Laserfiche WebLink
Exibit A: City of San Leandro <br />Firewall and Internet Upgrade <br />DocID: 1001 <br />February 9, 2016 <br />Introduction <br />The City of San Leandro is currently operating separate Internet connections at various locations with <br />the main purpose of providing Internet access to those locations. The City would like to consolidate <br />these separate Internet connections into a single 10Gig connection located at City Hall. The new 10Gig <br />Internet connection will also operate with the BGP routing protocol for the sole purpose of failover to a <br />secondary service provider (also running BGP) on a 100Mb link also at City Hall. BGP will provide <br />active/standby failover as both service providers will share the same Internet IP addresses (BGP <br />announced prefix(es)) and the “secondary line” will not be usable when the primary is up. <br />The City will purchase new firewalls for this connectivity, a primary ASA5585-X-SSP20 for the 10G link <br />and an ASA5515-X for the 100Mb backup link. The configuration of these two firewalls will be manually <br />synchronized. The main “inside” connection will be to City Hall networks (via a full 1Gig connection); the <br />Police Department will receive its Internet via a new DMZ (also a full 1Gig connection); and 3 other <br />locations (2 wireless service locations and “library public”) will receive internet via new DMZs (full 1Gig); <br />and 3 existing DMZs will be trunked from a 1Gig DMZ. The 5585-X-SSP20 has a maximum total <br />throughput of 10G with “real-world throughput” at 5G. Failover between service providers and <br />5585/5515 will be automatic for City Hall and Police Department (as both are capable of a dynamic <br />routing protocol, expected EIGRP). Failover between service providers and 5585/5515 for all other <br />DMZs shall be done as a manual process. <br />This statement of work shall provide professional services to the City for the implementation of the new <br />firewalls, planning and executing of a migration to the new firewall/Internet design, and an onsite <br />production cut-over. <br />ExtraTeam is pleased to provide the following proposal for professional services. <br />Project Proposal <br />All tasks in the below sections (with except of cutover) shall be performed remotely using collaborative <br />technology (phone and web conferencing, etc) during standard business hours. There is a single cutover <br />event for the new firewalls and Internet. ExtraTeam will provide an onsite engineer for the cutover <br />event which is assumed during an afterhours time period. Day-1 post cutover support shall be <br />performed remotely. <br />ExtraTeam will be responsible for the following tasks and deliverables associated with this project. <br />