159 11 Pilot/Future Environment Will Skype Voice (PBX integration) or Skype Online Voice (Cloud-based PBX) be implemented as part of the pilot? Is a Lync Hybrid Migration or Cutover migration desired? EMC Source One email stubs (shortcuts) will not migrate to Office 365. Will the Commonwealth restore those shortcuts prior to mailbox migration or should that be included in the services? ProofPoint, EMC Source One, and AirWatch have to be configured to work with Office 365. Will the Commonwealth configure those applications with Vendor guidance, or should that be included in the services? Does the Commonwealth wish to deploy single sign-on capabilities for messaging and IM [Active Directory Federation Services]? No Bidder should propose the best solution, but the pilot agency or agencies might not be Lync users. Pilot users will not have stubs, but, through the experimental process described in the answer to question 50 above, the winning bidder must demonstrate that its proposed cloud solution can work, in a manner seamless to the user, with the Commonwealth’s SourceOne solution. Therefore, the winning bidder must show that its solution will support the use of the stubs required by SourceOne The winning bidder must demonstrate, through the experimental process described in the answer to question 50 above, that SourceOne can be configured to work with its proposed cloud email solution. Yes 160 195 PKI and Certificates Are SSL certificates in use on existing servers (Lync, web, SharePoint, etc...)? Yes 161 196 PKI and Certificates Are SAN certificates in use? Yes 162 197 PKI and Certificates Are certificates home-grown or purchased from a CA? Depends on the certificate 163 198 PKI and Certificates Is there an internal Public Key Infrastructure in the environment? Yes
184 66 Scalability MassIT specifies that Solution will need to easily scale up to the entire Executive Departments of up to 58,000 users. Should we assume that a) infrastructure components provisioned during Pilot phase in MassIT’s environment should be ready to serve 58,000 users, or b) infrastructure components provisioned during Pilot phase in MassIT’s environment should serve only Pilot users and have flexibility to add additional infrastructure components in Phase I when and as applicable to serve 58,000 users. b). 185 51 Scattered Files The RFQ makes reference to "Scattered Files" referring to PST data located throughout the organization. Is systematic consolidation and re-ingestion of that PST data within the scope of this Pilot? No 186 52 Scattered Files Has the State purchased or own any Tools related to "Scattered Files?" No 187 128 Secure access What are the secure remote access methods implemented within the enterprise for accessing email? We allow access via HTTPS (OWA and Outlook), ActiveSync, and VPN with remote desktop access 188 47 Secure mail What action does the recipient need to perform in order to open Secure email that came from MassMail? Example: login to Sentrion portal, register etc? A login is required 189 127 Secure mail Does MassIT have any requirements for TLS or domain secured email between organizations? We use TLS 190 81 Security Does the MassIT current email encryption function make use of SMIME feature in Exchange? Requires obtaining certificate and providing certificate to recipient of encrypted mail. No 191 129 Security Can the bidder conduct remote implementation activities or bidder will be required to be on-site? Remote implementation activities are acceptable subject to the requirement that no offshore resources (a subset of remote resources) can access the system or state
May be integrated into Q#4 below. 93H defines “personal” data. MassIT sets protection levels according to data type and client. For AD, no specific standards apply. No articulated separation of data standards apply at present. However, it is important to note that compliance issues are likely to be significant, depending on MassIT & DOR Legal opinion and guidance once data types and object interrelationships are clarified and documented. Cloud Services / Federated Cloud(s): None; anticipated. Microsoft Premium Risk Assessment: AD in last year Exchange in past 3 years Identify Access Management: MassIT also has ISIM/ISAM; however, within AD, only manage MassIT – use is not widespread throughout forest. SSO is IAM, Products in use include: 1. IBM Security Access Manager 8.x 2. IBM Security Identity Manager 6.x 3. Tivoli Access Manager 6.x 4. Tivoli Identity Manager 5.x 5. PingFederate 7.3 (Identity Federation) Group Policy Management: Same. Encryption: None yet. Schema Extensions: MS only – Exchange, SharePoint and Lync. Rights Management: None