design the Cisco ASA and Firepower Devices and AMP Network Security architecture install and configure the new Cisco ASA and Firepower Devices and AMP Network Security,verify functionality;provide " Out Of Scope Any additional work outside of the tasks defined documentation i e-run book for new and/or update configurations in this Agreement is considered out-of-scope,and will be quoted in a separate Statement of Work " CoreBTS Network Security Infrastructure Implementation Services CoreBTS' Network infrastructure Implementation Service consist of the following tasks ''' U SCO Partnership m eoTs re's key Ciscoop C f CrCisedentials s include US Channel Partners Some of Core's key Gsco Credentials mdude o Gold Partner since 2003 o Advanced Borderless Network • Project Schedule-Through Interactive meeting(s)and/or conference calls,and an Architecture RFP Document provided by Town of Southold,CoreBTS will provide recommendations o Advanced Data center Architecture for the design;implementation,testingivalidation,full documentation and day one o Master Unified Communications support for a Network Security ASA and Firepower Upgrade These recommendations o Master Cloud and Managed Services Will adhere to the I equrrements and expectations defined by Town of Southold IT o Advanced Collaboration Architecture o WebExAuthonzed operations team A typical schedule for a Network Security services project is as u TelePresence Video Master follows Milestone Pal✓mentSchedule 0 30%Due Upon Signing 0 501%Due Upon Completion of Detailed Design and Planning a 20%Due Upon Project Close Out CORE BTS,Inc. 12 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i r•ass•. ,® I T STARTS HERE • Discovery and analysis of existing Network Secunty design and the existing Security network Infrastructure • Documentation of the existing Network Security devices and design(if necessary) • Upgrade ESX VMware Hosts to latest code supported by firepower Management Center o If additional hardware is required to upgrade VMware to latest code supported by Firepower Management Center,then customer wdPpurchase additional hardware,prior to upgrade • Upgrade of(7)ASA Firewalls with(7)Firepower modules,and,(1)Firepower Management Center o Firepower Sever-Town Hall,53095 Main Rd,Southold,NY o ASA 5525X-with Firepower-Town Hall,53095 Main Rd;Southold,NY o ASA 5525X with Firepower-Town Hall Annex,54375 Main Rd,Southold;NY o ASA 5525X with Firepower-Police Department,41405 Route 25,Peconic,NY o ASA 5508X with Firepower-Highway,Department,275 Peconic Lane,Peconic,NY- o ASA 5508X with Firepower-Recreation Center,970 Peconic Lane,Peconic NY o ASA 5508X with Firepower-Solid Waste Department,6155 Cox Lane,Cutchogue,NY o ASA 5508X with Firepower-HumanFesources Center,750 Pacific St,Mattituck,'NY o Review and evaluate the current configuration of the Firepower Server(I a Firepower Management Center),AMP for the Network for all seven(7)existing ASAs, o identify any potential performance issues relating to possible bandwidth limitations of,the ASAs and make recommendations for improvements on system design and performance enhancements o Implement recommendations,making approved changes to the configuration,rules and policies on the Firewalls,Firepower Services,Firepower Management Center(Firepower Server)--this excludes upgrade to internet and/or wan circuit doverublization is discovered • Review AMP for•Desktops(AMP For Endpoints)Dashboard Town of Southold and AMP for Networks on Firepower Devices o Review and evaluate current configuration,and policies u Provide recommend changes on improvements pfany),and implement those approved changes o Ensure AMP is Installed on all required host machines,e g PCs,and Servers • a software management solution for bulk deployment is required a S.Goverlan;GPO isnot supported forbulk deployment • 'ifsoftware management solution Is not available,Core can assist customer with Installing of AMP Agents for a few workstations o Update application exclusion policy if required. • Customer must provide file path of all Town of Sou4fiold'Apphcations that need to be excluded in an excel spreadsheet • Microsoft Windows 10 Pro Test PC o Install latest Windows 10 Updates for Test workstation • Testing and validation • Day one Support • Create a Run Book documenting settings,configuration and overview of each of the firewalls and the entire project • Provide the IT staff with a backup of the Firepower Management Center configuration and all seven(7)ASAs • Project Deliverables-The following deliverables are Included with this service • Core BTS assigned Lead Architect to provide technical oversight for all associated and related projects • Analysis and documentation of existing Network Security design and configuration and the existing Security infrastructure • Recommended design modifications to the existing Security infrastructure and connected devices(if applicable) • Upgrade of(7)ASA and Firepower Devices,and Firepower Management Server, • Review and Update of AMP for Desktops • Testing and validation of new Network Security infrastructure Changes and Upgrades G Create a Run-Book documenting settings,configuration and overview of each of the firewalls and the entire project • Provide backup of Firepower Management Center,ASA+Firepower configuration ,A Town of Southold Security Upgrade Project Specification • Upgrade of(7)ASA Firewalls with(7)Firepower modules,(1)Firepower Management Center a Review and evaluate the current configuration of the Firepower Server(I e-Firepower Management Center),AMP for the Network for aitseven,(7)existing ASAs, o Identify any potential,performance Issues relating to possible bandwidth limitations of the ASAs and make recommendations for improvements on system design and performance enhancements o Implement recommendation`s,making approved changes to the configuration,rules and policies on the Firewalls,Firepower Services,Firepower Managemeht Center (Firepower Server) • Review AMP for Networks-Firepower and AMP for Desktops(AMP For Endpoints)for Town of Southold o Review and evaluate current configuration,and policies o Provide recommend changes on Improvements(if any),and implement those approved changes o Ensure AMP is Installed on all required host machines,e g PCs,and Servers a Update exclusion policy If required • Installed Latest Windows Updates Microsoft Windows 10 Pro Test PC • Test and Validate Changes • Provide Next Day Support • Create a Run Book documenting settings,configuration and overview of each of the firewalls and the entire project Billing Terms Town of Southold,agrees to compensate Core BTS for,the effort required to deliver all,items outlined in this5tatement of Work.Modifications to this project via the Change Management Process may change the associated fees.This engagement will be performed on a fixed-fee basis,This CORE BTS,Inc. 13 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i s��•. �4® ,® c o r a !,T STARrS HERE fixed fee project will be invoiced at the completion of the project.This fixed fee price is inclusive of all travel related expenses. Duties and Responsibilities In order for this project to be successful,it is important thaveach person performs his/her project duties and creates an environment that is conducive to success Below are the responsibilities fog each member of the project team. Core BTS Project Coordinator 'Responsibilities of the Core BTS Project Coordinator include • Developing project timeline and ensure schedules are maintained • Acting as a single point of contact for all members of the Project Team • Managing all Core BTS resources and coordinating Town of Southold resources • Resolving issues with Town of Southold point of contact • Pi esenting status weekly via status meetings and status reports • Providing issue and risk management,including escalation management • Controlfing,change management process, Core BTS Engineer(s) Responsibilities,of the Core BTS Engineer(s)include: • Performing tasks as outlined in this Statement of Work with efficiently and diligence • Acting in a professional manner and abiding by Town of Southold code of business conduct Town of5outhold Responsibilities of Town of Southold include: • Providing necessary personnel,including: • A dedicatedpoint of contact • Subject matter experts(SME's)as needed. • Management with deasiowmaking authority. • If necessary,assist in physicalmovement and racking of components(unless otherwise specified) • Providing access during agreed upon tuneframes to: • Suitable workspace,including a workstation and telephone,if necessary • Re4uired systems and networks • Documentation of current procedures,workflows,and network diagrams • Providing remote access(VPN•preferred)if work is to.be completed offsite i In a timely manner,resolving problems not directly discussed in this SoW,but adversely affecting the project's progress(i.e software bugs, hardware.failures,connectivity issues,etc)Core BTS can assist with these issues as through the scope management process CORE BTS,Inc. 14 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update ,,,..core 1T STARTS MERE • Participating in knowledge transfer throughout the project(unless otherwise noted) Mutual Responsibilities shared by all members of the Project Team,include• • Responding to communication(calls and email)in a timely manner • Participating in all status meetings • Identifying situations requiring scope management and alerting Project Management • Identifying potential issues and risks and alerting Project Management • Coordinating scheduling in the event of delays outside of Core BTS's/Town of Southold control Key Assumptions Core BTS assumes for the sake of pricing and solution sizing that the following will hold true for the duration Ofthe engagement: Core BTS will,perform all review and assessment at•the Town of Southold.m the Southold,Newyork location. • Travel expenses such as,but not limited to,air faire,car rental and hotel expenses are NOT included in this agreement and will be invoiced separately directly to Tow4n of Southold. • Data Upgrade and Migration services,if required,will be performed after hours and at additional expense • Firepower Management Center and ASA Firepower Modules are'at a minimum code of 6.2(as per RFP document);If either have codes older than 6.2(i.e.61,6.0 or 5.3)addrtonal hours and work effort will be required to upgrade.Additional hours will be submitted as a change request,and sent as a PO for Town of Southold to approve. • A Core BTS engineer will be pi ovided access to systems and passwords as required • Requests for information pertinent to this project will be addressed within 2 business days,unless otherwise agreed upon by both parties • All documentation listed will be delivered in a Core,BTS standard format and with Core BTS standard level of detail. • Core BTS assumes no liability for equipment damage and/or loss associated with the relocation of any equipment to any location otherthan the initial delivery location • Core BTS assumes no liability for data loss.Customer is strongly encouraged to backup and validate data on all.affected systems prior to initiation of the engagement. • This project may regwre4iber optic or other specialty cables for component connectivity. The exact type and length of cables needed will be determined during the discovery phase of this project The cost of any needed cables is not included in this statement of work • All review and assessment work is expected to be conducted during normal business hours,which are Monday-Friday from 8AM-5PM in the same time zone of the installation location and will be billed at the standard engineering rate. Any configuration or installation that has to be done outside of normal business hours will be billed at the Overtime(OT)engineering rate. CORE BTS,Inc. 15 1 May 23,2019 'PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i ,® o r e i T START$ HERF ? ConfidentialityAgreement During the course of the provision of the services by Core BTS to Town of Southold,each party to this Agreement may have access to confidential information concerning.the methodologies and business practices of the other,. Neither party shall make any use of such information of the other party except in connection with the exercise of its rights and responsibilities under this Agreement except as may be necessary to comply with the laws of the state of-New York The obligations of this paragraph shall not apply in the event such information is already public or becomes available to the public through no'breach of this Agreement by the receiving party;or,such information is lawfully received without obligation of confidentiality from a third party who is free to disclose such Information to the receiving party,or,such information is independently developed by or on behalf of the receiving party,or,such information is required to be disclosed by the receiving party to a governmental agency or a court having proper jurisdiction. If such a requirement is made,the receiving party shall give the disclosing party reasonable notice to enable the disclosing party to try to protect the confidentiality,of the confidential information. DUE TO THE CONFIDENTIAL AND PROPRIETARY NATURE OF THIS PROPOSAL,WE REQUIRE THAT IT NOT BE DISTRIBUTED OR DISCLOSED TO THIRD PARTIES NOT EMPLOYED BY Town of Southold BOE INC.WITHOUT THE EXPRESS WRITTEN CONSENT OF CORE BTS The enclosed material is proprietary to Core BTS and Town of Southold This document is the copyright of Core BTS. Neither this publication nor, any part;of this publication may be photocopied or reduced to any electronic medium or machine-readable form without the express written consent of Core BTS. Town of Southold Acceptance Please sign below indicating your agreement to the above terms and to indicate acceptance of this Service Agreement Agreement Date Town of Southold Core BTS Account Contact Manager Name/Title Town of Southold Email Address Signature Signature Date CORE BTS,Inc. 16 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i ® IT STARTS HEM 1. Payment Terms Payment is due within thirty(30)days of invoice date After this time period,interest accrues at the lesser of the maximum rate permitted under applicable law or one and one-half percent(15%)per month from the date due until paid 2. Independent Contractor,Taxes We will perform all seances hereunder in our capacity as an independent contractor and not as an employee or agent of you.Our employees shall not be entitled to any privileges or benefits that you may provide to your employees,and we shall be responsible for payment of all unemployment,social security,federal income(state and local income where applicable)and other payroll taxes imposed by any governmental body on us in regard to our employees who are engaged in the performance of the services Pricing set forth herein is exclusive of applicable sales,use and similar taxes assessed on the performance of any services You agree to reimburse,indemnify and hold us harmless from and against any such tax,penalty and interest thereon levied against us for the provision of services to you hereunder 3 No Hlnna For the term of the project and for a period of one year thereafter,you agree not to hire,solicit or accept solicitation of,through employment or otherwise,directly or indirectly,any of our employees or independent contractors with whom you have had any contact during the project,unless you obtain our prior written consent Should you hire an employee or independent contractor of ours through employment or otherwise within this time penod without our prior written consent,you will immediately pay as liquidated damages to us an amount equal to the relevant person's then current annual compensation(or the amount paid to or on behalf of the person in the last 12 months,in the case of an independent contractor) 4 Warranty A We warrant and represent that the services will be performed in a slullful and workmanlike manner according to those standards generally prevailing among consultants performing similar services under similar circumstances To the extent that we are not the manufacturer of any hardware or software products that you may purchase as a result of or relating to our Services,we do not provide any warranty on such products,whether with respect to their design,performance,functionality or compatibility with your existing system Anywarranty with respect to product must come from the manufacturer Our product procurement distributor or we will pass through to you any applicable warranties of the manufacturer,to the extent permissible B EXCEPT FOR THE EXPRESS WARRANTIES STATED IN THIS SECTION,WE DISCLAIM ALL WARRANTIES INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 5 Our Indemnity We will indemnify,defend and hold you harmless from and against any claims,liabilities,losses,expenses or damages(collectively,"Damages")caused by the services performed or the work delivered by us under these terms infringing any copyright,trade secret or any other proprietary right of any third'party Excluded from such indemnification are any daims related to(r)services performed on equipment or software which you covenanted that we had the rights to modify as set forth in,Secton 7 below,(n)services performed to your specification or design and(iii)infnngement resulting from or caused by your misuse or unauthorized modification of systems or product We will also indemnify,defend and hold you harmless from and against any Damages resulting from our willful misconduct or negligent acts or omissions in performing theserviceswhich are the subject of these terms,except to the extent such Damages are caused by the willful misconduct or negligence of you,your employees or agents Our obligation to indemnify and defend you with respect to any claim shall be subject to(I)your providing us with prompt notice of such claim,(it)our having sole control over the defense and settlement thereof,(iii)your providing us with the information and assistance necessary to defend or settle such claim as reasonably requested by us,and(iv)the limitations on liability set forth in Section 6 below 6 Limitations of Liability.WE WILL NOT BE LIABLE FOR INCIDENTAL,SPECIAL,PUNITIVE,INDIRECT OR CONSEQUENTIAL DAMAGES;INCLUDING FOR LOSS OF DATA OR ITS USE OR LOST PROFITS OR OTHER ECONOMIC DAMAGES,EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Your right to recover Damages in aggregate of all claims is limited to the greater of one million dollars($1,000,000)or our applicable insurance coverage(s),whichever is greater You acknowledge that this limitation of liability is part of the consideration and was considered by us in establishing the prices and rates to be charged to you,which,but for this limitation,would have been higher 7 Your Covenants You covenant that,(I)you have the authority to agree to these terms and the funding necessary to pay for the requested services,(i)you have title to or license or rights to use or modify any software or products which you have requested us to moddyas part of such services,and'(uo you will provide us necessary access to your personnel, appropriate documentation and records and facilities in order for us to timely perforin such services 8 Requests for Changes No change in the seances provided hereunder will be performed until we receive a properly issued and executed Change Order,provided,however,that nothing herein will relieve you of the obligation topay us for seances rendered which were requested by you but are not documented in such a properly issued and executed Change Order or within the applicable scope of work 9' Confidentiality Each party acknowledges that a and its employees or agents may,in the course of the project,be exposed to or acquire information that is proprietary or confidential to the other party Each party agrees to,hold such information in strict confidence and not to discuss or disclose any such information to any third party for a period of three years The parties acknowledge that the provisions of this paragraph shall not apply to(a)information which at the time of disclosure is,orwithcut fault of the recipient becomes,generally available,(b)information which either party can show was in its possession at the time of disclosure or was independently developed by it,(c)information received from a third party which had the right to transmit same without violabon,of any secrecy agreement with the other party,and(d)information which is required to be disclosed pursuant to court order or by law 10 Termination of Agreement Either party may terminate our engagement at anytime upon 30 days prior written notice 11 Entire Agreement,Amendment These terms and the accompanying engagement letter sets forth the entire understanding of the parties with respect to the subject matter hereof and is binding upon both parties in accordance with its terms and maybe amended only by an entry signed by both parties There are no understandings,representations or agreements other than those set forth herein 12 Assignment You may not assign any of the rights or obligations hereunder without the prior written consent of Core 13 Notices Any notice or communication from one party to the other concerning the terms hereof shall be in writing and shall be sent by certified mail,return receipt requested and postage prepaid or by commercial overnight mall to the most recent address that either party has specified in writing to the other 14 Governing Law These terms shall be governed by and construed in accordance with the laws of the State of New York 15 Force Majeure Neither party shall be liable to the other for any failures or delays arising out of conditions beyond its reasonable control,including,without limitation,work stoppages,fire,civil'disobedience,delays associated with product malfunction or availability,riots,rebellions,storms,electrical failures,delays caused by the other party,and acts of God and similar occurrences 16 Waiver.Severability Any waiver of any right or default shall be effective only in the instance given and din writing and signed by the party against whom it is sought to be enforced and shall not operate as or imply a waiver of-a similar right or default on any other occasion If any term or provision hereof should be declared invalid by a court of competent jurisdiction,the remaining terms and provisions hereof shall be unimpaired,and the invalid terms or provisions shall be replaced by such valid terms and provisions as come closest to the intention underlying the invalid term or provision 1 CORE BTS,Inc. 17 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update ® n ,o c o r a, LT STARTS HERiE Reiluestor Data- PCR Requested By PCR Preparation Date. PCR Prepared By Approval Required By Date- Change Summary: Project Name Description of Change- Impact if PCR is Rejected Current Project Status Cost and Timeline Impact-The following is an estimation of the work effort involved in completing the activrt�es required to complete this PCR This estimate is provided for budgetary purposes only,in all cases Core BTS will bill for the actual hours and expenses incurred. Estimated Work Effort- WR _ Effoe Totals Resturce Descpption x g Rate g- F, Low° - fiigh> law H' 11P, F Consultant 0 0 $ $ $ Senior Consultant 0 0 $ $ $ Principal Consultant 0 0 $ $ $ Project Manager 0 0 $ $ $ Estimated Total• 0 0 $ $ $ Timelme Impact. Project Completion Date,if Changed: Milestone(s)Impacted. New Milestone Delivery Dates(s). Approval:Client indicates acceptance of this PCR as an amednment to the Letter of Engagement and/or Statement of Work for the<PROJECT NAME> project. Approved By Date Name Printed Title- CORE BTS,Inc. 18 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i .° c o rLm I7 STARTS HERF I STAFF BIOGRAPHIES ... e o r e Mike Munoz-Managing Consultant .�rHRp4�..Y Data Center CoNTAcr INFORMATION Michael Munoz is the Data Center Managing Consultant for the Core BTS Mld- Mike,,Munoz Atlantic Region (Includes offices Exton, PA, Wyomissing, PA, Bridgewater NJ, Managing Consultant and Fairfax, VA). Mike's responsibilities include developing and maintaining Phone. 703=248=4009 strong relationships with customers, providing excellent technical customer Email mike.munozOcorebts com service,and leading his team to become one of the most technically proficient teams in the area. Technologies included in the Data Center Practice are AREAS OF EXPERTISE Cisco Unified Cisco Infrastructure Cisco Data Center In Industry Since: 1998 � Computing • LAN/WAN/Security Assessments Cisco Application •-Cisco Routing and Switching-IOS, Cisco Wireless LAN/WAN Assessments Networking IOS-XR,FOS,CATOS,NX-OS, Cisco Security VMware SAN-EMC/Nimble M'eraki . • Cisco Security-ASA/PIX,'VPN, Over seventeen years of related IT experience ranging through the different Concentrator,IPs(IDs,MARS,VMS, layers of the OSI model. Specialized in a variety of Data Center technologies ACs,CSA,NAC,IOS Firewall, to take the lead in numerous design and troubleshooting occasions for legacy e IronPortemail/web;CSM, _ sourcert e - and current protocols. Proven track record of high performance and initiative. • cisco wireless-Access Points, Extensive experience in network design and troubleshooting. WLC,'WCS,Voice on Wireless Cisco Application Networking-_ EXPERIENCE HIGHLIGHTS ACE,WAFS,WARS,Css . Work with pre-sales staff to create competitive quotes that meet or • Netwbrk Management,=CNA, exceed customer expectations. Allows involvement In projects from RFP ASDM,SDM,.CiscoWorks LMS, Cacti,Nagios to project sign off. Technologies EIGRP;OSPF, • Lead engineer in 150+ successful migrations from LAN infrastructures to RIPVI 12,BGP.,Ti/El,DS-3,ATM, firewall conversions. .Frame Relay,,ISDN,HDLC,'PPP, • Designed and implemented full voice/data failover technologies on a SNMP,VLAN,VTP,802.11a,b,g,n, multi-vendor, multi-site environment with complete success at the 802.1 x,Spanning Tree,LWAPP, RTP,H.323,LWAPP,° ISAKMP,GRE, customer environment. IPSec,QoS • Performed numerous LAN/WAN assessments detailing critical deficiencies that once improved provide stable customer environments. SECURITY CLEARANCE CERTIFICATIONS Secret Clearance-1995-1999-U.S. _ CCIE Routing and Switching#9751 F I .Army VCP=ITILv3 „ EMC-ISM/EMC VNX IE CCNA,/CCNP- CCDA J CCDP CMNA J CMNP Cisco Advanced Wireless LAN(SE) Cisco Advanced Routing and Switching Specialization(SE), Sim IIVi Pre-Sales Trairiinci,Im lementation Tramin No pa;t of this ComultantProfi!e niay he reproduced mithoutpermissionfrom Core BTS 1 CORE BTS,Inc. 19 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update 0',c m r e s � I.T STARTS HERE C ® r e lGnll Klimakhin,CCIE-Principal Consultant Northeast Region-Unified Communications CONTACT INFORMATION DESIGN,IMPLEMENTATION AND SUPPORT EXPERIENCE: Cisco Unified Communications products and services; Including Cisco Unified Klrill Khmakhin Communications Manager, Cisco Unity Connection, E-911 Cisco Emergency Responder, Principal Consultant and Cisco WebEx solutions.Client collaboration tools such as Cisco Unified Contact Center Core BTS and Cisco Unified Customer Voice Portal. Proficient in the design and implementation of 1393 Veterans Memorial Hwy Voice over IP, ranging from,installation and deployment to device support, quality Suite 408N assurance and end-user and administrative training. Hauppauge,NY 11788 Extensive experience in'Wlndows and Unix-based data center computing environments Phone. 631.982.4772 as well as experience in designing, implementing and maintaining, complex LAN and ,Email Global WAN configurations. Kirill worked within varied verticals; these include Fortune kirili.klimakhinncorebts.com 500,Service Provider(ISP),Healthcare, K12 and higher education institutions. PROFESSIONAL HIGHLIGHTS PRINCIPAL CONSULTANT,CORE BTS AREAS OF EXPERTISE • Work with pre-sales/sales and technical teams to identify,validate and develop Cisco In Industry Since 2005 Unified Communications strategic sales opportunities. • Responsible for designing, staging, configuration, implementation, and support for • Cisco Unified VoIP installations. • Development of technical documentation to support the proposed design and Communications implementation approach, including but not limited to network diagrams and test • Cisco VOIP,Unity,Contact plans. Center,Call Manager • Contribute expert technical content regarding networking technologies for • Routing,Cisco IOS presentations, proposals,and project plans. • Cisco WebEx LEAD IP COMMUNICATIONS ARCHITECT,LARGE PUBLIC SCHOOL DISTRICT • Datacenter • Migration from arbitrary legacy phone systems .to a centralized and unified • Security telecommunications platform based on Cisco LIC solutions • Networking • Design and Implementation of Cisco Communications Manager, Unity Connection • Troubleshooting messaging and E-911 Emergency Responder services LEAD IP COMMUNICATIONS ARCHITECT,COUNTY GOVERNMENT,HELPDESK MIGRATION TO CISCO UC • Migrated the Nassau County Government helpdesk from a legacy Verizon Centrex based system to a virtualized Cisco UCS environment • Design and implemented a call center solution based on Cisco Unified Contact Center Express to provide helpdesk reporting and caller statistics • Conducted end-user training as well as training of call center agents and supervisors LEAD IP COMMUNICATIONS ARCHITECT,STATE DEPT.OF EDUC.°VIRTUALIZATION&UPGRADE TO CISCO UCS • Vlrtuallzed 8 existing servers and converted to the Cisco UCS platform • Migrated users from legacy Unity platform to Unity Connection with Unified Messaging • Supported the post migration environment and provided end-user training �CERTOCATIONS Cisco Data Center Support for UC'-Certified . Cisco Unified Computing Technology-Certified SpeciallstGenetec Security Center 5.1 Certified Support specialist Architect , Aruba ACMP Certification 'Cisco CCIE Collaboration-#56507 ' Igpart of tfits Cwrsultmrt Profdg mn�,be'i eprodxced rm8taut yermtssmrt front Care BTS. - _ CORE BTS,Inc. 20 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i o ,® 1 T STARTS HERE • e o r e TimGrell/ng-Nationa/Director-Security ro' OVERVIEW CONTACT INFORMATION Tim.Grelling is the National Director of Security at Core BTS Inc. Tim has Tim Grelling over 20 years of experience in Information Security, Compliance, and Core BTS,Inc Phone. 610-823-5510 Audit. Email Tim.Grelling@corebts.com Tim specializes in developing information security strategies, information security assessments, I.T. governance framework design, compliance audit management, risk management and assurance reviews, AREAS OF EXPERTISE gap analysis, policy content development, penetration testing, security In IndustrySince 1998 product selection and implementation, and remediation strategy • Information Security Program development. and Strategy Development • Information Security His experience includes information security assessments for numerous Assessments Fortune 500 companies in various industries.This experience specifically • Compliance Reviews(PCI, HIPAA,etc.) includes assessment and management of PCI-DSS, Sarbanes-Oxley 404, • Penetration Testing HIPAA, penetration testing, wireless assessments, and security strategy • Risk Assessments development. Tim has developed, and managed 3rd party risk • Wireless Assessments management programs for clients in the financial industry. • 3rd Party Risk Management • Security Policy Gap Analysis and Development Tim has also served in an Information Security leadership role (as an Information Security Officer) for multiple Core BTS clients, including a- 6,000-person hospital system and an international manufacturer. While an interim ISO Tim developed and matured a Risk Management strategy, oversaw Security Operations, assisted in- procuring security solutions, and consulted on PCI-DSS, HIPAA Meaningful Use, and Security Rule compliance efforts. Finally, Tim'participated in the technical interview of candidates for a permanent position with the hospital system. CERTIFICATIONS AFFILIATIONS CISSP,CISM,CRISC,CCSP,HCISPP,GPEN,GCFE ISSA,ISACA,ISC2,InfraGard Philadelphia GMON ' Nopart of this Consultant Profile nmy be i eproduced withoutpermiss:on from Col a B75 CORE BTS,Inc. 211 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update e' O 6 c o re 049° IT STARTS FIERI ••o e o r e Lordly Mathews- Solutions Architect ••.. OOB1^°°.E°�^°°°•s°°'°^° Northeast Region-Unified Communications CONTACT'INFORMATION A certified Senior Network Engineer with 15 years of networking and Lordly Mathews security experience, responsible for the implementation, design and Solutions Architect support of the Enterprise and Data Center Infrastructure, including Core BTS implementation, migration to latest technologies, implementing new wan 1393 Veterans Memorial Hwy solutions,managing of multivendor devices on the DMZ Edge such as Next- Hauppauge,NY 11788 Gen Firewalls, IPS/IDS and Load-balancers; managing policies and Ph 631-982-4763 compliance of these devices using security management tools. Excellent lardii!mathews@coiebts.com communications and interpersonal skills with all levels of Management and AREAS OF EXPERTISE Staff. In Industry Since-2001 PROFESSIONAL HIGHLIGHTS Firewalls:Checkpoint,ASA,Palo Alto, Barracuda Senior Network Engineer,Solutions Architect Intrusion Detection&Prevention: • Engage with clients and evaluate their upcoming projects; ASA IPS/IDS,Sodreefire/Firepower Conduct site-survey of clients'networks Next-Generation IPS 0 Design solutions based on site-surveys,discovery sessions Security Management&Log • Participate as needed in implementing solutions Retention:LogRhythm,Splunk,• Manage Data Center Core consisting of Cisco 6509,UCS Chassis, Checkpoint Smart Tracker/Security Manager,Cisco Works,Cisco Security 0 Manage and Audit Network Infrastructure for security compliance Manager,Solarwinds,Manage Engine, o Manage and Administer Barracuda Suite of Security Appliances Qualys,Bradford NAC • Setup,Manage remote access,client,and site-site vpn connectivity Routers:ASR1001-X/1002-X, . Manage Active Directory 3945/3825,2921,1700,1720,2951, Network Security Architect,Senior Network Engineer Switch: 891 . Design&Upgrade Network to ensure security compliance Switch:Catalyst(stacks), Nexus 4509, Implement Meraki MR18 Wi-FI 3560,3750(stacks),Nexus P 7000,5500;2000,4500-X VSS Deploy ASA 550OX NGFW with NGIPS Firepower Wireless:CISCO WLC 5500 802.1,1a/g, • Setup remote access,site-site vpn 802.11 n,and 802.11 ac,AP 3600,. • Ensure Network Infrastructure is in compliant with industry security and 3700 LWAPP,Meraki MR18 Cloud°APs hardening standards(i.e.PCI,CIS), manage security and vulnerability Troubleshooting tools:Cisco-Works, assessments wire shark network analyzer(sniffer), Network Engineering,Lead Cisco Security Manager,Cisco ASA Packet tracer/capture and tcpdump • Manage Data Center Core consisting of Cisco Nexus 9K, 7K,and 5K/2K Protocols RIP,_R[Pv2,]GRP,EIGRP, • Manage DMZ and Internet Edge Infrastructure consisting of ASA NGFWs OSPF,IS-IS,and BGP IPS/IDS,and F5 LTMs O/S and Virtualization-Windows, o Design network architecture for new sites and Disaster Recovery Linux(Redhat,Kali,Ubuntu),and Address all Post-Migration issues;participate in on-call rotation VMWare S-x/6.x . Participate in CAB Change Committee Review System Administration-Active Directory,Power5hell 3.0 and later Work with CISO to define GRC for network infrastructure • Work with CISO to conduct security audits,vulnerability scanning,and reporting on all network infrastructure devices using Qualys • Oversee hardware procurement,telecom billing,and professional services EDUCATION CERTIFICATIONS i Rockland Community,College' CCNA Computer Career Center,Garden City, CCNP 2000.-2016 NY MIUTARY SERVICE - United States Air Force ; N`oportoftlusCmisultantProJilemayberrproducedwdboutpernnssronfroniCoreBTS CORE BTS,Inc. 22 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update U oo®. 0 e ,® LT STARTS HVRF 1 a. e o r e Michae/Passa/acqua-ConsuNng Engineer .•. Northeast Region-Data Center OVERVIEW CONTACT INFORMATION EXPERIENCE HIGHLIGHTS Michael Pas'salacqua Consulting Engineer Data Communications Core BTS Successfully delivered data communication services to client companies on 1373-10 Veterans Memorial Hwy both a project basis and level 3 support Hauppadge,NY 11788- • Directly responsible for upgrading and installing Cisco equipment Phone.(631)-98274773 including, but not limited to: Email o 6500, 3750, 2960, Nexus Fabric Extenders,and Nexus 5000 series Michael.Passalacpua@corebts.com switches o Wireless Controller, Identity Services Engine and Prime Management in `AREAS OF EXPERTISE a virtual and physical environment In Industry Since 2009° Installed, upgraded,and diagnosed the following Microsoft applications: o Exchange 2007-2013 o Threat Management Gateway o ADDS, DHCP, DNS, Print Management,etc. • Adapted quickly to integrate the technologies listed above with various other venders such as Enterasys,Alcatel,Juniper,and HP to meet the client's needs Technology Seances-Security - . a Purchased security awareness training and Cisco wireless controller • Constructed Visio diagrams and configured network security on Cisco switches Information Technology Consultant Created detailed spreadsheets and network diagrams for the client as well basic desktop support Help Desk Technician • Imaged new computers using Norton Ghost and SCCM Configuration Manager EDUCATION- CERTIFICATIONS " Alfred State,SUNY College of At.Certiftcation "j " Technology Provided with the skills to network and repair computer, Bachelor of Technology-information hardware and software Technology-Information Security"& } }Assurance;Minor Network Administration Associate-'of Applied Science Computer1nformation Systems Cisco Networking Academy(CCNA& CCNA Security)2011=_2012& I 2007-2009 NoPa4,oftit sConsultantProfile May Gereproducediotthout' issiorijronf6cireB15 CORE BTS,Inc. 23 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update ®a3©•. . ®mm ,4 LT STARTS HIRE .�fl®• C r Fillmore Iamantia-Systems Engineer ... NortheastRegion-Data Center CONTACT INFORMATION EXPERIENCE HIGHLIGHTS Fillmore Lamantla Network Field Engineer Systems Engineer • Perform Cisco Wireless LAN and network upgrade site surveys for a retail network Core BTS refresh project for a national grocery store chain 1393 Veteran's Memorial Highway- . Responsible for documentation used by sub-contractors for determination of the type Suite 408N of network media,power requirements,placement of new IDF's,and type of fiber Hauppauge,NY 11788 connections from IDF(s)to the MDF Phone'(631)982-4800 • On-site engineer performing network cut over Email' • Perform on-site troubleshooting for router,switch,wireless access point,firewall,and FiIImore.Lamantia@corebts.com' fiber optic Issues • Document the existing rack elevation and revise the new rack elevation requirements AREAS OF EXPERTISE for placement of new Cisco 2911 ISR Routers,Cisco ASA5512 Firewall,Cisco 2960 POE switch,and new patch panel(s) In Industry Since 1999 a Act as liaison between the customer NOC and Conquest Technologies NOC during the deployment of the network upgrade • Utilize TFTP to copy new configuration files to routers,switch,and/or firewall • Install redundant Cisco 2911 ISR routers and QA HSRP for router and link failure • Install new Cisco 2960 POE switch(s),Cisco ASA5512 Firewall,and coordinate with customer NOC for firewall testing • Document the Installation and project deliverables for verification and sign-off Network Support • Configured Cisco 2811 router with NAT,ACL's,SSHv2,and to perform"Router on a Stick"inter-VLAN routing • Configured multiple Cisco Catalyst 3550 switches with VTP,VLAN's,port security,and HSRP • Installed and supported Windows 2003 servers • Configured SOL server 2003 and Active Directory • Supported Windows Vista Business and Windows 7 desktops • Supported Microsoft Office 2010 • Responsible for development and acquisition of commercial and residential accounts • Developed the training program for new employees • Assisted with daily operations of business CERTIFICATIONS' 1 Cisco Certified Network Associate Routing&Switching,2014 E IBM Certified for Wi-Fi Radio Frequency 802.11b Site Survey Microsoft Certified Systems Engineer NT4.0(MCSE), Sun Certified Systems Administrator,Solaris 7(SCSA) Nortel Networks Alteon Certified Administrator(ACA) I Aropart oftlus consultant Profile in y be reproduced without pernusswnfrom CoreWS. CORE BTS,Inc. 24 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update STATEMENT OF NON-COLLUSION (To be completed by each Bidder) In accordance with Section 103-d General Municipal Law, effective September 1, 1966, every bid or proposal hereafter made to a political subdivision of the State of any public department, agency, or official thereof or to a fore district or any agency or official thereof for work or services performed or to be performed or goods sold or to be sold, shall contain the following statement subscribed to by the bidder and affirmed by such bidder as true under the penalties of perjury; non-collusive bidding certification. A. By submission of this bid, each bidder and each person signing on behalf of any bidder certifies, and in the case of a joint bid, each party thereto certifies as to its own organization,under penalty of perjury,that to the best of knowledge and belief: (1) The prices in this bid have been arrived at independently without collusion, consultation, communication, or agreement, for the purpose of restricting competition, as to any matter relating to such prices with any other bidder or any competitor. (2) Unless otherwise required by law, the prices which have been quoted in this bid have not been knowingly disclosed by the bidder and will not knowingly be disclosed by the bidder prior to opening, directly or indirectly, to any other bidder or to any competitor. (3) No attempt has been made or will be made by the bidder to induce any other person, partnership, or corporation to submit or not to submit a bid for the purpose of restricting competition. B. The person signing this bid or proposal certifies that he has fully informed himself regarding the accuracy of the statements contained in this certification, and under the statements contained in this certification, and under the penalties of perjury, affirms the truth thereof, such penalties being applicable to the bidder, as well as the person signing in its behalf. C. That attached hereto (if a corporate bidder) is a certified copy of resolution authorizing the execution of this certificate by the signature of this bid or proposal on behalf of the corporate bidder. RESOLUTION Resolved that �50'y of the (Name of signatory) Core BTS,Inc. Be authorized to sign and submit the bid (Name of Corporation) Or proposal of this corporation for the following Project: Firepower and Firewall Update and to include in such bid or proposal the certificate as to non-collusion required by section one- hundred-three-d (103-d) of the General Municipal Law as the act and deed of such corporation, and for any inaccuracies or miss-statements in such certificate this corporate bidder shall be liable under the penalties of perjury. U The foregoing is true and correct copy of the resolution adopted by corporation t a meeting of the Board of Directors,held on the; day of 20� (SEAL OF THE CORPORATION) Laws of New York, 1965 Ch. 751, Sec. 103-d, as amended& effective on September 1, 1965. Signature voNWo�, �� SEAL NC' ''• -` " NOTARY PUBLIC ! %I •'�� ' � Commission _ t Number ` a 702558 My Commission + Expires Ju110 2025 �'��TF OF 100" �� c o r e STARTS `tERE I COMPANY INFORMATION V/ 171 -' - Core is a customer-centric technology consulting organization dedicated to transforming IT experiences and delivering value to clients. Core has 15 offices in 9 states with more than 300 employees which allows us to provide national reach with local expertise. Our team has more than 25 years of experience and holds to-level certifications with Cisco, VMware, EMC, Citrix, and Microsoft that allow us to provide our customers with expertise across multiple technologies. In addition to our top-tier partnerships, Core holds many partnerships with other national and regional technology providers to ensure we can provide our customers with a holistic technology solution. Core has over 2,500 active customers across industries including, healthcare,education,financial services,and manufacturing. Although we sell IT products we take a vendor agonistic collaborative approach to designing the right project that provides the most value to our clients—we lead with IT assessments. We work closely with our customers to understand their strategic direction and organization needs in order to Plan, Design, Implement, and Operate appropriate IT solutions. Our team of consultants, solution architects, and engineers work collaboratively with you from understanding your organizations objectives through implementation an operation. Envision—Execute—Empower—it's our commitment to providing you the best possible IT solution to move your organization forward. CORE BTS,Inc. 27 I May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i ,m 1A STARTS HERE Partners Having the highest level of certification-specific rewards and recognition with multiple partners puts Core in a unique position to deliver the most comprehensive, trusted solutions for your enterprise. Through these partnerships Core is able to offer an increased level of technical expertise and support,productivity tools,training, communication resources and solutions incentives.In addition, Core can subsequently offer incremental product discounts and leverage partner resources, including customer satisfaction best practices and tools. Value. Delivered. By combining experience, knowledge, and talent with top-tier partnerships, Core uniquely positions itself to deliver the highest caliber technology solutions. Experience industry best practices with our top-tier partnerships and highly qualified,certified technical staff: • Cisco: As a Cisco Gold Certified Partner, Core has integrated the deepest level of Cisco Lifecycle Services expertise into its offerings and have demonstrated a measurably high level (96%) of customer satisfaction. o Cisco Certified professionals including CCIE VOICE(1),CCIE ROUTING/SWITCHING (4), CCIE COLLABORATION (3), CCIE 10-YEAR ACHIEVEMENT(1), CCDP(4), CCNA(35), CCNA VOICE (4), CCNA SECURITY(3), CCNA WIRELESS(5), CCNA COLLAB (2),CCNA DATA CENTER(1),CCNP (19), CCNP VOICE (1), CCNP SERVICE PROVIDER(2), CCNP COLLABORATION (6), CCDA(13),CMNA(6), • DeIIEMC: Through our DeIIEMC Gold partnership, Core can offer the latest and most diverse tools and standards in technical architecture quickly and efficiently. o DeIIEMC CERTIFIED technical professionals including IE (3),SE (2) • VMware: Being a VMware Enterprise solution provider, Core offers cutting-edge virtualization and business continuity solutions with the highest accreditations. o VMWARE CERTIFIED technical professionals including VCP (3),VSP (12),VTSP (8) • Citrix:Core is a Citrix Gold Partner with ability and extensive experience to deploy all Citrix offerings. o CITRIX CERTIFIED professionals including CCIA(3),CSP(10), CCA(32),CCEE(1),CCAA(3) • Microsoft: As a Microsoft Gold Partner, Core has earned 11 certifications to offer the best that Microsoft has to offer. o MICROSOFT CERTIFIED professionals including MCSE (3), MCPS(29), MCT/TRAINERS(4), MCTS (14), MCSA(9) • NetApp:As an experienced NetApp Gold partner,Core deploys and supports NetApp's FlexPod Data Center Solution. o NETAPP CERTIFIED professionals including HASP (2), NATSP (1) CORE BTS,Inc. 28 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i 000.c o r .9 ,a IT STARTS HERE Explore our focus areas to learn more about technologies impactful to your organization: DATA CENTER The data center is the foundation of IT operations.Organizations can lower total cost of ownership with a stable data center foundation that allows for current-state flexibility, scalability into the future and simplified management. With the guidance of Core, data center solutions can elevate an organization's infrastructure, enabling an optimized and reliable IT experience. • Archiving, Backup and De-Duplication:Streamline and effectively store critical organizational information. • Business Continuity and Disaster Recovery: Ensure reduced network downtime and faster recovery. • Networking: Enable all components of your infrastructure to communicate with each other quickly and securely. • Unified Storage and Computing:Reduce hardware requirements by streamlining files and applications that can all be accessed from a single device. • Virtualization:simplify, maximize, and enable systems to contain and store information from a secure, central location. • Hyper-Converged Infrastructure: Simplify data center management and obtain faster time-to-value and significant cost savings. COLLABORATION Organizational processes are increasingly dependent on creative management and information sharing. Communication technologies provide the power organizations need to conduct business through geographic and virtual borders.Through these technologies,organizations are able to connect multiple facets of their operation, reduce travel costs, and impact the bottom line.With the help of Core, innovative organizations are transforming into a live network of global information exchange. • Mobility and Presence: Leverage a dynamic workforce to enable communications regardless of location, application or device. ' • Unified Messaging: Integrate multiple forms of messaging utilizing integrated access from a phone,e-mail client, tablet,or other mobile device. • Voice: Increase presence and maximize value with "always-on"voice services. • Web and Video Conferencing: Deliver face-to-face communication across multiple locations and devices. • Digital Content Sharing:Virtually share files, message the team, and make decisions collectively,wherever you a re. • Social Technologies: Promote social collaboration and allow everyone in your organization to share knowledge and engage with a purpose. • Collaboration as a Service (CaaS): leverage the cloud to provide higher levels of redundancy and a wider range of device access to e-mail and unified messaging while reducing on premise footprints and costs. • Hosted Video Service(HVS): provides operational video support with no capital infrastructure investment. CORE BTS,Inc. 29 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i ,® IT. STARTS HERE -' SECURITY AND COMPLIANCE The security of your network is fundamental to the health of your organization. By partnering with Core and its top-tier partners you can protect valuable data and data center resources with compliance consulting, penetration testing, risk assessments, and-vulnerability scanning. Let Core help you mitigate risks and protect against threats by creating actionable and comprehensive plans for success. • Compliance Consulting:achieve and maintain compliance in today's fast paced regulatory environment using the NIST Cybersecurity frameworks. Our Team of CISSP's, Certified Ethical Hackers and Compliance Experts work closely with clients and regulators to protect critical data and provide,a secure working environment. • Penetration Testing: Services that rigorously challenge an organization's security posture from the perspective of an attacker. • Vulnerability Scanning:scan threats identified during the penetration test to assess risks. • Social Engineering: services that teach your employees how to best protect your organization against possible security threats. SECURITY SOLUTIONS • Monitoring: our 24x7x365 Security Monitoring Solutions help clients stay ahead of attackers, identify, and act on security threats. , • Content Security: proactively protect business critical applications. • Access Management: Enable only authorized users access to systems and data. CLOUD Cloud has been the buzz word in IT for years now, but many organizations still do not fully understand how cloud should fit into their organization,where they are already utilizing the cloud,and what their next steps for cloud implementation should be. Cloud solutions for each organization are unique, therefore organizations need partners that work to create custom cloud solutions that allow them to achieve their business goals. Wherever an organization stands with their cloud journey at this point, Core can help them get started in the cloud, continue their journey to the cloud,or help improve operational efficiency after cloud implementation. • Cloud Assessment:Our assessment helps companies successfully size,scale, price,deploy,and validate IaaS and Data Center Solutions • Storage as a Service(SaaS): Host storage infrastructure on a subscription based model and provide realized cost savings. • Platform as a Service (PaaS): Maintain business flexibility without the cost and complexity of buying the underlying hardware. • Infrastructure as a Service (IaaS): Host server and storage infrastructure in the cloud and reduce physical data center footprint, increase flexibility,and reduce costs. • Collaboration as a Service (CaaS): Leverage the cloud to provide higher levels of redundancy and a wider range of device access to email and unified messaging while reducing the on premise footprint and costs. • Disaster Recovery as a Service (DRaaS): replication and hosting of physical or virtual servers to provide failover in the event of a disaster. CORE BTS,Inc. 30 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update i .� c o r e LT STARTS HERE CLOUD MANAGED SERVICES Network Operation Center(NOC)Services • Monitoring:Our engineers actively watch your environment, receive notifications, and escalate alerts to help you more efficiently manage your environment. • Management:Our engineers identify problems, resolve incidents, and regularly review your environment to recommend improvements. • Help Desk:Technical support for software and hardware from certified, front-line support technicians without draining your resources. • CoreCare:A joint service offering provided by Core and Cisco that combines network-wide Cisco technical support with on-going network monitoring and proactive maintenance for Cisco solutions to ensure optimal performance. Cloud Compute • Cloud Compute: Utilize SaaS, PaaS, IaaS, CaaS, DRaaS,and Cloud Backup to easily manage your computing environment. o Co-Location, Dedicated Cloud,Shared Cloud,vCloud Air—Dedicated Cloud and Shared Cloud Other Managed Services • Cloud Backup:Online data backup done in a public, private or hybrid setting. • Disaster Recovery: Replication and hosting of physical or virtual servers to provide failover in the event of a disaster. • Security Monitoring Services:stay ahead of attackers with a proactive approach to security. • Hosted Video Service: Provides operational video support without capital infrastructure investment. STAFFING SERVICES Core enables an organization's vital business processes to flourish by delivering a full range of Staff and Project Augmentation services to meet evolving business needs. Whether it be short-term, long-term, or temporary-to-hire, Core can provide experienced engineers with the technical knowledge and expertise to make your mission-critical projects a success.Core's Staff and Project Augmentation solution has been extremely successful because it allows our customers to keep their workforce more flexible and adaptable to economic fluctuations and marketplace change. When you source staff augmentation employees from Core you aren't just hiring an individual,you are leveraging the entirety of Core's knowledge and resources.We act as an extension of your staff, allowing your organization to tailor technology talent to support your most important internal initiatives. Not only will our employees seamlessly transition into your business,you will benefit from reduced administrative costs associated with payroll,advertising, and recruiting. Our process ensures that you get the efficient,talented help you need without all of the additional hassle.As a technology services company comprised of over 70% technical staff, Core is a dedicated resource for providing consultants who have gone through a specialized screening process, background and reference checks,and provided key on-boarding materials to create a trustworthy, simple way to get the technical experience you are looking for. CORE BTS,Inc. 311 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update ®®00 o r e I.T. STARTS HERF Project Management Plan — Methodology Overview '61k0i ;AE-i IV E R- DE#* CPRE SALES SCOPE • R, V. a A ti 97 ie �ZNV t",t:V Fr�F 9 -a'RUPW CORE BTS,Inc. 32 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update c o r e ,® 1T STARTS HERE Core project managers and consultants are trained and cultured in several cycle, delivery and business process methodologies, in order to provide a holistic, intelligent approach to our customers' needs. ITIL Iterative life-cycle planning and management for service`management and application - �"ITIL- application development: TO'GAF Business°analysis,planning and implementation me_thods THE_) e?ZGRavP PMI _, Project'Management processes and best practices are used to define and. document our project processes and procedures . BUSINESS ANALYSIS �� " Iniemaflonallnsilute Standard methods for BA are utilized throughout our teams EM ofBosinessAnalysis To meet goals and objectives,a sound approach and methodology are important. It will ensure business objectives are understood and realized,focus the project team for efficient delivery and validate that the solution meets the objectives.The diagram below defines the high-level phases a project will iterate to meet the desired end state. Each of these phases has a deliverable as well as Delivery Excellence Reviews(DER)which ensure the deliverables match work described in a Statement of Work(SOW).The foundations for each of these phases are tracks of work which develop supporting artifacts and further solution definition. The solution roadmap shown below provides a high-level view of the project phases and illustrates the relationship between project phases relative to project completion. It is not intended to depict effort associated with each of the respective project phases. PROJECT PHASES At the highest level,there are five phases to a Core project: • PRE-SALES DISCOVERY • DEFINITION • DESIGN • EXECUTE • DELIVER The end of each of these phases is marked by a Delivery Excellence Review(DER).The Delivery Excellence Review is conducted by Account Managers,Senior Architects, Practice Leads and Practice Directors to create a common, accepted view of solution delivery and support. Pre-Sales Discovery The PRE-SALES DISCOVERY phase is where Core works to understand the business problem faced by clients. During this phase Core will determine if we have the competency to meet the stated business objective. Definition The DEFINITION phase is where Core begins direct customer engagement. The phase will engage Core Business Analysts,Senior Architects,and Program Managers with the goal of formalizing project approach,schedule,scope, and client responsibilities. CORE BTS,Inc. 33 1 May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update . a. -00,c o r a IT., STARTS HERE Design The DESIGN phase is where Core builds upon the Definition phase by further defining the solution. In this phase, Core uses Security Consultants and Project Management to refine the solution to a detailed design. This is the final development phase before solution construction begins. Execute Just as the Design phase built upon the work completed in Definition, the EXECUTE phase builds upon the work efforts completed in Design. During this phase, Core consultant(s) begin to build the solution based upon the Design and Requirements Assessment specification compiled during Design. Deliver The DELIVER phase includes the final project phases prior to full production deployment as well as the production deployment. During this phase, Project Managers, Engineers,and Technology Adoption Specialists work to deploy the solution and ensure solution adoption. The following deliverables will be produced during this project. Customer and Core will work jointly to develop the deliverables with responsibilities as indicated below: 7-77 PHASE DELIVERABLE} " _ -r-DESCRIPTION :CORE-'"` CUSTOMERT` RESPONSIBILITY , ,RESPONSIBILITY KICK-OFF • Outline of project objectives, i PRIMARY ASSIST PRESENTATION stakeholders,approach and schedule • Project schedule/timeline used to PROJECT PLAN PRIMARY ASSIST DEFINE manage project activities • Business functional and technical REQUIREMENTS ' ASSIST PRIMARY requirements i' PROCESS FLOW • Graphical representation of processes to PRIMARY ASSIST DIAGRAM be implemented (' w ;• Display of relationships between applications,field list,data driven DESIGN° , DESIGN events page layout,global reports, PRIMARY REVIEW SPECIFICATION ' p g Y 'g workspaces, notifications,and access i control specifications. i CONFIGURED • Working solution with all components E>FEGUTE SOLUTION PRIMARY ASSIST outlined in the design I USER ACCEPTANCE • User testing to determine if solution :QELI1tER ASSIST PRIMARY TESTING meets requirements SOLUTION . Documentation outlining configuration I. ADMINISTRATION and use of final solution(s)targeted ! PRIMARY REVIEW GUIDE DELIVER. 3; ' towards solution administrators i ! i . . , USER • User training materials outlining use of DOCUMENTATION solution(s) PRIMARY REVIEW CORE BTS,Inc. 34 l May 23,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Firepower and Firewall Update #0002345170 z STATE OF NEW YORK) )SS: COUNTY OF SUFFOLK) Kimberly Gersic of Mattituck,in said county,being duly sworn, says that she is Principal Clerk of THE SUFFOLK TIMES ,a weekly newspaper,published at Mattituck,in the Town of Southold,County of Suffolk and State of New York,and that the Notice of which the annexed is a printed copy, has been regularly published in said Newspaper once each week for 1 weeks(s),successfully commencing on 05/09/2019 (AkO L4 kC�26� J Principal Clerk Sworn to before me this day of �� CHRISTINA VOLINSKI NOTARY PUBLIC-STATE OF NEW YORK No UIV46105050 Quaiitieci in Sultolb County My GUmmigo,o r Expaes February 28,2020 TYPESET. Tue Apr 30 16 17 52 EDT 2019 LEGAL NOTICE REQUEST FOR PROPOSALS NOTICE IS HEREBY GIVEN THAT SEALED PROPOSALS ARE SOUGHT AND REQUESTED BY THE TOWN OF SOUTHOLD FOR THE FOLLOWING: Town of Southold("Southold")is solicit- ing competitive sealed bids from qualified professional firms to update its Cisco Fire- power Server and Cisco ASA Security Appli- ances. Vendor bids must comply with all Terms and Conditions described in this doc- ument Specifications and ,lob descriptions are available at the Town Clerk's office,53095 Main Road,Southold,N Y between the hours of 8 00 A M.and 4 00 P.M,Monday through Friday,excluding holidays,(631-765-1800). Written bids are due on May 23,2019 and must be delivered to the Southold Town Clerk's office,Southold Town Hall,PO Box 1179,53095 Main Road,Southold,New York 11971 by 2:00 PM on that date Bid proposals must be in sealed envelopes and clearly marked, "Cisco Firepower and ASA Up- date" CONTACT PERSON: Lloyd Reisenberg,Information Technology Town of Southold,631-765-1891 VENDORS MUST SUBMIT PROPOSALS IN SEALED ENVELOPES. PLEASE PRINT THE FOLLOWING ON THE FACE OF ENVELOPE 1) NAME&ADDRESS OF VENDOR 2) PROPOSAL NAME It is the vendor's responsibility to read the detailed Request for Proposals and provide a proposal that completely and accurately ad- dresses each part of the document Upon sub- mission of the proposal,it is understood that the vendor has read, fully understands and will comply with,all requirements The Town of Southold welcomes and en- courages minority and women-owned busi- nesses to participate in the bidding process Dated April 23,2019 ELIZABETH A.NEVILLE SOUTHOLD TOWN CLERK 2345170 Southold Town Board - Letter t° "j-Board Meeting of April 23,2019,1 -` Item# 5.20 RESOLUT .J4; ION•2019-376 ADOPTED DOC-ID: 15158 THIS IS TO CERTIFY THAT THE FOLLOWING RESOLUTION NO. 2019-376 WAS ADOPTED AT THE REGULAR MEETING OF THE SOUTHOLD TOWN.BOARD ON :n APRIL 23,2019: ,f RESOLVED that the Town Board of the Town of Southold hereby rejects any and all bids received for the updating of its current Cisco Firepower Server,`Firegowef Management Center a Suite of Applications, AMP for Network and Desktops and Cisco-ASA Security Appliances, and be it further ;.; �T RESOLVED that the Town Clerk's office is hereby directed-and authorized to re-bid same. =y •��il�� a 11 I�1 Elizabeth A.Nevilles SoutholO Town Clerk-' ' RESULT: ADOPTED [UNANIMOUS]. MOVER: William P. Roland, Councilman SECONDER:Louisa-P. Evans, Justice y _ AYES: Dinizio Jr, Ruland, Doherty, Ghosio, Evans-Fussell ` r 7, Generated April 24, 2019 Page 37 ,''s LEGAL NOTICE REQUEST FOR PROPOSALS NOTICE IS HEREBY GIVEN THAT SEALED PROPOSALS ARE SOUGHT AND REQUESTED BY THE TOWN OF SOUTHOLD FOR THE FOLLOWING: Town of Southold("Southold") is soliciting competitive sealed bids from qualified professional firms to update its Cisco Firepower Server and Cisco ASA Security Appliances. Vendor bids must comply with all Terms and Conditions described in this document. Specifications,and job descriptions are available at the Town Clerk's office, 53095 Main Road, Southold,N Y between the hours of 8:00 A.M. and 4:00 P.M., Monday through Friday, excluding holidays, (631-765-1800). Written bids are'due on May 23,2019 and must be delivered to the Southold Town Clerk's office, Southold Town Hall, PO Box 1179, 53095 Main Road, Southold, New York 11971 by 2:00 PM on that date. Bid proposals must be in sealed envelopes and clearly marked, "Cisco Firepower and ASA Update". CONTACT PERSON: Lloyd Reisenberg, Information Technology Town of Southold, 631-765-1891 VENDORS MUST SUBMIT PROPOSALS IN SEALED ENVELOPES. PLEASE PRINT THE FOLLOWING ON THE FACE OF ENVELOPE: 1) NAME &ADDRESS OF VENDOR 2) PROPOSAL NAME It is the vendor's responsibility to read the detailed Request for Proposals and provide a proposal that completely and accurately addresses each part of the document. Upon submission of the proposal,it is understood that the vendor has read, fully understands and will comply with all requirements. The Town of Southold welcomes and encourages minority and women-owned businesses to participate in the bidding process. Dated: April 23, 2019 ELIZABETH A. NEVILLE SOUTHOLD TOWN CLERK PLEASE PUBLISH ON MAY 9,2019, AND FORWARD ONE (1 ) AFFIDAVIT OF PUBLICATION TO ELIZABETH NEVILLE,TOWN CLERK,PO.BOX 11799 SOUTHOLD,NEW YORK 11971. Copies to the following: The Suffolk Times Town Board Members Town Attorney Town Clerk's Bulletin Board Town of Southold: REQUEST FOR PROPOSAL: Cisco Firepower Server and ASA Updates Town of Southold ("Southold") is soliciting competitive sealed proposals from qualified professional firms to perform firmware and software updates on its Cisco Firepower Server and Cisco ASA Security Appliances. Vendor proposals must comply with all Terms and Conditions described in this document. Written proposals are due on May 23, 2019 and must be delivered'to the Southold Town Clerk's office, Southold Town Hall, PO Box 1179, 53095 Main Road, Southold, New York 11971 by 2:00 PM on that date. Proposals must be in sealed envelopes and clearly marked, "Cisco Firepower and ASA Updates". Please submit two sets of your proposal. Clearly mark the original copy as "ORIGINAL" on the cover. REQUEST FOR PROPOSAL OVERVIEW Project Name: Cisco Firepower Server and ASA Updates Proposal Issue Date: May 9, 2019 Proposal Due Date: May 23, 2019 @ 2:00 p.m. Vendor Requirements • The Vendor must be a certified Microsoft Gold Partner. • The Vendor must be a certified Cisco Gold Partner. • Local Cisco Certified Internet Expert (CCIE) Presence. • Cisco Advanced Security Architecture. • Certified Information Security Systems Professional (CISSP). • The Vendor must have performed similar Cisco ASA updates and have references. The Vendor must provide at least 3 references of similar scope. Project,Overview The Town of Southold is seeking to update the software on its current Cisco Firepower Server, Firepower Management Center Suite of Applications, Cisco AMP, Cisco Umbrella and Cisco ASA Security Appliances. The project shall include updating the firmware, operating systems, software application updates and any release updates to these devices/applications to the latest updates/releases from Cisco. The project will also include the analysis of the configuration of the settings, rules and polices of these devices/application with the intent to make recommendations and implement changes to improve the current installation. All software updates are be covered by the Town of Southold's current Cisco Smartnet contracts. This project is for a fixed project engagement. Analyze, Configure and Update: • Evaluate the current configuration and design of the Firepower Server, Firepower- Management Center, AMP, Umbrella and all seven (7) existing ASAs. • Analyze and identify any potential performance issues relating to possible bandwidth limitations of the ASAs. • Implement recommendations, making approved,changes to the configuration, rules and policies on the Firewalls, Firepower Server, Firepower Management Center, AMP and Umbrella. • Update and configure Cisco ESX and associated software on the management server. • Update all seven (7) ASA operating systems and releases to the latest from Cisco. • Update the VMware operating system on the Firepower Sever. • Update the Cisco Fire Linux operating system on the Firepower Server to the latest from Cisco. • Update/Upgrade the Firepower Management Center software to the latest from Cisco. Equipment locations are as follows: • Firepower Sever - Town Hall, 53095 Main Rd., Southold, NY • ASA 5525X with Firepower - Town Hall, 53095 Main Rd., Southold, NY • ASA 5525X with Firepower - Town Hall Annex, 54375 Main Rd., Southold, NY • ASA 5525X with Firepower - Police Department, 41405 Route 25, Peconic, NY • ASA 5508X with Firepower - Highway Department, 275 Peconic Lane, Peconic, NY • ASA 5508X with Firepower - Recreation Center, 970 Peconic Lane, Peconic NY • ASA 5508X with Firepower - Solid Waste Department, 6155 Cox Lane, Cutchogue, NY • ASA 5508X with Firepower - Human Resources Center, 750 Pacific St., Mattituck, NY Hand-off to Southold • Immediately after project completion, provide second day support. • Create a Run Book documenting any setting or configuration changes. • Provide the I.T. staff with a backup of the Firepower Management Center configuration and all 7 Cisco ASA configuration. Communication/Questions Vendors are expected to raise any questions or comments they have concerning the proposal document as soon as they become aware of them. Any questions or.requests for clarifications must be directed in writing to Lloyd Reisenberg at Iloyd.reisenberg town.southold.ny.us no later than May 16, 2019 @ 4:00 p.m. The subject line of the email must be'labeled "Cisco Firepower and ASA Update - Question." The only contact allowed with the Town of Southold IT staff is through email, as stated above. Unauthorized contact of any Town of Southold employee is cause for rejection of the proposal. Any additional information or clarifications that are provided to one vendor will be provided to all vendors in the form of an addendum. Calendar of Events The dates set forth below are for informational purposes only. All dates are tentative and subject to change. Milestone Date Issue Proposal: May 9, 2019 Deadline for Submission of Written Questions: May 16, 2019 @ 4:00 p.m. Proposal Due Date: May 23, 2019 @ 2:00 p.m. Submission of the Response Respondent must submit two sets. Please clearly mark the original copy as "ORIGINAL" on the cover: Southold Town Clerk PO Box 1179 53095 Route 25, Southold, New York 11971 All responses must be packaged, sealed, show the following information on the outside of the package and include a Non-Collusive Bid Certificate: Respondent's name, address, and the request for proposal number and title. The Town Board of the Town of Southold reserves the right to reject any and all proposals and waive any and all informalities in any proposal should it be deemed in the best interest of the Town of Southold to do so. Response Requirements: The Town of Southold will evaluate responses based upon the following criteria: Section 1: Proposer's Financial Stability (10%): Provide a description of the Proposer's firm, including history; number of years the Proposer has been in business; type of services provided; and legal status of Proposer's organization, i.e. corporation, partnership, etc. Provide documentation to verify the Proposer possesses adequate financial support, assets, ' and organization to provide the products and services required in this proposal. This may take IK { the form of financial statements, credit ratings, a line of credit, or other financial arrangements sufficient to enable the offer or to be capable of meeting the requirements of this proposal. Section 2: Proposer's Qualifications/References (25%) Provide descriptions of like projects Proposer has done in environments comparable to Town of Southold. Provide at least-five client references from the above listed project including the names of the individual(s) you would propose Town of Southold contact, together with phone numbers, company names, and addresses. Town of Southold reserves the right to contact or visit any party listed as a reference that has previously used, or is presently using your products or services in a manner similar to those proposed by the vendor. Southold also reserves the right to use other sources to obtain information about the proposed products and services. Section 3: Proposed Solution (40%) Proposed solution must also show the following: • Proof of extensive experience with designing and implementing Cisco Firepower Management Center and next generation ASAs. • Detailed project plan including estimated hours for each mandatory requirement with start and finish dates. Section 4: Cost Proposal (25%) Vendor's pricing must be all inclusive to provide the Town of Southold a turnkey solution. Current Operating Systems and Application Releases Cisco Firepower Management Center Model Csco Firepawer Managernert Center for VMRare Serial r,46rnber None Software Version &.2.2 build 81) 0S Cisco,Fire Linuk OS 6.2.2 (buildil) Snort Version- 2.9.11 GRE (Budd 125) Rule Update Version 2019-03-20-001-v-,t Rul,epack Version 2221 Module Pack Version 2513 Geolocation Update V&sion 2019-03-13-002 VDB Versron bui[d,271 2016-07-13 19:21:54 VMWare About SX1 TIII Wware,E copyTighi 4D In-,.Ai rights rose.-vac;."hi_prcdu=tIs Protected by IJ S srd niar.92ftrgt copyright and inta"adual poperty IMs VNIviars-products--e Joove,TEd by one or more paterts'Asted at Version: 1.8.0 Build number: ESXi version: 6.5-0 ESXi build number: 4887370 Gose jse A ASA 5526 Cisco Adaptive Security Appliance Software Version 9.8(2)20 Firepower Extensible Operating System Version 2.2(2.63) Device Manager Version 7.9(1) ASA 5508 Cisco Adaptive Security Appliance Software Version 9.6(4)12 Device Manager Version 7.5(1) STATE OF NEW YORK) SS: COUNTY OF SUFFOLK) ELIZABETH A. NEVILLE, Town Clerk of the Town of Southold,New York being duly sworn, says that on the 3011 day of April , 2019, a notice of which the annexed printed notice is a true copy was affixed, in a proper and substantial manner, in a most public place in the Town of Southold, Suffolk County, New York, to wit: Town Clerk's Bulletin Board, 53095 Main Road, Southold,New York. Re-bid Firewall upgrade lizabe A. Nevil e Southold Town Clerk Sworn before me this 30th day of April , 2 1 . otary Public LYNDA M.RUDDER Notary Public,State of N@WY6019 No.01 RU6020932 Qualified in Suffolk County Commission Expires March 8,loin, Rudder, Lynda From: legals <legals@timesreview.com> Sent: Tuesday, April 30, 2019 4:19 PM To: Rudder, Lynda; Lisa Finn (lisaahfinn@gmail.com); Michaelis,Jessica; Reisenberg, Lloyd, Southold Local (denise@southoldlocal.com); Dinizio, James; Doherty,Jill; Doroski, Bonnie; Ghosio, Bob; Louisa Evans; Neville, Elizabeth; Noncarrow, Denis; Norklun, Stacey; Russell, Scott; Standish, Lauren;Tomaszewski, Michelle;William Ruland; Duffy, Bill; Hagan, Damon; Silleck, Mary Subject: Re: Firepower ad for publication Attachments: Ad_Order_Form[16].pdf,Ad_Image_Preview[14].pdf Importance: High Hello, This notice has been scheduled,the attached documents serve as your confirmation, invoice and proof. Please review for accuracy. Payment is due upon receipt. Affidavits are processed and mailed out a week after the final publication date of the notice. Thank you. legals@timesreview.com MEDIA GROUP Kimberly Gersic Sales Production Assistant 631.354.8013(direct) kqersic@timesreview.com www.timesreview.com PLEASE NOTE CANCELLATION POLICY:All ads are billed for entire run upon first publication date. Cancellations for publication dates can be made but there will be no adjustment to cost and refunds will not be given. There are no exceptions to this policy. REVIE f MED2A GROUP 1 Kimberly Gersic Sales Production Assistant 631.354.8013(direct) kAersic@ timesreview.com www.timesreview.com From: "Rudder, Lynda" <Iynda.rudder@town.southold.nv.us> Date:Tuesday,April 30, 2019 at 3:17 PM To: Lindsay Riemer<legals@timesreview.com>, "Lisa Finn (lisaahfinn@gmail.com)" <lisaahfinn@gmail.com>, "Michaelis, Jessica" <iessicam@southoldtownny.gov>, "Reisenberg, Lloyd" <Lloyd.Reisenberg@town.southold.ny.us>, "Southold Local (denise@southoldlocal.com)" <denise@southoldlocal.com>, "Dinizio,James" <lames.dinizio@town.southold.nv.us>, "Doherty,Jill" <fill.doherty@town.southold.ny.us>, "Doroski, Bonnie" <Bonnie.Doroski@town.southold.ny.us>, "Ghosio, Bob" <bob.ghosio@town.southold.ny.us>, Louisa Evans <lPevans06390@gmail.com>, "Neville, Elizabeth" <E.Neville@town.southold.nv.us>, "Noncarrow, Denis" <denisn@southoldtownny.gov>, "Norklun, Stacey" <Stacey.Norklun@town.southold.ny.us>, "Rudder, Lynda" <lynda.rudder@town.southold.nv.us>, "Russell,Scott" <scottr@southoldtownny.gov>, "Standish, Lauren" <Lauren.Standish@town.southold.nv.us>, "Tomaszewski, Michelle" <michellet@town.southold.ny.us>,William Ruland <rulandfarm@vahoo.com>, "Duffy, Bill" <billd@southoldtownny.gov>, "Hagan, Damon" <damonh@southoldtownny.gov>, "Silleck, Mary" <_marys@town.southold.nv.us> Subject: Firepower ad for publication Please publish in the 5/9 edition of the Suffolk Times and the Town website,thank you 2 Southold Town Board - Letter Board Meeting of April 23, 2019 RESOLUTION 2019-376 Item# 5.20 ADOPTED DOC ID: 15158 THIS IS TO CERTIFY THAT THE FOLLOWING RESOLUTION NO. 2019-376 WAS ADOPTED AT THE REGULAR MEETING OF THE SOUTHOLD TOWN BOARD ON APRIL 23, 2019: RESOLVED that the Town Board of the Town of Southold hereby rejects any and all bids received for the updating of its current Cisco Firepower Server, Firepower Management Center Suite of Applications, AMP for Network and Desktops and Cisco ASA Security Appliances, and be it further RESOLVED that the Town Clerk's office is hereby directed and authorized to re-bid same. Elizabeth A. Neville Southold Town Clerk RESULT: ADOPTED [UNANIMOUS] MOVER: William P. Ruland, Councilman SECONDER:Louisa P. Evans, Justice AYES: Dinizio Jr, Ruland, Doherty, Ghosio, Evans, Russell Generated April 24, 2019 Page 37 os�®LA' i ELIZABETH A.NEVILLE,MMC ®�- ._ ®� Town Hall,53095 Main Road T �!� P.O.Box 1179 OWN CLERK Southold,New York 11971 REGISTRAR OF VITAL STATISTICS Fax(631)765-6145 MARRIAGE,OFFICER ®�. Telephone(631)765-1800 RECORDS MANAGEMENT OFFICER ®,� �� www.southoldtownny.gov FREEDOM OF INFORMATION OFFICER OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD April 29, 2019 Sharon Hofmann Custom Computer Specialist 70 Suffolk Court Hauppauge, NY 11788 Dear Ms. Hofmann: At the regular Town Board meeting held on April 23, 2019, the Town Board rejected all bids for updating the Cisco Firepower Server and Firewalls. A certified copy of the resolution is enclosed.. Thank you for your bid. Very truly yours, uV Lynda M Rudder Deputy Town Clerk Ens. ! ELIZABETH A. NEVILLE,MMC ®� '®G Town Hall,53095 Main Road TOWN CLERK �� P.O.Box 1179 Southold,New York 11971 REGISTRAR OF VITAL STATISTICS A Fax(631)765-6145 , MARRIAGE OFFICER Telephone(631)765-1800 RECORDS MANAGEMENT OFFICER ®,�' �� www.southoldtownny.gov FREEDOM OF INFORMATION OFFICER OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD April 29, 2019 Steven Scheitel CORE 1393 Vets Memorial Highway Suite 408N - Hauppauge,NY 11788 Dear Mr. Scheitel: At the regular Town Board meeting held'on April 23, 2019,the Town Board rejected all bids for updating the Cisco Firepower Server and Firewalls. A certified copy of the resolution is enclosed. Thank you for your bid. Very truly yours, —I Lynda M Rudder Deputy Town Clerk Ens. ��1FFL� ELIZABETH A.NEVILLE,MMC Town Hall,53095 Main Road TOWN CLERK P.O.Box 1179 Southold,New York 11971 REGISTRAR OF VITAL STATISTICS Fax(631)765-6145 MARRIAGE OFFICER Telephone(631)765-1800 RECORDS MANAGEMENT OFFICER ,� www.southoldtownny.gov FREEDOM OF INFORMATION OFFICER OFFICE OF THE TOWN CLERK TOWN OF SOUTHOLD REQUEST FOR PROPOSAL OPENING Cisco Firepower Server & ASA Update April 18, 2019 2:00 PM Two (2) bids received Custom Computer Specialist $50,550.00 70 Suffolk Court Hauppauge, NY 11788 Sharon Hofmann 631/761-1467 CORE $20,840.00 1393 Vets Memorial Highway Suite 408N Hauppauge,NY 11788 Steven Scheitel 631/982-4781 Rudder, Lynda From: Reisenberg, Lloyd Sent: Thursday, April 18, 2019 3:14 PM To: Rudder, Lynda Subject: Bids Please reject all bids received. Lloyd H. Reisenberg Network and Systems Administrator Town of Southold, New York www.south oldtownnY.gov lloydr@southoldtownny.qov 0: 631-765-18911 M:631-879-1554 I F: 631-765-5178 CONFIDENTIALITY NOTICE: This communication with its contents may contain confidential and/or legally privileged information. It is solely for the use of the intended recipient(s). Unauthorized interception, review, use or disclosure is prohibited and may violate applicable laws including the Electronic Communications Privacy Act. If you are not the intended recipient, please contact the sender and destroy all copies of the communication. 1 `- � _ _-� -^ / `- '- ( � � -/ ( � - _ ` _ ._ `~ ' - - . / / - ' ( `-' (- -- . - � \_ (' _ �`. '-\ L. - ` / -' / - _ ( / ~ / \ � _ � - _ ._� , /- / ` � -� ( _ /_- _ / OIJ 4....� o 1T STARTS HERE C C_' I COVER LETTER 0 April 18th, 2019 C C, Ms. Elizabeth A. Neville ' Southold Town Clerk 01 Town of Southold 53095 Main Road Southold, NY 11971 l Ms. Neville, Core BTS, Inc. (Core) is pleased to submit our proposal in response to the Request for Bids: Cisco Firepower and ASA Update. Core BTS has read and understands the specifications and,.'s firmly committed to performing the work in accordance within those specifications. Since 1991, Core BTS has helped local government agencites;--healthc�lnstitutions, school districts and businesses successfully maintain, repair and install technology;solution's,as well as develop technology visions, create technology plans and implement a comprehensivejechnologyinfrastructure to their environments. Core BTS customizes a comprehensive set of technology planning and management services that address a wide range of client requirements. Typically, Core's services are�delivered,as part of a team of resources comprised of personnel, hardware and software vendors,,architects and`engi tiers,service providers and our partners. Core's primary role is to design and manage theentire technology implementation effort for the client. Our ' technology management methodology issblased of many ey ars of experience working with some of the most { technologically and advanced/16,111e-country In ddition to sharing "best technology practices" from other institutions, Core's management focus directed,toward the development of plans and recommendations that are technologically achievable a%d f nancially teIalistic for each individual client. Core offers a comprehensive range of�professional services that are available to the Town of Southold. Our capabilities and services are detailed on our website www.corebts.com. �- Our technology services include: Security Services • Enterprise Infrastructure Security Assessment ( • Internal/External Vulnerability Assessment • Penetration Testing • Risk Assessment • Wireless Security Assessment �- • Web Application Vulnerability Assessment �- • Social Engineering • Information Security Policy Review and Gap Analysis CORE BTS, Inc. 2 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update q ®oo�• M r C�q 0 0 �- o I STARTS HERE r r q Technology Planning Services (q • Strategic Technology Evaluation Process (STEP) • Administrative and instructional application planning • Staff development planning q' • Technology Plan development 0 • Professional Development C1 Technology Design Services �_ • Capital project design and development i LAN and infrastructure design �' • Telecommunications design for voice, data and video • Wide-area network and Internet design services • Physical and electronic security design `y Technology Management Services r Technology project management and scheduling • Network Operational Center Services ' • Technical installation and support services Lq r 61( • Establishment of on-going operational and su,pportprocedu�es�; • On-site technical personnel ' �- Highest buying power with major manufacturers • Cisco—Gold • EMC—Signature ' , ,rf • Microsoft—Gold • Symantec—Gold • Others available upon request 1 Thank you for this o ortuni y to participate in this process and we look forward to our continued partnership Y pp �L� q,,p !? p p p (_ with the Town of Southold. Should�you have any questions or concerns please feel free to contact me. Sincerely, ( ) Steven M.Scheitel,Sales Account Executive Core BTS, Inc. 1393 Veterans Memorial Highway,Suite 408N q Hauppauge, NY 11788 631.219.7104 steven.scheitel@corebts.com �4 t I" CORE BTS,Inc. 3 I April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update i r f o®®°•c o r a ® ®m IT. STARTS HERE CONTENTS CoverLetter................................................................................................................................................................2 �. Responses to Client Requirements.............................................................................................................................5 StaffBiographies...................................................................................................................................................... 20 Non-Collusive Bid Certificate................................................................................................................................... 26 CompanyInformation ............................................................................................................................................. 28 Partners............................................................................................................................................................... 29 IFocus Areas.......................................................................................................................................................... 30 Project Management Plan—Methodology Overview......................................................................................... 33 t �k � � 1 r- CORE BTS,Inc. 4 I April 18,2019 �--' PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update t o mom•a n t e - ® o oo®m {/ ,o LT STARTS HERE 41 RESPONSES TO CLIENT REQUIREMENTS " Vendor Requirements • The Vendor must be a certified Microsoft Gold Partner. ` • The Vendor must be a certified Cisco Gold Partner. • Local Cisco Certified Internet Expert (CCIE) Presence. • Cisco Advanced Security Architecture. • Certified Information Security Systems Professional (CISSP). • The Vendor must have performed similar Cisco ASA updates and have references. The Vendor must provide at least 3 references of simila��rs-- cope. Core BTS Response: For Microsoft and Cisco partnership informationplease see thd,certification info provided below. ` P p , . For information regarding individual certifications and-experience, please see the information provided in the Staff Biographies section below,as well as the Part`n�erships listing in the Company Information section below. �� For references, please see the information provided ir' response to Section 2 below. For"turnkey solution"information p el ase see the information provided in response to Sections 3 and 4 below. � f r � J , CORE BTS,Inc. 5 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update i • .00-- c: o r L ®®e ® IT STARTS HERE i Microsoft Gold Certification ( v - uii haps./Partner miaosak cam/en-us/pcvlpartnersh�p/competmoes — --_� — —-@ d Search _ j)-] , 1�'c�p,'� I ®Part—Membership Center i mac—Pt'.aes ■ L'Competency performance report y Download skills report Your network membership entitles you to one or more additional membership benefits r ^ packages.Your company can qualify to buy membership upgrades by meeting silver or _ gold requirements in one or more of these corresponding partner competencies ( Learn more about Silver and Gold memberships and benefits Your status Gold As of 14-Feb-2019 ISV competency is no longer available for enrollment or renewal.Check out all competencies available to your company (rte i In progress(0) At risk(0) ;N1` et(5) Not started(16) All(19) Name staler requirement status GWd� tPA. CompeteW wei Cloud Productivity -- Complete Complete 2 Gold v f 4 i —Collaboration and Content— -- — Complete— — 4 Comp2 Gold--- — —=— Cloud Platform — Complete Nu sta J tl ~r 9 Silver ` Messaging Complete( Norted 2 Silver v s Small and Midmarket Cloud Solutions Complete \Not started 2 Silver v v ----------- % `� ----- - Cisco Gold Certification. A e� BeU 00 4 Cisco Cisco Channel ' Partner --,-Pa.rtner Program i Gold Certified Partner Awarded to _ CORE BTS, INC. (--`, USA valid 6nlll Septembe-1,2019 l � 1 e viidatedYscemiwaoc Cle Pmtne'Ecosysiam Proezma cmo=nVaolpertnerlocatar Gobaipm"Craenmbn 1 CORE BTS,Inc. 6 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update -c m r Lm o • 1T STARTS HERE Cisco Advanced Security Architecture Partner. (• -.\ � �' ����"_ )f �`�9'e3 „r, -�s�J'��M..s,��r;�yN, a�"';; � ���, -�`�' fit-y'�1. - Cisco Cisco Channel ' Partner Partner Program Advanced Secunty Architecture Specialized Partner < Awarded to CORE BTS, INC. i usn r vaid untd Augus:31,2017 ? t 1 vad=t mccraf at C—P—E..YY Pm°m'ns ds-..WgWPmbm - CAb PaYmr(kg— V Yy t / ' � 1 A 1 ` 1 .j 1 S - I Yi 4 � C$: CORE BTS,Inc. 7 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update r l \ r ° .° 0 IT STARTS HERE Section 1: Proposer's Financial Stability (10%): Provide a description of the Proposer's firm, including history; number of years the Proposer has been in business; type of services provided; and legal status of Proposer's organization, i.e. corporation, partnership, etc. ' Provide documentation to verify the Proposer possesses adequate financial support, assets, and organization to provide the products and services required in this BID. This may take the form of financial statements, credit ratings, a line of credit, or other financial arrangements sufficient to enable the offer or to be capable of meeting the requirements of this BID. Core BTS Response: Cti,the predecessor organization to Core BTS,was established in 2004 to acquire and build a leading voice and data services integration company.As companies became more reliant on sophisticated technologies to meet their business needs,CTI leadership idefitified an opportunity to deliver high-value,integrated converged voice and data solutions to address this burgeoning market.Securing an t equity commitment from Founders Equity in 2004-2005,CTI acquired tyre companies who were already providing voice and data services and products to expanding markets in the Northeast: • Open Systems Technologies LLC(Clifton Park, NY),founded in-1991, v • WorldNet Technology Consultants, Inc. (Reading, PA),,pr viding�expansion into the state of Pennsylvania '�, • AAA Networks(Falls Church,VA),founded in 1992,Tr`oviding voice and data services in the Washington, DC,area '�� � CTi then acquired Core Business Technology Solutions,-'LL'C,a business technology consulting and integration �f company headquartered in Indianapolis, IN;.with(offices in Ext n, PA, Reston,VA,and Nashville,TN. The Indianapolis-based Core was founded,in 1994 under thiOname KSM Consulting. The merged companies consolidated under the Core identity,incorporating Core'business practices and back-office operations. Core BTS, Inc.was incorporated in the`State of Delaware in December, 2005. In July 2009, Core BTS announced the acquisition of Inacom Information Systems,an award-winning integrated solutions provider who operated three locations in Wisconsin with headquarters located in their Madison, WI, office. In the fall of 2012, Core _ acquired the Cisco sales and support team"from another value added reseller in New Jersey,and so now has an office in that state. Then in 2014 Coh_e opened an office in Las Vegas, NV,and in 2015 opened another office in St. Paul, MN as well.In September 2018,Tailwind Capital,a leading middle market private equity firm investing in growth-oriented companies, announced its acquisition of Core BTS. On March 1St of 2019, Core BTS, Inc. r- announced the acquisition of the Microsoft business unit of SADA Systems, and so Core now has an office in ' the Los Angeles,CA area. Core BTS,Inc.has annual revenues of more than$180M,with no debt. Core is one of the 25 largest Cisco partners in North America and is nationally managed. Core's D&B number is 14-601-1643. As Core is privately held detailed financial info is confidential. However that information can be provided for review directly to specifically designated individuals at the Town of Southold. Contact Steven Scheitel,Core BTS 1 Account Manager,and he will work with Katy Perrotta,Core BTS Controller to make this information available ` to these individuals at the Town of Southold. For information regarding the types of services provided by Core, please see the Focus Areas listing in the =. Company Information section below. i" CORE BTS,Inc. 8 1 April 18,2019 �— PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update oo..core � o ® 0® C~ , .0 IT STARTS HERE Section 2: Proposer's Qualifications/References (25%) Provide descriptions of like projects Proposer has done in environments comparable to Town r - " of Southold. r Provide at least five client references from the above listed project including the names of the individual(s)you would propose Town of Southold contact, together with phone numbers, company names, and addresses. Town of Southold reserves the right to contact or visit any party listed as a reference that has previously used, or is presently using your products or services in a manner similar to those proposed by the vendor. Southold also reserves the right to use other sources to obtain information about the proposed products and services. _ Core BTS Response: 4 The Brooklyn Navy Yard Development Corporation , C 1 r 141 Flushing Avenue Building 77/81h Floor - Contact:Ari Schneiderman/Vice President of Technology;\ r Email:ASchneiderman@bnydc.org ���. t � Phone:(718)907-5974 Campus-wide ASA55XX Deployment with Firepower/AMP/Umbrella/ISE Bayport Blue Point UFSD m 189 Academy Street ( Bayport NY 11705 t Contact:Carolyn Kiefer r Email: ckiefer@bbpschools.org r Phone:631-472-7860 ext 8092 Cisco 5545 firewalls with 3 Year subs for AMP, URL and IPS r r CORE BTS,Inc. 9 l April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update o O®°• 0 O 000 •® IT STARTS HERE South Country Central School District 189 Dunton Ave. East Patchogue, NY 11772 Contact:Sam Gergis Email:sgergis@southcountry.org Phone: (631)730-1510 Cisco 5525 firewalls with 1 year subs of AMP, IPS and URL { i North Babylon UFSD r4 5 Jardine Place North Babylon NY 11703 z Contact: Dan Rose 'rte' Email:drose@northbabylonschools.net Phone: 631-620-7080 ` Cisco 5545 firewalls with 1 year subs of AMP, IPS,and URL > = Mineola Union Free School District� e 121 Jackson Ave. `, Mineola, NY 11501 o r 1 `I, Contact: Dr. Michael Nagler,Sup rintendent !'1 Email: MNAGLER@mineola.kl2.ny.us Phone: (516)237-2080 ' Cisco 5525 firewalls with 1 year subs of AMP, IPS and URL i f , (r 1 CORE BTS,Inc. 10 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update A I .000- ®®o. c o rL o eo ® IT STARTS HERE Section 3: Proposed Solution (40%) Proposed solution must also show the following: Proof of extensive experience with designing and implementing Cisco Firepower Management Center and next generation ASAs. • Detailed project plan including estimated hours for each mandatory requirement with start and finish dates. Core BTS Response: For proof of extensive experience designing and implementing Cisco Firepower - Management Center and next generation ASAs,please see the information provided in response to Section 2 above,and also the information provided below in the Staff Biographies section. Detailed Project Plan: ' WT F S I M W \1 3 1daYy�M T W I m1Ma5 f9 19 ' T T ] ,P lolsvery Nat, Wed S/1119 Wed S/1/19 ®, / l 4 I)¢cwery and analyshplensnngN t-k SecvntYde -1daV Weds/1/14 Wed 5A119 - aMtheedsdngS—nVnetawt[.fnnt udlre 3 ss1 I oosWnenntivndthee515tmgt2e]w,kkuhydevtzs OWy Wed5/1/19 WM5/19 2 aM da4,(d �13n nttessa Pryl-11 and/a /Js'J1�\,jj `V' Ne 1'madlllntu-'S mhastn Aare r 0day Wed S/1/19 WMS/1/19 3 I 4 mmiecmltledrnldapP''nNe) _ _ � //! 5 j IUppade ______25 drys Thu S/1/19 Mon S/6/19_1__ r 6 Maj l Upgrade 6%VMware Nm6ta latencode 5uppmtM Ey 05 tV5 Thu 50119 Th,S/2/29 Fuepower Managemem Center T Upgrade Rresmy<r Sever-Town W0,53095 Main Rd. 2drys Thu 5/2/19 Mon S/61196 Southold,NY 8 a Pedew and evatuate the-1 caufiguMtbn of the 05Wy Thu 5/2/19 Thu SIV19 . Wre WtrServerQe Flrcp4wer (7)WmeMCelscc) Ateafurthe .ent pf o9sevenJ a-1aAWs 9 R IdemdyaMPo:endal pesloniunce Issues SekUngto 0.5 dWs An 513/J9 M5/3/19 8 1 i pomlde bandwidth hnuumnoll6<ASAtntemd e r .Ve b.Ood ,I unprwe W tht SA and,Av t �_ �pedormarce enhaxpmence_ __ _ -Impluanun—commenNbons,maYl g.,,—,]tl ges]day fd 513/]9 Mon S/6/l9 9 ! F'<epmmr5ervlm4 Flrtgower Managanent Cenla, IFlrepovrer Server) ,� 1 n IAMP _- _ _ _ 2day M_on 516/19 Wed a/19 10--- 0 0 - 12 --_S WPWOestlaft..F Fu[ndpaintsl UashMasd 015 days Mpn S/6/19 Mon 5/6/19 �}1 _ ]3 W. t ReynyAMPlpr NetwoAs pn fcepawer dewces 0.251ass W.516/19 Mm5/6/19 R l Re and evaluate cummc rOn]'VnVoa,NO pokes 015 drys T-SP/.9 TreSP/19J135 f" 15 1 P—d......d[hmgusonlnora—ra5(dany)-d0Z5day Tue sn/19 'Tue Sn/19.2Y _ eg 05d i_mplement Hou 16 tl Eruu "P h I..Ikd as all re dhnl m—ch— ay Tue S?/29 Tue SJi(19— t PC%aM Sernn n _w i Updat apphnikn<r[luvon pogryd my ue6 OS dV, We05/$/19 Weil SINT9]6_ 1g say i31ddi0ord Tas6 ;daysWed S/g/19 Mon S/]3/1911 ` I OSdays+faWMS/$rl9_WM5(8/194 _ �V, —f_—ms- —t ___ 20 T_ Rad IteNdamnAedundanly_ _ _OSrdayQ llry 5/9(19 Thus/9/39 19 n— —SZ—_ -sq r— A[e Conn ectivntyaMAutomauc Fadwer_ --_'I: _1daV }_Thu S(9/19_fd 12Test/Tmulyeshop[Autprrrtm Fadovtt 1 diY Fl fn 5/39/14 Mon 5/33/1921 _ -65 Man 5(13/19h15/12/19 f19 rI r 1 2a ay CntocerNm,ads-ASA 5525gmM Naver- epTwin Hall Iday\ Mori S% 5/14/19 _ aMMrrea `� -� 1 u t Dayonesupport 05Wy Tae,5114/39'Tue 5/1 24 j 26 wG GRos 011 de-MSSZS2wiNRrewe por-Paras lday Weasflsn4-lwds/15/1425 o< _ Gdover(Upgaad<-ASA 5508%w�]h Flrepvwer-Mtlgnway 05Wy thus/16/19 Thu516/19 26 y oep..' 28 R Cuta—/U'spade-ASA55W(% tf Rreov"cr p -Maeanon 05my T4us/16)19 Thus1]6/19 27 - tprsa 29 . CWovaNPPMe-ASA550®t WHfd<ppwer-SMid Waste 05Wy Fd517/i9 Fd5/37(19 28 30 ! 'padnmrt CIOp: AJMude-ASA55W nhFirepower-Hunan MSW- 1`65/12/0 M5/17/19 29 Resou•res _ ll R �hoJprl[Ina Ouc _ 35tlay Mon S/10/19Thu 5/23/1930 1 3lQ I K—Aw go Tan- _ OS Wy Mon S/20(19Nan5/20/19 _ /- 33 sR 1 Atlmn Training_ _ 1Wy Mon S/20/19Tup5/21/19 32 Irl 31 Runtmk treauon(ASOu�[s -2L,n Tun S/11/19 Thu 5/23/19 33 1_ Praett io no•Soatlgld Tas4 Summary �1 fi2emal M.i[#une a I--S,aaa—, M n.ul5umma .1up fHfhcMy ] Manua Progren DaleTue4/16/14 SNA .............. PmM55umvrY I 1 InMLrc Tag Manual Sint — Manual Summary 1"�1 Dc�Ne /� Mlntar: O [rrerwlTata I--Mdesrme --aa, � Nadonry 1 PrPC[v Page l y ( � t CORE BTS,Inc. 111 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update .,,, c o rL ,• LT STARTS HERE Section 4: Cost Proposal (25%) r Vendor's pricing must be all inclusive to provide the Town of Southold a turnkey solution. Core BTS Response: Please see the pricing information provided in the Statement of Work below. Town of Southold (Network Security Upgrade) Network Infrastructure Implementation Services Agreement for ASA and Firepower Upgrade I 1 s; Core BTS Network Infrastructure Implementation Service.The Network V Flxed'Fee Se rvlce,Descrlptlon Infrastructure Implementation Service Agreement Is designed to provide implementation services to design,document,plan,Install and configure a Network Security Infrastructure k4millMlill .. solution,services for Town of Southold In Southold,New York + ) 'Cisco Network Infrastructure and Service Descnp Ion Implementation Core BTS Hnll perform a detailed review and assessment of Town of Southold current ( { 'J Network Security deployment and Security environment and determine the requirements�� Customer coftaact Lloyd Reisenberg for the new Network Security Implementation,and upgrade Core BTS will also document core BTS Account �- the current Network Security configuration for Town of Southold Based on COre.BTS' riga ager Steve Scheitel r` experience and established Industry best practices,and Town of Southold's RFP,CoreBTS core BTS solution will recommend a Network Security design and configuration Core BTS'Implementation, Architect Lordly Mathews team will then work with Town of Southold IT operations team to review the design m l recommendations and finalize the Network Security configurations and implemetaho Total Project Cost $2Q.841).QQ plan.Core BTS will then Implement the approved configuration and design% / I Core BTS understands the goal of this protect Is to plan and design the Cisco ASA and X: ' Firepower Devices and AMP Network Security architecture mstalll4nd con�lg'ure tthe n7 Cisco ASA and Firepower Devices and AMP Network Security verify functionaliryand provide/, si Out Of SCope Any additional work outside of the tasks defined - documentation and administrative training ((,{ ~"""`y �f" in this Agreement is considered out-of-scope,and will be quoted in a separate Statement of Work CoreBTS Network Security Infrastructure,lm lementatlon Services.co?eBTS' P ♦- �' Cisco Partnership.CoreBTS is in the top 25 of Gsco's largest Network Infrastructure Implementatlo/n [VICe`COr1515t'Oflthe following tasks US Channel Partners Some of Core's key Cisco Credentials include o Gold Partner since 2003 o Advanced Borderless Network • Project Schedule-Through.Dteractive meebng(s),and/or conference calls,and an Architecture RFP Document provided by Totvn'Qf Southold,Core4IfSwdl provide recommendations o Advanced Data Center Architecture for the design,implementationitesting/validation,fbll'documentation and day one o Master Unified Communications "- `k .? , o Master Cloud and Managed Services - support for a Network Security ASA,and Firepower Upgrade These recommendations ` will adhere to the requirements and expectations defined by Town of Southold IT o Advanced Collaboration Architecture o WebEx Authorized operations team A typical schedule for a Network Security services project is as o TelePresence Video Master follows Milestone Payment Schedule o 307o Due Upon Signing o 50%Due Upon Completion of Detailed Design and Planning t _ o 20%Due Upon Project Close Out " CORE BTS,Inc. 12 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update i�J •ee j ,• IT. STARTS HERE T • Discovery and analysis of existing Network Security design and the existing Security network infrastructure • Documentation of the existing Network Security devices and design(if necessary) i • Design modifications to Security infrastructure and/or connected devices(if applicable) _ • Upgrade FSX VMware Hosts to latest code supported by Firepower Management Center 0 If additional hardware is required to upgrade VMware to latest code supported by Firepower Management Center,then customer will purchase additional j hardware prior to upgrade • Upgrade of(7)ASA Firewalls with(7)Firepower modules,and(1)Firepower Management Center / 0 Firepower Sever-Town Hall,53095 Main Rd,Southold,NY 0 ASA 5525X with Firepower-Town Hall,53095 Main Rd,Southold,NY 0 ASA 5525X with Firepower-Town Hall Annex,54375 Main Rd,Southold,NY o ASA 5525X with Firepower-Police Department,41405 Route 25,Peconic,NY 0 ASA 5508X with Firepower-Highway Department,275 Peconic Lane,Peconic,NY, o ASA SSOBX with Firepower-Recreation Center,970 Peconic lane,Peconic NY o ASA 5508X with Firepower-Solid Waste Department,6155 Cox Lane,Cutchogue,NY o ASA 5508X with Firepower-Human Resources Center,750 Pacific St,Mattituck,NY 0 Review and evaluate the current configuration of the Firepower Server(i a Firepower Management Center),AMP for the Network for all seven(7)existing ASAs, o identify any potential performance issues relating to possible bandwidth limitations of the ASAs and make recommendations for improvements on system design and performance enhancements 0 Implement recommendations,making approved changes to the configuration,rules and policies on the Firewalls,Firepower Services,Firepower Management Center(Firepower Server) f, • Review AMP for Desktops(AMP For Endpoints)Dashboard Town of Southold and AMP for Networks on Firepower Devices o Review and evaluate current configuration,and policies o Provide recommend changes on improvements(if any),and implement those approved changes ;,, _ 0 Ensure AMP is Installed on all required host machines,e g PCs,and Servers , j • a software management solution for bulk deployment is required e g Goverlan,GPO Ls nott supported for bulk deployment • d software management solution is not available,Core can assist customer with Installing of AMP Agents for a few workstations 0 Update application exclusion policy if required ,' • Customer must provide file path of all Town of Southold Applications that need to'b�excludeb in aexce spreadsheet Site-Site Connectivity and Automatic Fadover 7,1 i • 0 Test&Verify current site-to-site connectivity which provides automatic network failover(failure recovery within three main locations(Town Hall,Town Hall Annex and Police Department)is working as designed � � / 0 Make recommendations to improve network failover(failure recovery)and implemX ent those approved changes • Microsoft Windows 10 Pro Test PC V 0 Install latest Windows 10 Updates for Test WorkstationRadius Replication Redundancy , 0 Venfy that the RADIUS redundancy configuration from the Town Hail site to the`Police Department is working as designed o Make recommendations and changes for improvements �,\ � � �'' o Configure 2'd radius server for redundancy if required(T^server needs tbebe ins led by customer ahead of time) • Core can assist Town of Southold with advanced Jconfiguralion of radws✓r + • Testing and validation' i • Knowledge Transfer - • 4 hours onsite support after upgrades • Day one Support • Analytical training • Create a Run Book documenting settings,configuration a�nd'overview of each'of the�ewalis and the entire project • Provide the I T.staffwith a backup of the F�re�ower Managemen ter configuration and all seven(7)ASAs ' Project Deliverables-The fol"lowing deliverableSe Incltided with this service • Core BTS assigned Lead Architect to provide technical oversight for all associated and related projects • Analysis and documentation of existippg Network Security design and configuration and the existing Security infrastructure + • Recommended design modifications f 4he existmg,Secunty infrastructure and connected devices(if applicable) • \ ... Upgrade of(7)ASA and Firepower Devic �d Firepower Management Server • Review and Update of AMP for Desktops k • Testing and validation of new Network Security Infrastructure Changes and Upgrades • Knowledge Transfer on new Network Security Upgrades,Changes,and Changes • Create a Run Book documenting settings,configuration and overview of each of the firewalls and the entire project • Provide backup of Firepower Management Center,ASA+Firepower configuration i t it 1 i t J { 1` CORE BTS,Inc. 13 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update cr IJ d ,© IT STARTS HERE 1 1 t Town of Southold Security Upgrade Project Specification I � • Upgrade of(7)ASA Firewalls with(7)Firepower modules,(1)Firepower Management Center o Review and evaluate the current configuration of the Firepower Server It a Firepower Management Center),AMP for the Network for all seven(7)existing ASAs, ' o identify any potential performance issues relating to possible bandwidth limitations of the ASAs and make recommendations for improvements on system design and performance enhancements o Implement recommendations,making approved changes to the configuration,rules and policies on the Firewalls,Firepower Services,Firepower Management Center ' (Firepower Server) • Review AMP for Networks-Firepower and AMP for Desktops(AMP For Endpoints)for Town of Southold o Review and evaluate current configuration,and policies o Provide recommend changes on improvements(if any),and implement those approved changes o Ensure AMP is Installed on all required host machines,e g PCs,and Servers 1~' o Update exclusion policy if required •- • Test&Update Site-Site Connectivity and Automatic Failover ! . Installed Latest Windows Updates Microsoft Windows 10 Pro Test PC Test and Update Radius Replication Redundancy o Add 2n0 Radius Server for redundancy(2'"server must be installed by Customer) Io Core can assist Town of Southold with configuration of radius server • Test and Validate Changes ' • Provide Knowledge Transfer • Provide 4-hour onsite support after upgrades 1 I • Provide Next Day Support n� • Create a Run Book documenting settings,configuration and overview of each of the firewalls and the entire project I _ V Billing Terms r:F• Town of Southold agrees to compensate Core BTS for the effort required to deliver allItems�t9ed'in th�AStatement of Work Modifications to I this project via the Change Management Process may change the associated fees.fhlssengagement will be'performed on a fixed-fee basis.This fixed fee project will be invoiced at the completion of the project.This fixed fee prlce'Is inclusive�of all travel related expenses Duties and Responsibilities � P In order for this project to be successful,It Is Important that each person performs his/he project duties and creates an environment that Is `. . conducive to success.Below are the responsibilities for each member of the pr,ojectteam. Core BTS Project Coordinator Responsibilities of the Core BTS Project Coordinator�inc de: • Developing project timeline and ensu"resc�edul sere maintained i • Acting as a single point of coy act or all members of he Project Team • Managing all Core BTS resotls+-cess and coordmatttng Town of Southold resources • Resolving issues with Town 1 It old poinlpof c ntact { • Presenting status weekly via statu meetings and status reports • Providing Issue and risk management,Including escalation management • Controlling change management process i Core BTS Engineer(s) Responsibilities of the Core BTS Engineer(s)Include• • Performing tasks as outlined In this Statement of Work with efficiently and diligence 0 Acting in a professional manner and abiding by Town of Southold code of business conduct ` CORE BTS,Inc. 14 April 18,2019 r PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update 1� .000-c o r e e®!• • GT STARTS HERE Town of Southold Responsibilities of Town of Southold include: • Providing necessary personnel,including • A dedicated point of contact. • Subject matter experts(SME's)as needed. " • Management with decision-making authority. • If necessary,assist in physical movement and racking of components(unless otherwise specified) • Providing access during agreed upon timeframes to • Suitable workspace,including a workstation and telephone,if necessary • Required systems and networks ! • Documentation of current procedures,workflows,and network diagrams • Providing remote access(VPN preferred)if work is to be completed offsite �� � • In a time) manner,resolving problems not direct) discussed m this SoW,but adverse) aff" ect n tli.proiNct't's progress i.e.software bugs, Y g P Y fY a ,g. p 1 P g ( g hardware failures,connectivity issues,etc)Core BTS can assist with these issues as through the sco a management process. • Participating in knowledge transfer throughout the project(unless otherwise noted} MI Mutual Responsibilities shared by all members of the Project Team include • Responding to communication(calls and email)in a timely anne \r N\ -� • Participating in all status meetings ' • Identifying situations requiring scope manage m nt and alerting P ject Management • Identifying potential issues and risks and alertingfProiect\Managemen J `E` a • Coordinating scheduling in the event-of-delays;outside of Core BTS's/Town of Southold control Key Assumptions . Core BTS assumes for the sake of pacing and solution sizing that the following will hold true for the duration of the engagement: a Core BTS will perform all review andass sment at the Town of Southold in the Southold,New York location. • Travel expenses such as,but not limited to,air faire,car rental and hotel expenses are NOT included in this agreement and will be invoiced separately directly to Town of Southold. • Data Upgrade and Migration services,if required,will be performed after hours and at additional expense • Firepower Management Center and ASA Firepower Modules are at a minimum code of 6 2(as per RFP document) If either have codes older than 6.2(i.e.6.1,6.0 or 5.3)additonal hours and work effort will be required to upgrade Additional hours will be submitted as a change request,and sent as a PO for Town of Southold to approve • A Core BTS engineer will be provided access to systems and passwords as required • Requests for information pertinent to this project will be addressed within 2 business days,unless otherwise agreed upon by both parties. All documentation listed will be delivered in a Core BTS standard format and with Core BTS standard level of detail CORE BTS,Inc. 15 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update ®:. ,• -core IT STARTS HERE r • Core BTS assumes no liability for equipment damage and/or loss associated with the relocation of any equipment to any location other than the initial delivery location. • Core BTS assumes no liability for data loss Customer Is strongly encouraged to backup and validate data on all affected systems prior to Initiation of the engagement. • This project may require fiber optic or other specialty cables for component connectivity. The exact type and length of cables needed will be determined during the discovery phase of this project The cost of any needed cables Is not Included In this statement of work • All review and assessment work Is expected to be conducted during normal business hours,which are Monday-Friday from 8AM-5PM In the same time zone of the Installation location and will be billed at the standard engineering rate. Any configuration or installation that has to be done outside of normal business hours will be billed at the Overtime(OT)engineering rate 7 CORE BTS,Inc. 16 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update -c o r IT STARTS HERE Confidentiality Agreement During the course of the provision of the services by Core BTS to Town of Southold,each party to this Agreement may have access to confidential information concerning the methodologies and business practices of the other. Neither party shall make any use of such Information of the other party except In connection with the exercise of its rights and responsibilities under this Agreement except as may be necessary to comply with the laws of the state of New York. The obligations of this paragraph shall not apply in the event such Information is already public or becomes available to the public through no breach of this Agreement by the receiving party,or,such Information is lawfully received without obligation of confidentiality from a third parry who is free to disclose such Information to the receiving party;or,such information is independently developed by or on behalf of the receiving party,or,such information is required to be disclosed by the receiving party to a governmental agency or a court having proper jurisdiction. If such a requirement is made,the receiving party shall give the disclosing party reasonable notice to enable the disclosing party to try to protect the confidentiality of the confidential information. DUETO THE CONFIDENTIALAND PROPRIETARY NATURE OF THIS PROPOSAL,WE REQUIRE THAT IT NOT BE DISTRIBUTED OR DISCLOSED TO THIRD PARTIES NOT EMPLOYED BY Town of Southold BOE INC WITHOUT THE EXPRESS WRITTEN CONSENT E) GORE BTS The enclosed material is proprietary to Core BTS and Town of Southold.This document is then'o" ri ht ore BTS Neither this publication nor any part of this publication may be hotocopied or reduced to any electronic medium or machine-eadable�form without the express written consent of Core BTS. r: Town of Southold Acceptance. Please sign belowndicatin g you\r agreeTent to the above terms and to indicate acceptance of this Service Agreement �•If;� Agreement Date `^ T f Southold Core BTS Account "a Contact Manager Name/Title sem"- , 7� Town of Southold Email Address ? Signature ttt -3 tw?� Signature Date I �v CORE BTS,Inc. 17 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update - .o®0°•c - r Sia ,m tT STARTS HERE 1 Payment Terms.Payment is due within thirty(30)days of invoice date.After this time period,interest accrues at the lesser of the maximum rate permitted under applicable law or one and one-half percent(15%)per month from the date due unlit paid 2 Independent Contractor.Taxes We will perform all services hereunder in our capacity as an independent contractor and not as an employee or agent of you Our employees shall not be entitled to any privileges or benefits that you may provide to your employees,and we shall be responsible for payment of all unemployment,social security,federal income(state and local income where applicable)and other payroll taxes imposed by any governmental body on us in regard to our employees who are engaged in the performance of the services Pricing set forth herein is exclusive of applicable sales,use and similar taxes assessed on the performance of any services You agree to reimburse,indemnify and hold us harmless from and against any such tax,penalty and interest thereon levied against us for the provision of services to you hereunder. 3 No Hmng For the term of the project and for a period of one year thereafter,you agree not to hire,solicitor accept solicitation of,through employment or otherwise,directly or indirectly,any of our employees or independent contractors with whom you have had any contact during the project,unless you obtain our prior written consent Should you hire an employee or independent contractor of ours through employment or otherwise within this time period without our prior written consent,you will immediately pay as liquidated damages to us an amount equal to the relevant persori s then current annual compensation(or the amount paid to or on behalf of the person in the last 12 months,in the case of an independent contractor). 4. Warranty , A We warrant and represent that the services will be performed in a skillful and workmanlike manner according to thndards generally prevailing among consultants performing similar services under similar circumstances To the extent that we are not the manufacturer of any hardware or software prod;cis that you may purchase as a result of or relating to our Seances,we do not provide any warranty on such products,whether with respect to their design,performance,functiona`ity or�compatibil'itytiwith your existing system Any warranty with respect to product must come from the manufacturer Our product procurement distributor or we will pass through to you any apkcable warranties of the manufacturer,to the extent . permissible ' 7\ B EXCEPT FOR THE EXPRESS WARRANTIES STATED IN THIS SECTION,WE DISCLAIM ALL WARRANTIES/INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE �� F 5 Our Indemnity.We will indemnify,defend and hold you harmless from and against any claims,Irabilibes,.losses,expenses cit damages(collectively,'Damages)caused bythe services performed or the work delivered by us under these terms infringing any copyright,trade secret or any other"prroopnetaryright of any third party. Excluded from such indemnificabon are any claims related to(n)services performed on equipment or software which you covenanted that we had the nghts to modify assetfiorth in Section 7 below,(n)services performed to your specification or design and(R)infringement resulting from or caused by your misuse or u6authonzeem`odificebon of systems or product We will also indemnify,defend and hold you harmless from and against any Damages resulting from our wilful misconduct or negligent acts or omissions in performng the services which are the subject of these terms,except to the extent such Damages are caused by the willful misconduct or negligence of you,your employees or'agents Ou'obligation to indemnity and defend you with respect to any claim shall be subject to()your providing us with prompt notice of such dam,(h)our having sole control overthe defense and'settlement thereof,(n)your providing us with the information and assistance necessary to defend or settle such claim as reasonably requested by us,and(w)the limitations on liability set forthin,Section 6 below 6 Limitations of Liability WE WILL NOT BE LIABLE FOR INCIDENTAL,SPECIAL,PUNITIVE,INDIRECT OR CONSEQUENTIAL DAMAGES,INCLUDING FOR LOSS OF DATA OR ITS USE OR LOST PROFITS OR OTHER ECONOMIC DAMAGES,EVEN11 ADVISEDVOFpE POSSIBILITY OF SUCH DAMAGE.Your right to recover Damages in aggregate of all claims is limited to the greater of one million dollars(x;1;000,000)or ourlapplicable insurance ooverage(s),whichever is greater You acknowledge that this limitation of liability is part of the consideration and was considered by us in establistim'g the`pnces Ad rates to be charged to you,which,but for this limitation,would have been higher. 7. Your Covenants You covenant that(i)you have the authority,to agree to these terms and'tlia funding necessary to pay for the requested seances, n you have title to or license or rights to use or moddy any software or products which you have requested us to'modi'as part o such services,and(iii)you will provide us necessary access to your personnel, appropriate documentation and records and facilities in order for us to tin- y perform soli ch services services, B Requests for Changes.No change in the services provided hereunderwll be performed u061 we receive a properly issued and executed Change Order,provided,however,that nothing herein will relieve you of the obligation to pay us for services rendered which were requested by you but are not documented in such a properly issued and executed Change Order or within the applicable scope of work ' 9. Confidentiality Each party admowledges that it and its employees oragents may,in the course of the project,be exposed to or acquire information that is proprietary or confidential to the other party Each party agree's to hold such inforimation in strict confidence and not to discuss or disclose any such information to any third party for a period of three years The parties acknowledge that the provisions of this paragraph°shall not apply to(a)information which at the time of disclosure is,or without fault of the recipient becomes,generally available,(b)information which either party can show was in its possession at the time of disclosure or was independently developed by it,(c)infornabon received from a third party which had the right to transmit same without violabon of any secrecy agreement with the other party-,and(d)information which is required to be disclosed pursuant to court order or by law 10. Termination of Agreement Either party may terminate our engagement at any time upon 30 days prior written notice It. Entire Agreement,Amendment These terms and the accompanying engagement letter sets forth the entre understanding of the parties with respect to the subject matter hereof and is binding upon both parties in accordance with its terms and may be amended only by an entry signed by both parties There are no understandings,representations or agreements other than those set forth herein. 12. Assignment You may not assign any of the rights or obligations hereunder without the prior written consent of Core 13 Notices Any notice or communication from one party to the other concerning the terms hereof shall be in writing and shall be sent by certified mail,return receipt requested and postage prepaid or by commercial overnight mail to the most recent address that either party has specified in writing to the other - 14. Goveming Law These terms shall be governed by and construed in accordance with the laws of the State of New York 15. ForceManure.Neither party shall be liable to the other for any failures or delays ansing out of conditions beyond its reasonable control,including,without limitation,work stoppages,fire,cnRl disobedience,delays associated with product malfunction or availability,nots,rebellions,storms,electrical failures,delays caused by the other party,and ads of God { and similar occurrences 16. Waiver.Severability Any waiver of any right or default shall be effective only in the instance given and if in wetting and signed by the party against whom it is sought to be enforced and shall not operate as or imply a waiver of a similar right or default on any other occasion If any term or provision hereof should be declared invalid by a court of competent jurisdiction,the remaining terms and provisions hereof shall be unimpaired,and the invalid terms or provisions shall be replaced by such valid terms and provisions as come closest to the intention underlying the invalid term or provision CORE BTS,Inc. 18 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update m® • LT STARTS HERE Requestor Data. PCR Requested By PCR Preparation Date: PCR Prepared By Approval Required By Date: Change Summary: Project Name- Description of Change- Impact if PCR is Rejected. Current Project Status: -� Cost and Timeline Impact:The following is an estimation of the work effor�nvolvea,m completmg"the,activities required to complete this PCR.This estimate is provided for budgetary purposes only,in all cases Core BTS will bdl,for the'actual hours an' expenses incurred Estimated Work Effort: EffortRange. Tofals. Resource DescriptionRate Low High Low High Consultant 0 .� Senior Consultant 0 �0` _ Principal Consultant 0 '0\ Project Managers%0'� 0 $ $ $ Estimated Total- 0 0 $ $ $ Timeline Impact. r9 Project Completion Date,if Changed> m/yr Milestone(s)Impacted- New Milestone Delivery Dates(s). Approval:Client indicates acceptance of this PCR as an amednment to the Letter of Engagement and/or Statement of Work for the<PROJECT NAME> project. Approved By Date Name Printed: Title CORE BTS,Inc. 19 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update °© pc o r a t T STARTS HERE I STAFF BIOGRAPHIES � C 0 r Mike Munoz-Managing Consultant .• °�s�sss s���o�°��so��.ro°s Data Center ,CONTACT INFORMATION Michael Munoz is the Data Center Managing Consultant for the Core BTS Mid- Mike Munoz Atlantic Region (Includes offices Exton, PA, Wyomissing, PA, Bridgewater NJ, Managing Consultant and Fairfax, VA). Mike's responsibilities include developing and maintaining Phone 703-248-4009 strong relationships with customers, providing excellent technical customer Email mike.munoz@corebts.com service,and leading his team to become one of the,t ost technically proficient a teams in the area. Technologies included in'the"DatalCenter Practice are: AREAS of ExPERTiSE (' ` Cisco Unified Cisco Infrastructure Cisco Data Centerff ry In Industry Since 1998.,- .�^. Computing • LAN/WAN/Security Assessments ��T-``�,°� � - �.�,°Cisco Application . Cisco Routing and Switching-IOS, Cisco Wireless AAN/WAsN Assessments- Networking 10S-XR,FOS,CATOS,,NX-OS,' " Cisco Security �/Mw,are ' SAN-EMC/Nimble Meraki 1 Cisco Security-ASA/PIX,VPN,' . ° Over seventeen years-of'related IT experience ranging through the different Concentrator,IPS/IDS;-MARS,VMS, / X \--. layers of the OSI model. Specialized in a variety of Data Center technologies ACS,CSA„NAC,10S Firewall; I 1 to take the lrohPort email/web,CSM, lead innumerous design and troubleshooting occasions for legacy Sdurcefire and current protocols. Proven rack record of high performance and initiative. • Gscowireless-Access Points, Extensive experience immnetwork design and troubleshooting. WCC,WCS,Voice on-Wireless _ ' Ci3co',Application Networking=,�° _EXPERIENC&HIGHLIGHTS ACE,WAFS,WAAS,CSS Work witR,,pre-sales staff to create competitive quotes that meet or Network Management-CNA,(' ' ASPM,SDM,CiscoWorks LMsi-A, exceed customer expectations. Allows involvement in projects from RFP Cacti,Nagiiis' �, r to project sign off. • Technologies,EIGRP,OSPF, , , •�Lead engineer in 150+ successful migrations from LAN infrastructures to `RIPV1 12,BGP,,Tl'/Eli AS-3,,ATM, —L-»»__'firewall conversions. Frame.Relay,ISDN,HDLC,PPP, _ • Designed and implemented full voice/data failover technologies on a SNMP,VLAN,VTP,802.11a,b,g,n,. multi-vendor, multi-site environment with complete success at the 862.1 x;Spanning Tree,LWA PP, ; RTP,H.323i LWAPP, ISAKMP,GRE,'- customer environment. IPSec,'Qos • Performed numerous LAN/WAN assessments detailing critical deficiencies that once improved provide stable customer environments. SECURITY CLEARANCE ^CERTIFICATIONS Secret Clearance-1995-1999-U.S. CCIE Routing and Switching#9751 . i Army VCP'-ITILv3` 9 c EMC=ISM/EMC VNX IE w I CCNA/,CCNP.- CCDA/CCDP CMNA/CMNP - Cisco,Advanced Wireless LAN(SE) Cisco Adva_raced Routing and Switch ing`Specialiiation(SE) - Sim IiVi Pre-Sales Training,Im lementation Trainor I No,p'prt ofihn Cansultant Apfile may be reproduced w+tho¢t perm+sseorrfi•om Core BTS.',,, ” CORE BTS,Inc. 20 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update •®o •®o0 ,e IT STARTS HERE ®®•° KirillKlimakhin,CCIE-Principal Consultant core NortheastRegion-Unified Communications -- CONTACT INFORMATION DESIGN,IMPLEMENTATION AND SUPPORT EXPERIENCE: Cisco Unified Communications products and services; including Cisco Unified Kirill Khmakhin Communications Manager, Cisco Unity Connection, E-911 Cisco Emergency Responder, y Principal Consultant and Cisco WebEx solutions.Client collaboration tools such as Cisco Unified Contact Center Core BTS and Cisco Unified Customer Voice Portal. Proficient in the design and Implementation of 1393 Veterans Memorial Hwy Voice over IP, ranging from installation and deploy ent to device support, quality Suite 408N assurance and end-user and administrative training. Hauppauge,NY 11788 Extensive experience in Windows and Unix-based data center computing environments Phone 631.982.4772 /-''1 \ as well as experience In designing, implementing and'maintaining complex LAN and Email Global WAN configurations. Kirill worked within varied Verticals;`these include Fortune kirill.klimakhm@corebts com 500,Service Provider(ISP), Healthcare, K12 and higher eeduc on,institutions. ' PROFESSIONAL HIGHLIGHTS PRINCIPAL CONSULTANT,CORE BTS �team's�,,ito AREAS OF EXPERTISE • Work with pre-sales/sales and technicaidentify,validate and develop Cisco Unified Communications strafe is sales opportunities. In Industry Since 2005 a • Responsible for designing, sta Ing, configuration, implementation, and support for Cisco Unified Voll?installations. • • Development of technical documentation to support the proposed design and Communications u implementation approach, including but not limited to network diagrams and test • Cisco VOIP,Unity,Contact plans. �. �, Center,Call Manager . Contribute pert technical co dent regarding networking technologies for • Routing,Cisco IOS presentations,-Froposals and-ptoject plans. • CISCO WebEXLEAD IP COMMUNIQATIONS ARCHITECT:IA GE PXf(WIC SCHOOL DISTRICT • Datacenter Migration('06rn arbitrary legaft'phone systems to a centralized and unified • Securitytefetommunications platform based on Cisco UC solutions •✓Design-and implementation of Cisco Communications Manager, Unity Connection • Trtworkihooting ng messaging sand\El.,911 Emergency Responder services LEAD IP COMMUNICATIONS bles ARCHITECT,COUNTY GOVERNMENT,HELPDESK MIGRATION TO CISCO UC Migrated thelNassau County Government helpdesk from a legacy Verizon Centrex is based system to a wrtuahzed Cisco UCS environment •�Design.a Jd'implemented a call center solution based on Cisco Unified Contact Center Express-to provide help desk reporting and caller statistics • Conducted end-user training as well as training of call center agents and supervisors LEAD IP COMMUNICATIONS ARCHITECT,STATE DEPT.OF EDUC.,VIRTUALIZATION&UPGRADE TO CISCO UCS r�I • Virtualized 8 existing servers and converted to the Cisco UCS platform • Migrated users from legacy Unity platform to Unity Connection with Unified Messaging I • Supported the post migration environment and provided end-user training j CERTIFICATIONS Cisco Data Center Support fob UC,-Certified-' ' p - S ecialistGenetec SecUri Ceriter 5.1 Certified Cisco Unified�ComputingTechnology-Certified � Support Specialist Architect Aruba ACMP Certification Cisco CCIE Collaboration-#56507' ` - NophrtofthoConsultan7Profile may hereproduced unlhoutpernussionfroinCoreBTS' •� CORE BTS,Inc. 211 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update ,l °0 ®°-c o r e ,o IT STARTS HERE ° core Tim Grelling-National Director-Security . © I OVERVIEW CONTACT INFORMATION Tim Grelling is the National Director of Security at Core BTS Inc. Tim has Tim Grelling Core BTS,Inc. over 20 years of experience in Information Security, Compliance, and Phone" 610-823-5510 Audit. Email:Tim.Grelling@corebts.com Tim specializes in developing informati`security strategies, information security assessments, I.T. governance 4ramework design, compliance audit management, risk management and'Vurance reviews, h'( /-/\ gap analysis, policy content development penetration testing, security " AREAS OF EXPERTISE fid' r product selection and imple entationf �andemediation strategy In Industry Since" 1998 • Information Security Program development. and Strategy Development • Information Security His experience includes 4information security assessments for numerous Assessments \"\. �•,.\ • Compliance Reviews(PCI, Fortune 500 companies in various'industries.This experience specifically HIPAA,etc.) includes assessment and�man'agement of PCI-DSS, Sarbanes-Oxley 404, ( (' '\, • Penetration Testing HIPAA, penetration testing, wireless assessments, and security strategy • Risk Assessments development., Tim has developed and managed 3rd party risk • wireless Assessments • 3rd Party Risk Management management� programs_for...�!!Bents in the financial industry. • Security Policy Gap Analysis and s Development TI >has\also served in an Information Security leadership role (as an Info�mation�Security Officer) for multiple Core BTS clients, including a 6,000`person hospital system and an international manufacturer. While an interim ISO Tim developed and matured a Risk Management strategy, oversaw Security Operations, assisted in procuring security solutions, -and consulted on PCI-DSS, HIPAA Meaningful Use, and Security Rule compliance efforts. Finally, Tim participated in the technical interview of candidates for a permanent position with the hospital system. CERTIFICATIONS AFFILIATIONS CISSP,CISM,CRISC,''CCSP,HCISPP,"GPEN,GCFE, ISSA,ISACA,ISC2,InfraGard Philadelphia" GMON Nopm-tofthisConsaltantProfilemayberepiodncedwzthoutpehiii sionfrnmCoreB75 _ e CORE BTS,Inc. 22 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update r� �f oo,,,.c o re I , • IT STARTS HERE 7 ° e o r e LordlyMathews- SolutionsArchitect •••� •• °°°'^°°° Northeast Region-Unified Communications ' CONTACTINFORMATION A certified Senior Network Engineer with 15 years of networking and Lordly Mathews security experience, responsible for the implementation, design and Solutions Architect support of the Enterprise and Data Center Infrastructure, including Core,BTS - implementation, migration to latest technologies, implementing new wan 1393 Veterans Memorial Hwy solutions,managing of multivendor devices on the DMZ Edge such as Next Ph'631,-982-4763 Hauppauge, 1]788 Gen Firewalls, IPS/IDS and Load-balancers; managing policies and iordiv.niathew`s@corebts,com compliance of these devices using security management tools. Excellent communications and interpersonal skills with all,fevels of Management and AREAS OF EXPERTISE " - Staff. 'in Industry Since 2001 ; FIrewaIIs:Checkpoint,,ASA,'Pald Alto; PROFESSIONAL HIGHLIGHTS Barracuda Senior Network Engineer,Solutions Architec�� 7 Intrusion Detection&Prevention: • Engage with clients and evaluate their upcom ngf projects; .ASA IPS/IDS,Sourcefire/Firepower' • Conduct site-survey of clients etworks� .. Next Generation IPS f F ' • Design solutions based on site-surveys,discovery sessions Security Management&LognI r Retention:LogRhythm,Splunk, a \ Participate as needed in Implementing solutions - - < \ Checkpoint Smart Tracker/Security` - Manage Data Cent er Core•consisting of Cisco 6509,UCS Chassis, Manager,Cisco Works,Cisco Security • Manage and Audit NelworOnfrastructure for security compliance ist Manager,Solarwinds;Manage Engine,' • Manage and Adminer Barracuda Suite of Security Appliances Qualys,Bradford NAC ' • Setup,Manage remote access,client,and site-site vpn connectivity Routers:ASR1001 X/1402-X, I • Manage Active Directory �� 3645/3825,'2921,'I 706,1720,2951, NetworkfSecuriti Architect,\Senior Network Engineer 2670,891 � - � \�. 6 j Switch:Catalyst 6500,4948,4509,- • Design&Upgrade Network to ensure security compliance 3560,3750(stacks),Nezus Impl-emeQt Meraki-MR]a8 Wi Fi 7000,5500,2000,4500-X VSS" Deploy\\ASA 5500X NGFW/iniith NGIPS Firepower Wireless:CISCO WLC 5500 802.11 a/g, Setup remot°eaccess;site-site vpn 802.11 n,and 802.17ac,AP 3600, 4 I , Ensure Network Infrastructure is in compliant with industry security and 3700 LWAPP,Meraki MRI 8 Cloud APs - hardening standards(i.e.PCI,CIS), manage security and vulnerability Troubleshoofing tools:CiscoW,vrks, assessments wire shark network analyzer(sniffe'r), Network�Engiiteering,Lead Cisco Security Manager,Cisco ASA Packet tracer/capture and tcpdurrip. • Manage Data Center Core consisting of Cisco Nexus 9K,7K,and 5K/2K Protocols RIP,RIPv2,-ICRP,EIGRP,' • Manage DMZ and Internet Edge Infrastructure consisting of ASA NGFWs OSPF,IS-IS,and BGP PS/IDS,and F5 LTMs O/S and Virtualization--Windows, .,Design network architecture for new sites and Disaster Recovery Linux(Redhat,Kali,Ubuntu),and r; Address all Post-Migration issues; participate in on-call rotation - VMware 5.x/6-x Participate in CAB Change Committee Review System Administration-Active Directory,PowerShell 3.0 and later- Work with CISO to define GRC for network infrastructure ;= • Work with CISO to conduct security audits,vulnerability scanning,and reporting on all network infrastructure devices using Qualys • Oversee hardware procurement,telecom billing,and professional services EDUCATION - - CERTIFICATIONS- - - - - - - ' Rockland Community.College; -CCNA' Contmputer ,Career Ceer,Garden City, CCNP 2000,—2016 `. MIu'rARY SERVICE - United States Air Force NopartofthuConsultmiiPro filemaybereproducedwitlroutpermrssionfroniCoreB1S. CORE BTS,Inc. 23 1 April 18,2019 - PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update I o' .0 00 0 c o r e ,• it STARTS HERE •'� core Michae/Passa/acqua-Consu/ling&gineer •.�� + `""°"`"`"°°`°`" Northeast Region-Data Center OVERVIEW CoNTAcr INFORMATION ~.. EXPERIENCE HIGHLIGHTS Michael Passalacqua Consultmg,Engineer Data Communications - Core BTS Successfully delivered data communication services to client companies on 1373-10 Veterans Memorial Hwy, both a project basis and level 3 support Hauppauge,.NY 11,788 Directly responsible for upgrading and instalhn_ gco equipment Phone:(631)982-4773 including, but not limited to: `��hNexus Email 0 6500, 3750,2960, Nexus Fabric Ex of nd�ers, 5000 series Michael.Passalacqua@corebts.com switches \> o Wireless Controller,Identity Services Engine and.Prime Management in AREAS of ExPERTISE a virtual and physical environment In Industry Since- 2009• ' - • Installed,upgraded,and diagnosed the following Microsoft applications: o Exchange 2007-2013N( o Threat Management Gateway o ADDS, DHCP, DNS,Print Management,etc. • Adapted quickly to int grate the technologies listed above with various other venders such,as'Enteaasys,Alcatel,juniper,and HP to meet the client's nee s ` Technolo\ Services-Security • Purcha`sed`security-awareness training and Cisco wireless controller r . Constructed, isio diagrams and configured network security on Cisco switc�es , !'..Inf rrmation Technoloay Consultant Createddeiailed spreadsheets and network diagrams for the client as well _p basic desktop support HeID Desk Technician { • Imaged new computers using Norton Ghost and SCCM Configuration - > Maager EDUCATION 'CERT FCATI�IONS - j Alfred State,SUNY College of Af Certification ]]]{ Technology Provided with the skills to network and repair computer I Bachelor of•Technology:,Informa>aon ,hardware and software Technology.information Security& Assurance;Minor:Network 1 - Administration Associate,of Apphed Science Computer Information Systems Cisco Networking Academy(CCNA& CCNA Security)2011-201'2& " 2007-2009 -_ - Nopart of this Cot suitantProfile may be reproduced w�thmrtpenmssion from Core BTS CORE BTS,Inc. 24 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update o r e I ,® IT STARTS HERE s" ( .�o o° C 0 r e Fillmore Lamantia-Systems Engineer •• ' BuSIn6562sCNnDLD6V SOt"i—s - NortheastRegion-Data Center CONTACT INFORMATION EXPERIENCE HIGHLIGHTS Fillmore Lamantia ' Network Field Engineer Systems Engineer . Perform Cisco Wireless LAN and network upgrade site surveys for a retail network — Core BTS refresh project for a national grocery store chaff 1393 Veteran's Memorial Highway- • Responsible for documentation used by sub-contractors for determination of the type -Suite 408N " of network media,power requirements,placementof.new IDF's,and type of fiber 'Hauppauge,NY 11788?"_t " connections from IDF(s)to the MDF Phone (631)982-4800 • On-site engineer performing network cut over Email: • Perform on troubleshooting for router,switc ,wireless cress point,firewall,and Fdlmore.Lamantla@corebts.Com fiber optic issuesc w" • Document the existing rack elevation and revisenew rack elevation requirements AREAS of EXPERTISE for placement of new Cisco 29111 R Routers,Cisco�ASA5512 Firewall,Cisco 2960 POE switch,and new patch panei(s)— In Industry Since: 1999 _ • Act as liaison between the customer NOCaod Conquest Technologies NOC during the h deployment of then trvork upgrade • Utilize TFTP to copy new configuration files to routers,switch,and/or firewall • Install redundant-Cisco 2911 ISR routers and QA HSRP for router and link failure • Install new Cisco 2960-POE wii h(s),Cisco ASA5512 Firewall,and coordinate with customer NOC�for firewall•testing/ • Document the;installatioln and project deliverables for verification and sign-off Network Support��� � • Configured,Cisco 2811 outevwith NAT,ACL's,SSHv2,and to perform"Router on a Stick'inter-V I N:rout ng ' Configured mutt ple Cisco Catalyst 3550 switches with VTP,VLAN's,port security,and InIS • stall.d•and supported Windows 2003 servers • Configured SQL server 2003 and Active Directory • Supported Windows Vista Business and Windows 7 desktops jSupported Microsoft Office 2010 _•/ Responsible for development and acquisition of commercial and residential accounts • Developed the training program for new employees • Assisted with daily operations of business CERTIFICATIONS' _ Cisco Certified Network Associate Routing&Switching,2014 IBM Certified for WI-Fi Radio Frequency 802.11b Site Survey Microsoft Certified Systems,Engineer NT4.0(MCSE),= Sun Certified Systems Administrator,'Solans•7(SCSA) A , Nortel Networks Alteon Certified Administrator(ACA) No partof this Consultan(Profile may 6e reproduced without permission from Core M. CORE BTS,Inc. 25 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update STATEMENT OF NON-COLLUSION (To be completed by each Bidder) In accordance with Section 103-d General Municipal Law, effective September 1, 1966, every bid or proposal hereafter made to a political subdivision of the State of any public department, agency, or official thereof or to a fore district or any agency or official thereof for work or services performed or to be performed or goods sold or to be sold, shall contain the following statement subscribed to by the bidder and affirmed by such bidder as true under the penalties of perjury; non-collusive bidding certification. A. By submission of this bid, each bidder and each person signing on behalf of any bidder certifies, and in the case of a joint bid, each party thereto certifies as to its own organization,under penalty of perjury, that to the best of knowledge and belief: (1) The prices in this bid have been arrived at independently without collusion, consultation, communication, or agreement, for the purpose of restricting competition, as to any matter relating to such prices with any other bidder or any competitor. (2) Unless otherwise required by law, the prices which have been quoted in this bid have not been knowingly disclosed by the bidder and will not knowingly be disclosed by the bidder prior to opening, directly or indirectly, to any other bidder or to any competitor. (3) No attempt has been made or will be made by the bidder to induce any other person, partnership, or corporation to submit or not to submit a bid for the purpose of restricting competition. B. The person signing this bid or proposal certifies that he has fully informed himself regarding the accuracy of the statements contained in this certification, and under the statements contained in this certification, and under the penalties of perjury, affirms the truth thereof, such penalties being applicable to the bidder, as well as the person signing in its behalf. C. That attached hereto (if a corporate bidder) is a certified copy of resolution authorizing the execution of this certificate by the signature of this bid or proposal on behalf of the corporate bidder. �— RESOLUTION Resolved that ---4sdw of the (Name'of signatory) ��7 Be authorized to sign and submit the bid (Name of Corporation) Or proposal of this corporation for the following Project: and to include in such bid or proposal the certificate as to non-collusion required by section one- hundred-three-d (103-d) of the General Municipal Law as the act and deed of such corporation, and for any inaccuracies or miss-statements in such certificate this corporate bidder shall be liable under the penalties of perjury. The foregoing is true and correct copy of the resolution adopted by ���� -v C corporati n at a meeting of the Board of Directors,held on the / day of 20-4L (SEAL OF THE CORPORATION) Laws of New York, 1965 Ch. 751, Sec. 103-d, as amended& effective on September 1, 1965. Signature 1'4 i 'O©�®®•V� O L1 LT STARTS HERE = I COMPANY INFORMATION AGA i Core is a customer-centric technology consulting organization dedicated to transforming IT experiences and delivering value to clients. Core has 15 offices in 9 states with more than 300 employees which allows'u"sto provide national reach with local expertise. Our team has more than 25 years of experience and holds to level certifications with Cisco, VMware, EMC, Citrix, and Microsoft that allow us to provide our customers with*expertise across multiple technologies. In addition to our top-tier partnerships, Core holds many partnerships with other national and regional technology providers to ensure we can provide our custorners wiit�h`oiistic technology solution. Core has over 2,500 active customers across industries,including, healthcare,education,financial services,and manufacturing. Although we sell IT products we take a ven�o�agonistic collaborative approach to designing the right project that provides the most value to our clients—weJead with IT assessments. We work closely with our customers to understan�th��strategrc direction and organization needs in order to Plan, Design, Implement, and Operate appropriate IT solutions. Our team of consultants, solution architects, and engineers work collaboratively wit -xyoufrom-understanding your organizations objectives through implementation an operation. Envision—Execute,—E powenL Its our commitment to providing you the best = possible IT solution to move/your organizatio�nn or ward. w } I r - CORE BTS,Inc. 28 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update ®om C C3 r e m LT STARTS HERE Partners _ Having the highest level of certification-specific rewards and recognition with multiple partners puts Core in a unique position to deliver the most comprehensive, trusted solutions for your enterprise. Through these partnerships Core is able to offer an increased level of technical expertise and support,productivity tools,training, communication resources and solutions incentives. In addition, Core can subsequently offer incremental product discounts and leverage partner resources, including customer satisfaction best practices and tools. Value. Delivered. By combining experience, knowledge, and talent with top-tier partnerships, Core uniquely positions itself to deliver the highest caliber technology solutions. <\, Experience industry best practices with our top-tier partnerships and highly gdalified,certified technical staff: • Cisco: As a Cisco Gold Certified Partner, Core has integrated the deepest le el of Cisco Lifecycle Services expertise into its offerings and have demonstrated a measurablyhig�h'�I&eV(96%) of customer satisfaction. o Cisco Certified professionals including CCIE VOICE-(-1), CCIElROUTING/SWITCHING (4), CCIE COLLABORATION (3), CCIE 10-YEAR ACHIEVEMENT(1)��C�DP(4), CCNA(35), CCNA VOICE (4), CCNA SECURITY(3), CCNA WIRELESS (5);CCNA COLLAB`(2), CCNA DATA CENTER(1), CCNP (19), CCNP VOICE (1), CCNP SERVICE PROVIDER-(2), CCNP COLLABORATION (6), CCDA(13), CIVINA(6), • DeIIEMC: Through our DeIIEMC Gold partnership;-Core can `offer the latest and most diverse tools and standards in technical architecture quickly and efficiently. o DeIIEMC CERTIFIED technical professionals including IE (3),SE (2) _ • VMware: Being a VMware Enterprise lu ion pr`odider/Core offers cutting-edge virtualization and business continuity solutions-with the`h�ighest accre tations. o VMWARE CERTIFIED-technical professionals including VCP (3),VSP (12),VTSP (8) • Citrix:Core is a Citrix God Partnewth ability and extensive experience to deploy all Citrix offerings. o CITRIX CERTIFIED professionals including CCIA(3),CSP (10), CCA(32),CCEE(1), CCAA(3) Microsoft: As a Microsoft Gold-Pa I ner, Core has earned 11 certifications to offer the best that Microsoft has to offer. o MICROSOFT CERTIFIED professionals including MCSE(3), MCPS(29), MCT/TRAINERS(4), MCTS (14), MCSA(9) • NetApp:As an experienced NetApp Gold partner, Core deploys and supports NetApp's FlexPod Data - . Center Solution. o NETAPP CERTIFIED professionals including NASP (2), NATSP (1) CORE BTS,Inc. 29 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update 000--cm ro 0 LT STARTS HERE Focus Areas Explore our focus areas to learn more about technologies impactful to your organization: DATA CENTER The data center is the foundation of IT operations.Organizations can lower total cost of ownership with a stable data center foundation that allows for current-state flexibility, scalability into the future and simplified management. With the guidance of Core, data center solutions can elevate an organization's infrastructure, enabling an optimized and reliable IT experience. • Archiving,Backup and De-Duplication:Streamline and effectively store critical organizational information. • Business Continuity and Disaster Recovery: Ensure reduced network downtime and faster recovery. i • Networking: Enable all components of your infrastructure to communicate with each other quickly and securely. • Unified Storage and Computing: Reduce hardware requirements by streamlining files and applications that can all be accessed from a single device. • Virtualization:simplify, maximize, and enable systems to contain ands ore,infbrmation from a secure, central location. '` �' • Hyper-Converged Infrastructure: Simplify data center management;and,obtaln faster time-to-value and significant cost savings. COLLABORATION Organizational processes are increasinglyEdependent on creative management and information sharing. Communication technologies provide the power or�ganizatio I,need to conduct business through geographic and virtual borders.Through these technologies;organizafionslare able to connect multiple facets of their ;,t',r `�;\ 1 f` operation, reduce travel costs, and impact:the bottom Iir@e With the help of Core, innovative organizations are transforming into a live network-gbbal information exchange. • Mobility and Presence:Leverage a y amicwkorkforce to enable communications regardless of location, application or device. • Unified Messaging:Integrate multiple!forms of messaging utilizing integrated access from a phone,e-mail client, tablet,or other mobile devic\6.1 --��''� • Voice: Increase presence and am ximize value with "always-on"voice services. • Web and Video Conferencing: Deliver face-to-face communication across multiple locations and devices. • Digital Content Sharing:Virtually share files, message the team, and make decisions collectively,wherever you - , are. • Social Technologies: Promote social collaboration and allow everyone in your organization to share knowledge and engage with a purpose. • Collaboration as a Service (CaaS): leverage the cloud to provide higher levels of redundancy and a wider range of device access to e-mail and unified messaging while reducing on premise footprints and costs. • Hosted Video Service(HVS): provides operational video support with no capital infrastructure investment. CORE BTS,Inc. 30 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update 1 ®ma r ,o LT STARTS HERE SECURITY AND COMPLIANCE The security of your network is fundamental to the health of your organization. By partnering with Core and its - top-tier partners you can protect valuable data and data center resources with compliance consulting, penetration testing, risk assessments, and vulnerability scanning. Let Core help you mitigate risks and protect against threats by creating actionable and comprehensive plans for success. • Compliance Consulting:achieve and maintain compliance in today's fast paced regulatory environment using the NIST Cybersecurity frameworks. Our Team of CISSP's, Certified Ethical Hackers and Compliance Experts work closely with clients and regulators to protect critical data and provide a secure working environment. • Penetration Testing: Services that rigorously challenge an organization's security posture from the perspective of an attacker. • Vulnerability Scanning: scan threats identified during the penetration test to assess risks. • Social Engineering: services that teach your employees how to best protect your organization against possible security threats. SECURITY SOLUTIONS �he`ad • Monitoring: our 24x7x365 Security Monitoring Solutions help clienty of attackers, identify, and V, ar act on security threats. �* { • Content Security: proactively protect business critical ap'licatibns. • Access Management: Enable only authorized users acce`s�s\,to systems and data. CLOUD �- �, - Cloud has been the buzz word in IT for years no , but many organizations still do not fully understand how cloud should fit into their organization,where,theyx are already utilizing the cloud,and what their next steps for � Z� cloud implementation should be. Cloud solutions�� `for each organization are unique, therefore organizations need partners that work to create custoim cloud,"solutions that allow them to achieve their business goals. Wherever an organization stands-with,thelr.cloud journey at this point, Core can help them get started in the cloud,continue their journe oto the cloud,or,help improve operational efficiency after cloud implementation. • Cloud Assessment:Our assessment�helps companies successfully size,scale,price,deploy,and validate IaaS and Data Center Solutibns J • Storage as a Service(SV baS):-Host,storage infrastructure on a subscription based model and provide realized cost savings. • Platform as a Service (PaaS): Maintain business flexibility without the cost and complexity of buying the underlying hardware. • Infrastructure as a Service (laaS): Host server and storage infrastructure in the cloud and reduce physical data center footprint, increase flexibility, and reduce costs. • Collaboration as a Service (CaaS): Leverage the cloud to provide higher levels of redundancy and a wider ` range of device access to email and unified messaging while reducing the on premise footprint and costs. • Disaster Recovery as a Service (DRaaS): replication and hosting of physical or virtual servers to provide failover in the event of a disaster. CORE BTS,Inc. 311 April 18,2019 - PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update r 0001- ® = 0rL ,a IT STARTS HERE CLOUD MANAGED SERVICES Network Operation Center(NOQ Services • Monitoring:Our engineers actively watch your environment, receive notifications, and escalate alerts to help you more efficiently manage your environment. • Management:Our engineers identify problems, resolve incidents, and regularly review your environment to recommend improvements. _ • Help Desk:Technical support for software and hardware from certified, front-line support technicians without draining your resources. • CoreCare:A joint service offering provided by Core and Cisco that combines network-wide Cisco technical support with on-going network monitoring and proactive maintenance for Cisco solutions to ensure optimal performance. Cloud Compute 0 Cloud Compute: Utilize SaaS, PaaS, IaaS, CaaS, DRaaS,and Cloud Backup to easily manage your computing environment. � o Co-Location, Dedicated Cloud,Shared Cloud,vCloud Air—Dedica ei1 Cloud and Shared Cloud Other Managed Services • Cloud Backup:Online data backup done in a public, private or hybrid,setting.- Vd y 4 • Disaster Recovery: Replication and hosting of physical or virtual servers to provide failover in the event of a disaster. �f • Security Monitoring Services:stay ahead of attackers with,�a proactive approach to security. • Hosted Video Service: Provides operational video support without capital infrastructure investment. STAFFING SERVICES Core enables an organizations vital business,processes to flourish by delivering a full range of Staff and Project Augmentation services to meet evolving•business needs.Whether it be short-term, long-term,or temporary-to-hire, Core can provide exp erienced,engineers with the technical knowledge and expertise to make your mission-critical projects-a success. Core's Staff and Project Augmentation solution has been extremely successful becalus it allows our customers to keep their workforce more flexible and adaptable to economic fluctuations and"m arketplaceychange. ( When you source staff augm`e tation.e'mployees from Core you aren't just hiring an individual,you are leveraging the entirety of Core's knowledge and resources. We act as an extension of your staff, allowing your organization to tailor technology talent to support your most important internal initiatives. Not only will our employees seamlessly transition into your business,you will benefit from reduced administrative costs associated with payroll,advertising,and recruiting. Our process ensures that you get the efficient,talented help you need without all of the additional hassle.As a technology services company comprised of over 70% technical staff, Core is a dedicated resource for providing consultants who have gone through a specialized screening process, background and reference checks,and provided key on-boarding materials to create a trustworthy,simple way to get the technical experience you are looking for. I CORE BTS,Inc. 32 1 April 18,2019 - PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update 00-c o r a .000 .0 1 T STARTS HERE Project Management Plan — Methodology Overview & SCOPE km -W4 L CORE BTS,Inc. 33 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update a 4. ®oo o m o r a .00 IT STARTS HERE Core project managers and consultants are trained and cultured in several cycle, delivery and business process methodologies, in order to provide a holistic, intelligent approach to our customers' needs. i Iterative life-cycle planning and management for service management and application development. TOGAF Business analysis, planning and implementation"methods THE OPenGROUP PMI Project Management processes and best practices are used to define.and. ' document our project processes and procedures BUSINESS ANALYSIS �p International Institute 1 !'Standard methods for BA are utilized throughout our teams of Business Analysis To meet goals and objectives,a sound approach and methodology are important.-Itwill ensure business objectives are understood and realized,focus the project team for efficient delivery and;validate.that the solution meets the objectives.The diagram below defines the high-level phases a project will iterate,to meet the desired end state. Each of these phases has a deliverable as well as Delivery Excellence Reviews_(DER)which ensure the deliverables match work described in a Statement of Work(SOW).T.,e foundations`for eachofthese phases are tracks of work which develop supporting artifacts and further soluti ,definition.The solution roadmap shown below provides a high-level view of the project phases and illustrates theWlationship between project phases relative to project completion. It is not intended to depict effort associate PROJECT ofthe respective project phases. PROJECT PHASES At the highest level,there are five phases to a Core protect:' • PRE-SALES DISCOVERY '/ • DEFINITION • DESIGN • EXECUTE - • DELIVER - The end of each of these phases is marked by a Delivery Excellence Review(DER).The Delivery Excellence Review is conducted by Account Managers, Senior Architects, Practice Leads and Practice Directors to create a common, accepted view of solution delivery and support. Pre-Soles Discovery The PRE-SALES DISCOVERY phase is where Core works to understand the business problem faced by clients. r During this phase Core will determine if we have the competency to meet the stated business objective. Definition The DEFINITION phase is where Core begins direct customer engagement.The phase will engage Core Business Analysts,Senior Architects,and Program Managers with the goal of formalizing project approach,schedule,scope, and client responsibilities. CORE BTS,Inc. 34 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update i y ' moos•(;� ; � 1:.� LT STARTS HERE ' Design The DESIGN phase is where Core builds upon the Definition phase by further defining the solution. In this phase, Core uses Security Consultants and Project Management to refine the solution to a detailed design. This is the final development phase before solution construction begins. Execute _ Just as the Design phase built upon the work completed in Definition, the EXECUTE phase builds upon the work efforts completed in Design. During this phase, Core consultant(s) begin to build the solution based upon the Design and Requirements Assessment specification compiled during Design. Deliver +' The DELIVER phase includes the final project phases prior to full production deployment as well as the production deployment.During this phase, Project Managers, Engineers,and Tech nology,Adoption Specialists work to deploy the solution and ensure solution adoption. The following deliverables will be produced during this project. Customer an, ,Core will work jointly to develop the deliverables with responsibilities as indicated below: �✓' .CORE T - ;CUSTOMER PHASE DELIVERABLE DESCRIPTION ° • RESPONSIBILITI( RESPONSIBILITY i KICK-OFF '• Outline of project objectives, >, ` `, PRIMARY ASSIST PRESENTATION stakeholders,approaeh•and schtOule j i l• Project schedule/t meline,`used to - PROJECT PLAN PRIMARY I ASSIST I manage project activities)) j DEFINE • Business,fuactional andleichnicaI I REQUIREMENTS �'` —,� ASSIST PRIMARY i requirements PROCEss FLOW :.,Graphical representation of processes to � DIAGRAM FI` be implemePRIMARY ASSISTnted' • Display of relationships between J6` a IlcatlonsI. ,field list,data driven i DESIGN ,�, I __...: '.,DESIGN"'=� events;"page layout,global reports, PRIMARY REVIEW SPECIFICATION ( I workspaces, notifications, and access control specifications. CONFIGURED r_ • Working solution with all components .EXECUTESOLUTION PRIMARY ASSIST outlined in the design _ USER ACCEPTANCE i• User testing to determine if solution k.DELiVER I ASSIST PRIMARY TESTING meets requirements SOLUTION 1. Documentation outlining configuration i ADMINISTRATION GUIDE i and use of final solution(s)targeted PRIMARY REVIEW ,DELIVER n'; towards solution administrators i { USER • User training materials outlining use of PRIMARY REVIEW DOCUMENTATION 1 solution(s) ' v CORE BTS,Inc. 35 1 April 18,2019 PROPRIETARY AND CONFIDENTIAL Town of Southold/Cisco Firepower Server and ASA Update ` Town of Southold Attn: Southold Town Clerk t Director of Technology PO Box 1179 '+ 530„95 Route 25 Southold, New York 11971 '�� +! rl► RE: Cisco Firepower Server and ASA Update q 0106 5� r r April 17, 019 Submitted by:. Sharon.Hofmann Account Executive Phone: 631-761-1497 70 Suffolk Court 1 Hauppauge, NY 1179,8 6 Blackstone Valley Place, Suite 402 Lincoln, RI 02865 Phone: 800.598.8989 Table of Contents Introduction.......................................................................................................................3 Understandingof Your Needs.............................................................................................3 Section 1—Financial Stability..............................................................................................4 Section 2—Qualifications/References.................................................................................4 Section 3—Proposed Solution.............................................................................................5 Section4—Cost Proposal....................................................................................................7 Appendix A: Financial Documents.......................................................................................9 Appendix B: Estimated Project Schedule...........................................................................10 Appendix C:Standard Terms and Conditions.....................................................................11 Custom Computer Specialists 0 Right People.Right Results Proprietary and Confidential P a g e 2 Cisco Firepower Town of Southold pr\tpr and ASA ••• " Introduction Thank you for the opportunity to submit this Cisco Firepower Server and ASA Update proposal to Town of Southold in support of your IT goals. Custom Computer Specialists, Inc. ("Custom") prides itself on consistently providing the right people to meet our client's technology design,deployment and support requirements. Much of our success comes from .,;` our ability to hand-pick individuals for"best-fit" in _ client organizations from our full-time technical - staff of over 180 individuals. Our ultimate goal '' has, and will continue to be, to provide the best .. combination of technical skills, relevant experience and cultural fit in the people we staff at our client accounts.We believe that our flexible Custom Computer Specialists, Inc. business model, a proven staffing and 70 Suffolk Court management practice, and 40 plus years of Hauppauge, NY 11788 experience set us apart from the competition. It Contact Person:Sharon Hofmann has allowed us to consistently provide tangible 631.761-1497 benefits to our clients while maintaining a 95% www.customonline.com client renewal rate over the last 10 years. Thank you for this opportunity and we invite you to review our proposal. i--- � Understanding of Your Needs Custom understands that Town of Southold would like to update its current Cisco Firepower Server, Firepower Management Center Suite of Applications,AMP for Network and Desktops and Cisco ASA Security Appliances.The project shall include updating the operating systems, software application updates and any release updates to these devices/applications to the latest updates/releases from Cisco. The project will also include the analysis of the configuration the settings, rules and polices of these devices/applications with the intent to make recommendations and implement changes to improve the current installation. 1 Nv Proprietary and Confidential Page 3 Cisco Firepower Town of Southold Server • ASA Update Section 1—Financial Stability Please see the financial documents in Appendix A. Custom Computer Specialists was incorporated in 1979 and has no pending legal matters. Section 2—Qualifications/References Name Address Contact Phone Email Scope Valley Stream 1 Kent Rd, Central Valley 516- High Stream NY Steve 872- Cisco Firepower School 11580 Caruso 5644 carusos@vschsd.org &ASA Update 100 Quentin Roosevelt Cullen Blvd, 516- and Garden City Joseph 296- Cisco Firepower Dykman NY 11530 DeSario 9142 jdesario@cullenanddykman.com &ASA Update I 2000 I Marcus Ave, New 516- Northwell Hyde Park Ginni 321- Cisco Firepower Health NY 11042 Gandhi 8131 ggandhi@northwell.edu &ASA Update Proprietary and Confidential P a g e 4 Cisco _•s _ Town of Southold Server and A . Update Section 3—Proposed Solution I. Review and update current infrastructure ` • Review and evaluate the current configuration of the Firepower Server, Firepower Management Center,AMP for the Network and Desktops and all seven 7 existing ASAs. :.• ;p,. ;: ,,r • Analyze and identify any potential performance issues relating to possible bandwidth u limitations of the ASAs. o Verify that the current site-to-site connectivity which provides automatic multi- level failure recovery within three main locations(Town Hall,Town Hall Annex and Police Department) is working as designed. Make recommendations and changes for improvements. o Verify that the RADIUS replication redundancy configuration from the Town Hall site to the Police Department is working as designed. Make recommendations and changes for improvements. o Implement recommendations, making approved changes to the configuration, rules and policies on the Firewalls, Firepower Server, Firepower Management Center and AMP.Verify that the current site-to-site connectivity which provides automatic multi-level failure recovery within three main locations (Town Hall, Town Hall Annex and Police Department) is working as designed. Make recommendations and changes for improvements. o Incorporating all design changes required and any recommendations as per the design and configuration outlined in this document. ------ o Verify SI EM tool if present o Recommend SIEM application if needed. (Custom would suggest a tool but eventual installation and integration wouldn't be part of this engagement) • Identify/Analyze current ESX environment. ■ Upgrade ESX software as needed. ■ FPMC version 6.3.0.2 is compatible with existing ESM version 6.5 II. Upgrade preparation • Update all seven (7)ASA operating systems and releases to the latest from Cisco. • Create internal repository for ASA codes, FPMC codes and Firepower Module Codes • Backup ASA configurations • Backup all Firepower policies configurations • Our suggested approach is to create a new VM for FPMC version 6.3.0.2 • Create new Install new FPMC software version f • Upload firepower policies into the new FPMC version. Proprietary and Confidential P a g e s I Cisco Firepower Town of Southold Server and ASA Update III. Upgrade Tasks • Create New FPMC version 6.3.0.2 install • Existing version 6.2.2 would continue working in parallel. o Southold staff will manage the existing environment as of today. • Firepower licenses may have to be in evaluation mode until upgrade to all locations is finished. Choose one locatuon w th eluent as Prototype to the test upgrade process. Upgrade Firewall Code • Install new Firepower 6.3.0.2 to the Firepower module o Register FP module into FPMC. • Verify functionality • Verify event logs on FPMC • Verify SIEM logs Lessons Dearned moth eluent o Verify process effectiveness • Make appropriate,changes as needed Remote LocaVons 5508 upgrades • Schedule the upgrade of the remaining remote locations, one location per cutover • window. • Once all remote 5508 locations have been upgraded, proceed with the 5525 (primary locations) Larger LocaVons 5525 Upgrades e Select one of the three 5525 locations. • Proceed with ASA code upgrade o Install FP module OS code 6.3.0.2 • Register to FPMC 6.3.0.2 console • Verify functionality • Verify event logs on FPMC • Verify SIEM logs • Schedule rest of the Primary Locations until each of them have been migrated to new FPMC 6.3.0.2 console. • Decommission previous FPMC console version • Verify SIEM is only taking logs from new FPMC console server. IV. Handoff to Southold I • As we are migrating each location into the new FPMC version, Custom's engineer is going to review configuration and operations tabs with Town of Southold staff in order to ® prepare them for operation continuity. Proprietary and Confidential P a g e 16 Cisco Firepower Town of Southold SersieranclASA Jpdate • Custom will mimic the same practices: email notifications, backup schedules, reports,etc. from the existing environment and translate them to the new one. • Custom will recommend the use of new features in the updated Firepower version when applicable to the customer environment. • Prepare and deliver as built documentation. Please see Estimated Project Schedule in Appendix B. Section 4—Cost Proposal rr Total Cost For Services Provided In Custom's Proposed Solution $50,550.00 i l . t Proprietary and Confidential P a g e 7 r Cisco Firepow _ Town of Southold Server and ASA Update Conclusion and Next Steps Thank you for providing Custom the opportunity to offer this proposal for Cisco Firepower and ASA Updates and for your confidence in our organization. We are confident we will provide you with the highest level of professional service,while exceeding the specifications and requirements outlined in our discussions. We take great pride in forming strategic relationships with our valued customers and business partners, and hope that you decide to proceed with us. Should you have any x` questions regarding the materials presented in this proposal, please do not hesitate to contact me directly at 631.761.1497. Thank you for your consideration, I look forward to hearing from you. Best regards, Sharon Hofmann I Account Executive Custom Computer Specialists, Inc. I www.customonline.com Right People, Right Results since 1979 (P) 631.761-14971 (M) 631.624.4118 shofmann@customonline.com Proprietary and Confidential P a g e 8 Cisco Firepower Town of Southold Server and ASA Update,. Appendix A: Financial Documents 1 r , Proprietary and Confidential P a g e 9 l 1 CUSTOM COMPUTER SPECIALISTS, INC. :AND SUBSIDIARY CONSOLIDATED FINANCIAL STATEMENTS AND SUPPLEMENTARY INFORMATION Years Ended December 31, 2017 and 2016 TABLE OF CONTENTS Page No. INDEPENDENT AUDITORS' REPORT....................................................................................... 1-2 CONSOLIDATED FINANCIAL STATEMENTS Consolidated Balance Sheets .................................................................................................. 3 Consolidated Statements of Operations and Comprehensive Income(Loss) ......................... 4 Consolidated Statements of Changes in Stockholder's Equity ................................................ 5 Consolidated Statements of Cash Flows........................................................ .......................... 6-7 Notes to Consolidated Financial Statements................................................................ ...... 8-18 SUPPLEMENTARY INFORMATION Consolidated Schedules of Selling, General and Administrative Expenses.............................. 19 CERTIFIED PUBLIC ACCOUNTANTS INDEPENDENT AUDITORS' REPORT To the Stockholder of Custom Computer Specialists, Inc. and Subsidiary Hauppauge, New York Report on Financial Statements We have audited the accompanying consolidated financial statements of Custom Computer Specialists, Inc. and Subsidiary(the"Company'), which comprise the consolidated balance sheets as of December 31, 2017 and 2016, and the related consolidated statements of operations and comprehensive income (loss), changes in stockholder's equity, and cash flows for the years then ended, and the related notes to the consolidated financial statements. Management's Responsibility for the Financial Statement's Management is responsible for the preparation and fair presentation of these consolidated financial statements in accordance with accounting principles generally accepted in the United States of America; this includes the design, implementation, and maintenance of internal'control relevant to the preparation and fair presentation of consolidated financial statements that are free from material misstatement,whether due to fraud or error. Auditors' Responsibility Our responsibility is to express an opinion on these consolidated financial statements based on our audits. We conducted our audits in accordance with auditing standards generally accepted in the United States of America. Those standards require that we plan and perform the audits to obtain reasonable assurance about whether the consolidated financial statements are free from material misstatement. An audit involves performing procedures to obtain audit evidence about the amounts and disclosures in the consolidated financial statements. The procedures selected depend on the auditors' judgment, including the assessment of the risks of material misstatement of the consolidated financial statements, whether due to fraud or error. In making those risk assessments, the auditor considers internal control relevant to the Company's preparation and fair presentation of the consolidated financial statements in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the Company's internal control. Accordingly we express _.. no such opinion. An audit also includes evaluating the appropriateness of accounting policies used and the reasonableness of significant accounting estimates made by management, as well as evaluating the overall presentation of the consolidated financial statements. We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for V our audit opinion. BEYOND THE NUMBERS... - ALB3EChT,VIGGIANO},ZURECK&COWPANY,P.C. - 245 PARK AVENUE,39TH FLOOR 25 SUFFOLK COURT NEVV-ORK, NY 10167 HAUPPAUGE,NY'1788-3715 T.212.742 4075 1:631 434.9500 F:631.434.9518 www.avz.com ,RMPENDENT MEMN14OF NSR dN tONATIONAL _2 Opinion In our opinion, the consolidated financial statements-referred to above present fairly, in all material respects, the financial position of Custom Computer Specialists, Inc.,'and Subsidiary as of December 31, 2017 and 2016, and the results of its operations and its cash flows for-the years then ended in accordance with accounting principles generally accepted in the United States of America. Report on Supplementary Information Our audits were conducted for the purpose of forming an opinion on the consolidated financial statements as a whole. The consolidated schedules of selling, general and administrative expenses, is presented for purposes of additional analysis and is not a required part of the consolidated financial statements. Such information is the responsibility of management and was derived from and relates directly to the underlying accounting and other records used to prepare the consolidated financial statements. The information,has been subjected to the auditing procedures applied in the audits of the consolidated financial statements and certain additional procedures, including comparing and reconciling such information directly to the underlying accounting and other records used to prepare the consolidated financial statements or to the consolidated financial statements themselves, and other additional procedures in accordance with auditing standards generally accepted in the United States of America. In our opinion, the,information is-fairly stated in all,material respects in relation to the consolidated financial statements as a whole. 7-tme4Cx Hauppauge, New York March 26, 2018 c -3- CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY CONSOLIDATED BALANCE SHEETS December 31, 2017 and 2016 2017 2016 ASSETS Current Assets Cash and cash equivalents $ 1,812,870 $ 1,756,896 Certificates of deposit 1,399,707 -0- Marketable securities 1,928,032 1,526,282 Accounts receivable 7,461,301 8,305,519 Other receivables 871,072 997,854 Inventories 223,386 314,042 _Prepaid expenses and taxes 350,800 304,524 Deferred service contract costs 2,838,838 2,241,490 Total Current Assets 16,886,006 15,446,607 Fixed Assets 813,585 1,593,223 Other Assets Security deposits 159,232 159,232 $ 17,858,823 $ 17,199,062_ LIABILITIES AND STOCKHOLDER'S EQUITY Current Liabilities Notes payable $ 3,021 $ 7,328 Accounts payable 2,415,799 1,518,055 Accrued expenses 2,346,063 3,319,675 Deferred service contract and project revenue 7,675,013 7,517,399 Total Current Liabilities 12,439,896 12,362,457 Long-Term Liabilities Notes payable 83,800 - 86,800 Accrued compensation 321,678 257,371 Loan payable to stockholder 251,959 235,004 13,097,333 12,941,632 Commitments and Contingencies Stockholder's Equity Common stock, no par value, 200 shares authorized, 120 shares issued and outstanding 50,000 50,000 Additional paid-in capital 471,171 471,171 Retained earnings 3,856,074 ' 3,503,799 Accumulated other comprehensive income 384,245 232,460 4,761,490 4,257,430 $ 17,858;823 $ 17,199,062 See notes to consolidated financial statements. -4- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY CONSOLIDATED STATEMENTS OF OPERATIONS AND COMPREHENSIVE INCOME(LOSS) Years Ended December 31, 2017 and 2016 2017 2016 Revenues Product revenues $ 26,059,065 $ 31,886,810 Service revenues 23,554,664 24,465,585 Total Revenues 49,613,729 56,352,395 Cost of Revenues 37,619,287 42,661,253 Gross Profit 11,994,442 13,691,142 Selling, General and Administrative Expenses 11,765,121 14,822,234 Income(Loss)from Operations 229,321 (1,131,092) Other Income and (Expense) Interest and dividend income 62,261 52,139 Interest expense (19,058) (70,622) Realized gain (loss)on sale of marketable securities (4,044) 19,903 Phantom stock compensation (64,306) (257,371) Miscellaneous 157,901 (50,702) Total Other Income (Expense) 132,754 (306,653) i Income (Loss)Before Provision for Taxes 362,075 (1,437,745) Provision for Taxes 9,800 6,871 Net Income (Loss) 352,275 (1,444,616) Other Comprehensive Income Unrealized gains on securities: Unrealized gains arising during the period: 178,027 67,435 Reclassification adjustment for gains included in net income (loss) (26,242) (13,899) Other Comprehensive Income 151,785 53,536 Total Comprehensive Income (Loss) $ 504,060 $ (1,391,080) See notes to consolidated financial statements. -5- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY CONSOLIDATED STATEMENTS OF CHANGES IN STOCKHOLDER'S EQUITY - Years Ended December 31, 2017 and 2016 Accumulated Other Additional Paid-in Comprehensive Total Stockholder's Common Stock Capital Retained Earnings Income Equity BALANCE,January 1, 2016 $ 50,000 $ 471,171 $ 4,948,415 $ , 175,924 $ 5,648,510 Net loss (1,444,616) (1,444,616) Other comprehensive income 53,536 53,536 BALANCE, December 31,2016 50,000 471,171 3,503,799 232,460 4,257,430 Net income 352,275 352,275 Other comprehensive income 151,785 151,785 BALANCE, December 31,2017 $ 50,000 $ 471,171 $ 3,856,074 $ 384,245 $ 4,761,490 See notes to consolidated financial statements. CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY CONSOLIDATED STATEMENTS OF CASH FLOWS Years Ended December 31, 2017 and 2016 2017 2016 Cash Flows from Operating Activities Net income (loss) $ 352,275 $ (1,444,616) Adjustments to reconcile net income (loss)to net cash provided (used) by operating activities: Depreciation and amortization / 862,163 924,532 Bad debts 446,399 2,222 Realized gain (loss)on sale of marketable securities 4,044 (19;903) (Increase)decrease in: Accounts receivable 397,819 (704,907) Other receivables 126,782 (36,279) Inventories 90,656 750,597 Prepaid expenses and taxes (46,276) (104,870) Deferred service contract costs (597,348) 522,125 Security deposits 1 -0- 49,238 Increase (decrease) in: Accounts payable 897,744 (790,270) Accrued expenses (973,612) (270,866) Deferred service contract and project revenue 157,614 222,926 Accrued compensation 64,307 209,371 Net Cash Provided (Used) by Operating Activities 9,782,567 (690,700) Cash Flows from Investing Activities Purchase of marketable securities (409,606) (476,580) Proceeds from sale of marketable securities 155,597 917,211 Purchases of certificates of deposit (1,399,707) .0- Purchases of fixed assets (82,525) (613,34 Net Cash Used by Investing Activities (1,736,241) (172,718) Cash Flows from Financing Activities Proceeds of loan payable to stockholder 1,500,000 -0- Repayments of loan payable to stockholder (1,483,045) -0- Proceeds of notes payable-related party -0- 2,000,000 Principal reduction of notes payable - related party -0- (2,000,000) Principal reduction of notes payable (7,307) (7,970) Net Cash Provided(Used) by Financing Activities 9,648 (7,970), Net Increase (Decrease)in Cash and Cash Equivalents 55,974 (871,388) Cash and Cash Equivalents at Beginning of Year 1,756,896 2,628,284 Cash and Cash Equivalents at End of Year $ 1,812,870 $ 1,756,896 See notes to consolidated financial statements. -7- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY CONSOLIDATED STATEMENTS OF CASH FLOWS Years Ended December 31, 2017 and 2016 2017 2016 Supplemental Disclosure of Cash Flow Information Cash paid during the year for: Interest $ 2,103 $ 63,573 Taxes $ 15,750 $ 5,241 1 See notes to consolidated financial statements. -8- CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTESTO CONSOLIDATED FINANCIAL STATEMENTS Note 1 —Nature of Business Custom Computer Specialists, Inc., and Subsidiary (the "Company") is one of the Northeast's largest, privately owned technology solutions providers. For over 35 years, they have been offering an extensive range of IT services including consulting, onsite support, network monitoring, project management, professional development, deployment and implementation and hardware and software product sales and procurement. Note 2—Summary of Significant Accounting Policies Principles of Consolidation The consolidated financial statements include the accounts of Custom Computer Specialists, Inc. and its wholly-owned subsidiary ConexSys, Inc. All significant intercompany accounts and transactions have been eliminated. Revenue Recognition Revenue is recognized when persuasive evidence of an arrangement exists, the fee is fixed or determinable, and collectability is probable. The Company enters into certain arrangements where it is obligated to deliver multiple products and/or services (multiple elements). The Company allocates revenue to each element based on a selling price hierarchy based on its vendor specific objective evidence ("VSOE"), if available, third party evidence ("TPE"), if VSOE is not available, or estimated selling price ("ESP") if neither VSOE nor TPE is available. The Company recognizes revenue on project,services upon completion of specific milestones and contracted services over the life of the contract period. Product sales are recognized when merchandise is shipped. The Company evaluates each deliverable in an arrangement to determine whether they represent separate units of accounting. A deliverable constitutes a separate unit of accounting when it has standalone value and there is no customer-negotiated refund or return rights for the delivered elements. If the arrangement includes a customer-negotiated refund or return right relative to the delivered item, a separate unit of accounting is established if the delivery and performance of the undelivered item is considered probable and substantially in the Company's control. In instances when the aforementioned criteria are not met, the deliverable is combined with the undelivered elements and the allocation of the arrangement consideration and revenue recognition is determined for the combined unit as a single unit. Allocation of the consideration is determined at arrangement inception on the basis of each unit's relative selling price. j The Company establishes VSOE of selling price using the price charged for a deliverable when sold separately or a price established by management. TPE of selling price is established by evaluating similar competitor products or services in standalone sales to similar customers. The best estimate of selling price is established considering internal factors such as margin objectives, pricing practices and controls; and product life cycle. Consideration is also given to market conditions such as competitor pricing strategies and industry technology life cycles. Cash and Cash Equivalents The Company considers all .cash investments with an original maturity of three months or less to be cash equivalents. Cash equivalents consists of money market funds and certificates of deposits. -9- CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 2—Summary of Significant Accounting Policies(continued) Certificates of Deposit Certificates of deposit totaling approximately $1,400,000 were held by the Company at December 31, 2017. The certificates of deposit are recorded at fair value and have various maturities ranging from January 2018 through April 2018, with interest rates ranging from 1.10% to 1.20%. Certificates of deposit are classified as current assets based on their liquidity. There were no certificates of deposit as of December-31, 2016. Marketable Securities Marketable securities, which consist of equities and mutual funds, have been classified by management as available for sale securities. Securities classified as available for sale are carried in the consolidated financial statements at fair value. Realized gains and losses, determined using the first-in, first-out FIFO method, are included in earnings, with the-unrealized holding(FIFO) g g gains and losses reported in other comprehensive income (loss). - i The Company has no investments classified as other than available for sale. Securities, in general;are exposed to various risks such as interest rate, credit and overall market volatility. Due to the level of risk associated with certain investment securities, it is at least reasonably possible that changes in the values of investment securities will occur in the near term, based upon the market declines, and that such changes could materially affect the amounts reported in the consolidated financial statements. Accounts Receivable The Company routinely addresses the financial strength of its customers, and, as a consequence, believes that its receivable credit risk is limited. Accounts receivable, principally trade, are generally due between thirty days and ninety days and are stated at amounts due from customers net of allowances for doubtful accounts. The Company performs ongoing credit evaluations of its customers and adjusts credit limits based upon payment history and the customer's current creditworthiness, as determined by a review of their current credit information. The Company continuously monitors agings, collections and payments from customers and a provision for estimated credit losses is maintained based on its historical experience and any specific customer collection issues that have been identified. While such credit losses have historically been within the Company's expectations and the provisions established, the Company cannot guarantee that the same credit loss rates will be experienced in the future. r The Company writes off accounts receivable when they become uncollectible. The allowance for doubtful accounts at December 31, 2017 and 2016 was approximately $515,000 and $76,000, respectively. Inventories Inventories are stated at the lower of cost or market, on a first-in, first-out basis. The entire inventory consists of finished goods and service parts. - 10 - CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 2—Summary of Significant Accounting Policies(continued) Deferred Service Contract Costs Deferred service contract costs consist of payments made in advance relating to various licenses that extend past the year end. Amounts paid on these licenses are recorded as deferred costs and are recognized as expenses on a pro rata basis over the license period. Deferred service contract costs at December 31, 2017 and 2016 was approximately$2,839,000 and $2,241,000 respectively. Fixed Assets Furniture and fixtures and equipment are recorded at cost net of accumulated depreciation. Depreciation is computed using the straight-line and the declining balance methods over the estimated useful lives which range from three to seven years. Leasehold improvements are recorded at cost net of accumulated amortization and are amortized over the term of the tease or estimated life whichever is shorter, on a straight-line basis. Expenditures for maintenance and repairs which do not add to the economic life of the assets are expensed as incurred. Capitalized Software Certain software development costs incurred subsequent to the establishment of technological feasibility may be capitalized and amortized over the estimated lives of the related products. The Company determines technological feasibility to be established upon the internal release of the working model. Upon the general release of the products to customers, development costs,for that product are amortized over periods not exceeding three years, based on the estimated economic life of the product. Capitalized software costs amounted to approximately $2,352,000 as of December 31, 2017 and 2016, respectively, and costs, net of accumulated amortization, amounted to approximately $411,000 and$1,050,000 as of December 31, 2017 and 2016, respectively, and are included within fixed assets. Impairment of Long-Lived Assets The Company reviews the carrying values of long-lived assets for possible impairment whenever events or changes in circumstances indicate that the carrying amount of the assets may not be recoverable. Any long-lived assets held for disposal are reported at the lower of their carrying amounts or fair value less cost to sell. Management has determined that there have been no impairments of long-lived assets through December 31, 2017. Deferred Service Contract and Proiect Revenue Deferred service contract and project revenue consist of billings in advance of being earned relating to various customer contracts that extend past the year end. Billings on these contracts are recorded as deferred revenues and are recognized as revenue on a pro rata basis over the contract period or as earned. Deferred service contract and project revenue at December 31, 2017 and 2016 was approximately$7,675,000 and $7,517,000 respectively. t - 11 - CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS l Note 2—Summary of Significant Accounting Policies(continued) Comprehensive Income(Loss) The Company accounts for comprehensive income (loss) in accordance with FASB ASC 220, which establishes standards for reporting and display of comprehensive income(loss)and its components in a full set of financial statements. All items recognized under this statement of accounting standards as components of comprehensive income (loss) are-required to be disclosed in the financial statements. Comprehensive income (loss) is defined as the change in equity during a period from transactions and other events from, non-owner sources. Comprehensive income (loss) is the total of net income (loss)' and other comprehensive income (loss) which, for the Company, is comprised entirely of the unrealized gains and losses on securities. Income Taxes 1 The Company has elected, with consent of its stockholder, to be taxed as an S Corporation for Federal and State tax purposes. Under those provisions, the Company does not pay Federal or New York State corporate income taxes on its taxable income. Instead, the stockholder is liable for individual Federal and New York State income taxes on the Company's taxable income. The City of New York does not recognize S Corporation status and therefore the Company is subject to regular corporation tax rates. The Company is subject to a state franchise tax in states in which the Company does business. Accordingly, these New York City and other state taxes are reflected in the consolidated financial statements. The Company accounts for the effect of any uncertain tax positions based on a "more likely than not' threshold to the recognition of the tax positions being sustained based on the technical merits of the position under scrutiny by the applicable taxing authority. If a tax,position or positions are deemed to result in uncertainties of those positions, the unrecognized tax benefit is estimated based on a "cumulative probability assessment' that aggregates the estimated tax liability for all uncertain tax positions. Interest and penalties assessed, if any, are accrued as income tax expense. The Company has identified its tax status as a corporation electing to be taxed as a pass through entity as a tax position; however, the Company has determined that such tax position does not result in an uncertainty requiring recognition. In addition to its tax status, the Company has other tax positions that have been determined to be highly certain and therefore no reserve for unrecognized tax liability is deemed necessary. The Company is not currently under examination by any tax jurisdiction. Federal, state and local Income tax returns are generally open for examination for three years. Advertising Costs The Company follows the policy of charging the costs of advertising to expense as incurred. Advertising expense was approximately$74,000 and $70,000 for the years ended December 31, 2017 and 2016, respectively. Shipping and Handling Costs The Company records shipping and handling costs in selling, general and administrative expenses. These expenses were approximately $13,000 and $19,000 for the years ended December 31, 2017 and,2016, respectively. - 12 - CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 2—Summary of Significant Accounting Policies(continued) Certain Leasing Arrangements with Entities under Common Control The Company has adopted the accounting alternative offered to private companies in FASB ASC 810-10 for certain leasing arrangements with entities under common control. In accordance with this alternative, the Company does not evaluate entities that meet the requirements in the variable interest entities subsections of FASB ASC 810-10. Instead, the Company discloses the leasing arrangements as required by the accounting alternative. See Note 8. Presentation of Certain Taxes The Company collects various taxes'from customers and remits these amounts to the applicable-taxing authorities. The Company's accounting policy is to exclude these taxes from revenues and cost of revenues. Use of Estimates The preparation of,consolidated financial statements inconformity with accounting,principles generally accepted in .the United States of America requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities,and disclosures of contingent assets and liabilities at the date of the consolidated financial statements, and reported amounts of revenues and expenses during the reporting period. Actual results could differ from those estimates. Recent Accounting Pronouncements In May 2014, the FASB issued Update 2014-09, Revenue from Contracts with Customers, which replaced the existing' accounting standards for revenue recognition. This guidance requires a Company to recognize revenue to depict the transfer of goods or services to customers in an amount that reflects the consideration it expects to be entitled to receive in exchange for those goods or services. Subsequent to the release of this update, the FASB has issued additional Updates relating to revenue recognition to further clarify and define specific elements of this accounting standard and to defer the effective date by one year. These Updates are effective for all nonpublic entities for annual reporting periods beginning after December 15; 2018 and interim period's within annual periods beginning after December 15, 2019 (early adoption is permitted with certain restrictions) and may be adopted by restating all years presented in the Company's consolidated financial statements or by recording the impact of the adoption as an adjustment to retained earnings at the beginning of the year the Update is adopted. Management is currently assessing the potential impact on the Company's consolidated financial statements. In January 2016, the FASB issued Update 2016-01, Financial Instruments—Overall. Recognition and Measurement of Financial Assets and Financial Liabilities, which is intended to make improvements to accounting standards related to the recognition, measurement, presentation and disclosure of financial instruments. This Update amends several aspects of the accounting for financial instruments, and includes the following requirements: (i),present in other comprehensive income(OCI)the changes'in instrument-specific credit risk for financial liabilities measured using the fair value option; (ii) present financial assets and financial liabilities by measurement category and form of financial asset; (iii) calculate the fair value of financial instruments for disclosure purposes based on an exit price, and; (iv) assess a valuation allowance on deferred tax assets related to unrealized losses on debt securities in combination with other deferred tax assets. - 13 - CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 2—Summary of Significant Accounting Policies(continued) Recent Accounting Pronouncements(continued) The Update also requires that entities measure equity investments with readily determinable values at fair value and recognize the changes in fair value in net income, as opposed to the current practice of recognizing such fair value changes in OCI. The Update further provides an election to subsequently measure certain nonmarketable,equity investments at cost less any impairment and adjusted for certain observable price changes, and requires a qualitative impairment assessment of such equity investments, and amends certain fair value disclosure requirements. The new standard is effective for all nonpublic entities for annual reporting periods beginning after December 15, 2018 and interim periods within annual periods beginning after December 15, 2019. Early application is only permitted for the provision related to instrument-specific credit risk and the fair-value disclosure exemption provided to nonpublic entities. Management is currently assessing the potential impact on the Company's consolidated financial statements. In February 2016, the FASB issued Update 2016-02, Leases, which replaced the existing accounting standards for accounting for operating leases. This guidance requires a Company to recognize lease assets and lease liabilities on the balance sheet and disclose key information about leasing arrangements. The Update is effective for all nonpublic entities for annual reporting periods beginning after December 15, 2019 and interim-periods within annual periods beginning after December 15, 2020 (early adoption is permitted). Management is currently assessing, the potential impact on the Company's consolidated financial statements. Reclassifications Reclassifications are made to the pridr year's consolidated financial statements whenever necessary to conform to current year's presentation. Such reclassifications have ,had no effect on net income as previously reported. r Subsequent Events Management has evaluated subsequent events through the date of the report, which is the date the consolidated financial statements were available to be issued. Note 3—Marketable Securitie's At December 31, 2017 and 2016, the Company's investment securities were comprised of securities classified as available for sale,which are required to be carried at market value. The amortized cost and fair values of marketable securities at December 31, 2017 were: Gross Gross Amortized Unrealized Unrealized, Fair Cost Gains Losses Value Equities $ 1,013,421 $ 386,313 $ 1,270 $ 1,398,464 Mutual funds-Closed end 530,366 2,740 3,538 529,568 $ 1,543,787 $ 389,053 $ 4,808 $ 1,928,032 - 14- CUSTOM COMPUTER,SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 3—Marketable Securities(continued) The amortized cost and fair values,of marketable securities at December 31, 2016 were: ' Gross Gross Amortized Unrealized Unrealized Fair Cost Gains Losses Value Equities $ 772,653 $ 236,969 $ -0- $ 1,009,622 Mutual funds-Closed end 521,169 -0- 4,509 516,660 $ 1,293,822 $ 236,969 $ 4,509 $ 1,526,282 The Company uses the specific identification method to determine the cost of securities sold. Net realized losses on sales of investment securities available for sale during 2017 were approximately, $4,000. Net realized gains on sales of investment securities available for sale during 2016 were approximately$20,000. ; Note 4—Fair Value Measurements The Company records certain assets and liabilities at fair value using framework provided by accounting principles generally accepted in the United States of America. Fair value is defined as the price'that would be received to sell an asset or paid to,transfer a liability in an orderly transaction between market participants at the measurement date. Various inputs are used in determining fair value. These inputs are summarized in the three broad levels listed below: M Level 1: Quoted prices (unadjusted) of identical assets or liabilities in active markets that the entity has the ability to access as of the measurement date. Level 2: Significant other observable inputs other than Level 1 prices such as quoted prices for similar assets or liabilities; quoted prices in markets that are not active; or other inputs that are observable or can be corroborated by observable market data. Level 3: Significant unobservable inputs that reflect a reporting entity's own assumptions about the assumptions that market participants would use in'pricing an asset or liability. The Company records all of its investments in marketable securities at fair value. The fair values of marketable securities owned by the Company are determined by obtaining quoted prices on nationally recognized securities exchanges (Level 1 inputs). There were no Level 2 or Level 3 type inputs as of December 31, 2017 and 2016, respectively. Fair Value Measurements Using: Quoted Prices in Active Markets for Identical Assets (Level 1) 2017 2016 Equities $ 1,398,464 $ 1,009,622 Mutual Funds-Closed end 529:568 516.660 $_ 1.928..03 1,526.282 _ 15- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 5—Fixed Assets Fixed assets at December 31,consist of the following: 2017 2016 Furniture and fixtures $ 1,350,083 $ 1,350,083 Computer equipment 2,676,887 2,635,948 'Transportation equipment 122,278 122,278 Leasehold improvements ' 2,065,104 2,065,104 Capitalized software, 2,352,265 2,352,265 8,566,617 8,525,678 Less: Accumufated depreciation and amortization 7,753,032 6,932,465- $ ,932,455$ 813,585 $ 1,593,223 Note 6—Indebtedness'to Finance Corporation The Company has two agreements with Wells Fargo Commercial Distribution Finance, LLC('WFCDF') which provides for borrowings of up to $5,000,000 and $12,000,000 at December 31, 2017 and 2016, respectively. The agreement with WFCDF dated November 9,2004 was amended in April 2017. The first agreement is an accounts receivable credit facility (line-of-credit) of up to $3,000,000 in 2017 which was decreased from the 2016 amount,of$5,500,000. This agreement dated November 9, 2004 as amended-April 2017,will continue in effect for a one year period and for successive one year periods upon renewal. The Company may cancel the agreement upon 90 days' notice prior to the end of each one year period upon payment of all obligations on or before the termination date; WFCDF may terminate upon 30 days' notice., The accounts receivable facility provides for the payment of interest on the average daily outstanding balance at the LIBOR rate, as defined, plus 2.25% at both December 31, 2017 and 2016. Under the facility, the borrowing base is 85%of eligible accounts receivable, as'defined. As part of the agreement, the Company has a lock box account with a WFCDF designated bank. Under this agreement, available cash balances are applied against the Company's line-of-credit. The Company had no outstanding balance an -this line-of-credit at December 31, 2017 and 2016, respectively. In addition, the Company has a wholesale financing agreement, also dated November 9, 2004 as amended in April 2017,,whereby the Company may purchase'inventory from approved vendors and for other purposes. Under this facility, amounts of up to $5,000,000 may be advanced provided the aggregate borrowings under this and the accounts receivable facility do not exceed $5,000,000 at December 31, 2017 and, $12,000,000 at December 31, 2016, At December 31, 2017 and 201,6, indebtedness to WFCDF under the wholesale financing agreement for inventory totaled$1,290,000 and $769,000, respectively, which is included in accounts payable. The interest on the wholesale financing agreement varies depending on the terms that WFCDF has with the specific vendor. Obligations of the Company under both agreements are secured,by accounts receivable, inventory, property and equipment. In addition, the stockholder of the Company has guaranteed payment of all such indebtedness to WFCDF. - 16- CUSTOM COMPUTER SPECIALISTS, INC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 7—Notes Payable Notes payable as of December 31, consist of the following: 2017 - 2016 SOCIETY OF INTERVENTION RADIOLOGY(SIR) Note dated March 31, 2010 in the amount of $108,000, payments commencing June 30, 2010 in quarterly installments in the amount of $1,250 through March 31, 2040; interest rate is imputed at 2.31% per annum, this note has been guaranteed by the Company and SIR has reserved software rights under this agreement. $ 86,821 $ 89,753 CHASE CREDIT Note dated October 19, 2012 in the amount of $34,801, payments of $8,221 down and $443 monthly, commencing November 28, 2012 through October 2017; interest rate of 3.25% per annum,_ collateralized by transportation equipment. -0- 4,375 86,821 94,128 Less: Current portion 3.021 7.328 Long Term portion $ Aggregate maturities of notes payable are as follows: Years ending December 31,2018 $ 3,021 2019 3,092 2020 3,164 2021 3,237 2022 3,313 Thereafter 70.994 $ -65M Note 8 Commitments and Contingencies Operating Leases The Company leases its facility from Triple G, LLC('Triple G"), a limited liability company owned by the Company's only stockholder. Triple G purchased a building on December,22, 2000 and entered into an operating lease with the Company for its facility for a period of ten years commencing on that date. The Company has been entering year to year leases through 2015. In December 2014, the Company entered into a lease agreement which extended' the lease through 2017 and was subsequently' i amended in January 2016 and again in May 2017, which extended the lease through 2021. Under this new lease, rent for 2016 and 2017 shall be approximately $766,000 and rent for 2018 shall be approximately $838,000 with'annual increases through 2021 of the greater of 3% or the percentage increase in the average consumer price index. The Company is also responsible for real estate taxes and maintenance. - 17- CUSTOM COMPUTER SPECIALISTS, I,NC. AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 8—Commitments and Contingencies(continued) Or)eratin4 Leases(continued) In March 2013, the Company leased office space in Rhode Island for a 5 year period which commenced on August 1, 2013 at an annual rental of approximately$144,000. Subsequent to year end, in February 2018, the Company extended the lease for an additional 5 years expiring in July 2023 at an annual rental of approximately $144,000 for the'first year and increasing 1% each year thereafter. Rent expense, including real estate taxes, for the years ended December 31, 2017 and 2016 was approximately$1,078,000 and$1,083,000, respectively,for both of these facility leases. The Company also entered into various lease agreements for office equipment and transportation equipment. Future minimum commitments required under the operating leases are approximately as follows: Years ending December 31, 2018 $_ 1,038,000 2019 1,014,000 2020 1,035,000 2021 , 1,063,000 2022 149,000 Thereafter 87.000 $ 4,3 ,Q00 Minimum lease payments in this schedule exclude contingent rentals and rentals under renewal options, which, as of December 31, 2017, are not reasonably assured of being exercised. Cash Concentration\ The Company maintains cash in certain financial institutions that may exceed the Federal Deposit Insurance Corporation (FDIC)insurance limit. The Company has not experienced any loss to date as a result of this policy. Note 9—Retirement Plan The Company sponsors a 401(k) deferred compensation plan that covers all employees who are eligible for entry into the plan on quarterly entry dates after hire. The Company has the option to match a percentage of employee's contributions at a discretionary rate. For the years ended December 31, 2017 and 2016, retirement plan expense was approximately$100 ,000 and $27,000, respectively. - Note 10—Related Party Transactions Loan Payable to Stockholder The loan payable to the Company's stockholder amounted to approximately$252,000 and $235,000 at December 31, 2017 and 2016, respectively. Interest of approximately$7,000 was incurred for each of the years ended December 31, 2017 and 2016, at a rate equivalent to the Company's borrowing rate of prime. - 18 - CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY NOTES TO CONSOLIDATED FINANCIAL STATEMENTS Note 10—Related Party Transactions(continued) Loan Pavable to Stockholder(continued) The loans are due on demand, however,the Company has subordinated $200,000 of this indebtedness to WFCDF, and therefore no portion of these loans is expected to be repaid within the next twelve months. In May 2017, the Company's stockholder loaned $1,000,000 to the Company at an annual interest rate of 3%. In June 2017, the Company's stockholder loaned an additional $500,000 at an annual interest rate of 3%. Both of these loans were paid back in full during the year. Interest of approximately $10,000 was incurred for the year ended December 31, 2017 related to these notes and was added to the principal balance of the loan payable to stockholder. Other At December 31, 2017 and 2016, the Company has net advances receivable from related parties of approximately $1,000 and $6,000, respectively, which are included in other receivables on the consolidated balance sheets. These amounts are non-interest bearing and due on demand. In February 2016, the Company received $1,000,000 from a related party in the form of a note payable, at an annual interest rate of 5%. This note payable was paid back in full in 2016. In March 2016, the Company received an additional$1,000,000 from the same related party in the form of a note payable, at an annual interest rate of 5%. Interest of approximately $61,000 was incurred for the,year ended December 31, 2016. This note payable including the accrued interest was paid back in full in 2016 Note 11 —Phantom Stock Plan In January 2012, the Company adopted a Phantom Stock Plan. The purpose of this Plan is to benefit the Company through increased incentives to key employees of the Company and to enable the Company to retain and attract into its employ persons of outstanding competence. Awards under this plan shall be granted to a participant in the form of units. The award of units does not entitle the recipient to any dividend or voting rights or any other rights of a shareholder with respect to such units. The units awarded under this Plan shall entitle the participant to the right to receive certain cash payments upon a change in control, upon separation from service or upon death. The Company shall pay to the participant an amount equal to the book value of the equivalent number of shares of common stock represented by the vested units held by the participant. Such amount shall be payable in cash in five equal annual installments without interest. In February 2012, there were four key employees granted 1.26 units each and on January 1, 2013, one additional employee was also granted 1.26 units which became 100% vested on January 1, 2015. In May 2013, four key employees were granted an additional .68 units each which became 100% vested on January 1, 2016. As of December 31, 2017 and 2016, a liability was recorded for approximately $322,000 and $257,000, respectively, related to this Plan and is included within long-term liabilities under accrued compensation on the consolidated balance sheets. Such long-term liability will be re-measured based on the book value of the Company at each reporting date until settlement. i SUPPLEMENTARY INFORMATION r 1 -19- CUSTOM COMPUTER SPECIALISTS, INC.AND SUBSIDIARY CONSOLIDATED SCHEDULES OF SELLING,GENERAL AND ADMINISTRATIVE EXPENSES Years Ended December 31, 2017 and 2016 2017 2016 Salaries $ 5,625,580 $ 7,506,456 Payroll taxes and fringe benefits 557,910 1,169,548 Advertising and promotion 73,840 69,920 Travel and entertainment 226,909 424,067 Shows and conventions 115,502 132,612 Sales and service training 116,756 43,435 Shipping 12,510 18,698 Business relations 164,236 149,559 Rent and real estate taxes 1,077,611 1,083,301 Office supplies and postage 116,574 173,067 Utilities, 224,308 230,142 Telephone 115,334 109,890 Communications 137,738 173,467 Repairs and maintenance 261,266 348,315 Dues and subscriptions 111,245 106,287 Insurance 235,744 223,898 Professional fees 450,446 929,219 Recruitment 119,318 125,050 Employee relations 96,465 147,541 Vehicle 183,918 178,667 Outside services 26,526 29,387 Bad debts 446,399 2,222 Retirement plan 99,551 27,129 Sales and other tax 41,599 37,098 Contributions 19,785 85,998 Licensing fees 232,872 308,814 Depreciation and amortization 862,163 924,532 Other 13,016 63,915 Total Selling, General and Administrative Expenses $ 11,765,121 $ 14,822,234 See independent auditors' report. J Cisco _„ Town of Southold Server and ASA Update Appendix B: Estimated Project Schedule KI,; =" 4} e Proprietary and-Confidential P a g e 10 � n t � � 5 a t' v 'so ra •� �to a+� L.� .' _ ,, � ,x` .: -• � i: JS ;[ }9 Ld ?." �,t3 ,.vl 23 ;o fa 2i �I] :fi Si, F3:: 7' 2 � d s, # 3 f� �Y¢ .� ;k' n - inu( am me 29 '209 2.. 2?` P C 2fl9 3d ,6' r R esson a.e. 39 6<A 9 „9` 3 Abut r nt'tippprt4219 � 20d '12.: it bot 1{j r 3 0• 4 13;, II w[pv i t npNon .0 203 d.4 E .. Appendix C:Standard Terms and Conditions Pricing,Payment and Credit Terms:Client agrees to pay Custom the purchase price as specified in this Agreement and if applicable, agrees to pay all applicable taxes that may be levied on such purchase price whenever billed. Unless specified otherwise, Custom has calculated pricing based upon a standard eight(8)hour work day with the hours between 9am and 6pm.Credit terms are subject to the approval by Custom,and Custom reserves the right, at its sole discretion, to require cash in advance payment for any purchase.However,it is the intent of Custom to provide credit terms to Client at the outset of this'Agreement,subject to satisfactory credit underwriting. Unless specified otherwise in this proposal,a deposit equal to 50%of the fees for services is due upon acceptance of this Agreement, and the remaining 50% of the fees for services will be invoiced upon completion of the Project. Product and equipment will be invoiced upon delivery. Invoices are due within 30 days of date of invoice. Payment for monthly services is due quarterly in advance. If applicable,all other payments are due within 30 days(upon approval) from date of invoice. If Client is provided with credit terms,any payment not received within thirty days of the date of invoice shall accrue interest at the rate of one and one-half percent per month or the maximum rate allowed by law, if less,and any associated collection or attorney's fees.In the event of Client's non-payment of an invoice when due,Custom reserves the right to immediately suspend service and shipment of any outstanding Client orders until such invoices are paid in full. Confidentiality: This proposal is the confidential property of Custom. The Client agrees that no part of this proposal shall be disclosed to any third party without the prior written consent of Custom. The Client and Custom each agree to keep confidential and not to disclose to any third party any trade secrets,business secrets,marketing data,or technical information of the other. Warranties: The manufacturer's warranty on all computer hardware, software and related products is.given to Client, to the maximum extent allowed by the manufacturer, upon delivery. Custom further warrants that all services will be performed in a professional manner by personnel with the degree of training required to provide such services. No other warranties express or implied,shall be deemed to have been made by Custom. Any other warranties,including any implied warranties of merchantability and fitness for a particular purpose,are hereby disclaimed by Custom. Limitation of Liability: Custom shall not be liable to Client or any third party for any special,incidental or consequential damages or - commercial loss,whether or not foreseeable,arising out of,or in conjunction with this Project. The aggregate liability of Custom to Client for any cause of action or claim(whether contract or tort)shall be limited to the amounts paid to Custom by Client hereunder with respect to the service or products that are the subject of such action or claim. Recruitment of Personnel: For the longer of three years from the date of this Agreement or two years following Client's last use of Custom's services,Client and Custom shall not directly or indirectly solicit for employment the other party's employees or agents,or hire or engage such employee or agent without the prior written consent of the other party. Notwithstanding this prohibition,should one party hire the employee or agent of the other within this timeframe without the prior written consent of the other party,the hiring party shall pay the other party as liquidated damages for the loss of such employee or agent an amount equal to twice the hired employee's annual compensation previously paid by the non-hiring party. Timing: Unless specified otherwise,this proposal will be valid for 30 days. Custom has a cost of preparedness and must schedule the appropriate technical resources to complete a project. Custom plans to begin no earlier than 20 and no later than 30 business days from the date of acceptance. Other:These terms and conditions may be amended,but only by a written amendment signed by both of the parties Custom Computer Specialists, Inc. Proprietary and Confidential #0002330610 STATE OF NEW YORK) )SS: COUNTY OF SUFFOLK) Karen Kine of Mattituck,in said county,being duly sworn,says that she is Principal Clerk of THE SUFFOLK_TIMES , a weekly newspaper, published at Mattituck, in the Town of Southold, County of Suffolk and State of New York, and that the Notice of which the annexed is a printed copy, has been regularly published in said Newspaper once each week for 1 weeks(s),successfully commencing on 04/04/2019 Principal Clerk Sworn to before me this day b CHRISTINA VOLINSKI NOTARY PUBLIC-STATE OF NEW YORK No.01V06105050 9ualifieci In SutI01k County MY Commission E%plfd§P013re0ty 28,2020 TYPESN Fri Mar 29 10 08 59 EDT 2019 LEGAL NOTICE REQUEST FOR PROPOSALS NOTICE IS HEREBY GIVEN THAT SEALED PROPOSALS ARE SOUGHT AND REQUESTED BY THE TOWN OF SOUTHOLD FOR THE FOLLOWING: Town of Southold("Southold")is solicit- ing competitive sealed bids from qualified professional firms to update its Cisco Fire- power Server and Cisco ASA Security Appli- ances. Vendor bids must comply with all Terms and Conditions described in this doc- ument. Specifications and ,lob descriptions are available at the Town Clerk's office,53095 Main Road,Southold,N Y between the hours of 8.00 A.M.and 4:00 P.M,Monday through Friday,excluding holidays,(631-765-1800). Written bids are due on April 18,2019 and must be delivered to the Southold Town Clerk's office,Southold Town Hall,PO Box 1179,53095 Main Road,Southold,New York 11971 by 2:00 PM on that date Bid proposals must be in sealed envelopes and clearly marked, "Cisco Firepower and ASA Up- date". CONTACT PERSON: Lloyd Reisenberg,Information Technology Town of Southold,631-765-1891 VENDORS MUST SUBMIT PROPOSALS IN SEALED ENVELOPES PLEASE PRINT THE FOLLOWING ON THE FACE OF ENVELOPE 1) NAME&ADDRESS OF VENDOR 2) PROPOSAL NAME It is the vendor's responsibility to read the detailed Request for Proposals and provide a proposal that completely and accurately ad- dresses each part of the document Upon sub- mission of the proposal,it is understood that the vendor has read, fully understands and will comply with all requirements. The Town of Southold welcomes and en- courages minority and women-owned busi- nesses to participate in the bidding process Dated:March 26,2019 ELIZABETH A.NEVILLE SOUTHOLD TOWN CLERK 2330610 STATE OF NEW YORK) SS: COUNTY OF SUFFOLK) LYNDA M RUDDER, Deputy Town Clerk of the Town of Southold,New York being duly sworn, says that on the 29th day of March , 2019, a notice of which the annexed printed notice is a true copy was affixed, in a proper and substantial manner, in a most public place in the Town of Southold, Suffolk County, New York, to wit: Town Clerk's Bulletin Board, 53095 Main Road, Southold,New York. Computer Firewall Upgrade bid ynda M Rudder Southold Deputy Town Clerk Sworn before me this 29th day of March , 2019. Notary Publ'c BONNIE J.DOROSKI Notary Public,State Of New York No. O1D06095328,Suffolk County Term Expires July 7,20 LEGAL NOTICE REQUEST FOR PROPOSALS - NOTICE IS HEREBY' GIVEN THAT SEALED PROPOSALS ARE SOUGHT AND REQUESTED BY THE TOWN OF SOUTHOLD FOR THE FOLLOWING: Town of Southold ("Southold") is soliciting competitive sealed bids from qualified professional firms to update its Cisco Firepower Server and Cisco ASA Security Appliances. Vendor bids must comply with all Terms and Conditions described in this document. Specifications and job descriptions are available at the Town Clerk's office, 53095 Main Road, Southold,N Y between the hours of 8:00 A.M. and 4:00 P.M., Monday through Friday, excluding holidays, (631-765-1800). Written bids are due on April 18,2019 and must be delivered to the Southold Town Clerk's office, Southold Town Hall, PO Box 1179, 53095 Main Road, Southold, New York 11971 by 2:00 PM on that date. Bid proposals must be in sealed envelopes and clearly marked, "Cisco Firepower and ASA Update". CONTACT PERSON: Lloyd Reisenberg, Information Technology Town of Southold, 631-765-1891 VENDORS MUST SUBMIT PROPOSALS IN SEALED ENVELOPES. PLEASE PRINT THE FOLLOWING ON THE FACE OF ENVELOPE: 1) NAME&ADDRESS OF VENDOR 2) PROPOSAL NAME It is the vendor's responsibility to read the detailed Request for Proposals and provide a proposal that completely and accurately addresses each part of the document. Upon submission of the proposal,it is understood that the vendor has read, fully understands and will comply-with all requirements. The Town of Southold welcomes and encourages minority and women-owned businesses to participate in the bidding process. Dated: March 26, 2019 ELIZABETH A.NEVILLE SOUTHOLD TOWN CLERK PLEASE PUBLISH ON APRIL 4,2019,AND FORWARD ONE (1 ) AFFIDAVIT OF PUBLICATION TO ELIZABETH NEVILLE,TOWN CLERK,PO BOX 11791 SOUTHOLD,NEW YORK 11971. Copies to the following: The Suffolk Times Town Board Members Town Attorney Town'Clerk's Bulletin Board Town of Southold: REQUEST FOR BIDS: Cisco Firepower Server and ASA Update Town of Southold ("Southold") is soliciting competitive sealed bids from qualified professional firms to update its Cisco Firepower Server and Cisco ASA Security Appliances. Vendor bids must comply with all Terms and Conditions described in this document. Written bids are due on April 18, 2019 and must be delivered to the Southold Town Clerk's office, Southold Town Hall, PO Box 1179, 53095 Main Road, Southold, New York 11971 by 2:00 PM on that date. Bid proposals must be in sealed envelopes and clearly marked, "Cisco Firepower and ASA Update". Please submit two sets of your proposal. Clearly mark the original copy as "ORIGINAL" on the cover. REQUEST FOR BID OVERVIEW Project Name: Cisco Firepower Server and ASA Update Bid Issue Date: April 04, 2019 Bid Due Date: April 18, 2019 @ 2:00 p.m. Vendor Requirements • The Vendor must be a certified Microsoft Gold Partner. • The Vendor must be a certified Cisco Gold Partner. • Local Cisco Certified Internet Expert (CCIE) Presence. • Cisco Advanced Security Architecture. • Certified Information Security Systems Professional (CISSP). • The Vendor must have performed similar Cisco ASA updates and have references. • The Vendor must provide at least 3 references of similar scope. Project Overview The Town of Southold is interested in updating its current Cisco Firepower Server, Firepower Management Center Suite of Applications, AMP for Network and Desktops and Cisco ASA Security Appliances. The project shall include updating the operating systems, software application updates and any release updates to these devices/applications to the latest updates/releases from Cisco. The project will also include the analysis of the configuration of the settings, rules and polices of these devices/application with the intent to make recommendations and implement changes to improve the current installation. All release and software updates should be covered by the Town of Southold's current Cisco Smartnet contracts. This project is for a fixed project engagement. Equipment locations are as follows: • Firepower Sever- Town Hall, 53095 Main Rd., Southold, NY • ASA 5525X with Firepower- Town Hall, 53095 Main Rd., Southold, NY • ASA 5525X with Firepower - Town Hall Annex, 54375 Main Rd., Southold, NY • ASA 5525X with Firepower- Police Department, 41405 Route 25, Peconic, NY • ASA 5508X with Firepower - Highway Department, 275 Peconic Lane, Peconic, NY • ASA 5508X with Firepower - Recreation Center, 970 Peconic Lane, Peconic NY • ASA 5508X with Firepower - Solid Waste Department, 6155 Cox Lane, Cutchogue, NY • ASA 5508X with Firepower - Human Resources Center, 750 Pacific St., Mattituck, NY Analyze, Configure and Update: • Review and evaluate the current configuration of the Firepower Server, Firepower Management Center, AMP for the Network and Desktops and all seven (7) existing ASAs. • Analyze and identify any potential performance issues relating to possible bandwidth limitations of the ASAs. • Make recommendations for improvements on system design and performance enhancements. • Implement recommendations, making approved changes to the configuration, rules and policies on the Firewalls, Firepower Server, Firepower Management Center and AMP. • Verify that the current site-to-site connectivity which provides automatic multi-level failure recovery within three main locations (Town Hall, Town Hall Annex and Police Department) is working as designed. Make recommendations and changes for improvements. • Verify that the RADIUS replication redundancy configuration from the Town Hall site to the Police Department is working as designed. Make recommendations and changes for improvements. • Incorporating all design changes required and any recommendations as per the design and configuration outlined in this document. • Update and configure Cisco ESX and associated software on the management server. • Update all seven (7) ASA operating systems and releases to the latest from Cisco. • Update the VMware operating system on the Firepower Sever. • Update the Cisco Fire Linux operating system on the Firepower Server to the latest from Cisco. • Update/Upgrade the Firepower Management Center software to the latest from Cisco. • Update the Microsoft Windows 10 Pro workstation partition on the VMWare operating system. Hand-off to Southold • Immediately after the updates, provide up to four hours of onsite support, analytical training and knowledge transfer to Southold's IT staff. • Provide second day support. • Create a Run Book documenting settings, configuration and overview of each of the firewalls and the entire project. • Provide the I.T. staff with a backup of the Firepower Management Center configuration and all seven (7) ASAs. Communication/Questions Vendors are expected to raise any questions or comments they have concerning the BID document as soon as they become aware of them. Any questions or requests for clarifications must be directed in writing to Lloyd Reisenberg at Iloyd.reisenberg(a�-town.southold.ny.us no later than April 11, 2019 @ 4:00 p.m. The subject line of the email must be labeled "Cisco Firepower and ASA Update - Question." The only contact allowed with the Town of Southold IT staff is through email, as stated above. Unauthorized contact of any Town of Southold employee is cause for rejection of the bid. Any additional information or clarifications that are provided to one bidder will be provided to all bidders in the form of an addendum. Calendar of Events The dates set forth below are for informational purposes only. All dates are tentative and subject to change. Milestone Date Issue BID: April 4, 2019 Deadline for Submission of Written Questions: April 11, 2019 @ 4:00 p.m. Proposal Due Date: April 18, 2019 @ 2:00 p.m. Submission of the Response Respondent must submit two sets. Please clearly mark the original copy as "ORIGINAL" on the cover: Southold Town Clerk PO Box 1179 53095 Route 25, Southold, New York 11971 All responses must be packaged, sealed, show the following information on the outside of the package and include a Non-Collusive Bid Certificate: Respondent's name, address, and the request for proposal number and title. The Town Board of the Town of Southold reserves the right to reject any and all bids and waive any and all informalities in any bid should it be deemed in the best interest of the Town of Southold to do so. Response Requirements: The Town of Southold will evaluate responses based upon the following criteria: Section 1: Proposer's Financial Stability (10%): Provide a description of the Proposer's firm, including history; number of years the Proposer has been in business; type of services provided; and legal status of Proposer's organization, i.e. corporation, partnership, etc. Provide documentation to verify the Proposer possesses adequate financial support, assets, and organization to provide the products and services required in this BID. This may take the form of financial statements, credit ratings, a line of credit, or other financial arrangements sufficient to enable the offer or to be capable of meeting the requirements of this BID. Section 2: Proposer's Qualifications/References (25%) Provide descriptions of like projects Proposer has done in environments comparable to Town of Southold. Provide at least five client references from the above listed project including the names of the individual(s) you would propose Town of Southold contact, together with phone numbers, company names, and addresses. Town of Southold reserves the right to contact or visit any party listed as a reference that has previously used, or is presently using your products or services in a manner similar to those proposed by the vendor. Southold also reserves the right to use other sources to obtain information about the proposed products and services. Section 3: Proposed Solution (40%) Proposed solution must also show the following: • Proof of extensive experience with designing and implementing Cisco Firepower Management Center and next generation ASAs. • Detailed project plan including estimated hours for each mandatory requirement with start and finish dates. Section 4: Cost Proposal (25%) Vendor's pricing must be all inclusive to provide the Town of Southold a turnkey solution. Current Operating Systems and Application Releases Cisco Firepower Management Center Model Cisco Firepmer Management Center for l,MWare I Serial Number None Software Version 6.2.2 (build 81) OS Cisco Fire Linux LS 6.2.2 (buildll) I Snort Version 2.9.11 GRE (Build 125) Rale Update Version 2015-03-20-041-vrt i I i Rufepack Versi or, 2221 t Module Pack Version 2513 Geolbcation`Update Version 2015-03-13-042 VDB Version build 271 (2016-07-13 19:21:54 a VMWare - Wware ESXITM " Ij GopyrightQ 1998-2016'U"wsre,Inc.ASI rights reserved This prcduot is protected by U S_and internatonal copyright and inteCacc usl property laws.VrOware products are case*ed by one or more patents listed at hftp:l)%%%wi.vnksare.mm�goe atents. Version: 1.3.4 ! Build number: 4514221 ESXI version: 6.S.4 ESM build number: 4387374 ASA 5525 Cisco Adaptive Security Appliance Software Version 9.8(2)20 Firepower Extensible Operating System Version 2.2(2.63) Device Manager Version 7.9(1) ASA 5508 Cisco Adaptive Security Appliance Software Version 9.6(4)12 Device Manager Version 7.5(1) Rudder, Lynda From: legals <legals@timesreview.com> Sent: Friday, March 29, 2019 10:10 AM To: Rudder, Lynda; Lisa Finn (lisaahfinn@gmail.com); Michaelis,Jessica; Reisenberg, Lloyd; Southold Local (denise@southoldlocal.com); Dinizio,James; Doherty,Jill; Doroski, Bonnie; Ghosio, Bob; Louisa Evans; Neville, Elizabeth; Noncarrow, Denis; Norklun, Stacey; Russell, Scott; Standish, Lauren;Tomaszewski, Michelle;William Ruland; Duffy, Bill; Hagan, Damon; Silleck, Mary Subject: Re: Firepower ad for publication Attachments: Ad_Order_Form[34].pdf;Ad_Image_Preview[13].pdf Hello, This notice has been scheduled,the attached documents serve as your confirmation, invoice and proof. Please review for accuracy. Payment is due upon receipt. Affidavits are processed and mailed out a week after the final publication date of the notice. Thank you. legals@timesreview.com FT11MES REV]Sw " 7r MEDIA GROUP Kimberly Gersic Sales Production Assistant 631.354.8013(direct) kgersic@timesreview.com www.timesreview.com PLEASE NOTE CANCELLATION POLICY:All ads are billed for entire run upon first publication date. Cancellations for publication dates can be made but there will be no adjustment to cost and refunds will not be given. There are no exceptions to this policy. rTlIMES Y°:' VIEW �;. �.....' Z MEDIA GROUP 1 Southold Town Board - Letter Board Meeting of March 26, 2019 RESOLUTION 2019-283 Item# 5.34 �J ADOPTED DOC ID: 15065 THIS IS TO CERTIFY THAT THE FOLLOWING RESOLUTION NO. 2019-283 WAS ADOPTED AT THE REGULAR MEETING OF THE SOUTHOLD TOWN BOARD ON MARCH 26,2019: RESOLVED that the Town Board of the Town of Southold hereby authorizes and directs the Town Clerk's office to advertise for the updating of its current Cisco Firepower Server, Firepower Management Center Suite of Applications, AMP for Network and Desktops and Cisco ASA Security Appliances. Elizabeth A. Neville Southold Town Clerk RESULT: ADOPTED [UNANIMOUS] MOVER: Jill Doherty, Councilwoman SECONDER:William P. Ruland, Councilman AYES: Dinizio Jr, Ruland, Doherty, Ghosio, Evans, Russell Generated March 27, 2019 Page 51