Title
a. Approve and authorize the Contracts/Purchasing Officer to execute on behalf of County of Monterey the quote for the VRT subscription Rules License Agreement between the County of Monterey and Sourcefire, Inc. for the period of September 29, 2013 through September 28, 2014 for the yearly provision of a subscription to the Snort application in the total amount of $5,187;
b. Accept non-standard contract provisions as recommended by the Director of Information Technology; and
c. Authorize the Contracts/Purchasing Officer to exercise the renewal options to the Subscription yearly under the same or similar terms.
Report
RECOMMENDATION:
It is recommended that the Board of Supervisors:
a. Approve and authorize the Contracts/Purchasing Officer to execute on behalf of County of Monterey the quote for the VRT subscription Rules License Agreement between the County of Monterey and Sourcefire, Inc. for the period of September 29, 2013 through September 28, 2014 for the yearly provision of a subscription to the Snort application in the total amount of $5,187;
b. Accept non-standard contract provisions as recommended by the Director of Information Technology; and
c. Authorize the Contracts/Purchasing Officer to exercise the renewal options to the Subscription yearly under the same or similar terms.
SUMMARY/DISCUSSION:
Snort is a network intrusion prevention and detection system (IDS/IPS) developed by Sourcefire, Inc. Combining the benefits of signature, protocol, and anomaly-based inspection, Snort is the most widely deployed IDS/IPS technology worldwide. Signature based IDS monitor packets in the Network and compares with pre-configured and pre-determined attack patterns known as signatures. To use Snort, you must maintain a current ruleset (set of signatures) in order for Snort to have the latest detection capabilities. Sourcefire Vulnerability Research Team (VRT) Rules are the official rules for Snort. The yearly subscription provides real time access to the information which would otherwise be accessible after thirty days which is not reasonable. Real time access to the data is essential to the proactive efforts in maintaining network security for the County.
Sourcefire, Inc. provides a yearly quote to the County of Monterey for the ensuing subscription period to utilize the most current ruleset. By signing the quote, the County agrees to the terms and conditions of the VRT Certified Rules License Agreement (Agreement). Sourcefire, Inc. does not require signatures on the Agreement as the yearly quote provided to the County specifies County agreement to the terms and conditions. As with all software licensing, subscription, and support/maintenance, the vendor requires payment up front for the ensuing period. The approval of this yearly subscription as recommended by the Director of Information Technology will ensure continued proactive network security practices.
OTHER AGENCY INVOLVEMENT:
The Agreement was not approved by County Counsel and/or Risk Management due to the presence of the following non-standard and unacceptable terms/conditions in the Agreement: as-is product with limitation of liability, no warranty or performance guarantee, non-liability of vendor for damages, no intellectual property protection, jurisdiction in Maryland, and limited refund for subscription.
FINANCING:
The funds for the support/maintenance Agreement have been included in the FY 2013-14 Recommended Budget for the Information Technology Department, ITD 1930, Unit 8137, INF002. Transactions relating to each fiscal year will be included in each respective Recommended Budget.
Prepared by: Sarah House, Management Analyst III, 755-5108
Approved by:
__________________________________________
Dianah Neff, Director of Information Technology
Dated: December 2, 2013
Attachments:
VRT Certified Rules License Agreement
Quote