VANIX Proposal For

Prepared for

For David Wild, BSF Technical Delivery Gordon McPhail, Group Procurement Director

Prepared by: Lance Hardiman Senior Design Engineer (Aruba Certified) Deep Toor Agilisys Account Director Darren Brownfield Service Director

Vanix Proposal for Sandwell BSF

Contents
Management Summary 3

Section 1 Technical Breakdown of Proposed Solution 5

Section 2 Vanix Support Overview.15

Section 3 Vanix Overview...

.21

Section 4 Pricing Schedule.

23

Section 5 Reference Details.25

Confidential

Page 2

03/03/2010

Vanix Proposal for Sandwell BSF

Management Summary
Vanix would like to thank Agilisys for the invitation to put forward this proposal for an ICT infrastructure within the schools nominated under the Sandwell BSF program. This document provides Agilisys with an overview for Wireless data network with an option of comprehensive service wrap for professional services, pro active support and maintenance.

Vanixs have worked with Agilisys over the last four years on a number of projects such as the deployment of Wireless and Voice at General Healthcare Group, Wireless deployment in Cumbria Council and deployment of the some of the core Infrastructure around the Smartworking project as HFBP which involved an element of Wireless, coupled with a security audit to bring the council in line with the new compliance regulations set out by the Government.

With regards to BSF, the technical selection of manufacturer and solution design has been built around three fundamental principles of simplification, reliability and network performance to ensure operational efficiency and the lowest possible Total Cost of Ownership. The two Vendors Vanix are proposing for the BSF project are Cisco for the LAN and Aruba for the Wireless. We understand that Agilisys has narrowed down their selection of Vendors for the LAN and we wish to put forward the Cisco pricing we are able to offer through leveraging our Telco relationships with BT, who are Ciscos largest partner in the UK. We

have the ability to offer full range of services around the Cisco element but also understand that Agilisys have the in-house capability and would look to back fill this as and when required.

Vanixs experience of deploying Aruba technology in the Education Sector is extensive and as successful projects such as Hammersmith & West London College, Cambridge University and Stephenson College as well as numerous schools have proved our ability in this sector. Our methodical and thorough approach to implementation mitigates the project risk and our capabilities have helped position us as one of the market leading network integrators. Our engineering team have a combined 20 years of experience in the Wireless market and we have access to the highest number of Aruba engineers in the country.

Confidential

Page 3

03/03/2010

Vanix Proposal for Sandwell BSF

From a Support perspective Vanix are able to offer Agilisys not only a comprehensive maintenance contract but also proactive Network Monitoring and Configuration collection service should this be required. This will enable Agilisys to identify potential issues early, before they become a threat to service. Importantly all Vanix services proposed are delivered entirely in house with no reliance on sub contractors for engineering resource or spares.

We would also welcome the opportunity to discuss and position a solution that drives responsibility and true Service Level Agreement with the comfort to meet the financial and technical constraint and liabilities during the lifecycle of the contract. Vanix understand the need to be a stakeholder to Agilisys to ensure not only customer satisfaction but also customer delight!

As Agilisys have already designed the Cisco network, although we will supply pricing for this network, the remainder of this proposal will focus on the Wireless Network. We strongly feel that this proposal offers Agilisys not only the most compelling technical solution but also excellent commercial value, particularly when analysed over the lifetime of the network with so called soft costs such as power costs and management time included. Moreover we are confident that Vanix are the right type of organisation to give Agilisys the confidence in the delivery of a high profile project of this nature and have demonstrated this capability already within a number of Key Agilisys accounts.

Confidential

Page 4

03/03/2010

Vanix Proposal for Sandwell BSF

Section 1, Technical Breakdown of Proposed WLAN Solution

WLAN Infrastructure

The proposed Aruba wireless service design provides a cost effective solution to wireless enablement, for current wireless devices and including readiness for the inevitable influx of 802.11n (high speed WiFi) compliant devices. As handheld

devices become smaller and smaller it is becoming increasingly impossible to allocate space for wired connections, so provision for WiFi devices, both now and future, is no longer an optional consideration.

Security, segmentation and network privilege control of multiple wireless client groups (staff, students, guests) is a strong factor in the selection of the Aruba product as the system boasts the industrys only integral, award winning statefull firewall that provides unprecedented control.

Other strong features that make Aruba the centralised wireless market leader and the preferred choice of Vanix are the automated radio management features, real time heat map ability and integrated wireless intrusion protection and location tracking server functions.

Furthermore the Aruba mobility controller system has compelling scalability options, making the decision of how much wireless to deploy or what future wireless requirements are likely, far easier to manage.

Aruba 3000 Controller

Arubas latest dual radio 802.11n (high throughput) wireless APs (AP105s) are proposed by Vanix due to their aesthetic design and integrated aerial technology.

Confidential

Page 5

03/03/2010

Vanix Proposal for Sandwell BSF

Vanix strongly believe that given the ever increasing minimisation of mobile devices, that wireless as an access method will only grow in uptake. Given that 802.11n is the latest wireless access speed and was finally ratified recently, Vanix see the AP105 as a great fit for the modern campus.

AP 105 n Access Point

Network Integration

The proposed Aruba Mobility System will be configured to integrate with the network as an overlay. In this manner the Aruba APs will reside within the

network VLAN / IP provision at the edge and build generic router encapsulation (GRE) tunnels back to the master Aruba controller, physically located within the network core, as if they were directly connected. This provides an extremely cost effective and low intrusion (low risk) implementation method with zero down time to the wired network and network services/applications.

Schematic of a Thin Architecture

Confidential

Page 6

03/03/2010

Vanix Proposal for Sandwell BSF

The Aruba controllers are configured to control the Aruba APs and to assign specific network attributes to the associated 802.11 clients as per their configuration.

These client / device specific network attributes include connectivity such as VLAN and IP assignments, authentication requirements, encryption settings as well as statefull firewall policies. In this manner security requirements can be set per

user identity (user role), as against per user physical connection point.

Manageability of all site based Aruba controllers would be via a java based (GUI) web page or alternatively via the command line if desirable.

Scalability

Each of the Vanix proposed Aruba 3000 wireless controllers support a maximum AP count of 128 operational units. This gives the Aruba 3000 its impressive

ability to support up to 128,000 active firewall sessions and an encrypted traffic throughput of 4Gbps.

Further to the above scalability figure, an additional controller from the Aruba portfolio can be added along side and be configured to join the mobility system as a synchronised local unit, thus maintaining the ability to have one single point of configuration, monitoring and management control, regardless of deployment size, or complexity.

Security
The Aruba identity-based security solution dramatically improves network security by introducing the concept unique user based credentials which cater for authentication mechanisms, VLAN assignment, firewall rules and user rights on the network while also providing identity-based auditing of activity.

Confidential

Page 7

03/03/2010

Vanix Proposal for Sandwell BSF

Single Point of Security Control: With the Aruba mobility solution having a single point of security control, this prevents against address spoofing attacks by combining the point of encryption, authentication, and access control within the Aruba controller. Without a single point of security control, one device normally does encryption, another device does authentication, and an external firewall does access control. This makes the firewall vulnerable to IP address spoofing, since the firewall is not identity-aware. In an Aruba system, firewall policies are applied to users, not to IP addresses. An address spoofing attack in an Aruba system will not result in the bypassing of any firewall policies.

Universal Authentication: Authentication is how the system learns user or device identity. Aruba mobility controllers support 802.1x authentication, VPN

authentication, and captive portal authentication. Most systems support only a single protocol at a time. The Aruba system supports Universal Authentication, making all three available at the same time. In this way, clients connecting to a wireless SSID can use whatever authentication protocol for which they are configured, meaning that no client is locked out of the network.

Client Authentication: The Vanix proposal is based on the use of the IEEE's ratified 802.1x Port Based Network Access Control standard for Wireless Security. An Aruba Mobility System fully supports 802.1x security with client accounts either being held on the Aruba Mobility Controller or by integrating with an external Remote Authentication Dial In User Service (RADIUS) server and subsequent backend Active Directory (AD) infrastructure.

Confidential

Page 8

03/03/2010

Vanix Proposal for Sandwell BSF

The 802.1x standard uses the Extensible Authentication Protocol (EAP) as the protocol or "wrapper" for exchanging authentication information. An Aruba mobility system supports a multitude of EAP authentication methods within the EAP framework. Two of the most commonly deployed are protected EAP (EAPPEAP) as well as EAP Transport Level Security (EAP-TLS) dependant on the level of client authentication required and whether client-side certificates are required.

Wireless clients would be configured for 802.1x media access control with AES encryption. Any clients that dont have 802.1x ability (phones for example)

would be configured with the highest level of authentication and encryption that the client supports. This would most likely be a WPA2-PSK (possibly WPA-PSK) pre shared key to ensure equivalent levels of encryption to that used via 802.1x, only with the use of a passphrase for client authentication in place of a username/password or client side certificate.

Network

Access

Control:

Arubas

Extended

Services

Interface

is

fully

compatible with Microsoft NAP and will automatically correlate the results of NAP with policies set up for uses. This correlation allows clients to be whitelisted or blacklisted based on their security posture and whether it is fully up to date. Together with 802.1x authentication, AES and a fully statefull firewall which offers per user policies, this combines to provide a very robust and manageable security architecture. Aruba is soon to receive Federal information processing standard four (FIPS4) and is approved for manual-Y in the UK.

Captive Portal Guest Access: As guest wireless Internet access is a common wireless mobility requirement, Vanix have will if required, configure the system with a level of guest WLAN access via the use of a separate Service Set Identifier (SSID) for this service based on a web based captive portal internal to the Aruba Mobility System for authentication with restricted access to the minimum of desired resources (e.g. the internet), controlled via the statefull firewall module.

Time of day and/or bandwidth restrictions can be applied to individual users or user groups to control levels of access. These settings can be administered

across all WLAN users (staff / contractors / guests) within the Aruba mobility system. Multiple captive portal configurations can be configured, should the need arise.

Confidential

Page 9

03/03/2010

Vanix Proposal for Sandwell BSF

Role-based Access Control: Role-based access control identifies who the user or device is, based on either an authentication method such as 802.1x, VPN, captive portal or via a user-derived process such as MAC address authentication or hardware type. During this process, the Aruba controller learns the group, or role, of a user or device.

This information allows appropriate access rights and policies to be applied to that session. This practice allows multiple classes of users to share the same network infrastructure, with independent access control, thus eliminating excess privilege normally granted by "one size fits all" fixed networks.

High-Speed

Encryption:

Encryption

is

critical

component

of

wireless

networks, and can greatly enhance security on wired networks as well. Aruba supports a broad array of encryption types, including AES, TKIP, and WEP for

wireless; AES-CBC, Triple-DES, and MPPE for VPN; AES-CBC-256 through the xSec protocol for wired or wireless encryption, and SSL for system management and captive portal.

Hardware-based

Processing:

Assures

the

highest

possible

level

of

performance. Aruba controllers have separate control, data, and encryption processors to provide scalability and performance. Firewall rules are processed by special-purpose packet processing hardware in each mobility controller, resulting in no loss of throughput even when complex rule sets are in use.

Automatic Client Blacklisting: Permits the administrator to automatically blacklist - or block from all network access - any client that violates specific firewall rules even a single time. This is particularly useful when single-purpose devices such as voice over IP handsets are used. If the Aruba controller detects a voice handset attempting to conduct database queries or file server browsing, it is likely that the device credentials have been compromised by an intruder. The mobility controller, using automatic client blacklisting, will immediately disconnect the device from the network and generate alert messages to the administrator.

Confidential

Page 10

03/03/2010

Vanix Proposal for Sandwell BSF

ArubaOS Operating System

Radio Frequency (RF) optimisation; In any environment, the RF is constantly changing; doors being opened and closed along with equipment and people

moving around all affect the wireless environment and hence the coverage of any wireless system. It is therefore impossible to set any system to its optimum, as the environment may very well change in the next day, hour or even few minutes. The result is patchy coverage and poor, inconsistent performance. Arubas system, due to its centralised nature, allows all of the access points to intelligently and continuously adapt their power and channel settings to ensure optimal settings in real time . An in-built floor plan in the system allows a real time heat map showing the actual RF coverage throughout the site.

Real Time heat-map showing actual RF coverage The net result is consistent coverage and performance.

Support for multiple users; A key requirement within schools is the ability to handle lots of users suddenly typically, a class or multiple classes of students logging in at the same time. In many wireless systems, the first few users are able to connect perfectly well, but, by downloading their image, they hog the

Confidential

Page 11

03/03/2010

Vanix Proposal for Sandwell BSF

available

bandwidth

with

the

result

that

subsequent

users

suffer

poor

performance. Arubas system uniquely allows the intelligent allocation of bandwidth to devices to ensure that every user has fair access to the network, resulting in consistent performance for all, regardless of the number of users attaching, how they connect and when.

Fair access for all users

Load

Balancing;

The

centralised

architecture

ensures

that

the

Mobility

Controller(s) have a holistic view of the wireless network and know where users are. As such, the Mobility Controller can load-balance devices across Access Points to ensure that they experience the maximum amount of coverage and hence bandwidth available. This mechanism ensures that no single AP is congested, whilst others nearby are comparatively idle. This results in greater overall network performance and throughput and a much improved user experience.

Robustness; Should an Access Point fail, the Aruba System can instruct the surrounding APs to increase their coverage to provide a wireless signal into the failed AP area. Users connected to that failed AP may not even know that they have been roamed onto a new AP. Similarly, if a controller fails (unlikely), providing a second controller has been provided, the entire system will seamlessly run on the remaining system.

A robust and sophisticated suite of system software that powers the mobile edge, ArubaOS coordinates all mobile edge operations with advanced capabilities that include seamless mobility, identity based security, non-disruptive integration into existing networks, class mobile VoIP open capabilities, APIs, adaptive radio management, centralised

enterprise

resiliency,

end-to-end

QoS

and

management. ArubaOS is a fully modular software that runs on all Aruba mobility controllers and controlled access points, allowing them to work seamlessly in delivering services to users on the mobile edge.

Confidential

Page 12

03/03/2010

Vanix Proposal for Sandwell BSF

The base feature set of ArubaOS comes standard with every mobility controller and includes sophisticated authentication and encryption, seamless mobility with fast roaming, RF management and analysis tools, centralised configuration, location tracking and more. ArubaOS gives administrators a single point of control from which to locate and shut down rogue APs, identify and thwart malicious attacks and impersonations, load balance traffic, detect coverage holes and interference and create statefull role-based security policies that follow individuals as they move across the mobile edge. ArubaOS is entirely modular, with particular emphasis on reliability features such as automatic process restarts to minimise the impact of any software failures.

Policy Enforcement Firewall (PEF) software module

This software module is included in this proposal, as it delivers user and group policy enforcement through an integrated ICSA-certified statefull firewall. Security policies can be centrally defined and enforced on a per-user or per-user-group basis, following users as they move. Policies are enforced dynamically, taking into account a variety of metrics such as user location, time-of-day, device type, authentication method, bandwidth restriction requirements and others.

The Aruba mobility controllers have the ability, via this software module, to provide statefull firewall access control of user session data and connectivity.

Unlike simple Access Control Lists (ACLs), a statefull firewall tracks upper-layer flows and ensures that unauthorised traffic cannot bypass access control. For example, a packet claiming to be part of an established Telnet session would be blocked unless there was an actual established session.

The Aruba Networks internally-developed firewall has been certified by ICSA Labs under the Corporate Version 4.0 criteria. ICSA's rigorous certification program for firewalls is the recognized benchmark by which all network firewalls are judged.

Furthermore the deployment of the Policy Enforcement Firewall Module enables network administrators to take better control of users accessing the wireless network via flexible policy creation. Firewall policies can be constructed based on identity, source and destination of traffic, service type, time of day and even physical location. Policy actions can include permit, drop, redirect to external

Confidential

Page 13

03/03/2010

Vanix Proposal for Sandwell BSF

devices or tunnels, logging, or QoS actions such as setting 802.1p or DiffServ bits and placing traffic into high or low queues.

Confidential

Page 14

03/03/2010

Vanix Proposal for Sandwell BSF

Section 2, Vanix Support Overview

Vanix Services are the result of many years experience of delivering business continuity and high availability solutions for a plethora of organisations locally and worldwide. To support our customers, we offer a breadth of Managed Services and technologies and a wealth of experience that helps their businesses to evolve underpinned, by robust and accountable Service Level Agreements.

Vanix is rapidly becoming the IT and communications solutions provider of choice for a growing number of businesses. We believe that the following key attributes will enable us to remain at the forefront of the market:

Unity: Vanix offers its customers a complete, unified solution, encompassing consultancy, project management, system installation and ongoing maintenance support. This approach ensures clear accountability and enables us to provide an ongoing service level tailored to the particular needs of each individual client.

Customer Care: We work with clients to gain an intimate knowledge and understanding of their business needs and strive to provide the highest possible standard of pre and post sales and installation care.

Independence: As an independent solutions provider, Vanix is best placed to offer truly bespoke communications and IT solutions, developed to meet a clients exact business needs.

Requirements Scope
Vanix support services will extend the following benefits:

Ongoing manufacturer Software updates, allowing you to efficiently evolve your Telephony system infrastructure to address the needs of an ever-changing business environment

Rapid technical problem resolution with 24-hour access to a team of experienced technical engineers to help resolve your telephony problems.

Knowledge transfer of skill sets to enhance in-house technical skill levels

Confidential

Page 15

03/03/2010

Vanix Proposal for Sandwell BSF

Advance hardware replacement, to help reduce the risk of system downtime with the option of an onsite engineer to install replacement parts at your site

Maintenance services through Vanix can provide:

Advanced replacement of hardware parts within agreed service levels An on-site engineer to facilitate hardware replacement 24x7 access to the Vanix Technical Assistance Centre (TAC) Software upgrades, updates, maintenance releases and bug fixes Software Application upgrades and updates Blanket Maintenance

Vanix Logistics

Maintenance Stock

Vanix maintenance services are delivered throughout the UK, including the Channel Islands, the Isle of Man and Northern Ireland and also extends into Europe for a growing number of customers.

The focal point of contact for these customers is through the 24x7 TAC based in the West Midlands. Arrangements for maintenance stock are under close management to ensure the correct ratio of stock to equipment covered. Stock

rotation and periodic maintenance is carried out to ensure the spares held are serviceable and fully functional by our various 3rd party providers.

Stock location within the store to ensure rapid access and deployment Stock allocation, tracking what equipment has been deployed and where Model and serial numbers of all stock to help ensure appropriate stock is available

Quantities of all stock for use in ensuring the correct ratio of stock to equipment covered this varies with the nature of the equipment covered.

Through our partnerships we can obtain advanced replacement of parts direct from the manufacturer on a next business day basis. This process is facilitated to ensure that adequate spares are always held, maintained and replenished to facilitate our in-house maintenance support service and that of our 3rd party providers.

Confidential

Page 16

03/03/2010

Vanix Proposal for Sandwell BSF

Technical Staff Information

Standard Engineer

Vanix recognises the need to provide a quick response to any incident or situation requiring support. To satisfy that need, Standard Engineers are on hand to capture the necessary information to enable the provision of a resolution. First line support can be provided by the engineers with the aim of getting a customers service restored. Engineers are often required to perform initial analysis and assessment of a problem so they are fully trained in how to do this for a large number of scenarios. Collecting the right information about a problem or fault also enables a smooth escalation to a Senior Engineer for more complex issues. Escalating these issues allows a more effective resolution and allows the first line support service to continue providing a quick service to all clients. Standard Engineers have years of experience with a broad range of products, and are certified in certain telephony and IT products where necessary.

Senior Engineer

Vanix Senior Engineers are qualified in specific products to enable them to provide a good second line support service. The training for those qualifications enables them to resolve more complex issues which would normally require escalation to a manufacturer. By removing this need, Vanix can provide a more responsive and thorough service to all clients, whilst still having a further escalation point if required. In addition to support tasks, Senior Engineers carry out the installation of systems for clients at both the pre-configuration and the on site commission stages. Senior Engineers are also able to provide user training for customers to ensure they get maximum benefit from their investment. In the event of further assistance being required, Engineers can rely on the backup of both manufacturers and Vanix Consultant Engineers.

Consultant Engineer

Vanix employs Consultant Engineers to provide a first class service to its clients. They are able to work throughout all stages of a project or task, be it support, installation, pre-sales or advanced configuration. Consultant Engineers are typically qualified to high standards and are certified in various products.

Confidential

Page 17

03/03/2010

Vanix Proposal for Sandwell BSF

Consultants also have extensive experience working in their field in both their current and previous roles.

They bring with them a wealth of experience to advanced levels in all aspects of a project and support, working from small schools to large enterprises. Consultants are also responsible for the adoption of new technology within the business and are constantly updating their knowledge of products in both the IT and Telephony industries. Consultant Engineers are proficient in the design and implementation of systems and services to customers, through building good relationships with clients on both commercial and technical levels.

Maintenance Services and Support

Maintenance Services

The Vanix portfolio provides a range of support services to protect your network during its working lifetime. These services provide you with software updates and upgrades, replacement of hardware parts and technical support.

All maintenance contracts will get the following levels of cover:

Access to the Vanix Technical Assistance Centre (TAC) 24 hours a day, 365 days a year

Rapid escalation into manufacturer to expedite call resolution Access to Software updates major version upgrades, minor releases, maintenance releases and bug fixes

Replacement of hardware parts with the option of an on-site engineer. IOS/Software Support

A high percentage of problems encountered with networks are often software related, whether that is IOS software issues, maintenance releases or bug-related etc. Break-fix support agreements do not cater for this event, resulting in complex escalation procedures through suppliers and distributors in an attempt to get the problem resolved. It is on these occasions that the value of our

arrangements with our manufacturers and the additional features that this agreement covers are realised.

Confidential

Page 18

03/03/2010

Vanix Proposal for Sandwell BSF

Technical Assistance Centre (TAC)

The Vanix TAC provides e-mail and telephone access and support for network related issues 24 hours a day, 365 days a year. The response given would be in line with the equipment detailed within the agreement for general network issues. The service would operate within the Service Level Agreement terms for coverage and response times.

Features: Access to highly trained and experienced engineers All calls have technical escalation to highly qualified and experienced consultants Involvement of technology and product specialists Response to calls within agreed SLAs All support backed up by comprehensive agreements directly with manufacturers and georgraphically placed 3rd party providers

Benefits:

Ensures the very best technical specialists both at Vanix and within the manufacturers back your own support team.

Provides rapid solutions to technical problems that can take less experienced staff a great deal of time to resolve.

Gives access through to manufacturers at a high technical level ensuring speedy provision of quality technical information on existing bugs, bug reporting and queries regarding technical specification and compatibility of their devices.

Provides access to product and technology specialists who would not be cost effective to maintain in-house.

Levels of Cover:

Vanix are able to provide a range of support options and bespoke contracts. These range from 24/7/365 2hr on site response through to back filling in-house engineers with Next Business Day Support services.

Confidential

Page 19

03/03/2010

Vanix Proposal for Sandwell BSF

Highly trained onsite field engineers provide: Accurate and faster advance network parts installation Improved network staff readiness and skill levels Reduced staffing requirements Support for geographically diverse networks

Blanket Maintenance

Blanket maintenance contracts allow the highest levels of flexibility for our customers, providing the ability to experience dramatic network growth and change at the lowest possible cost, frequently only requiring the initial capital expenditure for the product with free support provided through the support thumbprint. This service provision can reduce management overhead in the

frequently unnecessary administration required for support contract, reduce the frequency of financial invoices and fluctuations and also ensure that support is available on the same day product is shipped.

Under a Blanket Cover Maintenance contract all new qualifying purchases made through Vanix within the contract period can be automatically included within the proposed maintenance contract for the duration of each annual contracted period.

This bespoke approach allows our customer the largest degree of flexibility and over the course of longer contracts the face of support agreements can evolve to give a best fit, best cost approach for the customer.

Confidential

Page 20

03/03/2010

Vanix Proposal for Sandwell BSF

Section 3, Vanix Company Overview

Vanix is part of the privately owned Ampito group, with its headquarters based in Godalming, Surrey. Vanix was founded in 2005 and has grown consistently. The Ampito Group, which also provides IT services for Wide Area Networks, Managed Security services and software development has annual revenues in excess of 10 million.

Our rapid growth is attributable to both technical excellence and a continual focus on good customer service and a long stranding commitment to our strategic partners. Importantly our employee retention since our inception is over 90%. Our flat management structure enables Vanix to be an approachable, dynamic and flexible organisation with an easy to do business attitude. These values are reflected throughout our employees and are demonstrated on a daily basis with our interaction with our customers.

Technology Focus:

As a Specialist Network Integrator Vanix has proven ability to translate leading edge IP technologies in the infrastructure, convergence and security arenas into practical solutions and services that meet real business needs for our customers. We are a consultative led business and base our proposed solutions on listening intently to our customers requirements.

Our key technology areas are

Datacentre

Network

Infrastructure

high

performance

converged

networks for the LAN Mobility Secure Wireless Networking Network Security Unified Threat Management Content Delivery Application acceleration and content switching Intelligent Storage SAN, de-duplication, back up & recovery Wide Area Network connectivity services for Voice and data IP Telephony

Vanixs ethos is to develop long term strategic partnerships with networking vendors whom we identify as best of breed. Through these technology partnerships and a sound understanding of our customers business needs Vanix

Confidential

Page 21

03/03/2010

Vanix Proposal for Sandwell BSF

can build wider converged solutions in the technology areas of IP Telephony, WLAN and Network Security.

Vendor

Accredited

Engineers

Technology

with Up to Certification Platinum Partner Secure Wireless

Select Reseller

VoIP

Platinum Partner

LAN infrastructure

Select Partner

FW/IPVPN

Authorised Partner

All Areas

Gold Partner

Unified Threat Management

Qualifications and Accreditations

Vanix holds a strong belief in delivering best of breed technology and as such fosters strong strategic relationships with vendors whom we identify as best of breed market leaders. We invest heavily in these relationships from both a technical and commercial perspective to ensure that we can deliver and support their solutions expertly.

Confidential

Page 22

03/03/2010

Section 4, Pricing Schedule

# Product ID Description Qty Unit Cost Total Price

Wireless Infrastrucutre for 100AP's 3600-64 LIC-32-AP LIC-4-AP LIC-PEFNG-128AP AP-105 AP-105-MNT-C Aruba 3600 Controller 64 AP Support Access Point License (32 Access Point License) Access Point License (4 Access Point License) Policy Enforcement Firewall Module License (128 AP's) Aruba 105 Wireless Access Point (Dual Radio). Aruba 105 Wireless Access Point Ceiling Mounting Kit. 1 1 1 1 100 1 7,442.54 1,028.74 135.36 3,248.64 274.39 5.92 Sub Total Professional Services VAN_INS VAN_INS VAN_INS Pre-configuration, deployment, testing 1 750.00 Install in hours, Backbone Network Integration, and Authentication Server Integration as sistance 2 750.00 Design Consultancy including Documentation 1 750.00 Sub Total Vendor SW Subs SILVER SUPPORT 5 YEAR CONTRACT Mon Fri business hours 9am-5pm ex cl. Bank Holidays Next Business Day engineer on site with hardware parts replacement TAC service via telephone or email Access to Full software updates including major upgrades, security updates, patc hes and fixes ** Basic Support Option as been provided, Please note AP's are not incluled at present as they come with a lifetime warranty 750.00 1,500.00 750.00 3,000 VANIX Support 7,442.54 1,028.74 135.36 3,248.64 27,438.60 5.92 39,299.80

5 YEARS

6,306.00

7,236

Vanix Proposal for Sandwell BSF

Cisco LAN Infrastrucutre (Pricing via BT) WS-C2960G-48TC-L GLC-SX-MM= PD-7024G/AC/M WS-C3750G-48TS-E WS-C3750G-12S-E GLC-SX-MM= GLC-T= ASA5520-BUN-K9 Catalyst 2960 48 10/100/1000, 4 T/SFP LAN Base Image GE SFP LC connector SX transceiver PowerDsine 7024 Managed 24 port HiPoE 10/100/1000 Catalyst 3750 48 10/100/1000T + 4 SFP + IP Services Image Catalyst 3750 12 SFP + IP Services Image GE SFP LC connector SX transceiver 1000BASE-T SFP ASA 5520 Appliance with SW, HA, 4GE+1FE, 3DES/AES 40 48 6 2 2 12 6 2 2,122.29 175.43 825.30 8,294.54 4,554.30 175.43 144.43 3,439.81 Sub Total ** Please note Profess ional Services are subjected to further to discussion with Agilisys as there is an understanding of Agilisys in-house expertise 84,891.66 8,420.83 4,951.80 16,589.08 9,108.60 2,105.21 866.57 6,879.62 133,813.37

Confidential

y revileD dn a TA V f o evis ulcxE er a s ecir P l A ,s noit au tculf et ar eg na hcxe ot tcej bus si gnici rP .EO &E .de hsilba tse si tn e mee rg a k row marf a emit hc us litn u ro eussi fo et ad mo rf sya d 4 1 rof dilav si et ou q e vob a eht ,' snoiti dn oC & s mreT ' s 'otip m A rep sA .s re enig ne de tide rcc a d na dev orpp a ro dn ev yb tu o deir ra c e ra kr ow t ro ppu S dna n oi ta ru gi fn oC ,n oitalla tsnI ,g ninia rT llA :s mr eT
Page 24 03/03/2010

Section 6, Reference Details

Vanix have a host of references and a proven history of deploying and supporting Wireless networks in the education, public sector and corporate markets. A selection are listed below, we can provide reference details for all on request.

Agilisys Selected References

General Healthcare Group 4 Thameside Centre Kew Bridge Road Brentford Middlesex TW8 0HF

Dan Morgan IT Director Dan.morgan@ghg.co.uk

020 8232 5100

Vanix are currently contracted to GHG via Agilisys to role out the data and voice solution across 60 Hospitals. Vanix support the network in house and offer a 4hr SLA on life critical services. Vanix deploy and support Aruba, Mitel and Extreme within the GHG network

Vanix Proposal for Sandwell BSF

Vanix have deployed a Wireless solution across a number of the council buildings with Aruba. Vanix have also undertake a consultancy project to make the council compliant around new Government regulations around connectivity. The project also address how the council can start to work more efficiently with the council workers

26-28 Hammersmith Grove London W6 7AW

Eric Ascot Project Manager 0845 450 1131 Eric.Arsicot@hfbp.co.uk Other Selected References

Ealing Hammersmith and West London College Gliddon Road W14 9BL Martin King IT Manager martin.king@wlc.ac.uk 0207 565 1230

In 2008 Vanix completed the roll out of Extreme 8810 core switches at the Colleges four sites (Hammersmith, Ealing, Acton, Barons Court) to better support

Confidential

Page 26

03/03/2010

Vanix Proposal for Sandwell BSF

the Colleges burgeoning use of learning services through IT. Each switch runs Extremes market leading EAPS protocol so that full voice-grade resiliency across the dispersed campus is achieved. In 2009 Vanix went on to implement 802.11n wireless services throughout the college using Aruba Networks secure WLAN technology. Both the LAN and the WLAN are supported by Vanix with a 4hr onsite response support package.

University of London Computer Centre Senate House Malet Street London WC1E 7HU Colin Love Network Manager Colin.love@ulcc.co.uk 02076921304

The University of London Computer Centre are a long term customer of Vanix from an initial hot spot wireless deployment in 2006. Since then the Aruba wireless network has grown in size and importance to the University and now consists of over 200 Access Points. Following the success of the Wireless project Vanix were then awarded in open tender the contract to upgrade and support the Universities core networking infrastructure Firewalling and Server Load Balancing. and, more recently, the Core

We currently support more than 50

devices across 5 manufacturers on their network on a 24 x7 x 4hr basis.

Confidential

Page 27

03/03/2010

Vanix Proposal for Sandwell BSF

Stephenson College Thornborough Road Coalville Leicestershire LE673TN Fraser Wright IT Manager fraserw@stephensoncoll.ac.uk 01530 519000 (115)

Stephenson College invited Vanix to expand the Extreme Network infrastructure following an initial deployment with a different supplier. The Stephenson College network consists of Extreme Black Diamond 8810s in the core and Summit X450s at the network edge. Stephenson have also deployed Mitel IP Telephony using 3300 MXe and CX controllers. Vanix provide full support services for the IP Telephony estate including regular health-checks and engineering assistance with the Extreme network on an on-demand basis.

Colegsirgar Graig Campus Sandy Road Pwll Llanelli SA15 5DN

Confidential

Page 28

03/03/2010

Vanix Proposal for Sandwell BSF

Stuart Thomas IT Manager Stuart.Thomas@colegsirgar.ac.uk 01554 748134

Camarthenshire College (or Colegsirgar) selected Vanix in open tender for the upgrade of wired and wireless ICT infrastructure. The refresh program that is ongoing incorporates the implementation of a distribution switching layer (based on Extreme Summit X450as), the integration and possible upgrade of the Extreme core switches and the eventual replacement of the network edge. Wireless networking with Aruba (approximately 100 APs) has also been deployed with dual Aruba 3400 controllers.

Other

Education

References

where

Vanix

have

deployed

Core

Networking, Wireless or IP Telephony Solutions;

Confidential

Page 29

03/03/2010

Vanix Proposal for Sandwell BSF

Some Vanix Aruba Customers

Confidential

Page 30

03/03/2010