DEPARTMENT OF THE TREASURY, Internal Revenue Service, (M:P), 6009 Oxon Hill Road, Suite 700, Oxon Hill, MD 20745

70 -- VM SECURITY SOFTWARE PACKAGE SOL TIRNO97Q00105 DUE 051997 POC Purchasing Agent, Ida Cofield, 202-283-1162 The Internal Revenue intends to award a purchase order for a VM Security Software package. The software must be C2 certified which requires the operating system is to be compliant in four functional areas: Identification and Authentication (I&A)(userid;password); Discretionary Access Control (DAC) (ability to restrict access to resources); Object Reuse (erase-on-scratch); and Audit (recorded trail of security-relevant events). Deliverables; Must have Backup and Recovery as follows; The ability to backup and restore all data structures on VM, including SFS, CMS minidisks and non-CMS minidisks. The ability to provide stand alone restore capabilities. The ability to do three logical backup types full, incremental (using last backup as basis) and cumulative (using last full backup as basis). Automatically manage a catalog for restore and backup purposes. Allow the end-user the ability to restore their own data through line mode and or full screen interfaces and support hardware and software compressionof data on tape. Security and Directory Maintenance as follows: Provide centralized security and directory maintenance functions without the systems programmer losing control. Support access control files at the user, group and or system level. Provide for DASD defragmentation as part of routine directory maintenance. Force users to change passwords periodically. Support LOGONBY facility. Support for encrypting of password and CMS files. Audit security and directory maintenance activity on the VM system. Support IRS defined password standards (minimum character length, reuse of passwords, etc) and allow users to manage their own access control rules and passwords. VM Based Webserver as follows: Must Support all types of data, including but not limited to; HTML, Java applets, image files, audio files, video files, etc. Support data stored on CMS minidisks and SFS. Support user home pages from minidisks or SFS directories (including from multiple filespaces). Provide support for multitasking server. Provide multitasking sockets layer interface to TCP/IP. Support writing CGI programs in REXX. Provide dynamic worker support for running CGI programs. Provide on-line browser based help and provide on-line browser based dynamic configuration. All responsible sources who can provide and meet the above requirement shall submit written quotations by May 21, 1997 and must be technically acceptable to the government. No solicitation will be issued, therefore, such requests for solicitation will be considered non responsive. Evaluation/Award will be based on the lowest overall price offered to the government. All quotes shall include Price(s); FOB point; a poc (name and telephone numbers); GSA contract number if applicable; delivery date; business size and payment terms. Quotes over 10 pages in total will not be accepted by facsimile. All questions must be submitted in writing and received by facsimile (202/283-1515) or mail. A purchase order will be awarded on the basis of price alone soon after the quotes are received. (0122)

Loren Data Corp. http://www.ld.com (SYN# 0244 19970506\70-0014.SOL)