TaxTMI 
TaxTMI 
TaxTMI 
CBEC Partner Connectivity Protocol- Solution for CBEC field formations managed by Custodians (under the HCCAR, 2009) requiring IT infrastructure and connectivity with CBEC Data Centre
X X X X Extracts X X X X
X X X X Extracts X X X X
....sed) for field formations managed by Custodians (under the HCCAR, 2009), prescribing the networking, communication equipments, Uninterrupted Power Supply System, desktops, servers, printers other computer peripherals and secure connectivity to the CBEC Data Centers as specified by the Directorate General of Systems to be provided by the Custodians. 3. In view of the above, all the Custodians (under the HCCAR, 2009) under the jurisdiction of the Custom House, Visakhapatnam are hereby instructed to meet all the requirements specified in the Document and its Annexures at the respective Custodian Sites. After making the prescribed infrastructure ready, all the Custodians are required to furnish the duly filled Non Disclosure Agreement (Annexure-5) and Custodian Infrastructure Checklist (Annexure-6) of the attached document, to the Systems Manager, Custom House, Visakhapatnam at the earliest, for forwarding the same to the Directorate General of Systems, CBEC for issue/ updation of LAN IP pool. Difficulties, if any, may be brought to the notice of the Department. -sd- (B. HARE RAM) COMMISSIONER OF CUSTOMS ============= Document 1 Annexure 1 - Connectivity Protocols A. Connectiv....
X X X X Extracts X X X X
X X X X Extracts X X X X
....tion based on their business requirements. C. Communication Mechanisms for Message Exchange 6 Secure File Transfer Protocol (SFTP) will be used as Communication Mechanism for Message Transfer with other CBEC partners. With Secure file transfer Protocol, users can pick up and drop files on the dedicated file transfer server in the directories assigned to their respective user ids in a secure manner. It may be noted that plain file transfer protocol (FTP) will not be allowed. a) Details Required for Creation of SFTP User ID for Message Exchange Following information in required to be provided for creation of SFTP User ID before starting the Message Exchange Agency Name Agency Type . Static Public IP address • Agency Address Authorized Single Point of Contact • Alternate Contact Person • • . Primary Contact Number (Landline) Alternate Contact Number (Landline) Primary Contact Number (Mobile) Alternate Contact Number (Mobile) Primary Email ID Alternate Email ID • Alternate Contact Number (Landline) • Technical Person details Please provide these details in the attached template. SFTP User Creation Template.xls Upon r....
X X X X Extracts X X X X
X X X X Extracts X X X X
....L, FCC Compliance, EPEAT India, BEE (optional), Energy Star Integrated Fingerprint Reader, TPM 1.2, capable for software Encryption Hard Drive to be 3. Specifications for 24 Ports Switch S.No. Specifications of equipment deployed by CBEC 24 RJ-45 autosensing 10/100/1000 ports (IEEE 802.3 Type 10BASE-T, IEEE 802.3u Type 100BASE-TX, IEEE 802.3ab Type 1000BASE-T) Mounts in an EIA-standard 19 in. telco rack or equipment cabinet Throughput- up to 95.2 Mpps Routing/Switching capacity- 160 Gbps Non-blocking and distributed forwarding hardware architecture All interfaces provide wire speed forwarding for both OFC and copper modules IP Multicast - RFC 3376 IGMPv3 Switches support 8 hardware queues per port 2. 4 5. 16 6 8. 9. Dynamic Host Configuration Protocol (DHCP) snooping Switch supports LLDP and LLDP-MED capabilities 10. IP source guard & Dynamic ARP Inspection/ Protection 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 20 21. 22. 23. Secure Shell (SSH) Protocol and Simple Network Management Protocol Version 3 (SNMPv3) to provide network security by encrypting administrator traffic during Telnet and SNMP sessions. 1 RJ-45 serial console port 1 RJ-4....
X X X X Extracts X X X X
X X X X Extracts X X X X
....er supply Advanced classifier-based QoS FTP for upgrading the operating System IEEE 802.1x support IEEE 802.3ad Link Aggregation Protocol (LACP) and HPE port trunking Supports management via CLI, Web interface SNMP v1, v2, v3 Manageable through both IPv4 & IPv6 with standard security features of 11 21. both IPv4 & IPv6 The stacking on the Switch provides the functionality to configure multiple switches in a single switching unit. Each unit/stack has the capability to be managed using a single IP address. 22. Layer 3 Switch with following 23. features like static IP routing OSPF, OSPFV3, RIP and policy based routing. - IPv6 host -Dual stack (IPv4 and IPv6) -MLD snooping - IPv6 ACL/QoS - IPv6 routing ―6in4 tunneling 5. Specification for Print/File Server SI Item Specifications of equipment deployed by CBEC No. 1 Chassis 5U Rack Mountable or Tower 2 CPU 3 CPU L3 CACHE Memory Two numbers of latest generation Intel E5-2630v4 processor 25MB L3 cache 4 Motherboard 5 Memory 6 Memory Protection 7 HDD Bays 8 Optical drive Bay 9 Hard disk drive 10 Controller 11 Networking Intel® C610 Series Chipset 8 GB RAM Advanced ECC ....
X X X X Extracts X X X X
X X X X Extracts X X X X
....ncryption of the data on both the internal storage and cache module of the array controllers using encryption keys. Server Warranty includes 3-Year Parts, 3-Year Labor, 3-Year Onsite support with next business day response. Essential tools, drivers, agents to setup, deploy and maintain the server embedded inside the server. 1. System remote management should support browser based graphical remote console along with Virtual Power button, remote boot using USB/CD/DVD Drive. Capable of offering upgrade of software and patches from a remote client using Media/image/folder; It should support server power capping and historical reporting and should have support for authentication. multifactor 4 2 Servershould have dedicated 1Gbps managementport Remotemanagementportshould have4GBNAND flashwith 1GBavalableforuser access. NAND flash should be used for keeping 14 or internal system logs and downloading firmware from HP website repository 3. Server should support agentless management| using the out-of-band remote management port. 4. The server should support monitoring and recording changes in the server hardware and system configuration. It assists in diagn....
X X X X Extracts X X X X
X X X X Extracts X X X X
.... be installed on Desktops are tabulated below. The agents which are required to be mandatorily integrated with CBEC's centralized security controls are marked as Mandatory and will be provided to the Custodian by CBEC. S. Component Mandatory Provided by No 1 End Point Protection (Antivirus & Email Security) Yes CBEC 2 End point Encryption Yes CBEC 3 Network Access Control (NAC) Yes CBEC 4 Data Leakage Prevention (End Yes CBEC point Agent) 5 Microsoft SCCM (Patch update) Yes CBEC 6 Advanced Persistent Yes CBEC Threat (APT) prevention 7 Microsoft Server CAL Licenses Yes CBEC for Centralized Management 8 Office Productivity Suite like Ms No Local Office 9 Two Factor Authentication Yes CBEC 17 Annexure 4 The minimum qualification requirements for a resource provisioned as a resident engineer as part of Project SAKSHAM is as given below - Minimum Requirements of Resident Engineers The proposed candidate should be a graduate Science/ IT. have diploma in The candidate should Networking from an ISO certified institutes Read/Speak/Write in English and Hindi/ Regional Language Should have at least 1 years' experience of providing IT suppor....
X X X X Extracts X X X X
X X X X Extracts X X X X
....he confidential information disclosed to them in accordance with this Agreement; to treat confidential information as confidential unless and until DG (Systems), CBEC notifies the Custodian of release of its obligations in relation to the said confidential information; that CUSTODIAN will not and shall use reasonable endeavors to ensure that its Authorized Personnel do not modify, reverse engineer, de-compile or disassemble any software programs contained in the Confidential Information unless otherwise specified in writing by DG (S), CBEC; and 19 b) c) d) (vi) to put in place such reasonable methods of control as CUSTODIAN deems necessary to ensure that no person in its employment, except the Authorized Personnel, is able to copy, transfer, or take away Confidential Information at any time unless otherwise agreed in writing by DG (S) CBEC. If such person leaves the CUSTODIAN's employment at any time or for any reason before the expiry of confidentiality obligations mentioned in this Agreement, CUSTODIAN shall ensure that such person is debriefed appropriately. Confidential information does not include information which: (i) (ii) (iii) (iv) (v) the CUSTOD....
X X X X Extracts X X X X
X X X X Extracts X X X X
.... prevent or minimize to the extent possible, such disclosure. CUSTODIAN shall not disclose to a third party any confidential information or the contents of this Tender without the prior written consent of DG 20 20 f) g) h) i) j) k) (Systems). The obligations of this Clause shall be satisfied by handling Confidential Information with the same degree of care, which the CUSTODIAN applies to its own similar confidential information but in no event less than reasonable care. The obligations herein shall survive the completion or cancellation of the Connectivity process. CUSTODIAN shall not assign or transfer any rights or obligations under this Agreement without the prior written consent of DG (systems). No waiver or amendment of any term or condition of this Agreement will be effective unless made in writing and signed by both parties. CUSTODIAN acknowledges that any unauthorized disclosure or unauthorized use of the Confidential Information by the CUSTODIAN may cause immediate and irreparable harm to DG (systems) for which damages or injury sustained by DG (systems) may be impossible to measure accurately or remedy fully. Therefore, CUSTODAIN acknowledges that ....