server storage and data center · backup or replication: client data restore or replication. 49 -...

Server Storage and Data Center

www.vita.virginia.gov

2

Changes to Disaster Recovery


Unisys consolidated disaster recovery into four tiers of service that can be applied to any server.

Tier Data Protection and Recovery Recovery (OS/Data) Recovery Time

Objective

1 Asynchronous data replication

Active server or replicated OS/ replication <= four hours

2 Asynchronous data replication Replicated OS/ replication Five - 24 hours

3 Asynchronous data replication Replicated OS/ replication 25 - 48 hours

4 Disk-based nightly backup or replication

Client data restore or replication 49 - 72 hours

3

Changes in Server Storage and Data Center


Server storage services have been unbundled from a single rate that included hardware, software and support to separate rates (with the exception of windows software, which is a VITA retained cost and is included in the support charge).

Hardware charges will be directly based on the cost of underlying device and will only start upon refresh.

Hardware

Software

Support

Bundled Services

Hardware Software

Support

Unbundled Services Choice!

4

Server Storage and Data Center Services Service Name Description Capabilities Benefits New/

Modified?

Virtual server Windows, primary data center -order NEW

Instance of a Windows virtual server at primary data center(s).

Virtual service platform running Windows OS. Variable compute profiles and variable quantity of virtual disk storage to meet customer needs.

Provides a stable infrastructure as a service (IaaS) implementation running on high availability (HA) infrastructure with automatic failover and/or restart in case of hardware failure.

Modified – Former names:• NT/Win and other servers virtual small (1-2 CPUs)• NT/Win and other servers virtual medium (3-4

CPUs)• NT/Win and other servers virtual large (5-6 CPUs)• NT/Win and other servers virtual enterprise (over 6

CPUs)• Security number of servers (all classes)

Virtual server Linux, primary data center -order NEW

Instance of a Linux virtual server at primary data center(s).

Virtual service platform running Linux OS. Variable compute profiles and variable quantity of virtual disk storage to meet customer needs.

Provides a stable IaaS implementation running on HA infrastructure with automatic failover and/or restart in case of hardware failure.

Modified – Former names:• NT/Win and other servers virtual small (1-2 CPUs)• NT/Win and other servers virtual medium (3-4

CPUs)• NT/Win and other servers virtual large (5-6 CPUs)• NT/Win and other servers virtual enterprise (over 6

CPUs)• Security number of servers (all classes)

Virtual server Appliance, primary data center -order NEW

Instance of a virtual appliance running customer provided and maintained image

Virtual service platform customer provided and maintained image. Variable compute profiles and variable quantity of virtual disk storage to meet appliance requirements.

Provides a stable IaaS implementation running on HA infrastructure with automatic failover and/or restart in case of hardware failure.

Modified – Appliances were bundled under server support. Such services have been unbundled to align costs with those generating the costs.

5

Server Storage and Data Center Services Service Name Description Capabilities Benefits New/Modified Service?

Network attached storage (NAS) TIER 2, primary data center -order NEW

NAS file system provisioned on enterprise NAS Solution

File storage presented as formatted file systems over IP network using CIFS or NFS protocol

Customer managed file system storage over IP. Variable amounts of storage can be requested. Default implementation is on customer secure VLAN. Customers can configure permissions and shares using MSC.

Modified – Former name: Storage tier 2 at CESC

Network attached storage (NAS) TIER 3, primary data center -order NEW

NAS file system provisioned on enterprise NAS Solution


Lower cost file storage over IP for file storage without performance requirements. Variable amounts of storage can be requested. Default implementation is on customer secure VLAN. Customers can configure permissions and shares using MSC.

Modified – Former name: Storage tier 3 at CESC

Modify existing virtual server at primary data center - Change Existing

Modify compute profile, add storage or add DR to existing virtual server (Windows or Linux)

Change compute profile (vCPU and vMEM), increase vDISK storage or add DR services

Allows customer to change server configuration to meet requirements

Modified – Former names:• NT/Win and other servers virtual small (1-2 CPUs)• NT/Win and other servers virtual medium (3-4 CPUs)• NT/Win and other servers virtual large (5-6 CPUs)• NT/Win and other servers virtual enterprise (over 6

CPUs)• Security number of servers (all classes)• Unix servers virtual small (1-2 CPUs)• Unix servers virtual medium (3-4 CPUs)• Unix servers virtual large (5-6 CPUs)• Unix servers virtual enterprise (over 6 CPUs)

6

Server Storage and Data Center Services Service Name Description Capabilities Benefits New/Modified?

Modify existing physical server at primary data center -RFS

Add storage or add DR to existing physical server (Windows or Linux) at primary data center(s)

Increase SAN storage or add DR services Allows customer to change server configuration to meet requirements

Modified – Former names: • NT/Win and other servers physical small (1-2 CPUs)• NT/Win and other servers physical medium (3-4 CPUs)• NT/Win and other servers physical large (5-6 CPUs)• NT/Win and other servers physical enterprise (over 6

CPUs)• Unix servers physical small (1-2 CPUs)• Unix servers physical medium (3-4 CPUs)• Unix servers physical large (5-6 CPUs)• Unix servers physical enterprise (over 6 CPUs)

Modify storage quantity for existing NAS TIER2 or TIER3 instance at primary data center(s)

Increase storage allocation for existing NAS at primary data center(s)

Increase NAS storage space Allows customer to increase storage to meet demand.

Modified – Former names:• Storage Tier 2 at CESC• Storage Tier 3 at CESC

SQL database physical administration

Installation, monitoring, tools, patching, backups and upgrades necessary to manage and maintain the physical standalone database instance

Full management of the database instance. Does not include logical administration of the database or databases.

Provides vendor supported physical administration of SQL database instances.

New

7

Service Name Description Capabilities Benefits New/Modified?

Oracle instance database physical administration

Installation, monitoring, tools, patching, backups and upgrades necessary to manage and maintain the physical standalone database instance

Full management of the database instance. Does not include logical administration of the database or databases.

Provides vendor supported physical administration of Oracle database instances. New

Oracle database cluster physical administration

Installation, monitoring, tools, patching, backups and upgrades necessary to manage and maintain an Oracle cluster

Full management of the Oracle cluster. Does not include logical administration of the database or databases.

Provides vendor supported physical administration of Oracle database cluster New

Add users EAPSAdd Users to existing Enterprise Application Publishing Instance

Add registered users of the enterprise application publishing service (EAPS).

Allows scaling registered user of EAPSModified – Former name:• Enterprise application publishing service• EAPS Initiation• EAPS License (new) - One-time

Server Storage and Data Center Services

8

Service Name Description Capabilities Benefits New/Modified?

Physical servers at agency data centers -RFS

When required, customers may request physical servers to host all or part of an application. Physical servers require CIO approved exception and may only be requested via request for solution either singly or as part of a larger solution.

Provides dedicated server hardware for application components requiring bare-metal resources.

Provides dedicated server hardware for application components requiring bare-metal resources.

Modified – Former names: • NT/Win and other servers physical small (1-2 CPUs)• NT/Win and other servers physical medium (3-4 CPUs)• NT/Win and other servers physical large (5-6 CPUs)• NT/Win and other servers physical enterprise (over 6

CPUs)• Unix servers physical small (1-2 CPUs)• Unix servers physical medium (3-4 CPUs)• Unix servers physical large (5-6 CPUs)• Unix servers physical enterprise (over 6 CPUs)

Virtual servers at agency data centers -RFS

Virtual server instances on dedicated infrastructure at agency data centers

Virtual service platform running Linux OS. Variable compute profiles and variable quantity of virtual disk storage to meet customer needs. .

Virtual service platform running Linux OS. Variable compute profiles and variable quantity of virtual disk storage to meet customer needs.

Modified – Former names: • NT/Win and other servers virtual small (1-2 CPUs)• NT/Win and other servers virtual medium (3-4 CPUs)• NT/Win and other servers virtual large (5-6 CPUs)• NT/Win and other servers virtual enterprise (over 6 CPUs)• Security Number of Servers (All Classes)• Unix Servers Virtual Small (1 - 2 CPUs)• Unix Servers Virtual Medium (3 - 4 CPUs)• Unix Servers Virtual Large (5 - 6 CPUs)• Unix Servers Virtual Enterprise (over 6 CPUs)

NAS Tier2 at agency data centers - RFS

NAS provides file storage over IP network using CIFS or NFS protocol


Customer managed file system storage over IP. Variable amounts of storage can be requested. Customers can configure permissions and shares using MSC.

Modified – Former name: Storage Tier 2 outside of CESC

Server Storage and Data Center Services

Voice and Data Network


10

Voice and Data Network Services Service Name Description Capabilities Benefits New/

Modified?Managed Wide Area Network (MWAN)

Managed WAN provides for the complete management of wide area networking with a router to include management, monitoring, configuration, trouble resolution and traffic reporting.

Proactive monitoring of agency’s network by polling the devices under management to ensure they are functioning properly. Notifications made to the agency point of contact (POC) when the problem is located and that corrective action needs to be taken. Full accountability to monitor, manage, remediate and secure the customer’s solution. Performance reporting, managed services customer portal and automated configuration backup are included.

Performance – Keep your WAN, and your enterprise, running at high performance levels, 24x7, virtually anywhere. Simplicity – Verizon is responsible for complete outsourcing with our managed edge-router service. Reliability - Keep your WAN up and running with reliable connectivity backed by strong SLAs Improved response time - Our automated network monitoring system can improve initial response time to network outages compared to a typical do-it-yourself customer. Multi-layered reporting. More bandwidth options starting with T-1 through 100GB.

Modified – Former name: Commonwealth of Virginia (COV) Wide Area Network (WAN) Services

Managed Local Area Network (MLAN)

Managed LAN provides for the complete management of local area network switches including management, monitoring, configuration, trouble resolution and reporting.

Must be implemented with a managed WAN or managed routerand secure gateway.

Proactive monitoring of agency's local network by polling the devices under management to ensure they are functioning properly. Notification to the agency POC when a service problem located and that corrective action needs to be taken. Nodes are monitored, managed, remediated, secured, fault remediation, configuration management and security. Performance reporting, managed services customer portal, and automated configuration backup are included.

Adaptive service to enable cloud, data center, voice over IP (VOIP), video, and other real-time, delay sensitive applications are driving the need for new technologies such as power over ethernet (PoE), high performance data center switching and a more general need for high availability in the local area network. More bandwidth options starting with T-1 through 100GB.

Coordinated management services and processes include our network operations centers service continuity and performance between LAN and WAN environments.

Modified – Former name: Local Area Network

11


Modified?Secure Gateway (SG)

The secure gateway (SG) service is a network-based service that securely connects the customer’s private network to the public internet through a logical, virtual port (universal port).

Secure gateway service creates a secure end-to-end logical connection between commonwealth's resources on the Verizon PIP network and agency's remote sites connected to the internet or Verizon's IP network via low cost broadband or dedicated access.

Give access to employees working in remote locations—while maintaining the security of your data.

Modified – Former name: Enterprise Remote Connection Service (ERCS). After July 1 it will be deployed exception based only. Existing ERCS installations to be modernized to Verizon's secure gateway product.

Virtual Communications Express (VCE)

Virtual Communications Express (VCE) is cloud-based communications with enterprise-level features. VCE offers feature rich, end-to-end business phone systems solutions delivered reliably via the Verizon cloud. The “plug and play” option helps your agency boost productivity while using your existing internet broadband service and leverage the efficiencies of unified communications.

Cloud based, hosted VoIP service allows for access using private IP or internet. Allows users access to a user portal for self administration, easy administrator access and intuitive portal, feature-rich service with traditional voice calls, mobility, voice to fax services, conferencing service for up to six users, voice to email messaging, call center features as well as call queuing.

Unified communications Advanced feature/runctionalityFeature-rich with collaboration toolsEase of installConnect on multiple devices, desk phone, PC, mobile deviceSelf management tool allows for quick moves adds and changesBusiness continuitySimple cost structure

New

12


Modified?Webexconferencing Services

Cisco Webex from Verizon provides a virtual meeting and collaboration experience that enables flexible application and enterprise-grade security integration. Every meeting can be productive and help drive your business forward. For example, by utilizing Webex we helped a manufacturing company unify communications to build teamwork and control costs. By keeping teams connected with the right web conferencing tools, an energy company boosted productivity and gained more data insights to better end user experiences.

Cisco Webex meeting center is an integrated web conferencing service designed for interactive online meetings by incorporating audio, video and real-time content sharing. Webex enables the sharing of documents, applications and desktops over the web. Webex meeting center allows users to give presentations, demonstrate software, view and annotate any document electronically, with integrated audio and video communications. In addition, Webex meeting center provides additional features such as record and playback of meetings. Webex postures users with the ability to attend a meeting from different platforms including mobile devices.

Collaborate more effectively with customers, partners and employees without the need to travel. Accelerate decisions with seamlessly integrated voice, video and content sharing, all in one meeting. Improve engagement and build trust with video conferencing, just as if you were meeting in person, and invite others to join using their own video system. Share information and ideas while managing projects with teams from anywhere around the globe. Add even more convenience by holding meetings in your own permanent, customizable personal room that is always available.

Modified – Former name: Meeting Center Data Conferencing

Audio Conferencing Audio conferencing enables multiple participants to converse simultaneously via a telephone in locations around the globe.

Premier: Ideal for high-visibility events, including investor relations calls, focus groups and press conferences Standard: Ideal for regularly scheduled calls, such as medium to large internal employee meetingsInstant Meeting: A reservation-less offering and ideal for staff meeting

Premier: Provides a dedicated conference coordinator to continuously provide support. 5000+ Participants per conference. Standard: A conference coordinator greets and announces each participant or to expedite entry. 5000+ Participants per conference. Instant Meeting: Self-service offering to host audio conferences on demand. 50 participants.

Modified – Former name: Audio Conferencing

13


Modified?Unified Communications Collaboration as a Service (UCCaaS)

UCCaaS is a hosted and managed unified communications service based on Cisco's hosted collaboration solution (HCS). UCCaaSoffers enterprise-grade call control, voice mail, instant messaging, presence and enterprise mobility. Multiple phone models are also included with the monthly service rate.UCCaaS requires a MPLS connection and has inherent built in failover feature.

Cisco unified communications manager provides audio and video call control, voice services, and IP phone features.• Cisco unity connection provides voice messaging features, including web voicemail and voice to email (unified messaging) integration, for clients such as Gmail and Cisco Jabber.

Scale and speed to deployPredictable pricing Focus on core IT competencies and projects Leverage enterprise class hosted solution Limit expense

Modified – Former name: UCaaS. After July 1st it will be deployed exception based only. Existing UCCaaS installations to be modernized to Verizon's Product.

Managed Wireless Local Area Network (MWLAN)

Managed WLAN provides for the complete management of wireless local area network equipment including management, monitoring, configuration, trouble resolution and reporting.

Must be implemented with a managed WAN or managed router and secure gateway.

Verizon's managed wireless LAN service broadens and extends managed network services (MNS) capabilities beyond traditional wired network infrastructure to include Wi-Fi access. With CPE from Aruba Networks and Cisco, we utilize industry standard 802.11a/b/g/n/ac wireless LAN (WLAN) access.

Agencies can monitor their managed network through near real-time reporting capabilities providing information on usage, coverage, security, performance and capacity.

Add wireless access points to your agency location and have the devices tied into and managed as part of the enterprise-class wireless LAN infrastructure. The wireless LAN provides secure access to commonwealth resources. Verizon delivers the resource and expertise.

Guest Wi-Fi is offered as part of Verizon's managed Wireless LAN service as well. Especially for agency visitors to reach back their business environment to demonstrate services.

Modified – Former name: Secured Wireless

14

Voice and Data Network Services* Service Name Description Capabilities Benefits New/

Modified?Virtual Contact Center (VCC)*

Our global cloud contact center solution enables agency help desks to manage contacts when and how they want — by phone, email, chat or even text. VCC provides the flexibility and innovation you need to deliver efficient, world-class customer experiences.

With an internet connection, a PC and a phone number, your agency agents can work from virtually anywhere and collaborate in real time. VCC improves the performance of your contact center agents, control operating expenses and help you meet your agency’s mission.

VCC is a cloud-based global contact center solution that provides agencies with a complete set of contact center functionality – ACD, IVR, agent desktop, workforce management and advanced analytics. Customers simply need an internet connection, phone and a computer allowing them to leverage the full suite of services without the need for premises equipment. Verizon provides options for quick connectivity and capacity on demand.

Upgrades to existing technology and deployments of new technology are done in the cloud providing you with access to the latest contact center tools.

Multichannel contact: Let customers reach out you through the channel that works for them—phone, email, chat or SMS (short message service)—and provide them the option to leave a voicemail, wait for an agent or request a call-back. Streamlined routing: automatic contact distributor instantly queues and allocates calls, and scripting tools help unify routing rules across channels and agents.Data protection: end-to-end data encryption as well as agent role configurations help keep personal and agency data protected. On-demand scalability: Our pay-per-seat structure allows you to quickly and affordably deploy the services or capabilities that fit what you need at that moment.Seamless implementation: Integrate with existing customer support systems, human reasourcesystems, and contact center infrastructure with our APIs; or build it independently.

Modified – Former name: Contact Center Service (CCS)

*This service will not be available July 1 but will be available in FY20

15


Modified?Secure Cloud Interconnect (SCI)*

SCI provides an interconnection with the network of select third-party cloud providers enabling an agency to utilize those third-parties’ cloud services over a private IP to the COV environment network. Once the first agency subscribes SCI, the service rises to an enterprise connection at CESC. The connection can grow as the commonwealth's usage grows.

SCI gives agencies on-demand scalable, flexible and reliable access to cloud service providers across the globe with all the security of Verizon's private IP network. Keep data safe by keeping it completely separated from the public internet. Reduces deployment times with pre-provisioned access. Pay for what you use with consumption based pricing. Establish connections quickly, get utilization reports and set threshold alerts

SCI reduces total cost of ownership by providing large-scale cloud interconnections without the Internet at a significantly less cost as compared to private circuits. Private IP customers easily and quickly begin using private cloud services without sacrificing performance or security.

New


Managed Security Services


17

Managed Security Services - Enterprise

Service Name Description Capabilities Benefits New/

Modified?

Certificate Management*

Certificate management services will provide a multi-tenant management suite for certificate management for servers and end-user devices. The service automates and validates the entire issuance and renewal process.

The certificate management service implements controls that prevent certificate-based outages. The service can quickly identify the misuse of keys and certificatesand automates and validates the entire issuance and renewal process with policy-enforced keys. The service can remediate across thousands of certificates in just hours in the event of a security compromise or new vulnerability. Provides full support for key archiving and recovery by generating key material and certificate signing requests for the user, the platform can securely store a copy of the key and certificate. This enables for key recovery / key escrow by authorized users.

Provides controls that prevent certificate-based outages. Automates and validates the entire issuance and renewal process with policy-enforced key generation and rotation. Enables termination of access, thereby revoking all certificates associated to a user from any integrated source. The service enables delegated/self-service credential management through a web-based, policy enforced self-service portal for rapid certificate requests and renewals.

New

Network Compliance

Network compliance service interrogates the network infrastructure to discover devices as they connect to the network. The service uses a combination of passive and active methods to classify the device according to its type and ownership. Based on its classification, the service assesses the device security posture and allows organizations to set policies that establish the specific behavior the device is allowed to have while connected to a network.

The network compliance solution performs a pre-connect compliance check to ensure only authorized devices connect to the network. Once the device passed the pre-connect check the service puts the user on the right network segment according to their role. Solution will perform a post-connect compliance check to identify persistent threats.

Through policy management the agency can create security policies that are right for your enterprise. Configuration and administration are fast and easy thanks to built-in policy templates, rules and reports. A fully integrated reporting engine helps you monitor your level of policy compliance, fulfill regulatory audit requirements and produce real-time inventory reports.

New

Endpoint Compliance Testing

Endpoint compliance testing will automate the process of determining if endpoint and network equipment configurations meet VITA standards. The service helps you report consistently and accurately against internal and external policies.

• Produce on demand and scheduled compliance reports• Use industry regulations and standards as well as customized rule sets for

evaluating whether a configuration is in compliance• Provide a multi-tenant portal that will provide the compliance check results

to each agency• Identify unmanaged devices and perform pre-connect compliance check

Endpoint compliance testing will evaluate all devices within VITA’s, customer’s and supplier’s environment for compliance with established configuration baselines. Use industry regulations and standards as well as customized rule sets for evaluating whether a configuration is in compliance.

New

Atos will provide the following services as part of their enterprise-wide security package. Some of these new security services may change how information security officers (ISO) and agency information technology resources (AITR) interact with VITA and the multisourcing service integrator (MSI). Additional information will be provided before each service is launched.


18

Managed Security Services - Enterprise


Modified?

Managed Firewall Services

Atos will scan applications as requested by customer in order to evaluate, test and recommend security maintenance activities including upgrades, patches and fixes. The scans will be provided using approved tools designed for application scanning. In accordance with the service management manual and in coordination with the MSI, Atos will work with the application’s owner or external vendor to remediate application scan vulnerability issues.

The application scanning service will scan applications as requested by customer in order to evaluate, test and recommend security maintenance activities including upgrades, patches, and fixes. Atos will work with the application’s owner or external vendor to remediate application scan vulnerability issues. Application scans should be completed using an approved tool designed for application scanning.

The application scanning service will scan applications to evaluate, test and recommend security maintenance activities including upgrades, patches, and fixes. Atos will work with the application’s owner or external vendor to remediate application scan vulnerability issues.

Modification of existing service. Same service with a newer modernized firewall.

Managed Host Intrusion Prevention (HIPS)

A centrally managed solution which adds multiple layers of protection at the host.

• Advanced threat protection through dynamic, stateful desktop firewall

• Integration with the McAfee Global Threat Intelligence network to secure desktops and laptops against advanced threats such as botnets, distributed denial-of-service (DDoS) and emerging malicious traffic before attacks can occur

• Single-pane of glass monitoring

• Deliver advanced protection• Reduce patching frequency and urgency• Preserve business continuity and employee

productivity• Protect data confidentiality• Simplify regulatory compliance

Modify –Formerly Number of Server All Classes

Atos will provide the following services as part of their enterprise-wide security package. Some of these new security services may change how ISOs and AITRs interact with VITA and the MSI. Additional information will be provided before each service is launched.

19

Managed Security Services - OptionalService Name Description Capabilities Benefits New/

Modified?

Data Loss Prevention*

Atos’ data loss prevention (DLP) service will monitor and prevent confidential data loss. Unified DLP provides quick monitoring real-time events, centrally managed security policies to control how employees use and transfer sensitive data, and generates detailed forensics reports with minimal impact to daily business activities. This solution will prevent data loss and leakage when data is modified, copied, pasted, printed or transmitted while enabling its flexible use.

The service provides a highly scalable solution capable of automatically detecting or blocking transmissions containing sensitive data, encrypting emails containing sensitive data, or quarantining messages that may need approval to exit customer’s network. Provide a solution able to add additional scanning categories and content filters (e.g., adult content, credit card information, backdoors, key logger, P2P, personal information, Social Security numbers, violent acts).

Provide a highly scalable solution capable of automatically detecting or blocking transmissions containing sensitive data, encrypting emails containing sensitive data, or quarantining messages that may need approval to exit customer’s network. The DLP solution is able to add additional scanning categories and content filters (e.g., credit card information, backdoors, key logger, P2P, personal information, Social Security numbers, violent acts).

New

File Level Encryption*

File level encryption provides transparent and automated file-system level encryption of server data-at-rest in the distributed enterprise. The solution encrypts unstructured, sensitive data on servers, such as credit card numbers, personal information, logs, passwords, configurations and more.

Provides transparent and automated file-system level encryption of server data-at-rest in the distributed enterprise, including direct attached storage (DAS), storage area network (SAN), and network attached storage (NAS) servers using CIFS/NFS file sharing protocols. The solution encrypts unstructured, sensitive data on servers, such as credit card numbers, personal information, logs, passwords, configurations and more in a broad range of files, including word processing documents, spreadsheets, images, database files, exports, archives, backups and big data implementation.

The file level encryption service provides file level encryption services for end-user desktops and removable media such as USB drives. The solution encrypts unstructured, sensitive data on servers, such as credit card numbers, personal information, logs, passwords, configurations and more. The type of data includes word processing documents, spreadsheets, images, database files, exports, archives, backups and big data implementations.

New

Tokenization License*

The solution tokenizes numeric and alphanumeric data and returns tokens in an unlimited number of formats.

Tokenization is used to address a wide range of use cases, including:1. Securing primary account numbers to achieve PCI DSS compliance2. Protecting personally identifiable information and other sensitive data3. Big data protection4. Scenarios that require static data masking or the exposure of production databases to non-production environments, such as testing, development, staging, research and more.

Tokenization replaces sensitive data with a random, surrogate value or token, much like traditional tokenization solutions, but without the underlying database or 'token vault' that matches original data and tokens.

New

Atos will provide the following services to agencies in the new VITA service catalog. Services are optional for agencies to order as needed.


20

Managed Security Services – Optional*Service Name Description Capabilities Benefits New/

Modified?

Source Code Scanning - INT-APP 1YR*

INT-APP-STATIC & INT-APP-WAS combined into one service offering. (see each offering for description of service.)

INT-APP-STATIC & INT-APP-WAS combined into one service offering. (see each offering for specific capabilities description.) INT-APP-STATIC & INT-APP-WAS combined into one service

offering. (see each offering for benefit description.) New

Source Code Scanning - INT-APP-STATIC 1YR*

Static analysis, also known as “white-box testing,” is the analysis of software without executing, or running, that software. Static analysis examines either the software source code (the code written by the developers) or the executable machine code, which is also known as binary code or bytecode. Development and quality assurance personnel already use many tools that perform.

Static code analysis is one of the security tools the enterprise can use to identify flaws and malicious code in applications before they are bought or deployed. But most static code analysis tools are only partially helpful - they focus on source code which, as proprietary or intellectual property, is often not accessible for testing. For enterprises seeking a static code analysis solution that can actually deliver 100% coverage even when source code is not available, Veracode has the answer.

Veracode offers a fundamentally better approach to static code analysis through thier patented automated static binary analysis, which has been called a “breakthrough” by industry analysts such as Gartner.

New

Source Code Scanning - GL-DEV 1YR*

Veracode Greenlight finds security defects in your code and provides contextual remediation advice to help you fix issues in seconds, right in your integrated development environment.

Utilizing Veracode’s static analysis engine, Veracode Greenlight allows customers to find issues early, reduce costs, and release code on time –at the speed of the customer’s DevOps process.

Veracode Greenlight finds security defects in your code and provides contextual remediation advice to help you fix issues in seconds. Leveraging our proven, software as a service based static engine, Veracode Greenlight offers immediate results and scales to your needs.

New

Source Code Scanning - SCA 1YR*

Veracode software composition analysis (SCA) helps build an inventory of third-party components to identify vulnerabilities, covering open source and commercial code.

Veracode SCA protects your Java, Javascript and .NET applications from open source risk by identifying known vulnerabilities in open source libraries used by your applications. View our broader language coverage. In addition to providing a list of vulnerabilities when your application is scanned, Veracode SCA can also alert you when new vulnerabilities are discovered after your application has been scanned or when existing known vulnerabilities have had their severity level upgraded. Integrated with Jenkins for your build pipeline, you can fail your build based on vulnerabilities discovered as well as any components that your security team has blacklisted.

Veracode SCA identifies risks from open source libraries early so you can reduce unplanned work, covering both security and license risk. SCA helps engineering keep roadmaps on track, security achieve regulatory compliance and the business make smart decisions.

New



21

Managed Security Services - OptionalService Name Description Capabilities Benefits New/

Modified?

Source Code Scanning - E-LEARN 1YR

Veracode developer training empowers developers, testers and security leads to develop secure applications, providing the critical skills they need to identify and address potential vulnerabilities.

Web-based training modules for developers, managers and security personnel are integrated into the Veracode platform, enabling organizations to meet security training and competency testing requirements, and to improve skills through targeted web-based courses and a security knowledge base. Courses can be taken at user's own pace. Veracode provides dashboards and usage metric reports that document completed courses and competency testing results.

Veracode eLearning consists of course-based training that helps developers gain the critical skills they need to identify and address potential vulnerabilities.

New

Source Code Scanning - INT-APP-WAS 1YR

Dynamic analysis security testing (DAST), also known as “black-box testing,” enables organizations to identify security issues in web applications that are running in a production environment. The presence of commonly occurring vulnerabilities is determined by directing a series of requests to a web application and evaluating the responses received.

A dynamic analysis security scanner can facilitate the automated detection of security vulnerabilities within a web application. A dynamic analysis test is often required to comply with various regulatory requirements. Dynamic analysis scanners can look for a wide variety of vulnerabilities, including:• Input/output validation: (cross-site scripting, SQL injection, etc.)• Specific application problems• Server configuration mistakes/errors

This tool can detect vulnerabilities of the finalized release candidate before shipping, simulate a malicious user by attacking and probing, and seeing what results are not part of the expected result set. It is not language dependent. A web application scanner is able to scan engine-driven web applications. Report of critical vulnerabilities discovered is delivered, with information to enable development and quality assurance teams to recreate flaws.Detailed remediation information on how to fix the flaws is provided. Guidance is provided on proactive steps to drive longer-term strategies that organizations can adopt to improve overall application security across their software portfolio.

New

Source Code Scanning - TS-BRONZE-PLUS-M 1YR

Support agreement for one per year for full account coverage

1) Up to nine hours/month utilized for API/integration support, upload and result review calls to discuss remediation and mitigation guidance. Unused hours do not carry over. 2) (excluding holidays and weekends) Case response time during hours for email and phone cases is one business day. 3) Up to five tokens to be used for two-factor authentication. Support activities provided on a remote basis. Travel and related expenses associated with on-site activities will be invoiced and be payable as incurred. Additional support hours can be purchased.

Vendor support - Includes but not limited to:• Phone support available from 3 a.m. to 8 p.m. EST Monday-

Friday• Nine hours/month utilized for API/integration support• Up to five tokens to be used for two-factor authentication

New


22

Managed Security Services - Optional


Modified?

Virtual Firewall VF

The Palo Alto Networks VM-Series firewall is the virtualized form of the Palo Alto Networks next-generation firewall.

Virtualized form factor firewall available in the following sizes 50, 100, 300, 500, 700

The VM series is positioned for use in a virtualized or cloud environment where it can protect and secure east-west and north-south traffic.

New

Firewall Analyzer

Licenses can be for a single firewall or pair or cluster of firewalls. AlgoSec firewall analyzer delivers visibility and analysis of complex network security policies across on premise and cloud networks. It automates and simplifies security operations including troubleshooting, auditing and risk analysis.

Centrally manage network security policies even across multi-vendor hybrid cloud environments. Visualize complex networks with a dynamic network topology map.Clean up and optimize firewall policies quickly and efficiently. Identify and mitigate risky firewall rulesReduce firewall auditing time and costs by up to 80% with automated compliance reports. Easily enforce network segmentation.

This helps administrators to proactively secure networks before security threats arise, avoid network abuses, manage bandwidth requirements, monitor web site visits and ensure appropriate usage of networks by employees.

New


Messaging


24

Zix Email Encryption Service*• Simple email encryption – No plug-in or passwords required

• Foolproof data loss prevention – Pre-built and custom filters will prevent human error

• System-generated email encryption – Scan and protect system generated messages

• Relevant experience – Previous work in other states and with other governmental bodies using a Google and Zix solution; proven ability to execute to plan and flexibility to address needs

• Quality support – A team ready to assist and go above and beyond standard Google services


25

Service Capabilities*Zix Email Security

Capability Desktop Mobile Device Fax Printer Systems that Generate Email

Simple email encryption

Email data loss prevention

Email encryption for shared mailboxes

Email encryption for distribution list

Reporting on entire encrypted network

Email encryption for system-generated email

Best encrypted email experience For recipients in the industry

Prevention of malicious email From system-generated sources


Managed Print Services


27

Managed Print Service Tiers


Bronze Tier Silver Tier Gold TierOn-site support response within 12 business hours

Problem resolution within 36 business hours

On-site support response within nine business hours

Problem resolution within 16 business hoursNote: This is the default level

On-site support response within four business hours

Problem resolution within eight business hours

Three tiers of support will now be available for all managed print devices in the VITA Service Catalog. Our new varied support tier model provides agencies with increased flexibility. Agencies can now select gold tier service for high-priority devices and bronze tier service for low-priority devices, customizing the response time for critical issue resolution.

The three tiers include time, travel and parts expenses incurred during business hours for break/fix and general support.

28

Device Capabilities

Multi-function Device (MFD) CategoriesAgencies can choose from a range of all-in-one printers offering professional results,

fast print/copy/scan speeds, easy-to-use interfaces and innovative features

CapabilityCategory

1 2 3 4 5 6Min. Print Speed

Pages Per Minute (PPM) 25 45 75 B&W: 25Color: 25

B&W: 45Color: 40

B&W: 70Color: 50

Copy Fax Scan

Black and White

Color

Desktop Model Available

Ideal Work Group 2-10 10-20 20+ 2-10 10-20 20+

Avg. Monthly Use 5,000 15,000 40,000 5,000 15,000 40,000

Network Single-function Printer CategoriesWith every single-function printer agencies will see crisp text,

high-quality graphics and fast print speeds

CapabilityCategory

1 2 3 4Min. Print Speed

Pages Per Minute (PPM) 28 31 42 45

Copy Fax Scan

Black and White

Color

11x17 Capability

Ideal Work Group 1-5 5-10 10-20 20+

Avg. Monthly Use Up to 500 Up to1,500

Up to 5,000 5,000+

All devices described below will now be available at three tiered levels of service

End User Computing


30www.vita.virginia.gov

FY2020 Ordering Options - Hardware

The Desk Centric role is recommended for End Users who are categorized as performing Administrative, Finance, Contracts, and Human Resource functions. These End Users primarily utilize email, a limited number of applications outside of the normal MS Office suite, perform web-browsing, and spend 80% or more time at the office.

Desk Centric

The Field Worker role is recommended for End Users who are 100% mobile. This includes, but is not limited to: Field Service technicians, Law Enforcement, Health Care, or Environmental Agency End Users.Field Worker

The Traveling Professional role is recommended for End Users that need to work remotely. They include Managers or Supervisors in addition to resources who also primarily utilize email, a limited number of applications (primarily the MS Office suite), and perform some web browsing. These End Users must have the ability to work through a VPN connection and do not always have access to a reliable wireless network.

Traveling Pro

The Engineer role is recommended for End Users who include but are not limited to: Developers, Programmers, Database Administrators, Computer Aided Design (CAD) Engineers, or Geospatial Engineers. These End Users need a performance driven device that supports heavy application drives use cases.

Engineer

31www.vita.virginia.gov

FY2020 Ordering Options – Support

*Not available for purchase in the VITA service catalog. Contact your CAM with questions about VIPs.

*

32

End User Computing Device Options Desk Centric Traveling Pro Field Worker Engineer

Laptops • Dell Latitude 5490 (i5 128GB) • HP EliteBook 840 G5 (i5 128GB)

• MACBOOK PRO 13IN W/TOUCH BAR 3.1G I5 256GB

• Surface Laptop 512GB i7 16GB Platinum WIN 10 PRO

• Dell Precision 3530 (i7 256GB)• Surface Laptop 256GB i5 8GB Platinum• Surface Laptop 256GB i7 8GB Platinum

WIN 10 PRO• HP EliteBook 840 G5 (i5 128GB) • HP EliteBook 850 G5 (i7, 256GB)

• Latitude 14 Rugged 5420 Laptop (i5, 256GB)

• Latitude 7212 Rugged Extreme Tablet (i5, 256GB)

• Dell Precision 5530 (i7 5126GB)

• HP ZBook 15 G5 Mobile Workstation

Tablets • Surface Pro 256GB i5 8GB • Latitude 7390 2-in-1 Tablet (i5, 256GB)• HP EliteBook 1030 G3 Tablet (i5, 256GB) • Surface Pro LTE 256GB i5 8GB• Surface Pro 256GB i5 8GB • Latitude 7390 2-in-1 Tablet (i5, 256GB)• HP EliteBook 1030 G3 Tablet (i5, 256GB) • Surface Pro LTE 256GB i5 8GB

• Latitude 7212 Rugged Extreme Tablet (i5, 256GB)

Desktops • Dell Optiplex 3060 Small Form Factor (SFF) Bundle (i3, 128GB)

• HP ProDesk 600 G4 (MT) (i3, 128GB) • HP EliteDesk 800 G4 (SFF) (i5, 256GB)• Dell Optiplex 5060 Mini Tower Bundle

(i5, 256GB)

• Dell Precision Tower 3630 Bundle (i7, 256GB)

• HP Z2 G4 Mini Tower (i7, 256GB)

33

Additional Services*

Service Description

Bring Your Own Device (BYOD) Assessment & Initial Image Load Service*

Iron Bow will provide support for BYOD. All Devices must be government-owned and not personally-owned Devices. Legacy devices are excluded.

To ensure these Devices are compliant with the requirements within EUC, Iron Bow’s Software and Hardware Services Team will perform the following tasks:• Review the Device for compliant architecture• Review drivers• Test drivers• Update/customize image• Pilot test to ensure the Device will be stable in the Environment

Keep Your Hard Drive*VITA customer determines there is a need to keep the hard drive rather than return it with the device. This service provides an option of removing the hard drive prior to disposal of an end user device.

Offline Support Status*

VITA has an occasional need to "shelve" devices (place them in offline storage), both EUC and Agency-owned, for short periods. A Service Request will be submitted by the Agency to reactivate the Device. After assignment, Iron Bow will ensure that all devices are updated/patched prior to bringing them online. The devices will be deployed using the IMAC process.


34

Dell Optiplex 3060 Small Form Factor (SFF) Bundle (i3, 128GB)

Device InformationOverview Specifications:

• Intel Core i3-8100 (Quad Core, 6MB Cache, 3.6GHz, 4GHz Turbo, 65W)

• 8GB (1X8GB), 2666MHz, DDR4• 128GB, M.2, SATA, SSD• 8x DVD+/-RW 9.5mm Optical Disk Drive• Realtek PCIe Gigabit Ethernet• (4) USB 2.0 Type-A (2 Front/2 Rear), (4) USB 3.1 Type-A (2

Front/2 Rear), (1) RJ-45 (Rear), (1) DisplayPort (Rear), (1) HDMI 1.4 (Rear), (1) Universal Audio Jack (Rear), (1) Line Out

• Intel UHD Graphics 630 (Integrated)• Dell 24" Monitor (P2317H)• Dell KM636 Wireless Keyboard & Mouse

Category Desk Centric-Standard Desktop

Refresh Period 4 Years

Available Peripherals Peripherals list will be provided

35

HP ProDesk 600 G4


• Intel Core i3-8100 (Quad Core, 6MB Cache, 3.6GHz, 4GHz Turbo, 65W)

• 8GB (1X8GB), 2666MHz, DDR4• 128GB, M.2, SATA, SSD• 8x DVD+/-RW 9.5mm Optical Disk Drive• Intel Ethernet i219-V• USB Type-C, (2) USB 3.1 Gen 1 (2 Front/4 rear), (2) USB 2.0 (2

front/2 rear), (1) RJ-45, (2) DisplayPort 1.2, (1) Universal Audio Jack

• Intel UHD Graphics 630 (Integrated)• HP 24" EliteDisplay E243• HP Wireless Keyboard and Mouse Business Slim Keyboard

Category Desk Centric-Standard Desktop



https://www.bing.com/images/search?view=detailV2&ccid=PdKIIWeS&id=86EB1F8B1A46DB8B996BC4C9C3FC006E70B48DD8&thid=OIP.PdKIIWeSy4zfxLMzvW95fAHaFj&mediaurl=http://ssl-product-images.www8-hp.com/digmedialib/prodimg/lowres/c05372770.png&exph=430&expw=573&q=hp+prodesk+600+g4+small+form+factor&simid=608022588633123406&selectedIndex=0&adlt=STRICT

36

Dell Latitude 5490


• Intel Core i5-7300U (Dual Core, 3MB Cache, 2.60GHz, 3.5GHz Turbo, 15W)

• 8GB (1x8GB), 2400 MHz, DDR4• 128GB, M.2, SATA, SSD• Intel Ethernet i219-LM (Integrated)• Qualcomm QCA61x4A, 802.11ac Dual Band , Bluetooth 4.2• Universal Audio Jack, (3) USB 3.1 Type-A, (1) PowerShare, (1) HDMI,

(1) VGA, (1) USB-C/Display Port, (1) LAN"• HD Graphics 620 (Integrated)• 14.0”; 1920x1080, 32 Bit, Non-touch• Dual pointing device (touchpad and point stick) with scroll zone• Weight: 3.52 lb• Size: 0.8” x 13.1” x 9”• Estimated Battery Life: Up to 10 hours

Category Desk Centric-Standard Laptop



37

HP EliteBook 840 G5


• Intel Core i5-8350U (Quad Core, 6M Cache, 1.7GHz, 3.6GHz Turbo, 15W)

• 8GB (1x8GB), 2400MHz, DDR4• 128GB, M.2, SATA, SSD• Intel Ethernet i219-V (Integrated)• Intel wireless 8265 ac 2x2 + Bluetooth 4.2• eStar Enable IOPT, (1) Thunderbolt (USB Type-C Connector), (2) USB

3.1 Gen 1 (1 charging), (1) HDMI 1.4b, (1) RJ-45, (1) docking connector, (1) Universal Audio Jack

• Intel UHD Graphics 620 (Integrated)• 14 inch FHD (1920x1080) Anti-Glare LED UWVA 220 slim

• Dual pointing device (touchpad and pointstick) with scroll zone, backlit • Weight: 3.26 lb• Size: 0.7” x 12.8” x 9.2”

Category Desk Centric-Standard Laptop



https://www.bing.com/images/search?view=detailV2&ccid=KweusmFn&id=2CCCF7B384F47CCB374F69E3EB34FFCAC588F26E&thid=OIP.KweusmFnIbK74ghjUj-vdAHaFj&mediaurl=https://ssl-product-images.www8-hp.com/digmedialib/prodimg/lowres/c05974561.png&exph=430&expw=573&q=840+g5&simid=607997329929404689&selectedIndex=15&adlt=STRICT

38

Dell OptiPlex 5060


• Intel Core i5-8500 (6 Cores, 9MB Cache, 3.0MHz, 4.1GHz Turbo, 65W)• 16GB (2x8GB), 2400 MHz, DDR4• 256GB, 2.5" SATA, SSD• 8x DVD+/-RW 9.5mm Optical Disk Drive• Intel Ethernet i219-V (Integrated)• (5) USB 3.1 Type-A (1 front / 4 Rear), (1) USB 3.1 Type-C (front), (4)

USB 2.0 (2 Front / 2 Rear), 1 PowerShare, (1) RJ-45, (2) Display Port 1.2, (1) Universal Audio Jack (Rear), (1) Line Out

• Intel UHD Graphics 630 (Integrated)• Dell 27" Monitor (P2717H)• Dell KM636 Wireless Keyboard & Mouse

Category Desk Centric-Performance Desktop



39

HP EliteDesk 800 G4


• Intel Core i5-8500 (6 Core, 9MB Cache, 3.0GHz, 4.1GHz Turbo, 65 W)• 16GB (1x16GB), 2666MHz, DDR4• 256GB SATA TLC SSD• 9.5 DVDWR• Intel Ethernet i219-V (Integrated)• (1) USB Type-C, (2) USB 3.1 Gen 1 (2 front/4 rear), (1) USB 2.0 (2

front/2 rear), (1) charging, (1) RJ-45, (2) DisplayPort 1.2, (1) Universal Audio Jack"

• Intel UHD graphics 630 (Integrated)• HP EliteDisplay E273• HP Slim Wireless Keyboard and Mouse

Category Desk Centric-Performance Desktop



40

Dell Precision 3630


• Intel Core i7-8700 (6 Core, 12MB Cache, 3.20GHz, 4.6GHZ Turbo, 65W)

• 16GB (2x8GB), 2666MHz, DDR4• 256GB, 2.5" SATA, SSD• 8x DVD+/-RW 9.5mm Optical Disk Drive• Intel Ethernet i219-V (Integrated)• (4) USB 2.0 Type A (2 Front /2 Rear w/ SmartPower), (5) USB 3.1

Type A (1 Front /4 Rear), (1) USB 3.1 Type C (Front), (1) RJ-45 (Rear), (2) Display Port (Rear), (1) Serial (Rear), (2) PS/2 (Rear), (1) 3.5 mm Stereo Headset/Mic Combo (Front), (1) Universal Audio Jack (Rear)"

• Intel HD Graphics 630 (Integrated)• Dell 27" Monitor (P2717H)• Dell KM636 Wireless Keyboard & Mouse

Category Engineer-Premium Desktop



41

HP Z2 G4 Workstation


• Intel Core i7-8700 (6 Core, 12MB Cache, 3.20GHz, 4.6GHZ Turbo, 65W)

• 16GB (1x16GB), 2666MHz, DDR4• 256GB SATA 1st SSD• 9.5 DVDWR 1st ODD• Intel Ethernet i217-V (Integrated)• (1) USB Type-C, (6) USB 3.1 Gen 1 (2 front/4 rear), (4) USB 2.0 (2

front/2 rear), (1) charging, (1) RJ-45, (2) DisplayPort 1.2, (1) Universal Audio Jack

• Intel UHD graphics 630 (Integrated)• HP EliteDisplay E273• HP Slim Wireless Keyboard and Mouse

Category Engineer-Premium Desktop



42

Dell Mobile Precision 5530


• Intel Core i7-8850H (6 Core, 9MB Cache, 2.6GHz, 4.3GHz Turbo, 45W)• 16GB (1x16GB), 2666MHz, DDR4• 256GB, M.2, PCIe NVMe, SSD• USB Dongle Needed - Provided in Box• Intel Wifi Link 9260 2x2, 802.11ac, Bluetooth 5.0• (2) USB 3.1 Gen 1 port with PowerShare, (1) HDMI port, (1)

Thunderbolt 3 Type C Port, (1) Headset port, (1) memory card reader• NVIDIA Quadro P1000 w/4GB GDDDR5• 15.6” UltraSharp FHD IGZO4, 1920x1080, AG, NT, w/Perm Panel Guar

72% Color Gamut, Platinum Silver• Up to 7 1/2 Hours

Category Engineer-Premium Laptop



43

HP ZBook 15 G5 Mobile Workstation


• Intel Core i7-8750H (6 Core, 9MB Cache, 2.2GHz, 4.1GHz Turbo, 45W)• 16GB (1x16GB), 2666MHz, DDR4• 512GB, M.2, PCIe, NVMe, Self Encrypting, SSD• Intel Ethernet i219-V (Integrated)• Intel 9560 ac 2x2 +Bluetooth 5 WW• (2) USB 3.0, (1) Charging, (1) HDMI 2.0, (1) Universal Audio Jack, (1)

RJ-45, (1) USB 3.0, (1) USB 3.1 Type C Thunderbolt3, (1) Display Port 1.3

• Available for Purchase (Requires HP Thunderbolt Dock 230W G2)• AMD RadeonPro™ WX 4150 (4 GB GDDR5 dedicated)• 15.6 inch FHD (1920x1080) Anti-Glare LED UWVA slim• Up to 8 hours

Category Engineer-Premium Laptop



44

Dell Latitude 5420 Rugged


• Intel Core i5-6300U (Dual Core, 3M Cache, 2.40GHz, 4.0GHz Turbo, 15W)

• 8GB (1x8GB), 2133MHz, DDR4• 256GB SSD• Intel Dual Band Wireless 8260, 802.11ac, Bluetooth 4.2• (1) Universal Audio Jack, (1) HDMI, (1) VGA, (2) RJ45 Connectors, (2)

DB9 Ping serial, (1) 4 pin USB 2.0, (1) 9 pin USB 3.0 w/ PowerShare, (2) 9 pin USB 3.0

• Intel HD Graphics 520 (Integrated)• .92 MP• 14.0” FHD(1920x1080) Outdoor readable, Touch with camera with

Privacy Shutter and Microphone• Up to 10 Hours

Category Field Worker-Ruggedized Laptop

Refresh Period 2 & 3 Years


45

Dell Latitude 12 Rugged Extreme 7212


• Intel Core i5-6300U (Dual Core, 3M Cache, 2.40GHz, 4.0GHz Turbo, 15W)

• 8GB (1x8GB), 1866MHz, LPDDR3• 256GB, M.2, SATA, SSD• Qualcomm QCA61x4A, 802.11ac Dual Band , Bluetooth 4.1• (1) USB 3.0 Type A, (1) USB 3.1 Type C Gen 1 (supports power and

display), (1) Universal Audio Jack• Intel HD Graphics (Integrated)• 8MP (rear), 5MP (front)• WLAN Chassis 11.6 FHD (1920x1080) Outdoor Readable Glove Capable

Touchscreen w/Gorilla Glass• Up to 10 Hours

Category Field Worker-Ruggedized Tablet

Refresh Period 2 & 3 Years


46

Dell Mobile Precision 3530


• Intel Core i7-8750H (6 Core, 9MB Cache, 2.20GHz, 4.1GHz Turbo, 35W)

• 16GB (1X16GB), 2666MHz, DDR4• 256GB, M.2, PCIe NVMe, SSD• Intel Ethernet i219-V (Integrated)• Qualcomm QCA61x4A, 802.11ac Dual Band , Bluetooth 4.1• (3) USB 3.1 Type A, (1) USB 3.1 Type C, (1) RJ45 Port, (1) HDMI 2.0,

(1) VGA, (1) Memory Card Reader, (1) Universal Audio Jack• Nvidia Quadro P600 w/4GB GDDR5• .92 MP• 15.6" FHD WVA, 1920x1080, Anti-Glare Non-Touch• Up to 9 hours

Category Traveling Professional-Performance Laptop



47

Microsoft Surface Laptop 2



• 8 GB LPDDR3• 256GB SSD• IEEE, 802.11ac, Bluetooth 4.1• (1) USB 3.0, (1) Mini Display Port, (1) 3.5mm headset, (1) Surface

Connect• Intel Iris Plus Graphics 620 (Integrated)• 720p (front)• 13.5 in; Touch-screen; Widescreen; 2256X1054• Up to 14.5 Hours




48




• 8 GB DDR4 SDRAM• 256GB SSD• IEEE, 802.11ac, Bluetooth 4.1• (1) USB 3.0,(1) Mini Display Port, (1) 3.5mm headset, (1) Surface

Connect• Intel Iris Plus Graphics 640 (Integrated)• 720p (front)• 13.5 in; Touch-screen; Widescreen; 2256X1054• Up to 14 Hours




49




• 16 GB DDR4 SDRAM • 512GB SSD• IEEE, 802.11ac, Bluetooth 3.0• (1) USB 3.0, (1) Mini Display Port, (1) 3.5mm headset, (1) Surface

Connect• Intel Iris Plus Graphics 640 (Integrated)• 720p (front)• 13.5 in; Touch-screen; Widescreen; 2256X1054• Up to 14 Hours

Category Traveling Professional-Premium Laptop



50

Apple MacBook Pro


• Intel Core i5-8259U (Quad Core, 6MB Cache, 2.3 GHz, 3.8 GHz Turbo, 28W)

• 8GB (2x4GB), 2133MHz, LPDDR3• 256GB, M.2, PCIe NVMe, SSD• AirPort Extreme, 802.11a/b/g/n/ac, Bluetooth 5.0• (4) USB 3.1 Type-C (Thunderbolt), (1) Universal Audio Jack• Intel Iris Plus Graphics 655 (Integrated)• 720p FaceTime HD camera• 13.35", 2560X1600, 24 Bit, Non-touch• Up to 10 Hours

Category Traveling Professional-Premium Laptop



51

HP EliteBook 850 G5


• Intel Core i7-8550U (Quad Core, 8MB Cache, 1.8GHz, 4.0GHz Turbo, 15W)

• 16GB (1x16GB), 2400MHz, DDR4• 256GB, M.2, PCIe, NVMe, SSD• Intel Ethernet i219-V (Integrated)• Intel 8265, 802.11ac, Bluetooth 4.2, 2 Antennas• eStar Enable IOPT, (1) Thunderbolt (USB Type-C Connector), (2) USB

3.1 Gen 1 (1 charging), (1) HDMI 1.4b, (1) RJ-45, (1) docking connector, (1) Universal Audio Jack

• Intel UHD graphics 630 (Integrated)• 15.6 inch FHD (1920x1080) Anti-Glare LED UWVA 220 for WWAN slim• Up to 8 ½ hours

Category Traveling Professional-Standard Laptop Plus



52

Dell Latitude 7390 2-in-1 Tablet


• Intel Core i5-8350U (Quad Core, 6M Cache, 1.7GHz, 3.6GHz Turbo, 15W)

• 8GB (1x8GB), 1866MHz, LPDDR3• 256GB, M.2, SATA, SSD• Intel Dual Band Wireless 8260, 802.11ac, Bluetooth 4.2• Qualcomm Snapdragon X12 LTE-Advanced• (2) USB 3.1 Gen 1 (w/ Power Share), (2) Display Port over USB Type-

C, (1) HDMI 1.4, (1) uSIM Card Slot, (1) uSIM card slot (WWAN only), (1) uSD 4.0 Memory card reader, (1) Volume Up/Down Rocker, (1) Universal Audio Jack

• Intel UHD Graphics 620 (Integrated)• 720p• 13.3” FHD (1920x1080) Touch LCD with Mic/Camera• Up to 10 hours

Category Traveling Professional-Tablet (Detachable & Convertible)



53

HP EliteBook x360 1030 G3 Tablet


• Intel Core i5-8250U (Quad Core, 6MB Cache, 1.6GHz, 3.4GHz Turbo, 15W)• 8GB (1x8GB), 2133MHz, LPDDR3• 256GB M2 SATA-3 Self Encrypted SSD• Intel 8265, 802.11ac, Bluetooth 4.2• Qualcomm Snapdragon X12 LTE-Advanced• WNC XRAV-1 NFC• eStar Enable IOPT, (2) Thunderbolt (USB Type-C connector), (1) USB 3.1 Gen 1

(Charging), (1) Universal Audio Jack, (1) HDMI 1.4, (1) External Nano SIM slot for WWAN

• Intel UHD graphics 620 (Integrated)• 720p (front)• 13.3 inch FHD (19230x1080) Anti-Glare LED UWVA uslim Touchscreen• Wacom AES 2.0 Pen with App Launch Button• Up to 9 ½ hours




54

Microsoft Surface Pro 6


• Intel Core i5-8250U (Quad Core, 6MB Cache, 1.6GHz, 3.4GHz Turbo, 15W)

• 8 GB(1x8GB), 1866Mhz, LPDDR3• 256GB SSD• IEEE, 802.11ac, Bluetooth 4.1• (1) USB 3.0, (1) Mini Display Port, (1) 3.5mm headset, (1) Surface

Connect• Intel UHD Graphics 620 (Integrated)• 8MP (rear), 5MP (front)• 12.3 in; Touch-screen; Widescreen; 2736X1824• Up to 13.5 Hour




55

Microsoft Surface Pro 2017 LTE



• 8 GB(1x8GB), 1866Mhz, LPDDR3• 256GB, M.2, PCIe NVMe, SSD• Marvell AVASTAR, Bluetooth 4.2• 4G LTE Advanced• (1) USB 3.0, (1) Mini Display Port, (1) 3.5mm headset, (1) Surface

Connect• Intel Iris Plus Graphics 620 (Integrated)• 8MP (rear), 5MP (front)• 13.5 in; Touch-screen; Widescreen; 2256X1054• Up to 13.5 Hour




server storage and data center · backup or replication: client data restore or replication. 49 -...

Documents