Orange County NC Website
Customer Agency Name <br /> Month 1, 2019 <br />The Proposal Title Goes Here and Breaks Like This Use or disclosure of this proposal is subject <br /> to the restrictions on the cover page. <br /> Motorola Solutions Confidential Restricted ASTRO 25 Advanced Services Statement of Work 1-37 <br />1.4.7.5 Disclaimer <br />Disclaimer: “AS IS”. MOTOROLA SOLUTIONS’ ASTRO 25 SECURITY MONITORING SERVICES <br />ARE PROVIDED “AS IS”. MOTOROLA SOLUTIONS DISCLAIMS ALL OTHER WARRANTIES, <br />EXPRESS OR IMPLIED. <br />Inherent Limitations on Scope of Services. Because of the evolving, often malicious and often highly <br />sophisticated nature of cyber security threats, as well as the evolving complexity and customization <br />inherent in many customer computer system environments, among other things, the protections <br />offered by Motorola Solutions are necessarily limited. Motorola Solutions does not represent that it <br />will identify, fully recognize, discover or resolve all security events or threats, system vulnerabilities, <br />malicious codes, files or malware, indicators of compromise or internal threats or concerns. Motorola <br />Solutions does not guarantee that the Customer's system will be error-free or immune to security <br />breaches as a result of these services. <br />Motorola Solutions disclaims any and all responsibility for any and all loss or costs of any <br />kind associated with security events. Motorola Solutions disclaims any responsibility for <br />customer use or implementation of any recommendations provided in connection with the <br />services. Implementation of recommendations does not ensure or guarantee the security of <br />the systems and operations evaluated. <br />1.4.7.6 Potential ASTRO 25 Firewalls <br />Table 1-10: Potential ASTRO Firewalls <br />Firewall Description <br />Customer Network <br />Interface (“CNI”) <br />This firewall separates the ASTRO 25 Radio Network from the Customer’s <br />IT network, which is often referred to as the CEN or Customer Enterprise <br />Network. There are single and redundant (high-availability) options for the <br />CNI. The redundant option includes two firewalls. Both firewalls must be <br />monitored in the redundant case. <br />Dynamic System <br />Resilience (“DSR”) <br />This is an ASTRO 25 option where a geographically separated backup <br />master site is implemented as a “hot-standby” in case the primary <br />becomes inoperable due to a failure. This option potentially doubles the <br />number of firewalls in the system. <br />Zone Core <br />Protection (“ZCP”) <br />This ASTRO 25 option places firewalls at the master site where the Radio <br />Frequency (RF) and console sites connect. This prevents a compromised <br />site from being used to attack the core or other sites. For redundancy, <br />there are always two firewalls in this option. <br />Telephone <br />Interconnect (“TI”) <br />This ASTRO 25 option allows calls to be made to and from ASTRO 25 <br />subscribers. One firewall is required to protect the RNI. The TI firewall <br />may also be used to protect ISSI connections. <br />Inter RF Subsystem <br />Interface (“ISSI”) <br />This option allows connectivity to a separate system. This connection can <br />be to another P25 system, or to non-P25 systems through an additional <br />interface, such as WAVE. In both cases, one firewall is necessary to <br />protect the RNI. The ISSI firewall may also be used to protect TI <br />connections. <br />MCC7100/MCC7500 <br />e Dispatch Console <br />The MCC7100/MCC7500e Dispatch Console may be configured so it <br />connects via Virtual Private Network (“VPN”) through an internet <br />connection. A firewall is required to terminate on the ASTRO 25 side of <br />the connection. This firewall may be physically located at either a console <br />site or the master site, and there may be multiple firewalls for this <br />purpose. <br />DocuSign Envelope ID: 22453AE7-FED2-4AEF-91BB-1C6406B68FE8