15
OE400SPS QUOTE NO. ACCOUNT NO. DATE FFRF868 1997409 4/11/2014 BILL TO: PERRIS UNION HIGH SCHOOL DISTRICT 155 E 4TH ST ****MUST SHIP COMPLETE ****** Accounts Payable PERRIS , CA 92570-2124 Customer Phone #951.943.6369 SHIP TO: PERRIS UNION HIGH SCHOOL DISTRICT Attention To: PUHSD TECHNOLOGY 155 E 4TH ST ****MUST SHIP COMPLETE ****** PERRIS , CA 92570-2124 Contact: PUHSD TECHNOLOGY 951.943.2760 Customer P.O. # FFRF868 QUOTE ACCOUNT MANAGER SHIPPING METHOD TERMS EXEMPTION CERTIFICATE CHRISTOPHER ZINGLER 877.262.6719 DROP SHIP-GROUND NET 30 Days-Govt/Ed QTY ITEM NO. DESCRIPTION UNIT PRICE EXTENDED PRICE 1 2032726 CISCO NETWORKING Mfg#: ENG-CIS-NW Contract: MARKET CALSAVE - Perris Union High SD_CDW-G_CSOW(ASAD Data ntwrk Roadmap Remed)_v1 -_-21 (4) Contract: CalSAVE Technology Contract (523868) 62,826.00 62,826.00 SUBTOTAL FREIGHT TAX 62,826.00 0.00 0.00 62,826.00 CDW Government 230 North Milwaukee Ave. Vernon Hills, IL 60061 Fax: 312.705.9473 Please remit payment to: CDW Government 75 Remittance Drive Suite 1515 Chicago, IL 60675-1515 This quote is subject to CDW's Terms and Conditions of Sales and Service Projects at http://www.cdw.com/content/terms-conditions/product-sales.asp For more information, contact a CDW account manager.

This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

OE400SPS

QUOTE NO. ACCOUNT NO. DATE

FFRF868 1997409 4/11/2014

BILL TO: PERRIS UNION HIGH SCHOOL DISTRICT 155 E 4TH ST ****MUST SHIP COMPLETE ****** Accounts Payable PERRIS , CA 92570-2124 Customer Phone #951.943.6369

SHIP TO: PERRIS UNION HIGH SCHOOL DISTRICT Attention To: PUHSD TECHNOLOGY 155 E 4TH ST ****MUST SHIP COMPLETE ****** PERRIS , CA 92570-2124 Contact: PUHSD TECHNOLOGY 951.943.2760 Customer P.O. # FFRF868 QUOTE

ACCOUNT MANAGER SHIPPING METHOD TERMS EXEMPTION CERTIFICATECHRISTOPHER ZINGLER 877.262.6719 DROP SHIP-GROUND NET 30 Days-Govt/Ed

QTY ITEM NO. DESCRIPTION UNIT PRICE EXTENDED PRICE

1 2032726 CISCO NETWORKING Mfg#: ENG-CIS-NW Contract: MARKET CALSAVE - Perris Union High SD_CDW-G_CSOW(ASAD Data ntwrk Roadmap Remed)_v1 -_-21 (4) Contract: CalSAVE Technology Contract (523868)

62,826.00 62,826.00

SUBTOTAL FREIGHT

TAX

62,826.00 0.00 0.00

62,826.00

CDW Government 230 North Milwaukee Ave. Vernon Hills, IL 60061 Fax: 312.705.9473

Please remit payment to: CDW Government 75 Remittance Drive Suite 1515 Chicago, IL 60675-1515

This quote is subject to CDW's Terms and Conditions of Sales and Service Projects athttp://www.cdw.com/content/terms-conditions/product-sales.aspFor more information, contact a CDW account manager.

Page 2: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 1 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

STATEMENT OF WORK Project Name: ASAD Data Network Roadmap and Network Remediation Seller Representative:

Mike Seki (847) 968-9965 [email protected]

Customer Name: Perris Union High School District

CDW Affiliate: CDW Government LLC

SOW Effective Date: February 17, 2014 Solution Architect: Rick McGee Version: 1.0

This  statement  of  work  (“Statement of Work”  or  “SOW”)  is  made  and  entered  into  this  February 17, 2014 (the  “SOW Effective Date”)  by  and  between  the  undersigned,  CDW Government LLC (“Provider”,  “Seller”  and  “we”) and Perris Union High School District (“Customer”  and  “you”).

PROJECT DESCRIPTION

PROJECT SCOPE Provider will perform the following services:

1. Adaptive Security Appliance Deployment 2. Data Network Roadmap 3. Network Remediation

1. ADAPTIVE SECURITY APPLIANCE DEPLOYMENT Provider will provide professional services to assist with designing and implementing a redundant pair of Cisco Adaptive Security Appliance (ASA) appliances and Advanced Inspection and Prevention Security The SSP for the Cisco ASA 5500 Series provides proactive, full-featured intrusion prevention services to stop malicious traffic, including worms and network viruses. As part of this project, Provider will perform the following tasks:

x General configuration of Cisco ASA 5585 and IPS (at two separate locations) o Set the hostname, domain name, date and time o Configure Ethernet settings and subinterfaces o Configure appropriate security level of interfaces o Configure IP routing o Configure Botnet Traffic Filter

x Design  and  configuration  of  security  rulesets  relevant  to  Customer’s  business  and  technical  requirements o Configure authentication, authorization, and accounting (AAA) services for network access

x Configure inbound and outbound access-lists for permitting or denying network access x Design and configuration of NAT/PAT addressing policies to reflect connectivity requirements x Design and configuration of any IPSec or SSL VPN connectivity requirements

o Configure ISAKMP policies and enable ISAKMP on appropriate interfaces o Configure IPSec transform sets and crypto maps o Configure clientless VPN or AnyConnect client for secure SSL sessions

x Identify traffic to divert from the Cisco ASA appliance to the SSP module o Configure inspection and protection policy to determine how to inspect traffic and what to do when an

intrusion is detected x General configuration of the IPS Software

Page 3: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 2 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

o Update the sensor to latest signature release or service pack o Configure network settings, allowed hosts, time, and users o Configure the Virtual Sensor and interface

x Analysis and basic tuning in effort to mitigate false positive events and to effectively position intrusion prevention within the relevant environment

o Basic configuration of the risk rating system based upon the calculation (i.e. logging, IP logging, dropping, etc.)

o Configuration and basic tuning of Event Action Rules and Overrides (i.e. filtering SMTP servers, filtering web servers, etc.)

o Configuration and basic tuning of the Signature Definitions; turning on/off signatures categories relative to Customer’s  network  environment

PLANNING The planning phase consists of the following:

x Project Kickoff – The project team will be chartered and staff will be assigned to project roles. The team will review Customer’s  needs,  discuss/revise  the  project  scope  and  assumptions,  and  finalize  logistical  details.

x Inventory Hardware – Provider staff will inventory, document, and hardware power-on test. Issues with faulty hardware, as well as inventory discrepancies, will be identified and resolved.

x Project Planning – Members of the project team will develop a detailed project plan and test plan for the ASA deployment.

DESIGN Provider will conduct a detailed design session with the project team. The goal of this design session is to identify and address architectural, security, and device management requirements. The design phase consists of the following sub-phases:

x Analysis – Provider and Customer technical staff will work together to: ○ Review network architecture, technical specifications, and VPN requirements ○ Analyze hardware configuration ○ Review industry best practices in order to develop baseline design information.

x Network Design – Provider staff will lead an effort to: ○ Develop the final design ○ Identify all security zones on the network ○ Map security zones to physical and virtual interfaces on the ASA ○ Design site-to-site and remote access VPN considerations ○ Design SSL VPN considerations

x Documentation – Provider staff will document and diagram the ASA design, including VPN.

IMPLEMENTATION AND TEST The process for staging, implementing, configuring and testing the Cisco ASA can be further detailed as follows:

x Unpack the hardware x Upgrade ASA software to meet the standards specified in the design phase x Build the ASA configuration to the specifications documented in the design phase, including:

○ Firewall security zones ○ VPN configuration

x Apply the test plan developed during the planning phase to ensure proper design and configuration

Page 4: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 3 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

PROJECT CLOSURE This phase signifies the end of the project. All services in the Description of Services section of this document are completed and all items to be provided are received by Customer.

CUSTOMER RESPONSIBILITIES Customer is responsible for the following:

1. Provide a 4 hour maintenance window to allow for the cutover to the Cisco ASA solution. 2. Configuration  of  Customer’s LDAP environment when integrating with the Cisco ASA solution. Provider will

provide guidance on the required configuration for integration. 3. Customer will provide documentation for required connectivity through the firewall that includes source IP,

destination IP, port, protocol information, and network address translation requirements. If traffic analysis is required to determine the appropriate connectivity information; it may result in a revision of the services estimate.

PROJECT ASSUMPTIONS 1. Customer will provide Provider staff with appropriate physical and network access to implement configurations

defined in this statement of work. 2. There is adequate power, UPS, rack space, and network connectivity for the devices included on the bill of materials 3. Provider will perform up to four (4) iterative passes or up to 4 hours for each for the IPS tuning portion of this

project. 4. Training documentation is not part of this project. 5. Provider will configure no more than 5 IPSec VPN RAS pools. 6. Provider will configure no more than 10 access-list entries in each security policy. 7. Provider will configure no more than 10 network address translation (NAT) or port address translation (PAT)

entries.

OUT OF SCOPE Tasks outside this SOW include, but are not limited to:

1. Configuration of any other network equipment not directly related task of implementing the Cisco ASA and configuring required services. Within scope are minor changes to existing network infrastructure that may need to occur to accommodate required services, such as VLAN configurations, routing, and AAA (authentication, authorization, accounting) services.

2. Advanced AIP tuning (i.e. writing custom signatures, assigning actions to signatures, configuring alert frequency of signatures, configuration of target value ratings)

ITEM(S) PROVIDED TO CUSTOMER The following will be provided to Customer by the completion of this project.

Table 1 – Item(s) Provided to Customer

Item Description Format

ASA Design A detailed diagram including VPN requirement PDF/Visio

Project Plan A formal project plan PDF

Test Plan A formal test plan PDF

Page 5: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 4 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

2. DATA NETWORK ROADMAP The purpose of this project is to provide an assessment of Customer’s data network. The following overview will provide Customer  with  a  concise  synopsis  of  Seller’s  Solution.

x Evaluation of the current status of the LAN and WAN infrastructure of Customer and upon request, other divisions of Customer group.

x Creation of a gap analysis document on findings, focusing on recommendation of a design and plan for WAN redundancy and fail-over for disaster recovery purposes, all while keeping existing and future applications in mind.

x An estimate of services required to address the gaps, if any, between the current state and desired state of the Cisco LAN and WAN solution, focusing on the ideal fully meshed network while also providing additional consideration when this does not make business sense.

Customer’s 155 East 4th Street Perris CA 92570 location is the central site for all data processing. Customer requires monitoring and evaluation of all Cisco network infrastructure components. Remote sites are in the following locations:

x Heritage High School x Paloma Valley High School x Perris High School x Perris Lake High School x The Academy x Pinacate Middle School x California Military Institute

Seller proposes to provide Customer with an assessment of the current data network infrastructure, a design for a future data network, and a recommendation for a smooth implementation. This project is made up of the following phases:

PROJECT PLAN This phase ensures that the final report is tailored to Customer’s needs and will enable Seller to provide better value by focusing on areas critical to Customer. This phase is made up of the following activities:

x Clearly define project scope, objectives, and approach x Identify project resources, roles, and responsibilities x Develop project interview schedule and complete time frames x Gain  Customer’s  acceptance  of  project  plan

The key to this phase is identifying the business objectives for the LAN/WAN design. Once these objectives are identified, they become objectives for the engagement throughout the assessment.

CURRENT DATA NETWORK ASSESSMENT The proper design of the data network is critical to the success of Customer’s implementation. Seller may deploy a team of network and/or systems engineers to Customer site to complete this phase.

REVIEW PHYSICAL DESIGN Seller engineers will identify the data paths within the network. Along the data paths, engineers will determine bandwidth bottlenecks, single points of failure, QoS requirements, and backup and redundant connection.

Seller engineers will also determine the ability of devices on the data path to provide Quality of Service (QoS) to data applications.

Seller will document the hardware model numbers and software version levels of the switches, routers and gateways in the LAN and WAN.

Page 6: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 5 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

Review and Document Existing WAN Design

Seller engineers will review protocols currently in use to determine redundancy and scalability concerns. Seller will review the configuration of the routers and switches and document the following:

x WAN Hardware (Routers, CSUs/DSUs) x LAN Hardware (Switches, Hubs) x Internetworking Operating System Versions and Patches x WAN circuits, speeds, and topology

REVIEW PHYSICAL ENVIRONMENTS Seller will review the existing LAN and WAN cabling facilities, and verify that devices on the data path are UPS-protected.

IDENTIFY OPERATIONAL WAN ISSUES The WAN is the backbone of the Customer network, and as such, is critically important. Seller engineers will document the existing WAN, keeping future scalability and disaster recovery in mind.

GAP ANALYSIS AND RECOMMENDATIONS Once the existing data network is fully understood, Seller will prepare a report with the following:

EXISTING WAN/LAN OVERVIEW This is a narrative summary of the current architecture. The summary will include in-depth coverage of the physical layer topology and logical protocol configurations within the existing network environment.

EXISTING ARCHITECTURE AND DESIRED FUNCTIONALITY This is a narrative summary that details and contrasts the existing architecture with discovered business and technical requirements and goals. For example, typical desired functionality may include securing network devices or configuring a LAN for High Availability. This portion of the document will match the aforementioned goals to existing infrastructure configurations and designs, and will be used as the business case basis from which Seller will make recommendations. The following areas are addressed within this section of the report:

x Hardware and software placement x Security considerations x Manageability considerations x Scalability considerations x Reliability considerations x QoS considerations

RECOMMENDATIONS Seller will provide key recommendations based upon the discovery of the existing network infrastructure, the desired functionality of Customer’s network environment, and Seller Best Practices. The recommendations will address the following, with an emphasis on tactical recommendations:

Operational recommendations x Key day-to-day considerations x Emphasis on immediate improvement to the network environment with basic or less complex configuration changes x Examples may include spanning-tree, speed/duplex, logging, and management changes

Tactical recommendations x Forward looking and more immediate goals addressing requirements in the 6 – 12 month time frame

Page 7: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 6 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

x Emphasis on realigning or changing major functionality of an existing technical solution to meet a desired goal, often enabling a business to capture improved productivity

x Examples may include more complex routing, VLAN trunking design, securing network access or connectivity, and High Availability changes

Strategic recommendations x Forward looking, long-term solution-based recommendations x Emphasis on high-level strategic deployment of technologies to meet key business or technical initiatives x Examples may include a Cisco Mobility Solution leveraging of Cisco Lightweight Wireless Access Points and

Wireless LAN Controllers to provide real-time asset tracking and enhanced wireless services, or securing access to a network infrastructure through the use of a Cisco Identity Services Engine (ISE) solution

FUTURE DATA NETWORK DESIGN To ensure a smooth transition, Seller will review the design, flow, applications, and limitations of the current data network, as discovered in the first two phases of this project. This information will allow us to make recommendations to improve productivity, prepare a change management strategy, and understand current data applications.

WAN/LAN REQUIREMENTS Seller engineers will conduct interviews with data engineering and corporate department personnel to obtain data requirements.

HARDWARE AND SOFTWARE OPTIONS Seller will develop these options for improving the network design to increase reliability and redundancy, and to provide required QoS throughout the data path.

Seller will provide recommendations on how to transition to your desired, future data network, as well as discuss additional considerations.

The scope of each recommendation will directly address the business and/or technical goal of Customer, the gap between the existing architecture or configuration and the desired functionality, and the recommended actionable items to achieve the desired result. This may include recommended configuration changes, physically topology changes, logical protocol changes, existing design modifications, or the introduction of a new solution.

Seller will develop hardware and software options to ensure feature parity with recommended design or configuration changes, and solutions. Seller will adhere to Seller Best Practices and design guidelines set forth by Cisco Systems when making recommendations to meet the goals of Customer.

Seller will create the necessary supporting documentation for any recommendations made, for example network diagrams to reflect design or solutions recommendations.

ITEM(S) PROVIDED TO CUSTOMER Table 1 – Item(s) Provided to Customer

Item Description Format

Design Document Description of the approved design PDF

Network Diagram Visual depiction of the approved design PDF

Road Map Description of proposed roadmap PDF

Page 8: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 7 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

3. NETWORK REMEDIATION Seller will implement and configure the hardware and software for the Cisco Network Infrastructure  solution  at  Customer’s locations. This project will include reconfiguring switches at Customer’s  district  office  and  seven  school  locations.  This  project will be in conjunction with the data network road map and will take the recommendations from that project and apply the best practices designs to the equipment listed in this statement of work. Subject to the other provisions of this SOW, Seller will perform the following services:

DESIGN The Design phase is a critical step in the project. During the Design Phase, Seller staff will document and review how the resulting system will be built and configured. Iterative review and validation of requirements by Customer staff is critical to the success of the project. Once the design is complete, any changes to the design shall be considered out of scope. Key activities that will be completed in this phase include:

3. Analysis – The project team will review information gathered during Discovery, the new hardware configurations and review Seller Best Practices in order to develop baseline design information.

4. Document Design –Seller staff will lead an effort to develop a final design custom to Customer. This will be an interactive process between Seller engineers and Customer staff, as tradeoffs in design decisions, implementation impacts and issues, and the final selection of features for implementation are discussed. This will include Seller recommendations for changes to existing network infrastructure.

5. Configuration Development – Configuration templates for each type of hardware device will be developed from the finalized design. These templates will be used to facilitate the deployment of the network infrastructure and reduce the chance of error caused by manual configuration.

6. Design Review – The design principles will be documented and a final design review will be conducted with all technical stakeholders. At the final design review, an overview of the network design document will be presented for discussion, and a line-by-line walk through of the configuration templates will be used to map design criteria to configurations. The design review will be used as both an educational tool, and a forum for transferring knowledge to staff performing implementations.

IMPLEMENTATION AND TESTING During the Implementation and Testing phase, Seller staff will stage, build, configure and test the following equipment per the design and the bill of materials for this project:

x 01 Cisco Catalyst 6509E switch at the district office location. x 07 Cisco Catalyst 4506E switches at the various school locations listed in this statement of work. x 01 Cisco 4510E switch at the Perris High School location. x 10 Cisco 3560G switches at the various school locations listed in this statement of work

As part of the switch/router implementation, Seller will stage, place, and test the hardware listed above based on the following:

x Configure data and voice VLANs based on the design phase of the project. x QOS will be configured based upon the latest Seller Best Practices to set priority on all voice control and bearer

traffic. x Configure physical network interfaces based on the design phase of the project. x Configure all network addressing based on the design phase of the project. x Configure secure access to the switch based on the design phase of the project. x Configure network management parameters based on the design phase of the project. x Other configuration parameters as necessitated by the environment and as dictated by Seller Best Practices.

The project team will execute a defined test plan to verify implementation and configuration of the hardware and software, to test specific functionality, and to document the system configuration before turning the system over to Customer.

Page 9: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 8 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

CUTOVER AND “FIRST DAY OF SERVICE” Once the system implementation activities as defined in the previous sections are complete, production cut-over to the new system will take place and Seller will monitor the production system, track, and resolve incidents for 01 days (04 hours) at the district office location.

Once the new system is in production and first day issues have been resolved, Customer will move into a Support Phase.

CUSTOMER RESPONSIBILITIES

PLANNING AND DISCOVERY RESPONSIBILITIES Seller is responsible for the following:

1. Mutually schedule the site survey review with Customer’s site contact. 2. Conduct site survey(s) for all proposed locations. 3. Review and validate collected site survey information with Customer. 4. Review site survey and network diagram, and develop and perform the site readiness recommendations to Customer. 5. Provide network design review recommendations to ensure all items have been properly addressed and the network

has been designed appropriately. 6. Work with Customer to understand that sufficient network capacity exists in Customer’s provided network design

and based on Customer’s stated performance objectives along with traffic volumes.

Customer is responsible for the following:

1. Provide the IP addressing and subnet mask plan for the proposed solution. 2. Mutually schedule with Seller the site survey with each Customer site contact. 3. Provide current network diagrams listing existing size, capacity, utilization, and data traffic requirements for all

current network facilities. 4. Confirmation of the completeness and accuracy of the information provided to Seller during the network review

process. All designs that need to be made as a result of incomplete or inaccurate network review information may result in changes to the project fees.

DESIGN RESPONSIBILITIES Seller is responsible for the following:

1. Work with Customer to understand the environment and to validate the new networking hardware. 2. Review the proposed infrastructure design with Customer. 3. Provide recommendations for changes to existing network infrastructure based upon design requirements and

information collected during Discovery.

Customer is responsible for the following:

1. Ensure attendance of appropriate personnel for Design Review meetings who have authorization to approve design.

PROJECT ASSUMPTIONS

HARDWARE AND SOFTWARE 1. Customer will provide all hardware and cabling required for implementation. 2. Customer  will  provide  proper  19”  racks  and  screws  for  implementation.   3. Customer will provide appropriate power feeds to all equipment from either multiple UPS systems or separate

electrical circuits within six feet of the switch. 4. Customer will provide Seller access or personnel with access to all locations that require switches to be implemented

in a timely manner.

Page 10: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 9 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

5. Customer will procure necessary patch cables needed to complete implementation. 6. Customer provided cabling will be functioning and terminated. Any delays or troubleshooting time incurred at this

time will be considered out of scope and billed separately at standard hourly rates. 7. Customer will be responsible for moving all patch cables to the new equipment. 8. If any lift equipment is required to mount the switches, Customer will provide the proper equipment and personnel

to operate and help implement the switches in a safe manner. 9. Customer will provide all patch cables and riser runs, copper or fiber. 10. Customer will apply all asset tags to the hardware.

PREPARATION 1. The current network must function properly (no adverse conditions) prior to the implementation of new equipment. 2. Cabling to all switch and router equipment is properly implemented, tested, and clearly labeled prior to the

implementation of new equipment.

ACCEPTANCE AND CHANGES 1. All design changes will be required to be signed off on by the Seller senior engineer and the Customer project

manager. Changes that are requested following the design freeze may affect project fees. Any changes that are requested to be made by Seller after the completion of the design freeze will be billed on a time-and-material basis.

2. All delays and extension of outage periods due to faulty hardware or software problems as a result of hardware or software not being covered by a SMARTnet support contract will be billable on a time-and-material basis.

SUPPORT 1. Budgeted time for post-cutover,  Day  1  support  is  specified  in  the  section  titled  “Cutover  and  First  Day  of  Service”  in  

this SOW. Any subsequent support beyond this budgeted amount will be considered out-of-scope and billable on a time-and-materials basis. After the pre-defined period for Day 1 support is complete, Customer will either transition to  Seller’s  Day  2  support  organization  or  inform  Seller,  in  writing,  if  choosing to support the system without a Seller Day 2 Support plan.

2. Seller  will  provide  services  only  on  Cisco  Systems’  generally  available  release  hardware  and  software  products.  If  any beta or controlled-introduction releases are introduced into the project, Seller reserves the right to present a Change Order.

3. If software and/or hardware bugs (defined as Cisco TAC cases that are not resolved within 24 hours) are identified by Seller to be manufacturer-related issues, Seller’s team may temporarily disengage until the manufacturer is able to resolve the bug.

4. Seller will assist with investigating and troubleshooting connectivity issues within the equipment implemented and configured by Seller. If the issue is believed to be outside of Seller’s implemented and configured equipment, Customer will  be  required  to  engage  Customer’s third party partners to troubleshoot  the  issue  within  Customer’s equipment.

OUT OF SCOPE 1. Removal of Packing Materials.

ITEM(S) PROVIDED TO CUSTOMER Table 2 – Item(s) Provided to Customer

Item Description Format

Design Document Description of the approved design PDF

Network Diagram Visual depiction of the approved design PDF

Page 11: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 10 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

Item Description Format

Test Plan Description of the test plan and success criteria PDF

Project Plan Project plan showing timelines and milestones PDF

Services not specified in this SOW are considered out of scope and will be addressed with a separate SOW or Change Order.

PROJECT SCHEDULING Customer and Seller, who will jointly manage this project, will together develop timelines for an anticipated schedule (“Anticipated Schedule”)  based  on  Seller’s  project management methodology. Any dates, deadlines, timelines or schedules contained in the Anticipated Schedule, in this SOW or otherwise, are estimates only, and the Parties will not rely on them for purposes other than initial planning.

TOTAL FEES The  total  fees  due  and  payable  under  this  SOW  (“Total Fees”)  include  both  fees  for  Seller’s  performance  of work (“Services Fees”)  and  any  other  related  costs  and  fees  specified  in  the  Expenses  section  (“Expenses”).  Unless  otherwise  specified,  taxes  will be invoiced but are not included in any numbers or calculations provided herein.

Seller will invoice for the Total Fees.

SERVICES FEES Services Fees hereunder are FIXED FEES, meaning that the amount invoiced for the Services will be $62,826.00.

The invoiced amount of Services Fees will equal the amount of fees applicable to each completed project milestone, as specified in Table 3.

Table 3 – Services Fees

Project Milestones Percentage Fees

Signed SOW 50% $31,413.00

Discovery 25% $15,706.50

Completion of Work 25% $15,706.50

Totals 100% $62,826.00

EXPENSES Neither travel time nor direct expenses will be billed for this project.

Upon execution of this SOW, travel will be scheduled to occur  no  less  than  two  (2)  weeks  after  the  date  of  Customer’s  request for travel. Should Customer request that travel be expedited, Customer will be billed for any additional travel and expense costs that apply.

CUSTOMER-DESIGNATED LOCATIONS Seller will provide  Services  benefiting  the  locations  specified  on  the  attached  Exhibit  (“Customer-Designated Locations”).

Page 12: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 11 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

PROJECT-SPECIFIC TERMS 1. Customer is responsible for providing all physical and communications access, privileges, environmental conditions,

properly functioning hardware and software, qualified personnel, project details, material information, decisions/directions, and personnel and stakeholder interviews that are reasonably necessary to assist and accommodate  Seller’s  performance  of  the  Services  (“Customer Components”).

2. Seller is not responsible for delays in performance directly caused by the unavailability of the Customer Components and will have the right to invoice Customer, with prior written notice, for time Seller personnel is thereby idled or to reassign Seller personnel to work unrelated to this SOW and the services hereunder.

3. Customer will provide in advance and in writing, and Seller will follow, all applicable Customer safety and security rules and procedures.

4. Customer will secure and maintain the confidentiality of all Seller personnel information. 5. When Services are performed at a Customer-Designated Location, the site will be secure; Seller is not responsible

for lost or stolen equipment. 6. This SOW can be terminated by either party without  cause  upon  at  least  fourteen  (14)  days’  advance  written  notice.

Page 13: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 12 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

SOW TERMS AND CONDITIONS

CONTACT PERSON(S) Each  Party  will  appoint  a  person  to  act  as  that  Party’s  point  of  contact  (“Contact Person”)  as  the  time  for  performance  nears,  and will communicate  that  person’s  name  and  information  to  the  other  Party’s  Contact  Person.

The Customer Contact Person is authorized to approve materials and Services provided by Seller, and Seller may rely on the decisions and approvals made by the Customer Contact Person (except that Seller understands that Customer may require a different person to sign any Change Orders amending this SOW). The Customer Contact Person will manage all communications with Seller, and when Services are performed at a Customer-Designated Location, the Customer Contact Person  will  be  present  or  available.  The  Parties’  Contact  Persons  shall  be  authorized  to  approve  changes  in  personnel  and  associated rates for Services under this SOW.

PAYMENT TERMS Except as otherwise agreed by the Parties, Customer will pay invoices containing amounts authorized by this SOW within thirty (30) days of receipt. Any objections to an invoice must be made to the Seller Contact Person within fifteen (15) days after the invoice date.

EXPIRATION AND TERMINATION This SOW expires and will be of no force or effect unless it is signed by Customer, transferred in its entirety to Seller so that it is received within thirty (30) days from the date written on its cover page, and then signed by Seller, except as otherwise agreed by Seller.

CHANGE ORDERS This SOW may be modified or amended only in a writing drafted by Seller, generally in the form provided by Seller and signed  by  both  Customer  and  Seller  (“Change Order”).  Each  Change  Order  will  be  of  no  force  or  effect  until signed by Customer, transferred in its entirety to Seller so that it is received within thirty (30) days from the date on its cover page and then signed by Seller, except as otherwise agreed by Seller.

In the event of a conflict between the terms and conditions set forth in a fully executed Change Order and those set forth in this SOW or a prior fully executed Change Order, the terms and conditions of the most recent fully executed Change Order shall prevail.

MISCELLANEOUS This SOW shall be governed by  Seller’s  “Terms  and  Conditions  of  Product  Sales  and  Service  Projects”,  accessed  via  the  “Terms  &  Conditions”  link  at  www.cdwg.com (the  “Agreement”).  If  there  is  a  conflict  between  this  SOW  and  the  Agreement, then the Agreement will control, except as expressly amended in this SOW by specific reference to the Agreement. References in the Agreement to a SOW or a Work Order apply to this SOW. This SOW and any Change Order may be signed in separate counterparts, each of which shall be deemed an original and all of which together will be deemed to be one original. Electronic signatures on this SOW or on any Change Order (or copies of signatures sent via electronic means) are the equivalent of handwritten signatures. This SOW is the proprietary and confidential information of Seller.

Page 14: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 13 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

SIGNATURES In acknowledgement that the parties below have read and understood this Statement of Work and agree to be bound by it, each party has caused this Statement of Work to be signed and transferred by its respective authorized representative.

CDW Government LLC Perris Union High School District

By: ___________________________________________ signature

By: ___________________________________________ signature

Name: ________________________________________ Title: _________________________________________ Date: _________________________________________

Name: ________________________________________ Title: _________________________________________ Date: _________________________________________

Mailing Address: 230 N. Milwaukee Ave. Vernon Hills, IL 60061

Mailing Address: Street: ________________________________________ City/ST/ZIP: ___________________________________

� A purchase order for payment hereunder is attached. � A purchase order is not required for payment hereunder. � The following PSM has given approval: _____________________

Billing Contact: Street: ________________________________________ City/ST/ZIP: ___________________________________

120813 Standard

Page 15: This quote is subject to CDW's Terms and Conditions of ...board.puhsd.org/Attachments/43984314-eea6-4d0e-b5f2-65abf59667bb.pdfMap security zones to physical and virtual interfaces

Proprietary and Confidential Page 14 g Version 1.0, Template 130501-120813

Drafted by Caitlin Doyle, REQ22456

EXHIBIT A.

CUSTOMER-DESIGNATED LOCATIONS Seller  will  provide  Services  benefiting  the  following  locations  (“Customer-Designated Locations”).

Table 4 – Customer-Designated Locations

Location(s) Service(s)

155 East 4th Street Perris, CA 92570

 ☑ Assessment  ☑ Configuration  ☑ Design  ☑ Implementation

 ☐ Knowledge Transfer  ☑ Project Management  ☑ Reconfiguration  ☐ Reinstallation

 ☐ Staff Augmentation  ☐ Support  ☐ Training  ☐ Custom Work