CITY OF CARMEL-BY-THE-SEA

CITY COUNCIL
Staff Report
SR 2017-057
May 2, 2017
Consent Agenda

TO: Honorable Mayor and City Council Members

SUBMITTED BY: Joel Staker, Information Services/Network Manager

APPROVED BY: Chip Rerig, City Administrator

SUBJECT: Consideration of a resolution authorizing the City Administrator to

execute an agreement with InterVision Systems, LLC for the purchase and
installation of network firewalls in a total amount not to exceed $42,707.25
for a contract term ending June 30, 2018.

RECOMMENDATION

1. Adopt a resolution authorizing the City Administrator to execute an agreement with InterVision
Systems, LLC for the purchase and installation of network firewalls in a total amount not to exceed
$42,707.25 for a contract term ending June 30, 2018.

2. Adopt a resolution authorizing a budget adjustment of $2,707.25

BACKGROUND / SUMMARY

The firewalls we currently use were purchased in 2011. Generally, this type of hardware should be replaced
every five years or so depending on several factors including serviceability, fitness and appropriateness for the
current workload. In this case, these firewalls are entering a state with the vendor labelled limited retirement
mode. The next phase will be end of useful life, where all updates and patches are discontinued. It is
important to replace these devices prior to their entering the final state.

The City is seeking to take advantage of pricing made available with Palo Alto Networks through the California
Multiple Award Schedules (CMAS) Contract number 3-17-70-3403A and the Palo Alto Networks partner,
InterVision Systems LLC. California Multiple Award Schedules (CMAS) offer a wide variety of commodity, non-
IT Services, and information technology products and services at prices which have been assessed to be fair,
reasonable and competitive. The use of these contracts is optional and is available to California State and
Local Government agencies.

Sections 3.12.140 and 3.12.170 of the Carmel-by-the-Sea Municipal Code authorize the City Administrator to
take advantage of valid contract terms that have been negotiated by another governmental agency, where that
agency had used a quote or bid process substantially conforming with Carmel-by-the-Sea sections 3.12.140,
3.12.170 and State Law. Staff has verified that the CMAS process and agreement with Palo Alto Networks
satisfied these open market bid process requirements.
InterVision will furnish, install, configure and provide training for two Palo Alto Networks PA-850 firewalls.
InterVision LLC is a California technology company with a long history working with Palo Alto Networks. They
earned the Palo Alto Networks NextWave 2016 Americas Western Regional Partner of the Year.

FISCAL IMPACT

The 2016-17 budget included 40,000.00 for the purchase and installation of two firewalls as part of the capital
project known as network security. This agreement requires that $2,707.25 be transferred and it is
recommended that the supplemental funding come from the Council Chambers AV Upgrade project, which is
anticipated to achieve savings. We received several vendor proposals, but felt this proposal would give the
City of Carmel-by-the-Sea the network security protection that best meets the Citys needs.

Amount Of Expenditure Amount Budgeted Appropriation Required

$42,707.25 $40,000.00 $2,707.25

PRIOR CITY COUNCIL ACTION

Council adopted the budget on June 7, 2016 by resolution 2016-037.

ATTACHMENTS

1. Resolution authorizing the City Administrator to execute an agreement

2. Resolution authorizing a budget adjustment
3. Contract
4. InterVision sales quote
 Attachment 1
CITY OF CARMEL-BY-THE-SEA
CITY COUNCIL

RESOLUTION NO. 2017-___

A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF CARMEL-BY-THE-SEA AUTHORIZING THE

CITY ADMINISTRATOR TO EXECUTE AN AGREEMENT WITH INTERVISION LLC FOR THE PURCHASE
AND INSTALLATION OF TWO PALO ALTO NETWORKS PA-850 FIREWALLS FOR AN AMOUNT NOT TO
EXCEED $42,707.25

WHEREAS, InterVision LLC is a partner of Palo Alto Networks and can furnish, configure and install
firewall products manufactured by Palo Alto Networks; and

WHEREAS, the Fiscal Year 2016-2017 adopted budget includes $40,000.00 for the purchase and
installation of firewall products as part of the capital project known as network security; and

WHEREAS, Carmel Municipal Code Section 3.12.170 allows for the cooperative purchasing program
with the State, county or other public or municipal corporation of the State when the administering agency has
made its purchases through a competitive bid process; and

WHEREAS, InterVision LLC can provide Palo Alto Networks firewalls through the California Multiple
Award Schedules (CMAS) Contract number 3-17-70-3403A; and

WHEREAS, contracts and expenditures exceeding $25,000 require Council approval; and

NOW THEREFORE, BE IT RESOLVED THAT THE CITY COUNCIL OF THE CITY OF CARMEL-BY-
THE-SEA DOES HEREBY:

Authorize the City Administrator to execute an agreement with InterVision LLC in the amount of
$42,707.25 for the purchase and installation of two Palo Alto Network PA-850 firewalls for a not to
exceed amount of $42,707.25 for a contract term ending June 30, 2018.

PASSED AND ADOPTED BY THE CITY COUNCIL OF THE CITY OF CARMEL-BY-THE-SEA this
2nd day of May 2017 by the following roll call vote:

AYES: COUNCILMEMBERS:

NOES: COUNCILMEMBERS:

ABSENT: COUNCILMEMBERS:

ABSTAIN: COUNCILMEMBERS:

SIGNED: ATTEST:

_______________________ ___________________________
Steve G. Dallas, Mayor Ashlee Wright, City Clerk
 Attachment 2

CITY OF CARMEL-BY-THE-SEA
CITY COUNCIL

RESOLUTION NO. 2017-___

A RESOLUTION OF THE CITY COUNCIL OF THE CITY OF CARMEL-BY-THE-SEA

AUTHORIZING A BUDGET ADJUSTMENT TO TRANSFER $2,707.25 FROM THE COUNCIL
CHAMBERS AV UPDGRADE PROJECT TO THE NETWORK SECURITY PROJECT TO PAY
FOR THE ADDITIONAL COST FOR THE AGREEMENT WITH INTERVISION SYSTEMS. LLC
FOR THE PURCHASE AND INSTALLATION OF NETWORK FIREWALLS

WHEREAS, the City plans to execute an agreement with InterVision System LLC for the
purchase and installation of network firewalls in a total amount not to exceed $42,707.25; and

WHEREAS, the Fiscal Year 2016-2017 adopted budget includes $40,000.00 for the
purchase firewall products as part of the capital project known as network security; and

WHEREAS, the project is over budget; however, there is anticipated to be savings within
the budget of the Council Chambers AV Upgrade project; and

WHEREAS, all transfers of appropriations in regards to capital items or projects shall be

approved by City Council in accordance with Carmel Municipal Code Section 3.06.030.

NOW THEREFORE, BE IT RESOLVED THAT THE CITY COUNCIL OF THE CITY OF

CARMEL-BY-THE-SEA DOES HEREBY:

Authorize the appropriations transfer of $2,707.25 from the Council Chamber AV

Upgrade project (account # 40-67906) to the Network Security project (account 40-
67909).

PASSED AND ADOPTED BY THE CITY COUNCIL OF THE CITY OF CARMEL-BY-

THE-SEA this XX day of XX, by the following roll call vote:

AYES: COUNCILMEMBERS:

NOES: COUNCILMEMBERS:

ABSENT: COUNCILMEMBERS:

ABSTAIN: COUNCILMEMBERS:

SIGNED: ATTEST:

_______________________ ___________________________
Steve G. Dallas, Mayor Ashlee Wright, City Clerk
 Attachment 3

AGREEMENT FOR PROFESSIONAL CONSULTING SERVICES

InterVision Systems, LLC.

IT Professional Services

THIS AGREEMENT is executed this 15th of May 2017 by and between the CITY OF
CARMEL-BY-THE-SEA, a municipal corporation (hereinafter CITY), and InterVision Systems,
LLC., (hereinafter "CONSULTANT").

IT IS HEREBY MUTUALLY AGREED AS FOLLOWS:

1. Scope. CONSULTANT hereby agrees to provide to CITY Information

Technology support and assistance as defined in the scope of services under this Agreement as
set forth in Exhibit A, attached hereto and incorporated herein by this reference.

2. Timely Work. CONSULTANT shall perform all duties incidental or necessary in

a timely fashion; and shall be performed diligently, competently, and in accordance with
professional standards of performance. Failure to so perform is hereby deemed a material
breach of this Agreement, and CITY may terminate this Agreement with no further liability
hereunder. City may agree in writing with CONSULTANT to an extension of time. It is expressly
agreed and understood that CONSULTANT shall not be held responsible for delays occasioned
by factors beyond their control, nor by factors that could not reasonably have been foreseen at
the time of execution of this AGREEMENT.

3. Term. The work under this Agreement shall commence on June 1, 2017 and
terminate on December 31, 2017. The parties may agree to extend or amend this Agreement
prior to its expiration.

4. Compensation. CITY shall pay CONSULTANT in an amount not to exceed

$42,707.25, which said sum shall include all costs included within Exhibit A and in accordance
with this Agreement.

Compensation under this Agreement shall become due and payable thirty (30) days
after CITYs approval of CONSULTANTS submission of monthly written invoices. Written
invoices shall clearly itemize each charge. The payment of any compensation to CONSULTANT
hereunder shall be contingent upon performance of the terms and conditions of this Agreement
to the reasonable satisfaction of the City Administrator.

If the City Administrator determines that the work set forth in the written invoice has not
been performed in accordance with the terms of this Agreement, CITY shall not be responsible
for payment until such time as the work has been performed to the reasonable satisfaction of
the City Administrator.

5. Additional Services. In the event that CITY should request additional services
not covered by the terms of this Agreement, said additional services and compensation shall be
agreed upon in advance and in writing by CONSULTANT and the City Administrator.
CONSULTANT shall not be compensated for any additional services unless such additional
services and compensation are approved by the City Council inasmuch as all Agreements
exceeding $24,999.00 require City Council approval to be valid.

6. Meet and Confer. CONSULTANT agrees to meet and confer with CITY or its
agents or employees with regard to services as set forth herein as may be required by City
Administrator to insure timely and adequate performance of this Agreement.

7. Suspension or Termination of Agreement Without Cause. CITY may at any

time, for any reason, with or without cause, suspend or terminate this Agreement, or any portion
hereof, by serving upon the CONSULTANT at least ten (10) business days prior written notice.
Upon receipt of said notice CONSULTANT shall immediately cease all work under this
Agreement unless the notice provides otherwise. If CITY suspends or terminates a portion of
this Agreement such suspension or termination shall not make void or invalidate the remainder
of this Agreement.

In the event this Agreement is terminated pursuant to this section CITY shall pay
CONSULTANT the actual value of the work performed up to the time of termination provided
that the work performed is of value and approved by CITY. Upon termination of this Agreement
pursuant to this section CONSULTANT will submit an invoice to CITY pursuant to section 4 of
this Agreement.

8. Default of CONSULTANT. CONSULTANT'S failure to comply with the

provisions of this Agreement shall constitute a default. In the event that CONSULTANT is in
default for cause under the terms of this Agreement, CITY shall have no obligation or duty to
continue compensating CONSULTANT for any work performed after the date of default and can
terminate this Agreement immediately by written notice to CONSULTANT. If such failure by
CONSULTANT to make progress in the performance of work hereunder arises out of causes
beyond CONSULTANT'S control, and without fault or negligence of CONSULTANT, it shall not
be considered a default.

9. Indemnification. CONSULTANT hereby agrees to the following indemnification

clause:

To the fullest extent permitted by law (including, without limitation, California Civil
Code Sections 2782 and 2782.6, if applicable), CONSULTANT shall defend (with legal counsel
reasonably acceptable to designated agents, departments, officials, representatives, and
employees, collectively Indemnitees) from and against claims, loss, cost, damage, injury
expense and liability (including incidental and consequential damages, court costs, reasonable
attorneys fees, litigation expenses and fees of expert consultants or expert witnesses incurred in
connection therewith and costs of investigation) to the extent they arise out of, pertain to, or
relate to, the negligence, recklessness, or willful misconduct of CONSULTANT, any sub-
consultant, anyone directly or indirectly employed by them, or anyone that they control
(collectively Liabilities). Such obligations to defend, hold harmless and Indemnify any
Indemnitee shall not apply to the extent that such Liabilities are caused in part by the negligence,
or willful misconduct of such Indemnitee.

Notwithstanding the provisions of the above paragraph, CONSULTANT agrees to

indemnify and hold harmless CITY from and against any and all claims, demands, defense costs,
liability, expense, or damages arising out of or in connection with damage to or loss of any
property belonging to CONSULTANT or CONSULTANTS employees, Agreementors,
representatives, patrons, guests or invitees.

CONSULTANT further agrees to indemnify CITY for damage to or loss of CITY

OF CARMEL-BY-THE-SEA property to the proportionate extent they arise out of
CONSULTANTS negligent performance of the work associated with this Agreement or to the
proportionate extent they arise out of any negligent act or omission of CONSULTANT or any of
CONSULTANTS employees, agents, Agreementors, representatives, patrons, guests or
invitees; excepting such damage or loss arising out of the negligence of CITY.

-2-
 10. Insurance. CONSULTANT shall submit and maintain in full force insurance as
described herein. Without altering or limiting CONSULTANTS duty to indemnify,
CONSULTANT shall maintain in effect throughout the term of this Agreement, a policy or
policies of insurance with the following minimum limits of liability:

Commercial general liability insurance including but not limited to premises,

personal injuries, bodily injuries, products, and completed operations, with a combined single
limit of not less than $1,000,000 per occurrence and $2,000,000 in the aggregate.

Professional liability insurance CONSULTANT shall maintain in effect

throughout the term of this Agreement professional liability insurance with limits of not less than
$1,000,0000 per claim and $2,000,000 in the aggregate. CONSULTANT will either maintain or
cause to be maintained professional liability coverage in full force or obtain extended reporting
(tail coverage with the same liability limits) for at least three (3) years following CITYs
acceptance of work.

Commercial automobile liability insurance covering all automobiles, including

owned, leased, non-owned and hired automobiles, used in providing services under this
Agreement, with a combined single limit of not less than $1,000,000 per occurrence.

Workers Compensation Insurance If CONSULTANT employs others in the

performance of this Agreement, CONSULTANT shall maintain workers compensation insurance
in accordance with California Labor Code section 3700 and with a minimum of $1,000,000 per
occurrence for employers liability.

Other Insurance Requirements

A. All insurance required under this Agreement must be written by an

insurance company either:

1) Admitted to do business in California with a current A.M. Best

rating of no less that A:VI;

Or

2) An insurance company with a current A.M. Best rating of no less

that A: VII

Exception may be made for the State Compensation Insurance Fund

when not specifically rated.

B. Each insurance policy required by this Agreement shall be endorsed to

state that CITY shall be given notice in writing at least thirty (30) days in
advance of any cancellation thereof, except CITY shall be given TEN (10)
days notice for nonpayment of the premium.

C. The general liability and auto policies shall:

1) Provide an endorsement naming CITY, its officers, officials, and

employees as additional insureds under an ISO CG 20 10 07 04 and ISO
20 37 07 04 or their equivalent.

-3-
 2) Provide that such insurance is primary and non-contributing
insurance to any insurance or self-insurance maintained by CITY.

3) Contain a Separation of Insureds provision substantially

equivalent to that used in the ISO form CG 00 01 10 01 or their
equivalent.

4) Provide for a waiver of any subrogation rights against CITY via an

ISO CG 24 01 10 93 or its equivalent.

D. Prior to the start of work under this Agreement CONSULTANT shall file
certificates of insurance and endorsements evidencing the coverage
required by this Agreement with the City Administrator. CONSULTANT
shall file a new or amended certificate of insurance promptly after any
change is made in any insurance policy which would alter the information
on the certificate then on file.

E. Neither the insurance requirements hereunder, nor acceptance or

approval of CONSULTANTS insurance, nor whether any claims are
covered under any insurance, shall in any way modify or change
CONSULTANTS obligations under the indemnification clause in this
Agreement, which shall continue in full force and effect. Notwithstanding
the insurance requirements contained herein, CONSULTANT is
financially liable for its indemnity obligations under this Agreement.

F. Any deductible or self-insured retentions must be declared to and

approved by CITY. At the option of CITY either: the insured shall reduce
or eliminate such deductibles or self-insured retentions as respects CITY,
its officers, officials, employees, and volunteers; or CONSULTANT shall
provide a financial guarantee satisfactory to CITY guaranteeing payment
of losses and related investigations, claim administration, and defense
expenses.

11. Ownership of Work. Upon completion of the work under this Agreement,
ownership and title to all materials and deliverables produced as part of this Agreement will
automatically be vested in CITY and no further Agreement will be necessary to transfer
ownership to CITY. CONSULTANT shall not be held liable for any modification or re-use of
CITY-owned materials and deliverables for purposes outside their original intent.

12. Licensing. CONSULTANT represents that it is properly licensed to perform the

work specified under this Agreement, including but not limited to, possession of a current city
business license.

13. Termination. This Agreement may be terminated by either party upon thirty (30)
calendar days written notice to the other party. In the event of such termination, CITY shall pay
CONSULTANT for all services performed in accordance with this Agreement to the date of
receipt of notice of termination. An itemized statement of the work performed to the date of
termination shall be submitted to CITY. In ascertaining the services actually rendered hereunder
up to the date of termination of this Agreement, consideration shall be given to both completed
work and work in process of completion, and to complete and incomplete drawings and other
documents whether delivered to CITY or in the possession of the CONSULTANT.

-4-
 14. Agency. In performing the services specified under this Agreement,
CONSULTANT is hereby deemed to be an independent CONSULTANT and not an agent or
employee of CITY.

15. Authority of the City Administrator. CONSULTANT shall perform all

necessary services provided under this Agreement and outlined in the proposal and shall do,
perform, and carry out said work in accordance with this Agreement as determined by and to the
reasonable satisfaction of the City Administrator. The City Administrator reserves the right to
make changes, additions or deletions, to the scope of work as deemed necessary or advisable to
implement and carry out the purposes of this Agreement. The City Administrator is authorized to
execute change orders.

16. Responsibility of Consultant. By executing this CONSULTANT represents

and state to CITY that he/she possesses, or will arrange to secure from others, all necessary
professional capabilities, experience, resources and facilities necessary to provide to city the
services contemplated under this Agreement. CONSULTANT further represents that he/she will
follow the current generally accepted practices of the profession to make findings, render
opinions, prepare factual presentations, and provide professional advice and recommendations
regarding the project for which services are rendered under this Agreement.

17. Audit Authority. CONSULTANT shall keep full and detailed accounts and
exercise such controls as may be necessary for proper financial management under this
Agreement; the accounting and control systems shall be satisfactory to CITY. CITY and CITYs
auditor shall be afforded access to CONSULTANTs records, books, correspondence and other
data relating to this Agreement. CONSULTANT shall preserve these records, books,
correspondence and other data relating to this Agreement for a period of four (4) years after final
payment or for such longer period as may be required by law. In addition, CONSULTANT agrees
to make said records, books, correspondence and other data relating to this Agreement available
to CITY at CITYs principle place of business upon seventy-two (72) hours advance written
notice. The City Administrator, or his or her designee, shall at all times have the right to inspect
the work, services, or materials. CONSULTANT shall furnish all reasonable aid and assistance
required by CITY for the proper examination of the work or services and all parts thereof. Such
inspection shall not relieve CONSULTANT form any obligation to perform said work or services
strictly in accordance with the specifications of any modifications thereof and in compliance with
the law.

18. Notices. All notices herein provided to be given, or which may be given by either
party to the other, shall be considered fully received when made in writing and deposited in the
United States mail, certified and postage prepaid, and addressed to the respective parties as
follows:

CITY: City Administrator

City of Carmel-by-the-Sea
P.O. Box CC
Carmel-By-The-Sea, CA 93921

CONSULTANT: InterVision Systems, LLC

Attn: Byron McGaha
2270 Martin Avenue
Santa Clara, CA 95050

-5-
 20. Entire Agreement. This Agreement constitutes the entire Agreement between
the parties hereto and supersedes any and all prior Agreements, whether oral or written, relating
to the subject matter thereof. Any modification of this Agreement will be effective only if it is in
writing signed by both parties hereto.

21. Validity. If any provision in this Agreement is held by a court of competent

jurisdiction to be invalid, void or unenforceable, the remaining provisions will continue in full
force without being impaired or invalidated in any way.

22. Assignment of Interest. The duties under this Agreement shall not be
assignable, delegable, or transferable without the prior written consent of CITY. Any such
purported assignment, delegation, or transfer shall constitute a material breach of this
Agreement upon which CITY may terminate this Agreement and be entitled to damages.

23. Conflict of Interest/Political Reform Act. CONSULTANT shall at all times

avoid conflicts of interest, or the appearance of conflicts of interest, in the performance of this
Agreement.

During the term of this Agreement CONSULTANT shall not directly or indirectly,
either as a partner, employer, employee, consultant, principal, and agent or in any individual or
representative capacity, engage or participate in any business or voluntary activity on behalf of
any other party on any property located within the City of Carmel-by-the-Sea without notification
to City Administrator.

If CITY determines CONSULTANT comes within the definition of CONSULTANT

under the Political Reform Act (Government Code Sections 87100 et seq.) CONSULTANT shall
complete and file, and shall require any other person doing work under this Agreement, to
complete and file a "Statement of Economic Interest" with CITY disclosing CONSULTANT'S
and/or such other person's financial interests.

24. Non-discrimination/Affirmative Action. CONSULTANT will not discriminate

against any employee or applicant for employment because of race, creed, color, sex, age,
national origin, marital status, physical or other motor handicap, unless based upon bonafide
occupational disqualification.

CONSULTANT will take affirmative action to ensure that applicants are employed
and that employees are treated during employment without regard to their race, creed, color,
sex, age, national origin, marital status, physical or other motor handicap.

25. Counterparts. This Agreement may be executed in multiple originals, each of

which is deemed to be an original, and may be signed in counterparts.

26. Laws. CONSULTANT agrees that in the performance of this Agreement it will
reasonably comply with all applicable state, federal and local laws and regulations. This
Agreement shall be governed by and construed in accordance with the laws of the State of
California and the City of Carmel-by-the-Sea.

27. Attorneys Fees and Court Venue. Should either party to this Agreement bring
legal action against the other, (formal judicial proceeding, mediation or arbitration), the case
shall be handled in Monterey County, California, and the party prevailing in such action shall be
entitled to a reasonable attorneys fee which shall be fixed by the judge, mediator or arbitrator
hearing the case and such fee shall be included in the judgment, together with all costs.
-6-
 28. Severability. If any term of this Agreement is held invalid by a court of
competent jurisdiction, the remainder of this Agreement shall remain in effect.

IN WITNESS WHEREOF, this Agreement is entered into by the parties hereto in

Carmel, California, on the day and year first written above.

CITY OF CARMEL-BY-THE-SEA:

By: _______________________________ Date: ___________________

Chip Rerig, CITY Administrator

CONSULTANT:

By: _______________________________ Date: ___________________

ATTEST:

By: _____________________________ Date: ______________________

CITY Clerk

-7-
 Exhibit A

OVERVIEW

The City of Carmel-by-the-Sea has two independent SonicWall firewalls providing security for
multiple departments of the City. The City desires replacement of SonicWall firewalls with a pair
of PA-850 firewalls in a "high availability" configuration and creation of one virtual router for the
city and one virtual router for the police department. These virtual routers will be direct
replacement for the SonicWall physical devices. There will be a common set of security policies
used by both routers.
InterVision shall provide to Customer one (1) or more qualified consultant(s) (Consultant(s) to
work in a staff augmentation role. Activities to be performed by Consultant are to be mutually
agreed upon by InterVision and Customer. Consultant(s) will work under the direction of the
Customer to deliver to a general scope of activities. Expected activities considered within scope
will include, but are not necessarily limited to:

Discovery:

Network Topology Discovery

Network Architecture Consulting
Provide advice based on best practices

Purchase:

Provide 2 PAN-PA-850 with all necessary cables and accessories according to quote
#BM022117-540985.

Integration:

Firewall OS update, feature license install and feature content update

Base Network Configurations (Vlans and IP addressing)
High Availability
Firewall policies will need to be built from scratch (Customer guidance required)
Network Address Translations (4 Policies, 3 services identified on scoping call)
Configuration of IPsec VPN (3 site-to-site tunnels. Customer does not own remote devices)
Configuration of IPS (Threat prevention using product built in profiles)
Configuration of URL filtering (Deny "hacking, nudity, gambling, malware, phishing")
Routing is all static routes
Configuration of basic SSL VPN (self-signed cert and 10 users in a local database)
User ID will not be implemented at this time
Configure Zone Protection to detect port scans and tcp/udp floods
Address objects from the SonicWall devices can be imported with the assistance of the
customer
Security Policies from the SonicWall devices can be imported with the assistance of the
customer
Policy based Forwarding to support Multiple Internet links and automated WAN redundancy
Installation

-8-
 Software updates and base config would be done at InterVision and then shipped to the
customer location
Customer will rack and cable the firewalls as much as possible
InterVision will provide troubleshooting and support during installation and cutover
After hours cutover replacing one Physical SonicWall at a time (Customer to decide on 2
different days or same day)
InterVision will provide post install tuning of policies and profiles

Objectives

The objectives for this engagement are intended to produce the following deliverables:
Implementation of (2) PAN PA-850 Firewalls

ASSUMPTIONS
The following assumptions are hereby acknowledged by the parties and apply to the
performance of the Professional Services under this SOW:
InterVision is not responsible for any application or host system access that encompasses
coding, scripting, application analysis, system performance, troubleshooting, or applications
logins outside of the Professional Services expressly described in this SOW.
The City shall be solely responsible for management and adequacy of the data back-up, data
recovery, and disaster recovery measures. Notwithstanding anything to the contrary, InterVision
shall not be responsible or held liable for any City internal processes, procedures, or
requirements, or otherwise to ensure the protection against loss or corruption, availability,
confidentiality, resulting project delays and/or downtime or security of data or information or lack
thereof.
Changes to this SOW must be in writing and signed by the parties.
City understands and agrees that Professional Services are of repeatable nature and, as such,
the same or similar Professional Services have been and will continue to be provided to other
InterVision customers. Therefore, notwithstanding any other provision herein or in the
agreement between the parties, the Professional Services hereunder are not contemplated to
include any services that are exclusive to the City, nor constitute development activity of any
kind (Exclusive Services). Should the City desire InterVision to provide Exclusive Services, then
such services shall be governed by a written agreement executed by the parties in which such
services are expressly set forth. Unless otherwise specifically agreed upon, the services
provided by InterVision are nonexclusive in nature.
Provide a customer contact throughout the duration of the project that will facilitate all requests
from Vendor engineers to ensure timely resolution and maintain project deadlines
Work with Vendor network engineers to develop and approve a network roll-out plan for each
phase of the project
Provide timely unfettered access and or escort (if required) to any and all areas necessary for
the successful completion of project deliverables
Ensure IDFs and MDF are clean with proper Security, HVAC, Power, Certified Cabling,
Racks/cabinets, and grounding prior to installing equipment onsite
Provide proper surge protection and or UPS for newly installed equipment;
On-going support and troubleshooting will be through Vendor purchased support contract
Since IPSEC tunnels are terminating at 3rd party partners and not owned by the City of
Carmel, the City of Carmel will accept responsibility for bringing up the tunnels with the
assistance of their partners and any required TAC centers if the allocated time for cutover is
exceeded.

-9-
 (Optional) SonicWall Objects will be imported into the PAN via cli assuming that object names
and IP address/mask are provided by the customer. Intervision will provide a spreadsheet to
gather the required information.
(Optional) SonicWall Policies will be imported into the PAN via cli assuming that policy names
and other values are provided by the customer. Intervision will provide a spreadsheet to gather
the required information. Customer has expressed an interest in cleaning up the existing
security policies so this may be skipped.
Intervision will work with the customer to create the first 60 security policies. The new policies
will focus on securing critical infrastructure.
Security will be increased and fine-tuned after cutover as time allows.
The Professional Services provided hereunder are based upon InterVisions initial
understanding of Customers sites and IT environment as of the SOW Effective Date. Should
InterVision be required to revise the Professional Services due to changes in either Customers
sites, (ii) IT environment, or (iii) conditions or circumstances - not evident at the Effective Date -
that impact significantly InterVisions manner, method, scope of work, costs, or schedule to
perform, then the InterVision, shall have the right to an equitable adjustment to the terms of the
SOW.
InterVision resource(s) or InterVision subcontracted resources are not eligible for hire by
Customer under the terms of this SOW.

CITY RESPONSIBILTIES
Customer will be responsible to provide appropriate contact personnel, proficient
documentation, and adequate facilities for InterVision personnel to perform the required
aforementioned and associated deliverables for the duration of this SOW.
Customer will be responsible for any business and data application testing and all necessary
data backup in preparation for and during the performance of the Professional Services.
Should the project plan rely on electronic/network transfer of data, Customer will provision and
enable any network components or services required to facilitate the data transfer, or provide
remote access as required.
Customer will provide security passes to allow InterVision access, the ability to enter and leave
the Customer Site with laptop personal computers and any other materials related to the
Professional Services.
If required by InterVision, Customer will participate in testing as directed by InterVision.
Customer is responsible for all communication to Customers internal users, including
notification of maintenance and migration windows, as required.
Customer will provide a Project Lead with the qualifications, expertise, and knowledge who is
authorized by Customer to act as a liaison between Customer and InterVision. The Project Lead
will coordinate, schedule and monitor all resources and activities related to the Professional
Services described in this SOW, to help to avoid project delays.
Customer warrants that it has obtained any and all permissions and/or licenses from third
parties necessary for InterVision to successfully perform the Professional Services, and hereby
grants InterVision all necessary licenses for InterVision to successfully perform the Professional
Services. Customer shall promptly notify InterVision of any failure on Customers part to obtain
the necessary consents, licenses, or permissions.
Customer will pay any and all invoices from InterVision on a timely basis, and shall execute a
Certificate of Acceptance at the end of the project.
Customer agrees to immediately notify InterVision upon becoming aware of a situation, which,
may delay or threatens to delay - the timely performance of this SOW in order to address the
potential delay.

- 10 -
 Unless otherwise specifically agreed upon between the parties, in no event shall Customer
grant to InterVision or any InterVision authorized representative, root or "superuser" access at a
server or network level and InterVision shall have no responsibility or liability for loss or damage
that results from or is related thereto.

- 11 -
 Attachment 4
2270 Martin Ave.
Santa Clara, CA 95050
MAIN 408-980-8550 , FAX 408-980-8893

SALES QUOTE
Name: Byron McGaha Phone: 408-567-4206

Fax: 408-980-8893 Email: byron@intervision.com

BILL TO: SHIP TO:

QUOTE #: BM022117-540985
City of Carmel by the Sea City of Carmel by the Sea
P.O. Box CC P.O. Box CC DATE April 12, 2017
Carmel-by-the-Sea CA 93921 Carmel-by-the-Sea CA 93921
VALID 30 DAYS
ATTN: ATTN: Joel Staker SHIP VIA: UPS GROUND
Phone: Phone: 831.620.2000 TERMS: NET 30
Email: Email: jstaker@ci.carmel.ca.us

NO. C MFG PART # DESCRIPTION QTY PRICE EXTENDED PRICE

Palo Alto
1 Networks
PAN-PA-850 Palo Alto Networks PA-850 2 $6,175 $12,350

Palo Alto Threat prevention subscription 3-year prepaid for

2 Networks
PAN-PA-850-TP-3YR-HA2
device in an HA pair, PA-850
2 $2,405 $4,810

Palo Alto PANDB URL Filtering subscription 3-year prepaid

3 Networks
PAN-PA-850-URL4-3YR-HA2
for device in an HA pair, PA-850
2 $2,405 $4,810

Palo Alto WildFire subscription 3-year prepaid for device in

4 Networks
PAN-PA-850-WF-3YR-HA2
an HA pair, PA-850
2 $2,405 $4,810

Palo Alto
5 Networks
PAN-SVC-PREM-850-3YR Premium support 3-year prepaid, PA-850 2 $2,920 $5,840

6 IV IV-PS-T&M-STD-001 Engineering Total Std Hours 3 $175 $525

7 IV IV-PS-T&M-STD-002 Sr. Engineer Total Std hours 23 $230 $5,290

8 IV IV-PS-T&M-NONSTD-002 Sr. Engineer Total Non-Std Hours 6 $338 $2,028

SUBTOTAL $40,463.00
THIS QUOTATION IS LIMITED TO THE TERMS AND CONDITIONS CONTAINED ON THE FACE AND AT
http://www.intervision.com/tc, ST&C 5 Rev. 8/2012, WHICH ARE HEREBY INCORPORATED BY THIS REFERENCE. SHIPPING
ANY ADDITIONAL
OR DIFFERENT TERMS PROPOSED BY CUSTOMER IN ANY PURCHASE ORDER OR OTHER DOCUMENT SALES TAX $2,244.25
ARE DEEMED TO BE MATERIAL ALTERATIONS AND NOTICE OF OBJECTION TO THEM IS HEREBY GIVEN. ANY
SUCH PROPOSED TERMS SHALL BE VOID. THE TERMS HEREIN SHALL CONSTITUTE THE COMPLETE AND
EXCLUSIVE STATEMENT OF THE TERMS AND CONDITIONS OF THE CONTRACT BETWEEN THE PARTIES. NEITHER
GRAND TOTAL $42,707.25
INTERVISIONS ACKNOWLEDGEMENT OF A PURCHASE ORDER NOR INTERVISIONS FAILURE TO OBJECT TO
CONFLICTING, DIFFERENT, OR ADDITIONAL TERMS IN ANY DOCUMENT SHALL BE DEEMED AN ACCEPTANCE OF
SUCH TERMS OR A WAIVER OF THE PROVISIONS HEREOF.

NOTE:

QUOTE ACCEPTANCE:

NAME:

TITLE:

DATE:

CUSTOMER'S SIGNATURE:

Intervision Proprietary and Confidential.

Form Revision 4.0 All rights reserved Page 1