Laserfiche WebLink
File Number: 18-336 <br />estimate it may cost more than $9.5 million to fully recover from the attack. <br />While there is no way to 100% secure a network from being attacked, new technologies have <br />been developed to help address today’s cybersecurity threat landscape. These include <br />algorithm-based malware detection, content filtering, and automated intrusion detection and <br />prevention. Together these new technologies are commonly referred to as “Next Generation” <br />firewall technology and these new services run in addition to traditional, rules-based systems. <br />The City’s current network firewalls also suffer from a lack of redundancy and failover capability. <br />While the City has one primary Cisco 5500 ASA Firewall, the backup firewall is a Cisco 5120. <br />This was done for budgetary reasons because the Cisco 5120 is far less expensive than the <br />5500 series. However, because they are not identical models, the failover between firewalls is a <br />manual process and must involve human intervention. This makes the City’s network firewalls <br />vulnerable to service disruption in the event of a power outage or hardware failure. <br />For these reasons, staff recommends replacing these firewalls with redundant Cisco Firepower <br />2140 Next-Generation firewalls. The City negotiated an agreement, which includes the full suite of <br />“Next-Gen” security functionality and includes identical models, which can be configured for <br />automatic and instantaneous failover to avoid service disruption. The firewalls have a maximum <br />throughput of 8Gbps/second, providing significant bandwidth and scalability for years to come. <br />The City worked closely with ConvergeOne to develop a highly detailed network design, and <br />scope that meets the City’s exact requirements. In the past, the City has received highly qualified, <br />competitively proposals from ConvergeOne (formerly Strategic Products & Services) on similar <br />network projects. Staff is highly satisfied with the outcomes of these projects in terms of quality, <br />pricing, service, and support. Staff recommends awarding this project to ConvergeOne based on <br />ConvergeOne’s extensive and proven track record of success and knowledge of the City’s <br />existing infrastructure. Staff also recommends that the City Council make a finding for a sole <br />source procurement of the Cisco products recommended by ConvergeOne, pursuant to <br />California Public Contract Code section 3400. <br />Previous City Council Actions <br />·Reso 2016-043 - On April 18, 2016, the City Council approved a Consultant Services <br />Agreement with Strategic Products and Services, LLC. to install and configure upgraded <br />network infrastructure in the amount of $144,646.95. <br />·Reso 2017-102 - On July 17, 2017, the City Council approved a Consultant Services <br />Agreement with Strategic Products and Services, LLC. to Upgrade the Cisco Telephony <br />System for an Amount Not to Exceed of $295,835.61. <br />Legal Analysis <br />·The City Attorney’s office reviewed and approved the consultant services agreements. <br />Fiscal Impacts <br />Page 2 City of San Leandro Printed on 7/10/2018