The URL can be used to link to this page

Home My WebLink About5732 AGENDA BILL CITY OF BREMERTON 5E CITY COUNCIL SUBJECT: Sole Source Study Session Date: March 13, 2019 Purchase Agreement with Trebron COUNCIL MEETING Date: March 20, 2019 Company, Inc. to purchase Sophos Department: Finance/IT Central Intercept X Ransom Ware Presenter: Dave Sorensen Detection/Prevention Solution Phone: (360) 473-5472 SUMMARY: The City's current SOPHOS anti-virus software does not include the technology to detect and mitigate malware in the "Ransomware" category. SOPHOS does provide an upgrade called Intercept X for the detection and EDR (Endpoint Detection and Response). This upgrade encompasses the detection of"Ransomware" as well as the other "traditional" types of malware and can automatically investigate and respond to potential security threats. Because the City already uses SOPHOS Endpoint Protection, this agreement will replace our existing SOPHOS Endpoint Protection contract with Trebron Company and will give the City the added protection it needs. The costs of the current contract will be absorbed into this new contract. ATTACHMENTS: 1) Trebron 4 Year Company Purchase Agreement 2) SOPHOS Intercept X Factsheet 3) Sole Source Memo FISCAL IMPACTS (Include Budgeted Amount): The Trebron 4 year purchase agreement amortizes the cost of the software over 4 years. These annual payments of 12,597.25 will be invoiced on March 31, 2019, March 31, 2020 and the final payment on March 31, 2021. STUDY SESSION AGENDA: Limited Presentation 1 Full Presentation STUDY SESSION ACTION: _X Consent Agenda [ 1 General Business Ll Public Hearing RECOMMENDED MOTION: Move to approve a 4-Year Purchase Agreement with Trebron Company, Inc. to purchase Sophos Central Intercept X Ransom Ware Detection/Prevention Solution for a total amount of$37,791.75 and authorize the Mayor to finalize and execute the agreement with substantially the same terms and conditions as presented. COUNCIL ACTION: %Approve ❑ Deny ❑ Table ❑ Continue ❑ No Action Form Updated 01/02/2018 T R E B R O N SOPHOS COMPANY INC. Platinum Partner Date: February 20, 2019 Buyer: City of Bremerton Trebron Account Executive: Scott Griffin Trebron Company, Inc. 5506 351h Ave. N.E. Seattle, WA 98105 Mailing 345 6th Street, Suite 100 206-527-3477 Corporate Address: Bremerton, WA 98337-1873 360-275-9100 Mobile sgriffintrebron.com Purchase Agreement 4 Years The Parties hereto, "Buyer," City of Bremerton and "Seller," Trebron Company, Inc. hereby agree as follows: 1. Description: Buyer agrees to purchase from Seller, "Product"as listed in the table below for$37,791.75 (Thirty- Seven Thousand Seven Hundred Ninety-One United States Dollars and 75/100), plus applicable shipping costs and sales tax, unless Buyer is exempt from the payment of such tax and provides Seller with evidence of such exemption. Qty Term Total Price Included Components (Users) (Months) ($USD) 300 Sophos Central Intercept X Advanced with EDR–Renewal – 48 $37,791.75 Gov. 2 Sophos Central Intercept X Advanced for Server– Renewal– 48 Included Gov. 2. Payment: To be made to Seller in three annual installments of$12,597.25 each. The first payment is due on or before March 31, 2019. The second payment is due on or before March 31, 2020. The third and final payment is due on or before March 31, 2021. Payment Terms are net thirty (30)days from date of invoice. All payments shall be by check made payable to Trebron Company, Inc. at the address listed above. 3. Term: Buyer's license for the product expires approximately 2/6/2023 (4 years). 4. Representations: Buyer understands that Seller is a reseller of hardware and software products. Buyer acknowledges that it has not relied on any representations by Seller and has independently investigated the products and determined the suitability of the products for Buyer's intended purposes. 5. Warranty: Seller shall pass through to Buyer any original manufacturers'warranties for Product acquired by Seller for Buyer, including Licensor's warranties for Product. Except for the foregoing, Seller shall deliver the Product"as is"and Seller makes no other warranty, express or implied, including any warranty of merchantability or fitness for a particular purpose. 6. Limitation of Liability: Under no circumstances will Seller be liable for any incidental, indirect, special or consequential damages from Buyer or any third party, including damages for lost revenue, profits, data or use, even if Seller has been advised of the possibility of such damages. In no event shall Seller's entire liability under this agreement exceed the price of the products under this Agreement. 7. Indemnification: Buyer shall defend, indemnify and hold harmless Seller, its employees and its agents from and against all damages, claims and liabilities of every nature whatsoever, including but not limited to reasonable legal expenses, arising in connection with or out of the improper or unauthorized operation use or repair of the products furnished to Buyer. 8. Late Fees: Late payments shall accrue interest beginning from the payment due date at a rate of eighteen percent (18%) per annum or the maximum allowable legal rate whichever is lower. In the event that any payment or amount owed is more than ninety (90) days past due, Seller may declare the entire amount due and owing in addition to accrued fees and costs. Buyer's failure to pay under this agreement may result in termination of Buyer's software license. 9. Cancellation: Once Seller has accepted Buyer's order, Buyer cannot cancel the agreement, in whole or in part, without Seller's express written consent. Such cancellation is conditioned upon Buyer's reimbursement to Seller for all costs incurred by Seller in connection with the order up to the time of cancellation—including, but not limited to Seller's cost for cancellation. Seattle,WA(Corporate) 5506 35"'Ave NE,Seattle,WA 98105 Office(206)527-3477 I Fax(206)527-4288 Springfield,MO Office(417)473-9199 I Fax(206)527-4288 Page 1 of 2 10. Attorney's Fees: In the event any cost or expense, including reasonable attorney's fees ("Costs") are incurred in the enforcement of this Agreement, the prevailing party shall be entitled to reimbursement for all such Costs in addition to damages. 11. Governing Law:This Agreement shall be construed and interpreted in accordance with the laws of the State of Washington. Venue for any and all actions shall be in the state or federal courts of King County, Washington. 12. Software: Buyer will negotiate all software license provisions of Product directly with the Licensor. 13. Miscellaneous: This Agreement must be executed on or before 3/27/2019 or it becomes void. 14. Waiver: The waiver of any breach of any provision of this Agreement shall not operate or be construed as a waiver of any subsequent breach and shall be effective only if presented in writing. 15. Severability: If any provision of this Agreement is deemed invalid or unenforceable, all other provisions of this Agreement shall remain in full force and effect. 16. Entire Agreement: This Agreement constitutes the entire Agreement of the parties and may not be amended or superseded except in writing with execution by both parties. Citof Bremerton _ef/ , / / • / ( ..------0407-2 11/.1 -- IT Director Signature Business Office Signature- Required bn ,..1-_,-- L ,--- Jc.-:e..Ft4st--;NI ,0 e-(AVsjite, W .et Printed Name Printed Name -1_:A-- \ P- Uire.c CU/( Title Title.i \ 3 /2_(4) 2_ S/I S — 2:7 -- iy Date Date Must be signed by an authorized representative of Buyer Billing Information Trebron Company, Inc. Do you accept invoices via Email? YIX1 N ❑ Signature Accounts Payable Contact Norbert van Dam Printed Name Email Address President Title Phone 9-2r z9 Date Page 2 of 2 TREBRON Buyer: City of Bremerton SOPHOS ,16��UW In Pi Date: September 8, 2017 Trebron Account Executive- Scott Griffin Trebron Company, Inc. 5606 351h Ave, N. E. Seattle, WA 98105 206-527-3477 Corporate 360-275-9100 Mobile sgriffinotrebron corn 3 Years Seattle. VVA (Corporate) 5506 3511 Ave NE, Seattle, WA 98105 1 Office (206) 527-3477 j Fax (206) 527-4288 SpringfieW MO Office (4 i7) 473-9199 1 Fax(206)527-4288 Page 1 of 2 1Z Software: Buyer will negotiate all software license provisions of Product directly with the Licensor, 13. Miscellaneous: This Agreement must be executed on or before 10/9/2017 or it becomes void, 14Waiver: The waiver of any breach of any provision of this Agreement shall not operate or be construed as a waiver of any subsequent breach and shall be effective onfy if presented in writing. 15, Severability: If any provision of this Agreement is deemed invalid or unenforceable, all other provisions of this Agreement shall remain in full force and effect, 16. Entire Agreement: This Agreement constitutes the entire Agreement of the parties and may not be amended or superseded except in writing with execution by both parties, City of Bremerton Directr Signature I ess ice Signature - Required ki4; i z'Mov4 Printed Name Printed NameJ Trebron Com_pan le, IM= Uling Information #0 you accept invoices via Email? A N F] ,accounts P—a—y a—b —1e G o n t a c —t Norbert van Dam Printed Name Email Address President Title Phone Date Title Title 2,„LZww Date -Date Trebron Com_pan le, IM= Uling Information #0 you accept invoices via Email? A N F] ,accounts P—a—y a—b —1e G o n t a c —t Norbert van Dam Printed Name Email Address President Title Phone Date SOPHOS Cybersecurity made simple. Intercept X Acvanced with EDR Intelligent Endpoint Detection and Response Sophos Intercept X Advanced with EDR integrates intelligent endpoint detection and response [EDR] with the industry's top-rated malware detection, top-rated exploit protection, and other unmatched endpoint protection features. Highlights EDR Starts with the Strongest Protection • EDR combined with To stop breaches before they start,prevention is crucial.Intercept X consolidates the strongest endpoint unmatched protection and endpoint detection and response into a single solution. protection This means that most threats are stopped before they can ever cause damage,and Deep Learning Malware Intercept X Advanced with EDR provides additional cybersecurity assurance with the • Analysis ability to detect,investigate,and respond to potential security threats. On-demand curated The inclusion of EDR into a consistently top-rated endpoint protection suite enables • threat intelligence from Intercept X to significantly lighten the EDR workload.The more threats that are SophosLabs prevented,the less noise that is created for security teams to investigate.This means teams can optimize key resources enabling them to focus on the business of IT rather • Machine learning detection than chasing false positives and an overwhelming volume of alerts. and prioritization of suspicious events' Add Expertise, Not Headcount Guided investigations make Intercept X Advanced with EDR replicates the tasks normally performed by skilled • EDR approachable yet analysts,so organizations can add expertise without having to add staff.Unlike other powerful EDR solutions which rely on highly skilled human analysts to ask questions and interpret data,Intercept X Advanced with EDR is powered by machine learning and • Respond to incidents with a enhanced with curated SophosLabs threat intelligence. single click Security expertise':Intercept X Advanced with EDR puts security expertise into the hands of IT by automatically detecting and prioritizing potential threats.Using machine learning,suspicious events are identified and elevated as the most important and in need of immediate attention.Analysts can quickly see where to focus their attention and understand which machines may be impacted. Malware expertise: Most organization rely on malware experts that specialize in reverse engineering to analyze suspicious files.Not only is this approach time consuming and difficult to achieve,but it assumes a level of cybersecurity sophistication which most organizations don't possess.Intercept X Advanced with EDR offers a better approach by leveraging Deep Learning Malware Analysis which automatically analyzes malware in extreme detail,breaking down file attributes and code and comparing them to millions of other files.Analysts can easily see which attributes and code segments are similar to"known-good"and"known bad"files so they can determine if a file should be blocked or allowed. Intercept X Advanced with EDR Threat intelligence expertise:When Intercept X Advanced Answer the tough questions about an incident: with EDR elevates a potentially suspicious file,IT • Understand the scope and impact of security incidents administrators can gather more information by accessing • Detect attacks that may have gone unnoticed on-demand threat intelligence curated by SophosLabs which receives and processes approximately 1400,000 ' Search for indicators of compromise across the network previously unseen malware samples each day.This,and ' Prioritize events for further investigation • Analyze files to determine if they are a other threat intelligence is collected,aggregated,and threat or potentially unwanted summarized for easy analysis.This means that teams , Confidently report on your organization's that do not have dedicated threat intelligence analysts,or security posture at any given moment access to expensive and hard to understand threat feeds, can benefit from one of the top cybersecurity research and Beyond EDR data science teams in the world. To stop the widest range of threats,Intercept X Advanced with EDR employs a comprehensive defense-in-depth Guided Incident Response approach to endpoint protection rather than simply relying Intercept X Advanced with EDR allows administrators on one primary security technique.This is the"the power to answer the tough questions about security incidents of the plus"-a combination of leading foundational and by providing visibility into the scope of an attack,how it modern techniques.Intercept X Advanced with EDR started,what was impacted,and how to respond.Security integrates the industry's top-rated malware detection,top- teams of all skill levels can quickly understand their security rated exploit protection,and intelligent endpoint detection posture thanks to guided investigations which offer and response(EDR). suggested next steps,clear visual attack representations, Modern techniques include deep learning malware and built-in expertise. detection,exploit prevention,and anti-ransomware specific When an investigation is concluded,analysts can respond features.Foundational techniques include antivirus, with a click of a button.Rapid response options include the behavior analysis,malicious traffic detection,data loss ability to isolate endpoints for immediate remediation,clean prevention,and more. and block files,and create forensic snapshots. Intercept X Advanced with EDR combines endpoint Intelligent EDR Use Cases detection and response capabilities with the modern Intelligent endpoint detection and response means that features in Intercept X and the foundational techniques in security teams have the visibility and expertise they need Sophos Central Endpoint Protection.This is delivered as a to answer the tough questions that are asked as part of an single solution,in a single agent. incident response effort. Sophos Intercept X Sophos Intercept X Sophos Endpoint Advanced with EDR Advanced Sophos Intercept X Protection Foundational techniques Deep learning Anti-exploit ✓ ,, ✓ CryptoGuard anti-ransomware ✓ Endpoint detection and response(EDR) ✓ Try it now for free Register for a free 30-day evaluation at sophos.com/intercept-x Available early 2019 United Kingdom and Worldwide Sales North American Sales Australia and New Zealand Sales Asia Sales Tel:+44(0)8447 671131 Toll Free:1-866-866-2802 Tel:+612 9409 9100 Tel:+65 62244168 Email:sales@sophos.com Email:nasales@sophos.com Email:sales@sophos.com.au Email:salesasia@sophos.com SOPHOS 2r CITY OF BREMERTON THE CITY OF PRIDE AND OPPORTUNITY Department of Financial Services DeWayne Pitts CPA,CFE Director Tel 360-473-5303 dewayne.pitts@ci.bremerton.wa.us Fax 360-473-5200 345 6th Street,Suite 600 Bremerton,WA 98337 March 8, 2019 To: City Council From: DeWayne Pitts Subject: Software purchase from Trebron Pursuant to BMC 2.76.090, requests for bids are waived for the SOPHOS Intercept X Ransom Ware Detection/Prevention purchase from Trebron. The purchase is in the best interest of the City, as Trebron currently provides the rest of our SOPHOS services, including the existing anti- virus SOPHOS Endpoint Protection. Since Intercept X upgrades SOPHOS Endpoint Protection deployment can be done quickly, a delay could be costly and pose a higher security risk. Since , Dewayne Pitts Directory, Financial Services City of Bremerton