The Department of Defense (DoD), Defense Information Systems Agency (DISA), has a requirement for an Endpoint Protection Platform (EPP) to fulfill a requirement for Endpoint Protection Program software for the Department of Defense (DoD)

• The Department of Defense (DoD) has directed policies through the Host Based Security System (HBSS) Divestment Memo (April 13, 2021) and Fiscal Year (FY) 2025 Defense Information Systems Agency Working Capital Rate Changes (June 9, 2023) to allow DoD components to acquire and deploy diverse endpoint management security solutions with the caveat that any acquired solution must provide the minimum required endpoint security capabilities specified in the “DoD Endpoint Security Criteria Requirements Matrix”. This policy also requires components to expose data elements specified in the DoD Chief Information Officer (CIO) “Endpoint Security Minimum Data Standards” Memorandum.  Current procurement for Endpoint Security Solution (ESS) License Maintenance provides software upgrades, updates, patches, and hotfix support to meet changing and emergent threats and seamlessly integrate into the existing environment.  This product shall allow capabilities within that environment to maintain full functionality across the DoD.  Market research and vendor engagements indicate that functionality/capabilities provided to the Government supporting the Department of Defense may be available through various solutions.
• The DoD must continue to meet DoD endpoint security requirements while adhering to all reporting standards.  Research and analysis of commercial products indicate there are some ‘gaps’, notably coverage of Secret Internet Protocol Router (SIPR) and as well as data collection on Non-Classified Internet Protocol Router (NIPR) environments.  DISA ID3 Endpoint Security Solutions Portfolio Management is inquiring about capabilities that may exist to cover DoDNet/Fourth Estate Network Optimization (4NEO) with approximately 35,000 endpoints while providing information to Combatant Commands (COCOMs) and Military Departments on acceptable alternatives to the current ESS solution as an Endpoint Protection Platform (EPP).

• The Contractor shall provide an Endpoint Protection Platform (EPP) through DISA ID3 Endpoint Security Solutions Portfolio Management for potential Endpoint Protection Program software.