Flat Rate Internet Services

IFB C4DNCS19 Data Networks and Communications Services

CATEGORY 24 – FLAT RATE INTERNET SERVICES

AT&T CATALOG B December 15, 2020

Issued by: STATE OF CALIFORNIA California Department of Technology Statewide Procurement PO Box 1810 Rancho Cordova, CA 95741

TABLE OF CONTENTS

24.2.5.1.B – INTERNET FLAT RATE SERVICE (INFRA) ...... 3 Table 24.2.5.1.b – Internet Flat Rate Service (InFRa)...... 6 24.2.5.2 INTERNET FLAT RATE WITH MANAGED ROUTER SERVICE (INFRAM) ...... 17 Table 24.2.5.2.a – Internet Flat Rate with Managed Router Service .... 20

24.2.7 ADDITIONAL INTERNET SERVICES ...... 45 Table 24.2.7 – Additional Internet Services...... 45

24.4.4 DDOS DETECTION AND MITIGATION SERVICE ...... 260 Table 24.4.4.a – DDoS Detection and Mitigation Service...... 261

24.5.2.1 EXTENDED DEMARCATION WIRING SERVICES ...... 273 Table 24.5.2.1 – Extended Demarcation Wiring Services...... 274

24.5.3 SERVICES RELATED HOURLY SUPPORT ...... 281 Table 24.5.3 – Services Related Hourly Support ...... 281

CATEGORY 24 – Flat Rate Internet Services

24.2.5.1.b – Internet Flat Rate Service (InFRa) Contractor’s Description of Service:

[AT&T Dedicated Internet Service (ADI) is a dedicated Internet access service that provides businesses with high-speed Internet access through communications facilities managed by AT&T. The service consists of a dedicated Internet Port and transport from the customer site to the nearest AT&T Point- of-Presence (POP). AT&T ADI connects a business’s Local Area Network or application to the Internet.] Geographic Availability:

[ Agoura Alameda Albany Alhambra Aliso Viejo American Anaheim Anderson Antioch Arcadia Hills Canyon Arcata Arroyo Arvin Atascadero Atherton Atwater Auburn Avalon Avenal Bakersfield Grande Baldwin Bell Bell Gardens Bellflower Belmont Belvedere Benicia Berkeley Beverly Biggs Park Hills Blue Lake Brawley Brea Brentwood Brisbane Buena Park Burbank Burlingame Calabasas Calexico Calipatria Calistoga Camarillo Campbell Capitola Carlsbad Carmel-By- Carson Ceres Chico The-Sea Chino Chowchill Chula Vista Citrus Claremont Clayton Clearlake Cloverdale Coalinga Colma a Heights Colton Commerc Compton Concord Corning Corona Coronado Corte Costa Cotati e Madera Mesa Cudahy Culver City Cupertino Cypress Daly City Dana Point Danville Davis Del Mar Del Rey Oaks Delano Diamond Dinuba Dixon Downey Dublin Dunsmuir East Palo El Cajon El Centro Bar Alto El Cerrito El Monte El Paso De El Segundo Elk Grove Emeryville Encinitas Escalon Escondido Eureka Robles 3

Fairfax Fairfield Farmersville Fillmore Firebaugh Folsom Fontana Fort Bragg Fortuna Foster City Fountain Fremont Fresno Fullerton Galt Garden Gardena Gilroy Glendale Glendora Valley Grove Gonzales Grand Grass Valley Greenfield Gridley Grover Gustine Half Moon Hanford Hawthorne Terrace Beach Bay Hayward Healdsbur Hercules Hermosa Hidden Highland Hillsborough Hollister Holtville Hughson g Beach Hills Huntingto Huntington Huron Imperial Imperial Inglewood Ione Irvine Jackson King City n Beach Park Beach Kingsburg La La Habra La Mesa La Mirada La Puente Lafayette Laguna Laguna Laguna Canada Beach Hills Niguel Flintridge Laguna Lake Lake Forest Lakeport Lakewood Lancaster Larkspur Lemon Lemoore Lincoln Woods Elsinore Grove Live Oak Livermore Livingston Lodi Lomita Long Loomis Los Los Altos Los Altos Hills Beach Alamitos Los Los Banos Los Gatos Loyalton Lynwood Madera Manhattan Marina Martinez Marysville Angeles Beach Maywood Mendota Menlo Park Merced Mill Valley Millbrae Milpitas Mission Modesto Monrovia Viejo Montagu Montclair Montebello Monterey Monterey Moorpark Moraga Morgan Hill Morro Bay Mount e Park Shasta Mountain Napa National City Nevada Newark Newman Newport Norco Norwalk Novato View City Beach Oakdale Oakland Oakley Oceanside Ojai Ontario Orange Orange Orinda Orland Cove Oroville Oxnard Pacific Grove Pacifica Palmdale Palo Alto Paradise Paramount Parlier Pasadena Petaluma Pico Rivera Piedmont Pinole Pismo Pittsburg Placentia Placerville Pleasant Pleasanton Beach Hill Plymouth Point Pomona Port Porterville Portola Portola Poway Rancho Rancho Arena Hueneme Valley Cordova Cucamong a

Rancho Red Bluff Redding Redondo Redwood Rialto Richmond Rio Dell Ripon Riverbank Santa Beach City Margarita Riverside Rocklin Rohnert Park Rolling Hills Rosemea Roseville Ross Sacrament Salinas San d o Anselmo San San Bruno San San Carlos San San Diego San San San San Jose Bernardin Buenaventur Clemente Fernando Francisco Gabriel o a San Juan San Juan San Leandro San Luis San San Marino San Mateo San Pablo San Rafael San Ramon Bautista Capistrano Obispo Marcos Sand City Santa Ana Santa Clara Santa Santa Santa Fe Santa Maria Santa Santa Santee Clarita Cruz Springs Monica Rosa Saratoga Sausalito Scotts Valley Seaside Sebastop Selma Shafter Shasta Lake Simi Valley Solana ol Beach Soledad Sonoma Sonora South El South South Lake South South San St Helena Stanton Monte Gate Tahoe Pasadena Francisco Stockton Suisun City Sunnyvale Sutter Tehachapi Tehama Temple City Thousand Tiburon Torrance Creek Oaks Tracy Trinidad Truckee Tulare Turlock Tustin Ukiah Union City Upland Vacaville Vallejo Vernon Villa Park Visalia Vista Walnut Wasco Waterford Watsonvill Weed Creek e West West West Los West Westlake Westminste Westmorlan Wheatland Whittier Willits Covina Hollywood Angeles Sacrament Village r d o Willows Windsor Winters Woodlake Woodland Woodside Yorba Linda Yountville Yreka Yuba City ] State Associated Administrative Fee Charge - Services identified below with “Yes” in the SAAF Applied column will have a 2.5% fee applied to the Monthly Recurring Charge or usage. Charges below do not include the SAAF. The SAAF will appear as a separate line on the customer’s invoice.

Table 24.2.5.1.b – Internet Flat Rate Service (InFRa) Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description Restrictions and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 1 InFRa @ 1.544 NI001 Internet Flat Interface/Access Type: $899.00 $192.50 Each Yes Yes Required Mbps Rate Service Private Line Service (InFRa) at 1.544 (PLS)Network-side Interface: Mbps. Includes T1 dedicated Protocol: IPv4/v6 over PLS Internet port Upload Speed: 1.544 Mbps and transport. Product Description: Internet Flat Rate Service (InFRa) at 1.544 Mbps. Includes dedicated Internet port and transport. Subject to availability of facilities. 2 InFRa @ 5 Mbps NI005 Internet Flat Interface/Access Type: $0.00 $433.12 Each Yes Yes Required Rate Service Ethernet Interface Network- (InFRa) at 5 side Interface: 1 Mbps up to Mbps. Includes 1 GbE (Gigabit Ethernet) dedicated Protocol: IPv4/v6 Internet port Upload Speed: 5 Mbps and transport. Product Description: Internet Flat Rate Service (InFRa) at 5 Mbps. Includes dedicated Internet port and transport.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description Restrictions and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 23 InFRa @ 4.5Mbps NI006 Internet Flat Includes dedicated Internet $0.00 $433.12 Each Yes Yes Required Rate Service @ port and transport. 4.5Mbps 24 InFRa @ 6Mbps NI007 Internet Flat Includes dedicated Internet $0.00 $453.49 Each Yes Yes Required Rate Service @ port and transport. 6Mbps 25 InFRa @ 7Mbps NI008 Internet Flat Includes dedicated Internet $0.00 $453.68 Each Yes Yes Required Rate Service @ port and transport. 7Mbps 26 InFRa @ 7.5Mbps NI010 Internet Flat Includes dedicated Internet $0.00 $454.23 Each Yes Yes Required Rate Service @ port and transport. 7.5Mbps 27 InFRa @ 8Mbps NI811 Internet Flat Includes dedicated Internet $0.00 $454.23 Each Yes Yes Required Rate Service @ port and transport. 8Mbps 28 InFRa @ 9Mbps NI011 Internet Flat Includes dedicated Internet $0.00 $489.60 Each Yes Yes Required Rate Service @ port and transport. 9Mbps 29 InFRa @ 10.5Mbps NI014 Internet Flat Includes dedicated Internet $0.00 $466.26 Each Yes Yes Required Rate Service @ port and transport. 10.5Mbps 30 InFRa @ 12Mbps NI121 Internet Flat Includes dedicated Internet $0.00 $466.26 Each Yes Yes Required Rate Service @ port and transport. 12Mbps 31 InFRa @ 155Mbps NI023 Internet Flat Includes dedicated Internet $0.00 $957.30 Each Yes Yes Required Rate Service @ port and transport. 12Mbps

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description Restrictions and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 32 InFRa @ 622Mbps NI024 Internet Flat Includes dedicated Internet $0.00 $1,651.88 Each Yes Yes Required Rate Service @ port and transport. 155Mbps 33 InFRa @ 2.45Gbps NI025 Internet Flat Includes dedicated Internet $0.00 $2,480.62 Each Yes Yes Required Rate Service @ port and transport. 622Mbps 34 Flat Rate Internet NI051 Internet Flat Includes dedicated Internet $1,100.00 $1,351.00 Each Yes Yes Required 10Mbps Rate Service @ port and transport. 2.45Gbps 35 Flat Rate Internet NI052 Flat Rate Includes dedicated Internet $1,100.00 $1,507.25 Each Yes Yes Required 15Mbps Internet 10Mbps port and transport. 36 Flat Rate Internet NI053 Flat Rate Includes dedicated Internet $1,100.00 $1,663.50 Each Yes Yes Required 20Mbps Internet 15Mbps port and transport. 37 Flat Rate Internet NI054 Flat Rate Includes dedicated Internet $1,100.00 $1,822.25 Each Yes Yes Required 25Mbps Internet 25Mbps port and transport. 38 Flat Rate Internet NI055 Flat Rate Includes dedicated Internet $1,100.00 $1,978.50 Each Yes Yes Required 30Mbps Internet 30Mbps port and transport. 39 Flat Rate Internet NI056 Flat Rate Includes dedicated Internet $1,100.00 $2,138.50 Each Yes Yes Required 35Mbp Internet 35Mbp port and transport. 40 Flat Rate Internet NI057 Flat Rate Includes dedicated Internet $1,100.00 $2,294.75 Each Yes Yes Required 40Mbps Internet 40Mbps port and transport. 41 Flat Rate Internet NI058 Flat Rate Includes dedicated Internet $1,100.00 $2,453.50 Each Yes Yes Required 45Mbps Internet 45Mbps port and transport. 42 Flat Rate Internet NI222 Flat Rate Includes dedicated Internet $899.00 $362.50 Each Yes Yes Required 3Mbps Internet 3Mbps port and transport. 43 Flat Rate Internet NI201 Flat Rate Includes dedicated Internet $899.00 $500.00 Each Yes Yes Required 4.5Mbps Internet 4.5Mbps port and transport. 44 Flat Rate Internet NI215 Flat Rate Includes dedicated Internet $899.00 $612.50 Each Yes Yes Required 6Mbps Internet 6Mbps port and transport. 15

24.2.5.2 Internet Flat Rate with Managed Router Service (InFRaM) Contractor’s Description of Service:

Gonzales Grand Grass Valley Greenfield Gridley Grover Gustine Half Moon Hanford Hawthorne Terrace Beach Bay Hayward Healdsbur Hercules Hermosa Hidden Highland Hillsborough Hollister Holtville Hughson g Beach Hills Huntingto Huntington Huron Imperial Imperial Inglewood Ione Irvine Jackson King City n Beach Park Beach Kingsburg La La Habra La Mesa La Mirada La Puente Lafayette Laguna Laguna Laguna Canada Beach Hills Niguel Flintridge Laguna Lake Lake Forest Lakeport Lakewood Lancaster Larkspur Lemon Lemoore Lincoln Woods Elsinore Grove Live Oak Livermore Livingston Lodi Lomita Long Loomis Los Los Altos Los Altos Hills Beach Alamitos Los Los Banos Los Gatos Loyalton Lynwood Madera Manhattan Marina Martinez Marysville Angeles Beach Maywood Mendota Menlo Park Merced Mill Valley Millbrae Milpitas Mission Modesto Monrovia Viejo Montagu Montclair Montebello Monterey Monterey Moorpark Moraga Morgan Hill Morro Bay Mount e Park Shasta Mountain Napa National City Nevada Newark Newman Newport Norco Norwalk Novato View City Beach Oakdale Oakland Oakley Oceanside Ojai Ontario Orange Orange Orinda Orland Cove Oroville Oxnard Pacific Grove Pacifica Palmdale Palo Alto Paradise Paramount Parlier Pasadena Petaluma Pico Rivera Piedmont Pinole Pismo Pittsburg Placentia Placerville Pleasant Pleasanton Beach Hill Plymouth Point Pomona Port Porterville Portola Portola Poway Rancho Rancho Arena Hueneme Valley Cordova Cucamong a Rancho Red Bluff Redding Redondo Redwood Rialto Richmond Rio Dell Ripon Riverbank Santa Beach City Margarita

Riverside Rocklin Rohnert Park Rolling Hills Rosemea Roseville Ross Sacrament Salinas San d o Anselmo San San Bruno San San Carlos San San Diego San San San San Jose Bernardin Buenaventur Clemente Fernando Francisco Gabriel o a San Juan San Juan San Leandro San Luis San San Marino San Mateo San Pablo San Rafael San Ramon Bautista Capistrano Obispo Marcos Sand City Santa Ana Santa Clara Santa Santa Santa Fe Santa Maria Santa Santa Santee Clarita Cruz Springs Monica Rosa Saratoga Sausalito Scotts Valley Seaside Sebastop Selma Shafter Shasta Lake Simi Valley Solana ol Beach Soledad Sonoma Sonora South El South South Lake South South San St Helena Stanton Monte Gate Tahoe Pasadena Francisco Stockton Suisun City Sunnyvale Sutter Tehachapi Tehama Temple City Thousand Tiburon Torrance Creek Oaks Tracy Trinidad Truckee Tulare Turlock Tustin Ukiah Union City Upland Vacaville Vallejo Vernon Villa Park Visalia Vista Walnut Wasco Waterford Watsonvill Weed Creek e West West West Los West Westlake Westminste Westmorlan Wheatland Whittier Willits Covina Hollywood Angeles Sacrament Village r d o Willows Windsor Winters Woodlake Woodland Woodside Yorba Linda Yountville Yreka Yuba City ] State Associated Administrative Fee Charge - Services identified below with “Yes” in the SAAF Applied column will have a 2.5% fee applied to the Monthly Recurring Charge or usage. Charges below do not include the SAAF. The SAAF will appear as a separate line on the customer’s invoice.

Table 24.2.5.2.a – Internet Flat Rate with Managed Router Service Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description Restrictions and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 1 InFRaM @ 1.544 NI026 Internet Flat Rate Interface/Access Type: Private $899.00 $210.00 Each Yes Yes Required Mbps Service with Line Service (PLS) Network-side Managed IP Interface: T1 Enabled Routing Protocol: IPv4/v6 over PLS Device (InFRaM) Upload Speed: 1.544 Mbps at 1.544 Mbps. Product Description: Internet Includes Flat Rate Service with dedicated Managed IP Enabled Routing Internet port, Device (InFRaM) at 1.544 transport, and a Mbps. Includes dedicated Contractor Internet port, transport, and a owned, Contractor owned, maintained and maintained and managed IP managed IP enabled routing device. enabled routing Subject to availability of device. facilities.

24.2.7 Additional Internet Services Contractor’s Description of Service:

[Additional Services and Features] Geographic Availability: [Statewide] State Associated Administrative Fee Charge - Services identified below with “Yes” in the SAAF Applied column will have a 2.5% fee applied to the Monthly Recurring Charge or usage. Charges below do not include the SAAF. The SAAF will appear as a separate line on the customer’s invoice.

Table 24.2.7 – Additional Internet Services Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 1 Class of NI067 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 1.5 Service. Rate 1.5 2 Class of NI068 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate NxT1 Service. Rate NxT1 3 Class of NI069 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 10 Service. Rate 10 4 Class of NI070 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 15 Service. Rate 15 5 Class of NI071 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 20 Service. Rate 20

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 6 Class of NI072 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 25 Service. Rate 25 7 Class of NI073 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 30 Service. Rate 30 8 Class of NI074 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 35 Service. Rate 35 9 Class of NI075 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 40 Service. Rate 40 10 Class of NI076 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flat Flat Rate 45 Service. Rate 45 11 Class of NI077 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 2 Flex 2 Service. 12 Class of NI078 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 3 Flex 3 Service. 13 Class of NI079 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 4 Flex 4 Service. 14 Class of NI080 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 5 Flex 5 Service. 15 Class of NI081 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 6 Flex 6 Service. 16 Class of NI082 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 7 Flex 7 Service. 17 Class of NI083 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 8 Flex 8 Service. 46

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 18 Class of NI084 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 9 Flex 9 Service. 19 Class of NI085 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 10 Flex 10 Service. 20 Class of NI086 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 15 Flex 15 Service. 21 Class of NI087 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 20 Flex 20 Service. 22 Class of NI088 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 25 Flex 25 Service. 23 Class of NI089 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 30 Flex 30 Service. 24 Class of NI090 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 40 Flex 40 Service. 25 Class of NI091 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex 45 Flex 45 Service. 26 Class of NI092 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 45.1 – 155 Service. 45.1 – 155 27 Class of NI093 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 200 – 250 Service. 200 – 250 28 Class of NI094 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 300 – 350 Service. 300 – 350 29 Class of NI095 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 400 – 600 Service. 400 – 600

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 30 Class of NI096 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 700 – 1000 Service. 700 – 1000 31 Class of NI097 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 1500 Service. 1500 32 Class of NI098 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 2000 Service. 2000 33 Class of NI099 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 2500 Service. 2500 34 Class of NI333 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 3000 Service. 3000 35 Class of NI350 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 3500 Service. 3500 36 Class of NI351 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 4000 Service. 4000 37 Class of NI103 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex4500 Service. Flex4500 38 Class of NI104 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 5000 Service. 5000

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 39 Class of NI105 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 5500 Service. 5500 40 Class of NI106 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 6000 Service. 6000 41 Class of NI107 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 6500 Service. 6500 42 Class of NI108 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 7000 Service. 7000 43 Class of NI109 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 7500 Service. 7500 44 Class of NI110 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 8000 Service. 8000 45 Class of NI115 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 8500 Service. 8500 46 Class of NI112 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 9000 Service. 9000 47 Class of NI113 Class of Service AT&T Internet Service Class of $0.00 $0.00 Each Yes Yes Required Service Flex Flex 9500 Service. 9500

67 AT&T Enterprise EAE01 AT&T Enterprise Enterprise Application Access- $0.00 $1,000.00 Each Yes Yes Required Application Application Enterprise enables a Customer Access Access Enterprise 1 to provide authorized users Enterprise 1 - - 129 Users secure remote access to 129 Users designated applications deployed either in the Customer datacenter or on public IaaS platform. Enterprise Application Access (EAA) is a cloud service that delivers access to applications without providing remote users access to your entire network. EAA provides a centralized, managed solution that does not require external hardware or software. With EAA no one can get to applications directly because they are hidden from the Internet and public exposure. A unique dual- cloud architecture closes all inbound firewall ports while providing authenticated end users access to only their specific applications. EAA integrates data-path protection, identity access, single or multi-factor authentication, application security, and management visibility and control into a single service. Enterprise Application Access-

68 AT&T Enterprise EAE02 AT&T Enterprise Enterprise Application Access- $0.00 $7.75 User Yes Yes Required Application Application Enterprise enables a Customer Access Access Enterprise to provide authorized users Enterprise 130 - 130 - 499 Users secure remote access to 499 Users designated applications deployed either in the Customer datacenter or on public IaaS platform. Enterprise Application Access (EAA) is a cloud service that delivers access to applications without providing remote users access to your entire network. EAA provides a centralized, managed solution that does not require external hardware or software. With EAA no one can get to applications directly because they are hidden from the Internet and public exposure. A unique dual- cloud architecture closes all inbound firewall ports while providing authenticated end users access to only their specific applications. EAA integrates data-path protection, identity access, single or multi-factor authentication, application security, and management visibility and control into a single service. Enterprise Application Access-

69 AT&T Enterprise EAE03 AT&T Enterprise Enterprise Application Access- $0.00 $6.03 User Yes Yes Required Application Application Enterprise enables a Customer Access Access Enterprise to provide authorized users Enterprise 500 - 500 - 999 Users secure remote access to 999 Users designated applications deployed either in the Customer datacenter or on public IaaS platform. Enterprise Application Access (EAA) is a cloud service that delivers access to applications without providing remote users access to your entire network. EAA provides a centralized, managed solution that does not require external hardware or software. With EAA no one can get to applications directly because they are hidden from the Internet and public exposure. A unique dual- cloud architecture closes all inbound firewall ports while providing authenticated end users access to only their specific applications. EAA integrates data-path protection, identity access, single or multi-factor authentication, application security, and management visibility and control into a single service. Enterprise Application Access-

70 AT&T Enterprise EAE04 AT&T Enterprise Enterprise Application Access- $0.00 $5.59 User Yes Yes Required Application Application Enterprise enables a Customer Access Access Enterprise to provide authorized users Enterprise 1,000 - 2,499 Users secure remote access to 1,000 - 2,499 designated applications Users deployed either in the Customer datacenter or on public IaaS platform. Enterprise Application Access (EAA) is a cloud service that delivers access to applications without providing remote users access to your entire network. EAA provides a centralized, managed solution that does not require external hardware or software. With EAA no one can get to applications directly because they are hidden from the Internet and public exposure. A unique dual- cloud architecture closes all inbound firewall ports while providing authenticated end users access to only their specific applications. EAA integrates data-path protection, identity access, single or multi-factor authentication, application security, and management visibility and control into a single service. Enterprise Application Access-

71 AT&T Enterprise EAE05 AT&T Enterprise Enterprise Application Access- $0.00 $5.17 User Yes Yes Required Application Application Enterprise enables a Customer Access Access Enterprise to provide authorized users Enterprise 2,500 - 4,999 Users secure remote access to 2,500 - 4,999 designated applications Users deployed either in the Customer datacenter or on public IaaS platform. Enterprise Application Access (EAA) is a cloud service that delivers access to applications without providing remote users access to your entire network. EAA provides a centralized, managed solution that does not require external hardware or software. With EAA no one can get to applications directly because they are hidden from the Internet and public exposure. A unique dual- cloud architecture closes all inbound firewall ports while providing authenticated end users access to only their specific applications. EAA integrates data-path protection, identity access, single or multi-factor authentication, application security, and management visibility and control into a single service. Enterprise Application Access-

72 AT&T Enterprise EAE06 AT&T Enterprise Enterprise Application Access- $0.00 $4.74 User Yes Yes Required Application Application Enterprise enables a Customer Access Access Enterprise to provide authorized users Enterprise 5,000 - 7,499 Users secure remote access to 5,000 - 7,499 designated applications Users deployed either in the Customer datacenter or on public IaaS platform. Enterprise Application Access (EAA) is a cloud service that delivers access to applications without providing remote users access to your entire network. EAA provides a centralized, managed solution that does not require external hardware or software. With EAA no one can get to applications directly because they are hidden from the Internet and public exposure. A unique dual- cloud architecture closes all inbound firewall ports while providing authenticated end users access to only their specific applications. EAA integrates data-path protection, identity access, single or multi-factor authentication, application security, and management visibility and control into a single service. Enterprise Application Access-

73 AT&T Enterprise EAE07 AT&T Enterprise Enterprise Application Access- $0.00 $4.52 User Yes Yes Required Application Application Enterprise enables a Customer Access Access Enterprise to provide authorized users Enterprise 7,500 - 9,999 Users secure remote access to 7,500 - 9,999 designated applications Users deployed either in the Customer datacenter or on public IaaS platform. Enterprise Application Access (EAA) is a cloud service that delivers access to applications without providing remote users access to your entire network. EAA provides a centralized, managed solution that does not require external hardware or software. With EAA no one can get to applications directly because they are hidden from the Internet and public exposure. A unique dual- cloud architecture closes all inbound firewall ports while providing authenticated end users access to only their specific applications. EAA integrates data-path protection, identity access, single or multi-factor authentication, application security, and management visibility and control into a single service. Enterprise Application Access-

74 AT&T Enterprise EAE08 AT&T Enterprise Enterprise Application Access- $0.00 $4.31 User Yes Yes Required Application Application Enterprise enables a Customer Access Access Enterprise to provide authorized users Enterprise 10,000+ Users secure remote access to 10,000+ Users designated applications deployed either in the Customer datacenter or on public IaaS platform. Enterprise Application Access (EAA) is a cloud service that delivers access to applications without providing remote users access to your entire network. EAA provides a centralized, managed solution that does not require external hardware or software. With EAA no one can get to applications directly because they are hidden from the Internet and public exposure. A unique dual- cloud architecture closes all inbound firewall ports while providing authenticated end users access to only their specific applications. EAA integrates data-path protection, identity access, single or multi-factor authentication, application security, and management visibility and control into a single service. Enterprise Application Access-

75 Flexware Flexware is a Flexware Standard VNF's must Multiple Yes Yes Required Standard managed service be configured on Flexware (See ID's that allows Standard uCPE devices. below) Customers to deploy and use one or more Virtual Network Functions in conjunction with associated AT&T Equipment which may be included in the Customer’s solution. Virtual Network Functions are networking capabilities, such as routing, that have traditionally been implemented in single-purpose hardware appliances and can now run as virtualized software instances at the customer site. The Service consists of AT&T owned and managed Host (CPE) with Virtual 74

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 80 Flexware FW005 Flexware Standard AT&T Branded, Owned and $0.00 $166.00 Device Yes Yes Required Standard uCPE uCPE AT&T U410-T Managed uCPE. May require AT&T U410-T or successor phone line provided separately model. for maintenance. 81 Flexware FW006 Flexware Standard AT&T Branded, Owned and $0.00 $203.00 Device Yes Yes Required Standard uCPE uCPE AT&T U412-T Managed uCPE. May require AT&T U412-T or successor phone line provided separately model. for maintenance. 82 Flexware FW007 Flexware Standard AT&T Branded, Owned and $0.00 $69.00 Device Yes Yes Required Standard uCPE uCPE AT&T V150 or Managed uCPE. May require AT&T V150 successor model. phone line provided separately for maintenance. 83 Flexware FW008 Flexware Standard AT&T Branded, Owned and $0.00 $79.00 Device Yes Yes Required Standard uCPE uCPE AT&T V250 or Managed uCPE. May require AT&T V250 successor model. phone line provided separately for maintenance. 84 Flexware FW009 Flexware Standard AT&T Branded, Owned and $0.00 $148.00 Device Yes Yes Required Standard uCPE uCPE AT&T V450 or Managed uCPE. May require AT&T V450 successor model. phone line provided separately for maintenance. 85 Flexware FW010 Flexware Standard AT&T Branded, Owned and $0.00 $87.00 Device Yes Yes Required Standard uCPE uCPE AT&T V150-T Managed uCPE. May require AT&T V150-T or successor phone line provided separately model. for maintenance. 86 Flexware FW011 Flexware Standard AT&T Branded, Owned and $0.00 $97.00 Device Yes Yes Required Standard uCPE uCPE AT&T V250-T Managed uCPE. May require AT&T V250-T or successor phone line provided separately model. for maintenance.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 87 Flexware FW012 Flexware Standard AT&T Branded, Owned and $0.00 $166.00 Device Yes Yes Required Standard uCPE uCPE AT&T V450-T Managed uCPE. May require AT&T V450-T or successor phone line provided separately model. for maintenance. 88 Managed VNF FW013 Managed VNF Flexware Standard VNF's must $0.00 $20.00 VNF Yes Yes Required Juniper vSRX Juniper vSRX 100M be configured on Flexware 100M Standard uCPE devices with adequate capacity. 89 Managed VNF FW014 Managed VNF Flexware Standard VNF's must $0.00 $20.00 VNF Yes Yes Required Juniper vSRX Juniper vSRX 300M be configured on Flexware 300M Standard uCPE devices with adequate capacity. 90 Managed VNF FW015 Managed VNF Flexware Standard VNF's must $0.00 $90.00 VNF Yes Yes Required Juniper vSRX Juniper vSRX 1G be configured on Flexware 1G Standard uCPE devices with adequate capacity. 91 Managed VNF FW016 Managed VNF Flexware Standard VNF's must $0.00 $46.00 VNF Yes Yes Required Cisco CSR 10M Cisco CSR 10M be configured on Flexware Standard uCPE devices with adequate capacity. 92 Managed VNF FW017 Managed VNF Flexware Standard VNF's must $0.00 $66.00 VNF Yes Yes Required Cisco CSR 50M Cisco CSR 50M be configured on Flexware Standard uCPE devices with adequate capacity. 93 Managed VNF FW018 Managed VNF Flexware Standard VNF's must $0.00 $101.00 VNF Yes Yes Required Cisco CSR Cisco CSR 100M be configured on Flexware 100M Standard uCPE devices with adequate capacity.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 94 Managed VNF FW019 Managed VNF Flexware Standard VNF's must $0.00 $191.00 VNF Yes Yes Required Cisco CSR Cisco CSR 250M be configured on Flexware 250M Standard uCPE devices with adequate capacity. 95 Managed VNF FW020 Managed VNF Flexware Standard VNF's must $0.00 $245.00 VNF Yes Yes Required Cisco CSR Cisco CSR 500M be configured on Flexware 500M Standard uCPE devices with adequate capacity. 96 Managed VNF FW021 Managed VNF Flexware Standard VNF's must $0.00 $307.00 VNF Yes Yes Required Cisco CSR 1G Cisco CSR 1G be configured on Flexware Standard uCPE devices with adequate capacity. 97 Managed VNF FW022 Managed VNF Flexware Standard VNF's must $0.00 $415.00 VNF Yes Yes Required Cisco CSR Cisco CSR 2.5G be configured on Flexware 2.5G Standard uCPE devices with adequate capacity. 98 Managed VNF FW023 Managed VNF Flexware Standard VNF's must $0.00 $60.00 VNF Yes Yes Required Cisco CSR AX Cisco CSR AX 10M be configured on Flexware 10M Standard uCPE devices with adequate capacity. 99 Managed VNF FW024 Managed VNF Flexware Standard VNF's must $0.00 $86.00 VNF Yes Yes Required Cisco CSR AX Cisco CSR AX 50M be configured on Flexware 50M Standard uCPE devices with adequate capacity. 10 Managed VNF FW025 Managed VNF Flexware Standard VNF's must $0.00 $132.00 VNF Yes Yes Required 0 Cisco CSR AX Cisco CSR AX be configured on Flexware 100M 100M Standard uCPE devices with adequate capacity.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 10 Managed VNF FW026 Managed VNF Flexware Standard VNF's must $0.00 $239.00 VNF Yes Yes Required 1 Cisco CSR AX Cisco CSR AX be configured on Flexware 250M 250M Standard uCPE devices with adequate capacity. 10 Managed VNF FW027 Managed VNF Flexware Standard VNF's must $0.00 $305.00 VNF Yes Yes Required 2 Cisco CSR AX Cisco CSR AX be configured on Flexware 500M 500M Standard uCPE devices with adequate capacity. 10 Managed VNF FW028 Managed VNF Flexware Standard VNF's must $0.00 $406.00 VNF Yes Yes Required 3 Cisco CSR AX Cisco CSR AX 1G be configured on Flexware 1G Standard uCPE devices with adequate capacity. 10 Managed VNF FW029 Managed VNF Flexware Standard VNF's must $0.00 $561.00 VNF Yes Yes Required 4 Cisco CSR AX Cisco CSR AX 2.5G be configured on Flexware 2.5G Standard uCPE devices with adequate capacity. 10 Managed VNF FW030 Managed VNF Flexware Standard VNF's must $0.00 $150.00 VNF Yes Yes Required 5 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM00 Essential Standard uCPE devices with VM00 Essential adequate capacity. 10 Managed VNF FW031 Managed VNF Flexware Standard VNF's must $0.00 $250.00 VNF Yes Yes Required 6 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM01 Essential Standard uCPE devices with VM01 Essential adequate capacity. 10 Managed VNF FW032 Managed VNF Flexware Standard VNF's must $0.00 $475.00 VNF Yes Yes Required 7 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM02 Essential Standard uCPE devices with VM02 Essential adequate capacity.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 10 Managed VNF FW033 Managed VNF Flexware Standard VNF's must $0.00 $575.00 VNF Yes Yes Required 8 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM04 Essential Standard uCPE devices with VM04 Essential adequate capacity. 10 Managed VNF FW034 Managed VNF Flexware Standard VNF's must $0.00 $950.00 VNF Yes Yes Required 9 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM08 Essential Standard uCPE devices with VM08 Essential adequate capacity. 11 Managed VNF FW035 Managed VNF Flexware Standard VNF's must $0.00 $225.00 VNF Yes Yes Required 0 Palo Alto VM50 Palo Alto VM50 - be configured on Flexware - Essential Essential Standard uCPE devices with adequate capacity. 11 Managed VNF FW036 Managed VNF Flexware Standard VNF's must $0.00 $500.00 VNF Yes Yes Required 1 Palo Alto Palo Alto VM100 - be configured on Flexware VM100 - Essential Standard uCPE devices with Essential adequate capacity. 11 Managed VNF FW037 Managed VNF Flexware Standard VNF's must $0.00 $700.00 VNF Yes Yes Required 2 Palo Alto Palo Alto VM300 - be configured on Flexware VM300 - Essential Standard uCPE devices with Essential adequate capacity. 11 Managed VNF FW038 Managed VNF Flexware Standard VNF's must $0.00 $300.00 VNF Yes Yes Required 3 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM00 Enhanced Standard uCPE devices with VM00 adequate capacity. Enhanced

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 11 Managed VNF FW039 Managed VNF Flexware Standard VNF's must $0.00 $400.00 VNF Yes Yes Required 4 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM01 Enhanced Standard uCPE devices with VM01 adequate capacity. Enhanced 11 Managed VNF FW040 Managed VNF Flexware Standard VNF's must $0.00 $650.00 VNF Yes Yes Required 5 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM02 Enhanced Standard uCPE devices with VM02 adequate capacity. Enhanced 11 Managed VNF FW041 Managed VNF Flexware Standard VNF's must $0.00 $825.00 VNF Yes Yes Required 6 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM04 Enhanced Standard uCPE devices with VM04 adequate capacity. Enhanced 11 Managed VNF FW042 Managed VNF Flexware Standard VNF's must $0.00 $1,200.00 VNF Yes Yes Required 7 Fortinet Fortinet FortiGate - be configured on Flexware FortiGate - VM08 Enhanced Standard uCPE devices with VM08 adequate capacity. Enhanced 11 Managed VNF FW043 Managed VNF Flexware Standard VNF's must $0.00 $400.00 VNF Yes Yes Required 8 Palo Alto VM50 Palo Alto VM50 be configured on Flexware Enhanced Enhanced Standard uCPE devices with adequate capacity. 11 Managed VNF FW044 Managed VNF Flexware Standard VNF's must $0.00 $675.00 VNF Yes Yes Required 9 Palo Alto Palo Alto VM100 be configured on Flexware VM100 Enhanced Standard uCPE devices with Enhanced adequate capacity.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 12 Managed VNF FW045 Managed VNF Flexware Standard VNF's must $0.00 $925.00 VNF Yes Yes Required 0 Palo Alto Palo Alto VM300 be configured on Flexware VM300 Enhanced Standard uCPE devices with Enhanced adequate capacity. 12 Managed VNF FW046 Managed VNF Flexware Standard VNF's must $0.00 $345.00 VNF Yes Yes Required 1 Juniper vSRX Juniper vSRX 100M be configured on Flexware 100M Enhanced Standard uCPE devices with Enhanced adequate capacity. 12 Managed VNF FW047 Managed VNF Flexware Standard VNF's must $0.00 $469.00 VNF Yes Yes Required 2 Juniper vSRX Juniper vSRX 1G be configured on Flexware 1G Enhanced Enhanced Standard uCPE devices with adequate capacity. 12 Managed VNF FW048 Managed VNF Flexware Standard VNF's must $0.00 $95.00 VNF Yes Yes Required 3 Riverbed Riverbed be configured on Flexware Steelhead Steelhead VCX-10 Standard uCPE devices with VCX-10 adequate capacity. 12 Managed VNF FW049 Managed VNF Flexware Standard VNF's must $0.00 $154.00 VNF Yes Yes Required 4 Riverbed Riverbed be configured on Flexware Steelhead Steelhead VCX-20 Standard uCPE devices with VCX-20 adequate capacity. 12 Managed VNF FW050 Managed VNF Flexware Standard VNF's must $0.00 $243.00 VNF Yes Yes Required 5 Riverbed Riverbed be configured on Flexware Steelhead Steelhead VCX-30 Standard uCPE devices with VCX-30 adequate capacity. 12 Managed VNF FW051 Managed VNF Flexware Standard VNF's must $0.00 $314.00 VNF Yes Yes Required 6 Riverbed Riverbed be configured on Flexware Steelhead Steelhead VCX-40 Standard uCPE devices with VCX-40 adequate capacity.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 12 Managed VNF FW052 Managed VNF Flexware Standard VNF's must $0.00 $444.00 VNF Yes Yes Required 7 Riverbed Riverbed be configured on Flexware Steelhead Steelhead VCX-50 Standard uCPE devices with VCX-50 adequate capacity. 12 Managed VNF FW053 Managed VNF Flexware Standard VNF's must $0.00 $738.00 VNF Yes Yes Required 8 Riverbed Riverbed be configured on Flexware Steelhead Steelhead VCX-60 Standard uCPE devices with VCX-60 adequate capacity. 12 VNF Self FW054 VNF Self Managed Flexware Standard VNF's must $0.00 $15.00 VNF Yes Yes Required 9 Managed Juniper vSRX 100M be configured on Flexware Juniper vSRX Standard uCPE devices with 100M adequate capacity. 13 VNF Self FW055 VNF Self Managed Flexware Standard VNF's must $0.00 $15.00 VNF Yes Yes Required 0 Managed Juniper vSRX 300M be configured on Flexware Juniper vSRX Standard uCPE devices with 300M adequate capacity. 13 VNF Self FW056 VNF Self Managed Flexware Standard VNF's must $0.00 $90.00 VNF Yes Yes Required 1 Managed Juniper vSRX 1G be configured on Flexware Juniper vSRX Standard uCPE devices with 1G adequate capacity. 13 VNF Self FW057 VNF Self Managed Flexware Standard VNF's must $0.00 $90.00 VNF Yes Yes Required 2 Managed VeloCloud vEdge be configured on Flexware VeloCloud ENT 10M Standard uCPE devices with vEdge ENT adequate capacity. 10M

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 13 VNF Self FW063 VNF Self Managed Flexware Standard VNF's must $0.00 $273.00 VNF Yes Yes Required 8 Managed VeloCloud vEdge be configured on Flexware VeloCloud ENT 400M Standard uCPE devices with vEdge ENT adequate capacity. 400M 13 VNF Self FW064 VNF Self Managed Flexware Standard VNF's must $0.00 $343.00 VNF Yes Yes Required 9 Managed VeloCloud vEdge be configured on Flexware VeloCloud ENT 1G Standard uCPE devices with vEdge ENT 1G adequate capacity. 14 VNF Self FW065 VNF Self Managed Flexware Standard VNF's must $0.00 $100.00 VNF Yes Yes Required 0 Managed VeloCloud vEdge be configured on Flexware VeloCloud PRE 10M Standard uCPE devices with vEdge PRE adequate capacity. 10M 14 VNF Self FW066 VNF Self Managed Flexware Standard VNF's must $0.00 $120.00 VNF Yes Yes Required 1 Managed VeloCloud vEdge be configured on Flexware VeloCloud PRE 30M Standard uCPE devices with vEdge PRE adequate capacity. 30M 14 VNF Self FW067 VNF Self Managed Flexware Standard VNF's must $0.00 $140.00 VNF Yes Yes Required 2 Managed VeloCloud vEdge be configured on Flexware VeloCloud PRE 50M Standard uCPE devices with vEdge PRE adequate capacity. 50M 14 VNF Self FW068 VNF Self Managed Flexware Standard VNF's must $0.00 $180.00 VNF Yes Yes Required 3 Managed VeloCloud vEdge be configured on Flexware VeloCloud PRE 100M Standard uCPE devices with vEdge PRE adequate capacity. 100M

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 14 VNF Self FW069 VNF Self Managed Flexware Standard VNF's must $0.00 $260.00 VNF Yes Yes Required 4 Managed VeloCloud vEdge be configured on Flexware VeloCloud PRE 200M Standard uCPE devices with vEdge PRE adequate capacity. 200M 14 VNF Self FW070 VNF Self Managed Flexware Standard VNF's must $0.00 $320.00 VNF Yes Yes Required 5 Managed VeloCloud vEdge be configured on Flexware VeloCloud PRE 300M Standard uCPE devices with vEdge PRE adequate capacity. 300M 14 VNF Self FW071 VNF Self Managed Flexware Standard VNF's must $0.00 $343.00 VNF Yes Yes Required 6 Managed VeloCloud vEdge be configured on Flexware VeloCloud PRE 400M Standard uCPE devices with vEdge PRE adequate capacity. 400M 14 VNF Self FW072 VNF Self Managed Flexware Standard VNF's must $0.00 $563.00 VNF Yes Yes Required 7 Managed VeloCloud vEdge be configured on Flexware VeloCloud PRE 1G Standard uCPE devices with vEdge PRE 1G adequate capacity. 14 VNF Self FW073 VNF Self Managed Flexware Standard VNF's must $0.00 $75.00 VNF Yes Yes Required 8 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM00 Essential Standard uCPE devices with FortiGate - adequate capacity. VM00 Essential 14 VNF Self FW074 VNF Self Managed Flexware Standard VNF's must $0.00 $150.00 VNF Yes Yes Required 9 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM01 Essential Standard uCPE devices with FortiGate - adequate capacity. VM01 Essential

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 15 VNF Self FW075 VNF Self Managed Flexware Standard VNF's must $0.00 $350.00 VNF Yes Yes Required 0 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM02 Essential Standard uCPE devices with FortiGate - adequate capacity. VM02 Essential 15 VNF Self FW076 VNF Self Managed Flexware Standard VNF's must $0.00 $450.00 VNF Yes Yes Required 1 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM04 Essential Standard uCPE devices with FortiGate - adequate capacity. VM04 Essential 15 VNF Self FW077 VNF Self Managed Flexware Standard VNF's must $0.00 $800.00 VNF Yes Yes Required 2 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM08 Essential Standard uCPE devices with FortiGate - adequate capacity. VM08 Essential 15 VNF Self FW078 VNF Self Managed Flexware Standard VNF's must $0.00 $125.00 VNF Yes Yes Required 3 Managed Palo Palo Alto VM50 - be configured on Flexware Alto VM50 - Essential Standard uCPE devices with Essential adequate capacity. 15 VNF Self FW079 VNF Self Managed Flexware Standard VNF's must $0.00 $375.00 VNF Yes Yes Required 4 Managed Palo Palo Alto VM100 - be configured on Flexware Alto VM100 - Essential Standard uCPE devices with Essential adequate capacity. 15 VNF Self FW080 VNF Self Managed Flexware Standard VNF's must $0.00 $550.00 VNF Yes Yes Required 5 Managed Palo Palo Alto VM300 - be configured on Flexware Alto VM300 - Essential Standard uCPE devices with Essential adequate capacity.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 15 VNF Self FW081 VNF Self Managed Flexware Standard VNF's must $0.00 $60.00 VNF Yes Yes Required 6 Managed Checkpoint VE10 - be configured on Flexware Checkpoint Essential Standard uCPE devices with VE10 - Essential adequate capacity. 15 VNF Self FW082 VNF Self Managed Flexware Standard VNF's must $0.00 $125.00 VNF Yes Yes Required 7 Managed Checkpoint VE50 - be configured on Flexware Checkpoint Essential Standard uCPE devices with VE50 - Essential adequate capacity. 15 VNF Self FW083 VNF Self Managed Flexware Standard VNF's must $0.00 $300.00 VNF Yes Yes Required 8 Managed Checkpoint VE250 be configured on Flexware Checkpoint - Essential Standard uCPE devices with VE250 - adequate capacity. Essential 15 VNF Self FW084 VNF Self Managed Flexware Standard VNF's must $0.00 $375.00 VNF Yes Yes Required 9 Managed Checkpoint VE500 be configured on Flexware Checkpoint - Essential Standard uCPE devices with VE500 - adequate capacity. Essential 16 VNF Self FW085 VNF Self Managed Flexware Standard VNF's must $0.00 $625.00 VNF Yes Yes Required 0 Managed Checkpoint be configured on Flexware Checkpoint VE1000 - Essential Standard uCPE devices with VE1000 - adequate capacity. Essential 16 VNF Self FW086 VNF Self Managed Flexware Standard VNF's must $0.00 $100.00 VNF Yes Yes Required 1 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM00 Enhanced Standard uCPE devices with FortiGate - adequate capacity. VM00 Enhanced

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 16 VNF Self FW087 VNF Self Managed Flexware Standard VNF's must $0.00 $200.00 VNF Yes Yes Required 2 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM01 Enhanced Standard uCPE devices with FortiGate - adequate capacity. VM01 Enhanced 16 VNF Self FW088 VNF Self Managed Flexware Standard VNF's must $0.00 $450.00 VNF Yes Yes Required 3 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM02 Enhanced Standard uCPE devices with FortiGate - adequate capacity. VM02 Enhanced 16 VNF Self FW089 VNF Self Managed Flexware Standard VNF's must $0.00 $600.00 VNF Yes Yes Required 4 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM04 Enhanced Standard uCPE devices with FortiGate - adequate capacity. VM04 Enhanced 16 VNF Self FW090 VNF Self Managed Flexware Standard VNF's must $0.00 $950.00 VNF Yes Yes Required 5 Managed Fortinet FortiGate - be configured on Flexware Fortinet VM08 Enhanced Standard uCPE devices with FortiGate - adequate capacity. VM08 Enhanced 16 VNF Self FW091 VNF Self Managed Flexware Standard VNF's must $0.00 $100.00 VNF Yes Yes Required 6 Managed Juniper vSRX 10M be configured on Flexware Juniper vSRX Enhanced Standard uCPE devices with 10M Enhanced adequate capacity.

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 16 VNF Self FW092 VNF Self Managed Flexware Standard VNF's must $0.00 $325.00 VNF Yes Yes Required 7 Managed Juniper vSRX 100M be configured on Flexware Juniper vSRX Enhanced Standard uCPE devices with 100M adequate capacity. Enhanced 16 VNF Self FW093 VNF Self Managed Flexware Standard VNF's must $0.00 $450.00 VNF Yes Yes Required 8 Managed Juniper vSRX 1G be configured on Flexware Juniper vSRX Enhanced Standard uCPE devices with 1G Enhanced adequate capacity. 16 VNF Self FW094 VNF Self Managed Flexware Standard VNF's must $0.00 $200.00 VNF Yes Yes Required 9 Managed Palo Palo Alto VM50 be configured on Flexware Alto VM50 Enhanced Standard uCPE devices with Enhanced adequate capacity. 17 VNF Self FW095 VNF Self Managed Flexware Standard VNF's must $0.00 $475.00 VNF Yes Yes Required 0 Managed Palo Palo Alto VM100 be configured on Flexware Alto VM100 Enhanced Standard uCPE devices with Enhanced adequate capacity. 17 VNF Self FW096 VNF Self Managed Flexware Standard VNF's must $0.00 $675.00 VNF Yes Yes Required 1 Managed Palo Palo Alto VM300 be configured on Flexware Alto VM300 Enhanced Standard uCPE devices with Enhanced adequate capacity. 17 VNF Self FW097 VNF Self Managed Flexware Standard VNF's must $0.00 $85.00 VNF Yes Yes Required 2 Managed Checkpoint VE10 be configured on Flexware Checkpoint Enhanced Standard uCPE devices with VE10 adequate capacity. Enhanced

Flexware Flexware is a Multiple Specialized managed service (See ID's that allows below) Customers to deploy and use one or more Virtual Network Functions in conjunction with associated AT&T Equipment which may be included in the Customer’s solution. Virtual Network Functions are networking 19 capabilities, such 0 as routing, that have traditionally been implemented in single-purpose hardware appliances and can now run as virtualized software instances at the customer site. The Service consists of AT&T owned and managed Host (CPE) with Virtual 95

100

101

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS17 AT&T Flexware AT&T Virtual Network Functions $54.55 $455.29 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 20 Function Unmanaged- AT&T uCPE Flexware Specialized 8 Unmanaged- SteelHead VCX-30 equipment SteelHead VCX-30 AT&T Flexware FWS18 AT&T Flexware AT&T Virtual Network Functions $54.55 $472.23 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 20 Function Managed- AT&T uCPE Flexware Specialized 9 Managed- SteelHead VCX-30 equipment SteelHead VCX-30 AT&T Flexware FWS19 AT&T Flexware AT&T Virtual Network Functions $54.55 $579.38 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Unmanaged- AT&T uCPE Flexware Specialized 0 Unmanaged- SteelHead VCX-40 equipment SteelHead VCX-40 AT&T Flexware FWS20 AT&T Flexware AT&T Virtual Network Functions $54.55 $596.32 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Managed- AT&T uCPE Flexware Specialized 1 Managed- SteelHead VCX-40 equipment SteelHead VCX-40

102

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS21 AT&T Flexware AT&T Virtual Network Functions $54.55 $807.20 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Unmanaged- AT&T uCPE Flexware Specialized 2 Unmanaged- SteelHead VCX-50 equipment SteelHead VCX-50 AT&T Flexware FWS22 AT&T Flexware AT&T Virtual Network Functions $54.55 $824.14 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Managed- AT&T uCPE Flexware Specialized 3 Managed- SteelHead VCX-50 equipment SteelHead VCX-50 AT&T Flexware FWS23 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,323.93 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Unmanaged- AT&T uCPE Flexware Specialized 4 Unmanaged- SteelHead VCX-60 equipment SteelHead VCX-60 AT&T Flexware FWS24 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,340.87 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Managed- AT&T uCPE Flexware Specialized 5 Managed- SteelHead VCX-60 equipment SteelHead VCX-60

103

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS25 AT&T Flexware AT&T Virtual Network Functions $54.55 $2,275.29 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Unmanaged- AT&T uCPE Flexware Specialized 6 Unmanaged- SteelHead VCX-70 equipment SteelHead VCX-70 AT&T Flexware FWS26 AT&T Flexware AT&T Virtual Network Functions $54.55 $2,292.23 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Managed- AT&T uCPE Flexware Specialized 7 Managed- SteelHead VCX-70 equipment SteelHead VCX-70 AT&T Flexware FWS27 AT&T Flexware AT&T Virtual Network Functions $54.55 $3,847.11 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Unmanaged- AT&T uCPE Flexware Specialized 8 Unmanaged- SteelHead VCX-80 equipment SteelHead VCX-80 AT&T Flexware FWS28 AT&T Flexware AT&T Virtual Network Functions $54.55 $3,864.05 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 21 Function Managed- AT&T uCPE Flexware Specialized 9 Managed- SteelHead VCX-80 equipment SteelHead VCX-80

104

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS29 AT&T Flexware AT&T Virtual Network Functions $54.55 $86.78 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 0 Function Unmanaged- AT&T uCPE Flexware Specialized Unmanaged- Fortigate VM00 equipment Fortigate VM00 AT&T Flexware FWS30 AT&T Flexware AT&T Virtual Network Functions $54.55 $393.66 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 1 Function Managed- AT&T uCPE Flexware Specialized Managed- Fortigate VM00 equipment Fortigate VM00 AT&T Flexware FWS31 AT&T Flexware AT&T Virtual Network Functions $54.55 $126.78 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 2 Function Unmanaged- AT&T uCPE Flexware Specialized Unmanaged- Fortigate VM01 equipment Fortigate VM01 AT&T Flexware FWS32 AT&T Flexware AT&T Virtual Network Functions $54.55 $433.66 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 3 Function Managed- AT&T uCPE Flexware Specialized Managed- Fortigate VM01 equipment Fortigate VM01

105

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS33 AT&T Flexware AT&T Virtual Network Functions $54.55 $195.87 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 4 Function Unmanaged- AT&T uCPE Flexware Specialized Unmanaged- Fortigate VM02 equipment Fortigate VM02 AT&T Flexware FWS34 AT&T Flexware AT&T Virtual Network Functions $54.55 $642.75 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 5 Function Managed- AT&T uCPE Flexware Specialized Managed- Fortigate VM02 equipment Fortigate VM02 AT&T Flexware FWS35 AT&T Flexware AT&T Virtual Network Functions $54.55 $334.06 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 6 Function Unmanaged- AT&T uCPE Flexware Specialized Unmanaged- Fortigate VM04 equipment Fortigate VM04 AT&T Flexware FWS36 AT&T Flexware AT&T Virtual Network Functions $54.55 $919.39 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 7 Function Managed- AT&T uCPE Flexware Specialized Managed- Fortigate VM04 equipment Fortigate VM04

106

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS37 AT&T Flexware AT&T Virtual Network Functions $54.55 $609.21 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 8 Function Unmanaged- AT&T uCPE Flexware Specialized Unmanaged- Fortigate VM08 equipment Fortigate VM08 AT&T Flexware FWS38 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,474.55 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 22 Virtual Network Network Function but must be purchased with 9 Function Managed- AT&T uCPE Flexware Specialized Managed- Fortigate VM08 equipment Fortigate VM08 AT&T Flexware FWS39 AT&T Flexware AT&T Virtual Network Functions $54.55 $213.44 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 23 Function Unmanaged-Palo AT&T uCPE Flexware Specialized 0 Unmanaged- Alto VM-50 equipment Palo Alto VM- 50 AT&T Flexware FWS40 AT&T Flexware AT&T Virtual Network Functions $54.55 $435.70 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 23 Function Managed-Palo AT&T uCPE Flexware Specialized 1 Managed- Alto VM-50 equipment Palo Alto VM- 50

107

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS41 AT&T Flexware AT&T Virtual Network Functions $54.55 $310.10 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 23 Function Unmanaged-Palo AT&T uCPE Flexware Specialized 2 Unmanaged- Alto VM-100 equipment Palo Alto VM- 100 AT&T Flexware FWS42 AT&T Flexware AT&T Virtual Network Functions $54.55 $632.37 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 23 Function Managed-Palo AT&T uCPE Flexware Specialized 3 Managed- Alto VM-100 equipment Palo Alto VM- 100 AT&T Flexware FWS43 AT&T Flexware AT&T Virtual Network Functions $54.55 $463.44 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 23 Function Unmanaged-Palo AT&T uCPE Flexware Specialized 4 Unmanaged- Alto VM-300 equipment Palo Alto VM- 300 AT&T Flexware FWS44 AT&T Flexware AT&T Virtual Network Functions $54.55 $885.70 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 23 Function Managed-Palo AT&T uCPE Flexware Specialized 5 Managed- Alto VM-300 equipment Palo Alto VM- 300

108

109

110

111

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS54 AT&T Flexware AT&T Virtual Network Functions $54.55 $3,687.40 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 24 Function Managed- AT&T uCPE Flexware Specialized 5 Managed- Mediant VE SBC equipment Mediant VE KVM Extra Large SBC KVM Extra 10000 Large 10000 AT&T Flexware FWS55 AT&T Flexware AT&T Virtual Network Functions $54.55 $109.02 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 24 Function Unmanaged- AT&T uCPE Flexware Specialized 6 Unmanaged- Vyatta v5600 - equipment Vyatta v5600 - 250M 250M AT&T Flexware FWS56 AT&T Flexware AT&T Virtual Network Functions $54.55 $124.00 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 24 Function Managed-Vyatta AT&T uCPE Flexware Specialized 7 Managed- v5600 - 250M equipment Vyatta v5600 - 250M AT&T Flexware FWS57 AT&T Flexware AT&T Virtual Network Functions $54.55 $127.43 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 24 Function Unmanaged- AT&T uCPE Flexware Specialized 8 Unmanaged- Vyatta v5600 - equipment Vyatta v5600 - 500M 500M

112

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS58 AT&T Flexware AT&T Virtual Network Functions $54.55 $142.41 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 24 Function Managed-Vyatta AT&T uCPE Flexware Specialized 9 Managed- v5600 - 500M equipment Vyatta v5600 - 500M AT&T Flexware FWS59 AT&T Flexware AT&T Virtual Network Functions $54.55 $146.08 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 25 Function Unmanaged- AT&T uCPE Flexware Specialized 0 Unmanaged- Vyatta v5600 - 5G equipment Vyatta v5600 - 5G AT&T Flexware FWS60 AT&T Flexware AT&T Virtual Network Functions $54.55 $161.07 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 25 Function Managed-Vyatta AT&T uCPE Flexware Specialized 1 Managed- v5600 - 5G equipment Vyatta v5600 - 5G AT&T Flexware FWS61 AT&T Flexware AT&T Virtual Network Functions $54.55 $174.14 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 25 Function Unmanaged- AT&T uCPE Flexware Specialized 2 Unmanaged- Vyatta v5600 - 10G equipment Vyatta v5600 - 10G

113

114

115

116

117

118

119

120

121

122

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS89 AT&T Flexware AT&T Virtual Network Functions $54.55 $209.32 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 28 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 0 Unmanaged- 20 FW - 10M equipment R80 20 FW - 10M AT&T Flexware FWS90 AT&T Flexware AT&T Virtual Network Functions $54.55 $231.58 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 28 Virtual Network Network Function but must be purchased with 1 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 FW - 10M equipment 20 FW - 10M AT&T Flexware FWS91 AT&T Flexware AT&T Virtual Network Functions $54.55 $238.25 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 28 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 2 Unmanaged- 20 FW - 50M equipment R80 20 FW - 50M AT&T Flexware FWS92 AT&T Flexware AT&T Virtual Network Functions $54.55 $260.51 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 28 Virtual Network Network Function but must be purchased with 3 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 FW - 50M equipment 20 FW - 50M

123

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS93 AT&T Flexware AT&T Virtual Network Functions $54.55 $382.92 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 28 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 4 Unmanaged- 20 FW - 250M equipment R80 20 FW - 250M AT&T Flexware FWS94 AT&T Flexware AT&T Virtual Network Functions $54.55 $405.18 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 28 Virtual Network Network Function but must be purchased with 5 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 FW - 250M equipment 20 FW - 250M AT&T Flexware FWS95 AT&T Flexware AT&T Virtual Network Functions $54.55 $563.76 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 28 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 6 Unmanaged- 20 FW - 500M equipment R80 20 FW - 500M AT&T Flexware FWS96 AT&T Flexware AT&T Virtual Network Functions $54.55 $586.02 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 28 Virtual Network Network Function but must be purchased with 7 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 FW - 500M equipment 20 FW - 500M

124

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWS97 AT&T Flexware AT&T Virtual Network Functions $54.55 $925.43 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 28 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 8 Unmanaged- 20 FW - 1000M equipment R80 20 FW - 1000M AT&T Flexware FWS98 AT&T Flexware AT&T Virtual Network Functions $54.55 $947.69 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 28 Virtual Network Network Function but must be purchased with 9 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 FW - 1000M equipment 20 FW - 1000M AT&T Flexware FWS99 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,648.77 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 29 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 0 Unmanaged- 20 FW - 2000M equipment R80 20 FW - 2000M AT&T Flexware FWSA0 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,671.03 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 29 Virtual Network Network Function but must be purchased with 1 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 FW - 2000M equipment 20 FW - 2000M

125

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSA1 AT&T Flexware AT&T Virtual Network Functions $54.55 $3,818.80 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 29 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 2 Unmanaged- 20 FW - 5000M equipment R80 20 FW - 5000M AT&T Flexware FWSA2 AT&T Flexware AT&T Virtual Network Functions $54.55 $3,841.06 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 29 Virtual Network Network Function but must be purchased with 3 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 FW - 5000M equipment 20 FW - 5000M AT&T Flexware FWSA3 AT&T Flexware AT&T Virtual Network Functions $54.55 $252.27 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 29 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 4 Unmanaged- 20 NGTX - 10M equipment R80 20 NGTX - 10M AT&T Flexware FWSA4 AT&T Flexware AT&T Virtual Network Functions $54.55 $279.14 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 29 Virtual Network Network Function but must be purchased with 5 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 NGTX - 10M equipment 20 NGTX - 10M

126

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSA5 AT&T Flexware AT&T Virtual Network Functions $54.55 $390.00 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 29 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 6 Unmanaged- 20 NGTX - 50M equipment R80 20 NGTX - 50M AT&T Flexware FWSA6 AT&T Flexware AT&T Virtual Network Functions $54.55 $416.87 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 29 Virtual Network Network Function but must be purchased with 7 Function Managed-R80 20 AT&T uCPE Flexware Specialized Managed-R80 NGTX - 50M equipment 20 NGTX - 50M AT&T Flexware FWSA7 AT&T Flexware AT&T Virtual Network Functions $54.55 $132.55 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 29 Virtual Network Network Function but must be purchased with 8 Function Unmanaged-BYO AT&T uCPE Flexware Specialized Unmanaged- VNF Small equipment BYO VNF Small AT&T Flexware FWSA8 AT&T Flexware AT&T Virtual Network Functions $54.55 $115.24 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 29 Function Unmanaged- AT&T uCPE Flexware Specialized 9 Unmanaged- BYOVNF Medium equipment BYOVNF Medium

127

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSA9 AT&T Flexware AT&T Virtual Network Functions $54.55 $115.24 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged 30 Virtual Network Network Function but must be purchased with 0 Function Unmanaged- AT&T uCPE Flexware Specialized Unmanaged- BYOVNF Large equipment BYOVNF Large AT&T Flexware FWSB0 AT&T Flexware AT&T Virtual Network Functions $54.55 $115.24 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Unmanaged- AT&T uCPE Flexware Specialized 1 Unmanaged- BYOVNF - XLarge equipment BYOVNF - XLarge AT&T Flexware FWSB1 AT&T Flexware AT&T Virtual Network Functions $54.55 $43.94 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 2 Unmanaged- (10Mb) Primary equipment Boost (10Mb) Primary AT&T Flexware FWSB2 AT&T Flexware AT&T Virtual Network Functions $54.55 $43.94 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Managed-Boost AT&T uCPE Flexware Specialized 3 Managed- (10Mb) Primary equipment Boost (10Mb) Primary

128

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSB3 AT&T Flexware AT&T Virtual Network Functions $54.55 $95.45 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 4 Unmanaged- (20Mb) Primary equipment Boost (20Mb) Primary AT&T Flexware FWSB4 AT&T Flexware AT&T Virtual Network Functions $54.55 $95.45 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Managed-Boost AT&T uCPE Flexware Specialized 5 Managed- (20Mb) Primary equipment Boost (20Mb) Primary AT&T Flexware FWSB5 AT&T Flexware AT&T Virtual Network Functions $54.55 $219.70 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 6 Unmanaged- (50Mb) Primary equipment Boost (50Mb) Primary AT&T Flexware FWSB6 AT&T Flexware AT&T Virtual Network Functions $54.55 $219.70 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Managed-Boost AT&T uCPE Flexware Specialized 7 Managed- (50Mb) Primary equipment Boost (50Mb) Primary

129

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSB7 AT&T Flexware AT&T Virtual Network Functions $54.55 $439.39 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 8 Unmanaged- (100Mb) Primary equipment Boost (100Mb) Primary AT&T Flexware FWSB8 AT&T Flexware AT&T Virtual Network Functions $54.55 $439.39 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 30 Function Managed-Boost AT&T uCPE Flexware Specialized 9 Managed- (100Mb) Primary equipment Boost (100Mb) Primary AT&T Flexware FWSB9 AT&T Flexware AT&T Virtual Network Functions $54.55 $878.79 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 31 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 0 Unmanaged- (200Mb) Primary equipment Boost (200Mb) Primary AT&T Flexware FWSC0 AT&T Flexware AT&T Virtual Network Functions $54.55 $878.79 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 31 Function Managed-Boost AT&T uCPE Flexware Specialized 1 Managed- (200Mb) Primary equipment Boost (200Mb) Primary

130

131

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSC4 AT&T Flexware AT&T Virtual Network Functions $54.55 $4,393.94 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 31 Function Managed-Boost AT&T uCPE Flexware Specialized 5 Managed- (1000Mb) Primary equipment Boost (1000Mb) Primary AT&T Flexware FWSC5 AT&T Flexware AT&T Virtual Network Functions $54.55 $21.97 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 31 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 6 Unmanaged- (10Mb) Back-up equipment Boost (10Mb) Back-up AT&T Flexware FWSC6 AT&T Flexware AT&T Virtual Network Functions $54.55 $21.97 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 31 Function Managed-Boost AT&T uCPE Flexware Specialized 7 Managed- (10Mb) Back-up equipment Boost (10Mb) Back-up AT&T Flexware FWSC7 AT&T Flexware AT&T Virtual Network Functions $54.55 $43.94 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 31 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 8 Unmanaged- (20Mb) Back-up equipment Boost (20Mb) Back-up

132

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSC8 AT&T Flexware AT&T Virtual Network Functions $54.55 $43.94 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 31 Function Managed-Boost AT&T uCPE Flexware Specialized 9 Managed- (20Mb) Back-up equipment Boost (20Mb) Back-up AT&T Flexware FWSC9 AT&T Flexware AT&T Virtual Network Functions $54.55 $109.85 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 32 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 0 Unmanaged- (50Mb) Back-up equipment Boost (50Mb) Back-up AT&T Flexware FWSD0 AT&T Flexware AT&T Virtual Network Functions $54.55 $109.85 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 32 Function Managed-Boost AT&T uCPE Flexware Specialized 1 Managed- (50Mb) Back-up equipment Boost (50Mb) Back-up AT&T Flexware FWSD1 AT&T Flexware AT&T Virtual Network Functions $54.55 $219.70 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 32 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 2 Unmanaged- (100Mb) Back-up equipment Boost (100Mb) Back-up

133

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSD2 AT&T Flexware AT&T Virtual Network Functions $54.55 $219.70 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 32 Function Managed-Boost AT&T uCPE Flexware Specialized 3 Managed- (100Mb) Back-up equipment Boost (100Mb) Back-up AT&T Flexware FWSD3 AT&T Flexware AT&T Virtual Network Functions $54.55 $439.39 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 32 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 4 Unmanaged- (200Mb) Back-up equipment Boost (200Mb) Back-up AT&T Flexware FWSD4 AT&T Flexware AT&T Virtual Network Functions $54.55 $439.39 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 32 Function Managed-Boost AT&T uCPE Flexware Specialized 5 Managed- (200Mb) Back-up equipment Boost (200Mb) Back-up AT&T Flexware FWSD5 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,098.48 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 32 Function Unmanaged-Boost AT&T uCPE Flexware Specialized 6 Unmanaged- (500Mb) Back-up equipment Boost (500Mb) Back-up

134

135

136

137

138

139

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSF1 AT&T Flexware AT&T Virtual Network Functions $54.55 $378.76 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 34 Function Unmanaged- AT&T uCPE Flexware Specialized 2 Unmanaged- Aruba MC-VA-10 equipment Aruba MC-VA- 10 AT&T Flexware FWSF2 AT&T Flexware AT&T Virtual Network Functions $54.55 $405.64 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 34 Function Managed-Aruba AT&T uCPE Flexware Specialized 3 Managed- MC-VA-10 equipment Aruba MC-VA- 10 AT&T Flexware FWSF3 AT&T Flexware AT&T Virtual Network Functions $54.55 $959.50 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 34 Function Unmanaged- AT&T uCPE Flexware Specialized 4 Unmanaged- Aruba MC-VA-50 equipment Aruba MC-VA- 50 AT&T Flexware FWSF4 AT&T Flexware AT&T Virtual Network Functions $54.55 $986.38 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 34 Function Managed-Aruba AT&T uCPE Flexware Specialized 5 Managed- MC-VA-50 equipment Aruba MC-VA- 50

140

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSF5 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,591.18 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 34 Function Unmanaged- AT&T uCPE Flexware Specialized 6 Unmanaged- Aruba MC-VA-250 equipment Aruba MC-VA- 250 AT&T Flexware FWSF6 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,618.06 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 34 Function Managed-Aruba AT&T uCPE Flexware Specialized 7 Managed- MC-VA-250 equipment Aruba MC-VA- 250 AT&T Flexware FWSF7 AT&T Flexware AT&T Virtual Network Functions $54.55 $2,911.30 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 34 Function Unmanaged- AT&T uCPE Flexware Specialized 8 Unmanaged- Aruba MC-VA-1k equipment Aruba MC-VA- 1k AT&T Flexware FWSF8 AT&T Flexware AT&T Virtual Network Functions $54.55 $2,938.17 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 34 Function Managed-Aruba AT&T uCPE Flexware Specialized 9 Managed- MC-VA-1k equipment Aruba MC-VA- 1k

141

142

143

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWSG5 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,939.47 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 35 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 6 Unmanaged- 20 NGTX - 500M equipment R80 20 NGTX - 500M AT&T Flexware FWSG6 AT&T Flexware AT&T Virtual Network Functions $54.55 $1,966.35 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 35 Function Managed-R80 20 AT&T uCPE Flexware Specialized 7 Managed-R80 NGTX - 500M equipment 20 NGTX - 500M AT&T Flexware FWSG7 AT&T Flexware AT&T Virtual Network Functions $54.55 $3,661.12 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 35 Function Unmanaged-R80 AT&T uCPE Flexware Specialized 8 Unmanaged- 20 NGTX - 1000M equipment R80 20 NGTX - 1000M AT&T Flexware FWSG8 AT&T Flexware AT&T Virtual Network Functions $54.55 $3,687.99 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 35 Function Managed-R80 20 AT&T uCPE Flexware Specialized 9 Managed-R80 NGTX - 1000M equipment 20 NGTX - 1000M

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Flexware FWST2 AT&T Flexware AT&T Virtual Network Functions $54.55 $284.36 VNF Yes Yes Required Specialized Specialized Virtual are managed or unmanaged Virtual Network Network Function but must be purchased with 48 Function Managed-VSRX- AT&T uCPE Flexware Specialized 3 Managed- 1G-STD-ATT equipment VSRX-1G-STD- (Router) ATT (Router) 1G Copper SFP FWST3 1G Copper SFP 1G Copper SFP (XCVR-B00CRJ) $50.00 $0.00 VNF Yes Yes Required 48 (XCVR- (XCVR-B00CRJ) 4 B00CRJ) 1G Multimode FWST4 1G Multimode 1G Multimode Optics-Dual Fiber $40.00 $0.00 VNF Yes Yes Required 48 Optics-Dual Optics-Dual Fiber (XCVR-B00G85) 5 Fiber (XCVR- (XCVR-B00G85) B00G85) 1G Single FWST5 1G Single Mode 1G Single Mode Optics-Dual $40.00 $0.00 VNF Yes Yes Required 48 Mode Optics- Optics-Dual Fiber Fiber (XCVR-A10Y31) 6 Dual Fiber (XCVR-A10Y31) (XCVR-A10Y31) Cisco RJ45F FWST6 Cisco RJ45F Serial Cisco RJ45F Serial Adapter (170- $45.00 $0.00 VNF Yes Yes Required 48 Serial Adapter Adapter (170- 0062-900) 7 (170-0062-900) 0062-900) 10G single FWST7 10G single mode 10G single mode Fiber SFP $90.00 $0.00 VNF Yes Yes Required 48 mode Fiber Fiber SFP (XCVR- (XCVR-S10V31) 8 SFP (XCVR- S10V31) S10V31) 10G FWST8 10G Multimode 10G Multimode Fiber SFP (XCVR- $70.00 $0.00 VNF Yes Yes Required 48 Multimode Fiber SFP (XCVR- S00Z85) 9 Fiber SFP S00Z85) (XCVR-S00Z85)

186

187

Security Security Correlated Log Management Multiple Information Information and Services (CLMS))/Advanced (See ID's and Event Event Threat and Log Analysis Service below) Management Management (ATLAS) utilizes AT&T’s expertise in (SIEM) (SIEM) security analysis and operations within the AT&T Security Operations Center (SOC) to correlate information from multiple devices and device types, both on premises and network based in the AT&T network. It Provides AT&T an overview of your network by correlating alerts from multiple devices and device types across the entire enterprise. AT&T 49 prioritizes security events based 1 on threat and risk management methodologies generated from AT&T standards and customer defined standards. AT&T provides rapid notification to the customer when security events are detected and are identified as critical by AT&T SOC. Includes customer access to weekly and monthly security summary analysis reports. The Correlated Log Management/Advanced Threat and Log Analysis service includes standard reports, threat analysis reports, log storage, 188

Implementation assistance and initial device policy tuning. AT&T collects the security relevant log and event information from firewalls, intrusion prevention sensors and other network devices using agent-less Parser/Aggregator technology deployed in your network. Event collection is provided for a wide variety of security and network devices which may be located within the AT&T network or on your premises. A diverse set of “feeds” from security devices and services is recommended in order to get a better view of identified threats to your systems and take full advantage of the CLMS system’s correlation capabilities. The intelligence produced is used by AT&T’s security analysis team to make security recommendations to you. Security recommendations, in the form of an email or a phone call, may vary in detail depending on type of incident, granularity of visibility within the network and breadth of the view. The response will be both verbal (phone call) and written (e-mailed) for severe and high 189

190

191

192

193

194

195

196

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary Custom Log CLMC1 Custom Log Custom Log Sources – $250.00 $123.00 Per Yes Yes Required Sources – Level Sources – Level 1 Application logs and custom log Custom 1 sources (priced per each Source 51 custom log source). Level 1 is a 5 threshold of 15 devices. Custom Level is based on the number of custom sources. Custom Log CLMC2 Custom Log Custom Log Sources – $250.00 $111.00 Per Yes Yes Required Sources – Level Sources – Level 2 Application logs and custom log Custom 2 sources (priced per each Source 51 custom log source). Level 2 is a 6 threshold of 40 devices. Custom Level is based on the number of custom sources. Custom Log CLMC3 Custom Log Custom Log Sources – $250.00 $69.00 Per Yes Yes Required Sources – Level Sources – Level 3 Application logs and custom log Custom 3 sources (priced per each Source 51 custom log source). Level 3 is a 7 threshold of 100 devices. Custom Level is based on the number of custom sources. Custom Log CLMC4 Custom Log Custom Log Sources – $250.00 $63.00 Per Yes Yes Required Sources – Level Sources – Level 4 Application logs and custom log Custom 4 sources (priced per each Source 51 custom log source). Level 4 is a 8 threshold of 250 devices. Custom Level is based on the number of custom sources.

197

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary Custom Log CLMC5 Custom Log Custom Log Sources – $250.00 $35.00 Per Yes Yes Required Sources – Level Sources – Level 5 Application logs and custom log Custom 5 sources (priced per each Source 51 custom log source). Level 5 is a 9 threshold of 1000 devices. Custom Level is based on the number of custom sources. Custom Log CLMC6 Custom Log Custom Log Sources – $250.00 $20.00 Per Yes Yes Required Sources – Level Sources – Level 6 Application logs and custom log Custom 6 sources (priced per each Source 52 custom log source). Level 6 is a 0 threshold of 2500 devices. Custom Level is based on the number of custom sources. Custom Log CLMC7 Custom Log Custom Log Sources – $250.00 $20.40 Per Yes Yes Required Sources – Level Sources – Level 7 Application logs and custom log Custom 7 sources (priced per each Source 52 custom log source). Level 7 is a 1 threshold of 5000+ devices. Custom Level is based on the number of custom sources. Advanced CLMA1 Advanced Advanced Correlation – $750.00 $234.00 Per Yes Yes Required Correlation – Correlation – Tier 1 Correlation with external data Device Tier 1 sources - DNS, DHCP, name 52 databases, etc. (priced per 2 correlation source for all devices within the tier). Tier 1 is a threshold of 15 devices.

198

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary Advanced CLMA2 Advanced Advanced Correlation – $1,500.00 $533.00 Per Yes Yes Required Correlation – Correlation – Tier 2 Correlation with external data Device Tier 2 sources - DNS, DHCP, name 52 databases, etc. (priced per 3 correlation source for all devices within the tier). Tier 2 is a threshold of 40 devices. Advanced CLMA3 Advanced Advanced Correlation – $2,000.00 $780.00 Per Yes Yes Required Correlation – Correlation – Tier 3 Correlation with external data Device Tier 3 sources - DNS, DHCP, name 52 databases, etc. (priced per 4 correlation source for all devices within the tier). Tier 3 is a threshold of 100 devices. Advanced CLMA4 Advanced Advanced Correlation – $3,000.00 $1,264.00 Per Yes Yes Required Correlation – Correlation – Tier 4 Correlation with external data Device Tier 4 sources - DNS, DHCP, name 52 databases, etc. (priced per 5 correlation source for all devices within the tier). Tier 4 is a threshold of 250 devices. Advanced CLMA5 Advanced Advanced Correlation – $4,000.00 $2,316.00 Per Yes Yes Required Correlation – Correlation – Tier 5 Correlation with external data Device Tier 5 sources - DNS, DHCP, name 52 databases, etc. (priced per 6 correlation source for all devices within the tier). Tier 5 is a threshold of 1000 devices.

199

200

AT&T VSS-PRO AT&T VSS-PRO The VSS-Pro service is used to Multiple (Vulnerability (Vulnerability conduct host discovery and/or (See ID's Scanning Scanning Service) vulnerability scans on external below) Service) and/or internal IP-based systems and networks. A variety of scanning techniques are employed to survey the security posture of the target IP-based systems and networks. These scans proactively test for known vulnerabilities and the existence of mainstream industry practice security configurations. External scanning addresses all Internet-facing assets such as routers, firewalls, web servers, 52 and e-mail servers for potential 9 security weaknesses, checking for the "open doors" that could allow a hacker to gain unauthorized access to the network and exploit critical assets. Internal scanning addresses all internal assets such as workstations, intranet servers, and printers for Trojans, improper configurations, peer-to-peer (PTP) file sharing programs such as Morpheus, Kazaa, etc., and more. The VSS-Pro service also provides workflow management, host- based risk assignments, and 201

202

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary VSS –PRO VSSDRN VSS –PRO Desktop RNA Installation and Set $1,800.00 $0.00 Per Yes Yes Required Reconnaissan Reconnaissance Up Enablem 53 ce Network Network ent 0 Appliance Appliance (RNA) (RNA) Set UP - Set UP - Desktop Desktop VSS –PRO VSSRRN VSS –PRO Rackmount RNA Installation and $3,600.00 $0.00 Per Yes Yes Required Reconnaissan Reconnaissance Set Up Enablem 53 ce Network Network ent 1 Appliance Appliance (RNA) (RNA) Set UP - Set UP - Rackmount Rackmount VSS-PRO – VSSQ130 VSS-PRO – Up to 130 devices $0.00 $242.25 Per Yes Yes Required 53 Quarterly Quarterly Enablem 2 Scanning 130 Scanning 130 ent VSS-PRO – VSSQ250 VSS-PRO – Up to 250 devices $0.00 $327.75 Per Yes Yes Required 53 Quarterly Quarterly Enablem 3 Scanning 250 Scanning 250 ent VSS-PRO – VSSQ500 VSS-PRO – Up to 500 devices $0.00 $427.50 Per Yes Yes Required 53 Quarterly Quarterly Enablem 4 Scanning 500 Scanning 500 ent VSS-PRO – VSSQ1K VSS-PRO – Up to 1000 devices $0.00 $570.00 Per Yes Yes Required 53 Quarterly Quarterly Enablem 5 Scanning 1000 Scanning 1000 ent VSS-PRO – VSSQ2K VSS-PRO – Up to 2000 devices $0.00 $912.00 Per Yes Yes Required 53 Quarterly Quarterly Enablem 6 Scanning 2000 Scanning 2000 ent

203

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary VSS-PRO – VSSQ3K VSS-PRO – Up to 3000 devices $0.00 $1,197.00 Per Yes Yes Required 53 Quarterly Quarterly Enablem 7 Scanning 3000 Scanning 3000 ent VSS-PRO – VSSQ3KP VSS-PRO – Each added 1K above 3K $0.00 $256.50 Per Yes Yes Required Quarterly Quarterly Enablem 53 Scanning Scanning 3000+ ent 8 3000+ per 1K per 1K incremental incremental VSS-PRO – VSSM130 VSS-PRO – Monthly Up to 130 devices $0.00 $363.85 Per Yes Yes Required 53 Monthly Scanning 130 Enablem 9 Scanning 130 ent VSS-PRO – VSSM250 VSS-PRO – Monthly Up to 250 devices $0.00 $492.10 Per Yes Yes Required 54 Monthly Scanning 250 Enablem 0 Scanning 250 ent VSS-PRO – VSSM500 VSS-PRO – Monthly Up to 500 devices $0.00 $641.25 Per Yes Yes Required 54 Monthly Scanning 500 Enablem 1 Scanning 500 ent VSS-PRO – VSSM1K VSS-PRO – Monthly Up to 1000 devices $0.00 $855.00 Per Yes Yes Required 54 Monthly Scanning 1000 Enablem 2 Scanning 1000 ent VSS-PRO – VSSM2K VSS-PRO – Monthly Up to 2000 devices $0.00 $1,368.00 Per Yes Yes Required 54 Monthly Scanning 2000 Enablem 3 Scanning 2000 ent VSS-PRO – VSSM3K VSS-PRO – Monthly Up to 3000 devices $0.00 $1,795.50 Per Yes Yes Required 54 Monthly Scanning 3000 Enablem 4 Scanning 3000 ent

204

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary VSS-PRO – VSSM3KP VSS-PRO – Monthly Each added 1K above 3K $0.00 $384.75 Per Yes Yes Required Monthly Scanning 3000+ Enablem 54 Scanning per 1K incremental ent 5 3000+ per 1K incremental VSS-PRO – On VSSD130 VSS-PRO – On Up to 130 devices $0.00 $484.50 Per Yes Yes Required 54 Demand Demand Scanning Enablem 6 Scanning 130 130 ent VSS-PRO – On VSSD250 VSS-PRO – On Up to 250 devices $0.00 $655.50 Per Yes Yes Required 54 Demand Demand Scanning Enablem 7 Scanning 250 250 ent VSS-PRO – On VSSD500 VSS-PRO – On Up to 500 devices $0.00 $855.00 Per Yes Yes Required 54 Demand Demand Scanning Enablem 8 Scanning 500 500 ent VSS-PRO – On VSSD1K VSS-PRO – On Up to 1000 devices $0.00 $1,140.00 Per Yes Yes Required 54 Demand Demand Scanning Enablem 9 Scanning 1000 1000 ent VSS-PRO – On VSSD2K VSS-PRO – On Up to 2000 devices $0.00 $1,824.00 Per Yes Yes Required 55 Demand Demand Scanning Enablem 0 Scanning 2000 2000 ent VSS-PRO – On VSSD3K VSS-PRO – On Up to 3000 devices $0.00 $2,394.00 Per Yes Yes Required 55 Demand Demand Scanning Enablem 1 Scanning 3000 3000 ent VSS-PRO – On VSSD3KP VSS-PRO – On Each added 1K above 3K $0.00 $513.00 Per Yes Yes Required 55 Demand Demand Scanning Enablem 2 Scanning 3000+ ent 3000+

205

Premises Premises Based The AT&T owned and managed Multiple Based Firewall Firewall Service Premises-Based Firewall Service – (See ID's Service (PBFW) (PBFW) – (AT&T Complete Service provides a below) – (AT&T Owned and highly functional layer of security Owned and Managed to your networks. The service is a Managed Firewalls) fully managed bundled solution, Firewalls) Complete Service which includes all hardware and Complete software components, Service configuration, installation, day to day management and maintenance, as well as expert customer support and proactive network monitoring. The PBFW service can forward 55 log information to the 3 CLMS/ATLAS for advanced correlation within the network. With the ability to understand the communications as well as the ability to actively modify rules with customer approval based on attack information gathered from the CLMS/ATLAS system, AT&T can provide that additional level of protection and ability to not only report, but act on actionable events. Additional conditions may apply and will be outlined in the Scope of Work. Cisco Cisco Cisco Configurations - Managed Multiple 55 Configurations Configurations – PBFW (See ID's 4 Managed PBFW below) 206

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary – Managed PBFW Cisco Single PFSLC Cisco Single Cisco Single Firewall for Large $0.00 $1,386.00 Per Yes Yes Required Firewall for Firewall for Large Office AT&T Owned and Device 55 Large Office Office Managed Cisco Single firewall 5 for large office – 650 Mbps Firewall Throughput Cisco Single PFSMC Cisco Single Cisco Single Firewall for Medium $0.00 $916.00 Per Yes Yes Required Firewall for Firewall for Office AT&T Owned and Device 55 Medium Office Medium Office Managed Cisco Single firewall 6 for Medium office – 450 Mbps Firewall Throughput Cisco Single PFSSC Cisco Single Cisco Single Firewall for Small $0.00 $738.00 Per Yes Yes Required Firewall for Firewall for Small Office AT&T Owned and Device 55 Small Office Office Managed Cisco Single firewall 7 for small office – 300 Mbps Firewall Throughput Cisco High PFELHAC Cisco High Cisco High Availability Firewall $0.00 $4,772.00 Per Yes Yes Required Availability Availability Firewall for Extra Large Office AT&T Device 55 Firewall for for Extra Large Owned and Managed Cisco 8 Extra Large Office High Availability Firewall for Extra Office Large Office - 1.2 Gbps Firewall Throughput Cisco High PFLHAC Cisco High Cisco High Availability Firewall $0.00 $2,773.00 Per Yes Yes Required Availability Availability Firewall for Large Office AT&T Owned Device 55 Firewall for for Large Office and Managed Cisco High 9 Large Office Availability Firewall for Large Office – 650 Mbps Firewall Throughput

207

208

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary Fortigate PFSLF Fortigate Single Fortigate Single Firewall for Large $0.00 $3,487.00 Per Yes Yes Required Single Firewall Firewall for Large Office Managed firewall service Device for Large Office monthly recurring fee including 56 Office single Fortigate CPE, all required 4 licensing and full AT&T management – 500 Mbps Firewall Throughput. Fortigate PFSMF Fortigate Single Fortigate Single Firewall for $0.00 $1,297.00 Per Yes Yes Required Single Firewall Firewall for Medium Office Managed Device for Medium Medium Office firewall service monthly recurring 56 Office fee including single Fortigate 5 CPE, all required licensing and full AT&T management – 100 Mbps Firewall Throughput. Fortigate PFSSF Fortigate Single Fortigate Single Firewall for Small $0.00 $955.00 Per Yes Yes Required Single Firewall Firewall Small Office Managed firewall service Device Small Office Office monthly recurring fee including 56 single Fortigate CPE, all required 6 licensing and full AT&T management – 10 Mbps Firewall Throughput. Fortigate PFSSHF Fortigate Single Fortigate Single Firewall for $0.00 $541.00 Per Yes Yes Required Single Firewall Firewall for SOHO SOHO Office Managed firewall Device for SOHO Office service monthly recurring fee 56 Office including single Fortigate CPE, all 7 required licensing and full AT&T management – 5 Mbps Firewall Throughput.

209

210

211

IPS Add-On – OPTIPSF IPS Add-On – MIDS IPS Add-On provides the $0.00 $650.00 Each Yes Yes Required MIDS 3 3 customer with intrusion protection capability to the firewall. Includes the following: • 7x24 monitoring • CPE Managed Option (customized to equipment • Signature updates • Vendor updates (3-5 business days) • Emergency updates (24 hours) • Incident Notification (Email for medium alerts within; High includes a telephone call) • Sensor Configuration: 57 o Custom Tuning 3 o Continuous Sensor Tuning o Custom Signatures (20) • Sensor Location: o Alarm Analysis o Event Correlation & Analysis with additional real time analyst support o Root cause analysis for high level alerts o Investigation support o Customer notification based on SLO o Attack signature recognition o Problem ticketing/Reporting o Initial configuration support o Configuration maintenance

212

213

214

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary Firewall PFCA4 Firewall Firewall Administration 1 to 4 $0.00 $775.00 Per Yes Yes Required 58 Administration Administration 1 to firewalls Management Kit Device 0 1 to 4 firewalls 4 firewalls required. Firewall PFCA9 Firewall Firewall Administration 5 to 9 $0.00 $735.84 Per Yes Yes Required 58 Administration Administration 5 to firewalls Management Kit Device 1 5 to 9 firewalls 9 firewalls required. Firewall PFCA19 Firewall Firewall Administration 10 to 19 $0.00 $692.55 Per Yes Yes Required 58 Administration Administration 10 firewalls Management Kit Device 2 10 to 19 to 19 firewalls required. firewalls Firewall PFCA29 Firewall Firewall Administration 20 to 29 $0.00 $649.27 Per Yes Yes Required 58 Administration Administration 20 firewalls Management Kit Device 3 20 to 29 to 29 firewalls required. firewalls Firewall PFCA44 Firewall Firewall Administration 30 to 44 $0.00 $605.98 Per Yes Yes Required 58 Administration Administration 30 firewalls Management Kit Device 4 30 to 44 to 44 firewalls required. firewalls Firewall PFCA45 Firewall Firewall Administration 45 or $0.00 $597.33 Per Yes Yes Required 58 Administration Administration 45 greater firewalls Management Device 5 45 or greater or greater firewalls Kit required. firewalls Management PFCMK Management Kit Management Kit supports 4 Port $2,500.00 $0.00 Per Kit Yes Yes Required Kit out of band management including power and console 58 connections for previse based 6 managed solutions. Requires customer provided Measured Business Line or equivalent.

215

Managed Managed Intrusion AT&T Managed Intrusion Multiple Intrusion Detection Service - Detection Service provides (See ID's Detection MIDS 3 (Customer security monitoring capabilities below) Service - MIDS owned and AT&T to include security audit, 3 (Customer managed monitoring, attack recognition, owned and equipment control over employee Internet AT&T access, virus scanning, and managed incident response for customer equipment owned equipment. AT&T Certified IPS Sensors is provided based on the number of zones monitored. The qualifications for multi- sensor/zone discounts: • Counts are based on a per- department/organization order 58 • Minimum of two monitored 7 zones per location with Internet access point • Additional monitored IDS zones on same network count towards volume discount • Must include an AT&T management kit at the Internet access location. • Configuration may require separate security management demilitarized zone (DMZ) off the customer firewall. The AT&T MIDS solution integrates into the CLMS/ATLAS to provide enhanced visibility into network segments 216

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary protected by IPS/IDS capabilities. Alarms/alerts and log information from these IPS/IDS devices are correlated into the advanced analytics within CLMS/ATLAS to allow these factors discovered by the MIDS systems to aid in the detection of hacker activity within a network. Setup for IPS MICINST Setup for IPS Setup for IPS Installation charge $1,000.00 $0.00 Per Yes Yes Required for IPS Service. MIDS Level 3 Network 58 sensor placement must be 8 behind a screening device (i.e., Firewall, screening router, etc.). 58 IPS 1 to 59 MIC59 IPS 1 to 59 zones IPS 1 to 59 zones Management $0.00 $995.82 Each Yes Yes Required 9 zones Kit required. 59 IPS 60 to 89 MIC89 IPS 60 to 89 zones IPS 60 to 89 zones Management $0.00 $933.58 Each Yes Yes Required 0 zones Kit required. 59 IPS – 90 to 134 MIC134 IPS – 90 to 134 IPS – 90 to 134 zones $0.00 $871.34 Each Yes Yes Required 1 zones zones Management Kit required. 59 IPS - 135 to 179 MIC179 IPS - 135 to 179 IPS - 135 to 179 zones $0.00 $858.89 Each Yes Yes Required 2 zones zones Management Kit required. 59 IPS 180 or MIC180 IPS 180 or greater IPS 180 or greater zones $0.00 $849.89 Each Yes Yes Required 3 greater zones zones Management Kit required.

217

Managed Managed Network Managed Network Access Multiple Network Access Control Control Service (NAC) utilizes (See ID's Access Control Service (NAC) AT&T’s expertise in endpoint below) Service (NAC) security to analyze information about how endpoints impact the security posture of the network. Base service includes Hardware Other capabilities include: •Rogue Device Detection – Detects and alerts when unknown devices attempt to connect to a network (wired or wireless) •Advanced Asset Visibility – Identifies & classifies all devices 59 with an IP address connecting to 4 the network, by device & location on the network. Supports wired, wireless and VPN networks •Endpoint Compliance Identification – Remote inspection of Windows, Mac and Linux operating systems for compliance. Identify missing patches, out of date AV, required services not running, etc. Infractions can be reported on •Unauthorized Application Notification – Remote inspection of the endpoint will inventory the 218

applications installed and notify on unauthorized applications •Misconfigured Asset Detection – Assets that have been misconfigured can be identified. •IoT Device Detection – identify IoT devices on the network and ensure they are properly segmented to prevent the threat of botnets attacking the internal network or being used as a threat to other organizations •System Patching & Security Updates – Support, management, maintenance of management server and sensors •System Health monitoring for all NAC solution components •Technical Support – phone & remote-based support 24x7 •Real-time monitoring and alerting of NAC events 24x7 with response and notification to customer actionable events •Correlation NAC events in association with customer log event sources if provided by customer for analysis (Note: Requires ATLAS coverage for other supported log sources) •Customer Web Portal – for reports, support tickets, log 219

analyzer, log charts, security dashboard & web portal with alert data, event drill downs, graphs, etc. NAC Reporting – On Rogue Device Detection and additional use cases the customer purchases. The Customer is required to provide the following: •Internet Connection •Network documentation & flow diagrams, including topology, data flow, network switches, IP device assignment categories •Inbound & Outbound remote access via SSH to at least one sensor at each location •3 network ports on the core network switch for NAC sensors •A compatible managed switch and available ports •Internal management IP address for each sensor •Internal IP address for each network segment (or VLAN) •Customer is responsible for the configuration of a FQDN on the network domain for name resolution of the IP address assigned to the sensor for captive portal redirection •Physical installation and 220

221

222

223

224

225

226

227

228

229

230

231

232

233

234

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary Managed NSV5DMS Managed Network Managed Network Access $0.00 $4,324.07 Per Site Yes Yes Required Network Access Control Control Service (NAC) – Tier 5 Access Control Service (NAC) – Dedicated Management Server Service (NAC) Tier 5 Dedicated (DMS) Allows for management – Tier 5 Management of multiple NAC devices in a 61 Dedicated Server Customer’s environment. 0 Management Required for configurations with Server more than 50 sensors. Pricing includes service, and hardware. A Tier 5 DMS can support 51-100 appliances/sensors. Managed NSV1CM Managed Network Managed Network Access $0.00 $533.33 Per Site Yes Yes Required Network Access Control Control Service (NAC) – Tier 1 Access Control Service (NAC) – Co-Management End-user NAC 61 Service (NAC) Tier 1 Co- console access for end point 1 – Tier 1 Co- Management MAC/IP management by Management designated IT staff (Note: requires training & dedicated management server). Required. Managed NSV2CM Managed Network Managed Network Access $0.00 $533.33 Per Site Yes Yes Required Network Access Control Control Service (NAC) – Tier 2 Access Control Service (NAC) – Co-Management End-user NAC 61 Service (NAC) Tier 2 Co- console access for end point 2 – Tier 2 Co- Management MAC/IP management by Management designated IT staff (Note: requires training & dedicated management server). Required.

235

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary Managed NSV3CM Managed Network Managed Network Access $0.00 $533.33 Per Site Yes Yes Required Network Access Control Control Service (NAC) – Tier 3 Access Control Service (NAC) – Co-Management End-user NAC 61 Service (NAC) Tier 3 Co- console access for end point 3 – Tier 3 Co- Management MAC/IP management by Management designated IT staff (Note: requires training & dedicated management server). Required. Managed NSV4CM Managed Network Managed Network Access $0.00 $533.33 Per Site Yes Yes Required Network Access Control Control Service (NAC) – Tier 4 Access Control Service (NAC) – Co-Management End-user NAC 61 Service (NAC) Tier 4 Co- console access for end point 4 – Tier 4 Co- Management MAC/IP management by Management designated IT staff (Note: requires training & dedicated management server). Required. Managed NSV5CM Managed Network Managed Network Access $0.00 $533.33 Per Site Yes Yes Required Network Access Control Control Service (NAC) – Tier 5 Access Control Service (NAC) – Co-Management End-user NAC 61 Service (NAC) Tier 5 Co- console access for end point 5 – Tier 5 Co- Management MAC/IP management by Management designated IT staff (Note: requires training & dedicated management server). Required.

236

237

AT&T Security AT&T Security AT&T managed security for Multiple Network Network Device devices is provided effectively (See ID's Device Management – across multiple product below) Management Riverbed categories and create a – Riverbed process/methodology to include valuable flow and security analytics in the CLMS platform for enhanced correlation and analysis. Customers receive application performance analysis, capacity audits, issue root-cause determinations, and receive recommendations for increasing network and application performance. This is for 61 customer owned devices. 7 This service includes: Initial basic set-up and policy development 24x7x365 Monitoring of applications Monthly analysis of mission- critical application performance Quarterly tuning of policy and performance settings Hardware support for both custom and off-the-shelf applications Forwarding of critical alerts to CLMS platform for security correlation and analysis Post Implementation Network 238

Management - Network monitoring service with carrier and vendor coordination for CPE supporting WAN access AT&T Network Management is a set of support solutions that provides you a single-point-of- contact to outsource or back-up some or all of the State’s network support functions. You can use AT&T Network Management Services as a supplementary and disaster- recovery organization. We can assist the State to manage, monitor, and assume responsibility for your network on an as-needed basis. This will ensure that your network is reliable, available, efficient, and successfully performs your critical operations. AT&T provides a one-stop shop. We are able to manage most pieces of your network, including SNMP-MIB II-compliant devices. This means we can manage routers, CSU/DSUs, LAN switches, LAN hubs, etc. You do not have to work only with equipment we supply. If you have equipment supplied by other vendors, we can 239

coordinate with them to make sure that your AT&T Network Management solution supports their CPE. AT&T Network Management is also flexible. We can mold your solution to fit the State environment from very hands- on, requiring detailed reporting to hands-off where the State only engages AT&T on an as- needed basis. We can monitor your CPE (e.g., routers, hubs, switches, CSU/DSUs, call managers) remotely from our AT&T Data Services Customer Care. You can choose from three levels of service to ensure the right fit with your staff and budget needs: Basic, Essential, and Complete. We will monitor supported devices over a customer- provided permanent virtual circuit (“PVC”) or virtual private network (“VPN”). A customer premise router (e.g., Cisco 1800 with VPN) may also be required for AT&T to deliver this service. The Customer is required to provide the following: -Internet Connection -MIB-II compliant hardware 240

241

242

243

Essential Level DMRBEA Essential Level Essential Level Category A $150.00 $100.00 Per Yes Yes Required Category A Category A Our Essential Service provides Device you with comprehensive, end- to-end fault management. In addition to fault management, the service includes network monitoring, technical assistance (with carrier and vendor coordination), configuration support, software support, and the ability to open or view web- based trouble tickets as well as correlation with the CLMS/ATLAS team on events. If you elect Essential Service, AT&T becomes your single-point-of-contact for 62 network problems. When we 0 diagnose a problem with your equipment, our Network Management Service support team manages the vendor to coordinate your dispatch. Work with the vendor may include opening trouble tickets and escalating to resolve the problem quickly. Throughout this process, our engineer takes total responsibility for ensuring that the problem is resolved. The AT&T NOC will update you as appropriate and will not close the trouble ticket until the problem is resolved to your 244

245

Essential Level DMRBEB Essential Level Essential Level Category B $60.00 $40.00 Per Yes Yes Required Category B Category B Our Essential Service provides Device you with comprehensive, end- to-end fault management. In addition to fault management, the service includes network monitoring, technical assistance (with carrier and vendor coordination), configuration support, software support, and the ability to open or view web- based trouble tickets as well as correlation with the CLMS/ATLAS team on events. If you elect Essential Service, AT&T becomes your single-point-of-contact for 62 network problems. When we 1 diagnose a problem with your equipment, our Network Management Service support team manages the vendor to coordinate your dispatch. Work with the vendor may include opening trouble tickets and escalating to resolve the problem quickly. Throughout this process, our engineer takes total responsibility for ensuring that the problem is resolved. The AT&T NOC will update you as appropriate and will not close the trouble ticket until the problem is resolved to your 246

247

248

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Business AT&T business Wi-Fi All Sites require at least one Multiple WiFi Service provides a highly Access Point (AP), and Sites (See ID's secure local area of any significant size below) network (LAN) generally require multiple APs connectivity to ensure appropriate 62 solution including coverage. The AP connects 3 public Wi-Fi for End to the LAN infrastructure Users, private Wi-Fi, providing the Wi-Fi Network LAN analytics, and signal. network management for wired devices. AT&T Business AT&T Business Wi-Fi AT&T Business Wi-Fi SMALL Multiple 62 Wi-Fi SMALL (1- SMALL (1-7 APs) deployment supports up to 7 (See ID's 4 7 APs) Access Points(AP). below) AT&T Business MWSMSW AT&T Business WiFi Aruba 2930F 8 Port Switch or $0.00 $54.90 Each Yes Yes Required 62 WiFi Small 8 Small 8 Port Switch successor model. Includes 5 Port Switch power cord. Requires AT&T Professional installation. AT&T Business MWSMAP AT&T Business WiFi Aruba AP-305/AP-304 or $0.00 $60.09 Each Yes Yes Required WiFi Small Small Access Point successor model. Includes 62 Access Point mount bracket, console cable. 6 Requires AT&T Professional installation. AT&T Business MWSMAN1 AT&T Business WiFi Antenna option 1 for MWSMAP. $0.00 $0.83 Each Yes Yes Required WiFi Small AP Small AP antenna Three are required for AP-304. 62 antenna option 1 Accessory available only as 7 option 1 required for installation of AT&T Business Wi-Fi network.

249

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Business MWSMAN2 AT&T Business WiFi MIMO technology Antenna $0.00 $13.28 Each Yes Yes Required WiFi Small AP Small AP antenna option 2 for MWSMAP. Required 62 antenna option 2 for AP-304. Accessory available 8 option 2 only as required for installation of AT&T Business Wi-Fi network. AT&T Business AT&T Business Wi-Fi AT&T Business Wi-Fi MEDIUM Multiple 62 Wi-Fi MEDIUM MEDIUM (8-23 APs) deployment supports between 8 (See ID's 9 (8-23 APs) and 23 Access Points(AP). below) AT&T Business MWMDSW AT&T Business WiFi Aruba 2930F 24 Port Switch or $0.00 $126.90 Each Yes Yes Required 63 WiFi Medium Medium 24 Port successor model. Includes 0 24 Port Switch Switch power cord. Requires AT&T Professional installation. AT&T Business MWMDAP AT&T Business WiFi Aruba AP-515/AP-514 or $0.00 $69.09 Each Yes Yes Required WiFi Medium Medium Access successor model. Includes 63 Access Point Point mount bracket & console cable. 1 Requires AT&T Professional installation. AT&T Business MWMDAN AT&T Business WiFi Antenna option 1 for MWMDAP. $0.00 $0.83 Each Yes Yes Required WiFi Medium 1 Medium AP Four required for AP-514. 63 AP antenna antenna option 1 Accessory available only as 2 option 1 required for installation of AT&T Business Wi-Fi network. AT&T Business MWMDAN AT&T Business WiFi MIMO technology Antenna $0.00 $13.05 Each Yes Yes Required WiFi Medium 2 Medium AP option 2 for MWMDAP. Required 63 AP antenna antenna option 2 for AP-514. Accessory available 3 option 2 only as required for installation of AT&T Business Wi-Fi network.

250

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Business AT&T Business Wi-Fi AT&T Business Wi-Fi LARGE Multiple 63 Wi-Fi LARGE LARGE (24+ APs) deployment supports 24 or more (See ID's 4 (24+ APs) Access Points(AP). below) AT&T Business MWLGSW AT&T Business Wi-Fi Aruba 2930M 24 Port Switch or $0.00 $150.30 Each Yes Yes Required Wi-Fi Large 24 Large 24 Port successor model. Includes dual 63 Port Switch Switch power supply and power plugs. 5 Requires AT&T Professional installation. AT&T Business MWLGAP AT&T Business Wi-Fi Aruba AP-535/AP-534 or $0.00 $69.09 Each Yes Yes Required Wi-Fi Large Large Access Point successor model. Includes 63 Access Point mount bracket & console cable. 6 Requires AT&T Professional installation. AT&T Business MWLGAN1 AT&T Business Wi-Fi Antenna option 1 for MWLGAP. $0.00 $0.83 Each Yes Yes Required Wi-Fi Large AP Large AP antenna Four required for AP-534. 63 antenna option 1 Accessory available only as 7 option 1 required for installation of AT&T Business Wi-Fi network. AT&T Business MWLGAN2 AT&T Business Wi-Fi MIMO technology Antenna $0.00 $13.05 Each Yes Yes Required Wi-Fi Large AP Large AP antenna option 2 for MWLGAP. Required 63 antenna option 2 for AP-534. Accessory available 8 option 2 only as required for installation of AT&T Business Wi-Fi network. AT&T Business MWLGSM AT&T Business Wi-Fi Aruba 2930 2-port Stacking $0.00 $22.50 Each Yes Yes Required 63 Wi-Fi Large 2- Large 2-port Module. Accessory available 9 port Stacking Stacking Module only as required for installation of Module AT&T Business Wi-Fi network.

251

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Business MWLGSC1 AT&T Business Wi-Fi Aruba 2920/2930M 0.5m $0.00 $4.50 Each Yes Yes Required Wi-Fi Large Large 0.5m Stacking Cable. Accessory 64 0.5m Stacking Stacking Cable available only as required for 0 Cable installation of AT&T Business Wi-Fi network. AT&T Business MWLGSC2 AT&T Business Wi-Fi Aruba 2920/2930M 1m Stacking $0.00 $5.40 Each Yes Yes Required 64 Wi-Fi Large 1m Large 1m Stacking Cable. Accessory available only 1 Stacking Cable as required for installation of Cable AT&T Business Wi-Fi network. AT&T Business MWLGSC3 AT&T Business Wi-Fi Aruba 2920/2930M 3m Stacking $0.00 $8.55 Each Yes Yes Required 64 Wi-Fi Large 3m Large 3m Stacking Cable. Accessory available only 2 Stacking Cable as required for installation of Cable AT&T Business Wi-Fi network. AT&T Business AT&T Business Wi-Fi AT&T Business Wi-Fi Additional Multiple 64 Wi-Fi Additional Features (See ID's 3 Additional Features below) Features AT&T Business MWTR1 AT&T Business Wi-Fi Aruba 10G SFP+ LC SR 300m $0.00 $15.30 Each Yes Yes Required Wi-Fi 10G SFP+ 10G SFP+ LC SR MMF Transceiver. Accessory 64 LC SR 300m 300m MMF available only as required for 4 MMF Transceiver installation of AT&T Business Wi-Fi Transceiver network. AT&T Business MWTR2 AT&T Business Wi-Fi Aruba 10G SFP+ LC LR 10km SMF $0.00 $81.00 Each Yes Yes Required Wi-Fi 10G SFP+ 10G SFP+ LC LR Transceiver. Accessory available 64 LC LR 10km 10km SMF only as required for installation of 5 SMF Transceiver AT&T Business Wi-Fi network. Transceiver

252

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AT&T Business MWTR3 AT&T Business Wi-Fi Aruba 100M SFP LC FX 2km MMF $0.00 $7.65 Each Yes Yes Required Wi-Fi 100M SFP 100M SFP LC FX Transceiver. Accessory available 64 LC FX 2km 2km MMF only as required for installation of 6 MMF Transceiver AT&T Business Wi-Fi network. Transceiver AT&T Business MWTR4 AT&T Business Wi-Fi Aruba 10G SFP+ to SFP+ 1m DAC $0.00 $1.73 Each Yes Yes Required 64 Wi-Fi 10G SFP+ 10G SFP+ to SFP+ Cable. Accessory available only 7 to SFP+ 1m 1m DAC Cable as required for installation of DAC Cable AT&T Business Wi-Fi network. AT&T Business MWTR5 AT&T Business Wi-Fi Aruba 10G SFP+ to SFP+ 3m DAC $0.00 $3.30 Each Yes Yes Required 64 Wi-Fi 10G SFP+ 10G SFP+ to SFP+ Cable. Accessory available only 8 to SFP+ 3m 3m DAC Cable as required for installation of DAC Cable AT&T Business Wi-Fi network. AT&T Business MWTR6 AT&T Business Wi-Fi Aruba 1G SFP RJ45 T 100m Cat5e $0.00 $4.26 Each Yes Yes Required Wi-Fi 1G SFP 1G SFP RJ45 T Transceiver. Accessory available 64 RJ45 T 100m 100m Cat5e only as required for installation of 9 Cat5e Transceiver AT&T Business Wi-Fi network. Transceiver AT&T Business MWTR7 AT&T Business Wi-Fi Aruba 1G SFP LC SX 500m MMF $0.00 $4.26 Each Yes Yes Required 65 Wi-Fi 1G SFP LC 1G SFP LC SX 500m Transceiver. Accessory available 0 SX 500m MMF MMF Transceiver only as required for installation of Transceiver AT&T Business Wi-Fi network. AT&T Business MWTR8 AT&T Business Wi-Fi Aruba 1G SFP LC LX 10km SMF $0.00 $12.15 Each Yes Yes Required 65 Wi-Fi 1G SFP LC 1G SFP LC LX 10km Transceiver. Accessory available 1 LX 10km SMF SMF Transceiver only as required for installation of Transceiver AT&T Business Wi-Fi network. AT&T Business MWUXI AT&T Business WiFi Aruba UXI Service Level Sensor. $0.00 $57.45 Each Yes Yes Required 65 WiFi Sensor Sensor Requires AT&T Professional 2 installation.

253

254

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary AP Mounting MWBR1 AP Mounting AP Mounting Bracket: $22.50 $0.00 Each Yes Yes Required Bracket: Bracket: suspended ceiling rail, flat 9/16. suspended suspended ceiling Accessory available only as 65 ceiling rail, flat rail, flat 9/16 required for installation of AT&T 5 9/16 Business Wi-Fi network. Only to be used in conjunction with AT&T Business Wi-Fi. AP Mounting MWBR2 AP Mounting AP Mounting Bracket: $22.50 $0.00 Each Yes Yes Required Bracket: Bracket: suspended ceiling rail, flat 15/16. suspended suspended ceiling Accessory available only as 65 ceiling rail, flat rail, flat 15/16 required for installation of AT&T 6 15/16 Business Wi-Fi network. Only to be used in conjunction with AT&T Business Wi-Fi. AP Mounting MWBR3 AP Mounting AP Mounting Bracket: $22.50 $0.00 Each Yes Yes Required Bracket: Bracket: suspended ceiling rail, profile suspended suspended ceiling 9/16. Accessory available only 65 ceiling rail, rail, profile 9/16 as required for installation of 7 profile 9/16 AT&T Business Wi-Fi network. Only to be used in conjunction with AT&T Business Wi-Fi. AP Mounting MWBR4 AP Mounting AP Mounting Bracket: solid $40.50 $0.00 Each Yes Yes Required Bracket: solid Bracket: solid surface. Accessory available 65 surface surface only as required for installation of 8 AT&T Business Wi-Fi network. Only to be used in conjunction with AT&T Business Wi-Fi.

255

256

Features Consisting of: -Cloud Firewall -URL/Web Filtering -Application Visibility/Control -Elastic Scaling -User ID & Multi Factor Auth -Intrusion Detection Prevention -SaaS Visibility & Control -Anti-Virus Malware Scanning -Malware Analysis and Threat Updates -Threat Prevention" AT&T Global GSGP1 AT&T Global $0.00 $2,600.00 Per Yes Yes Required Security Security Gateway AT&T Global Security Gateway - Mbps 66 Gateway - - Premium (US): 1 - Premium for 1-199 Mbps. Cost is 1 Premium (US): 199 mb per one(1) Mbps. 1 - 199 mb

257

258

259

24.4.4 DDoS Detection and Mitigation Service Contractor’s Description of Service: [ AT&T Distributed Denial of Service (DDoS) Defense is a service that is designed to detect and mitigate distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you.] Geographic Availability: [ Domestic United States] State Associated Administrative Fee Charge - Services identified below with “Yes” in the SAAF Applied column will have a 2.5% fee applied to the Monthly Recurring Charge or usage. Charges below do not include the SAAF. The SAAF will appear as a separate line on the customer’s invoice.

260

Table 24.4.4.a – DDoS Detection and Mitigation Service

261

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 1 DDoS DOS1 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,072.00 Each Yes No Required Mitigation Services for (DDoS) Defense is a service that is 1.544–10 1.544–10 Mbps of designed to detect and mitigate Mbps traffic flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 1.544 - 10 Mbps of traffic flow.

262

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 2 DDoS DOS2 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,072.00 Each Yes No Required Mitigation 15 Services for 15 (DDoS) Defense is a service that is Mbps Mbps of traffic designed to detect and mitigate flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 10.01 - 15 Mbps of traffic flow.

263

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 3 DDoS DOS3 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,072.00 Each Yes No Required Mitigation 25 Services for 25 (DDoS) Defense is a service that is Mbps Mbps of traffic designed to detect and mitigate flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 15.01 - 25 Mbps of traffic flow.

264

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 4 DDoS DOS4 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,072.00 Each Yes No Required Mitigation 50 Services for 50 (DDoS) Defense is a service that is Mbps Mbps of traffic designed to detect and mitigate flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 25.01 - 50 Mbps of traffic flow.

265

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 5 DDoS DOS5 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,072.00 Each Yes No Required Mitigation Services for 100 (DDoS) Defense is a service that is 100 Mbps Mbps of traffic designed to detect and mitigate flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 50.01 - 100 Mbps of traffic flow.

266

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 6 DDoS DOS6 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,072.00 Each Yes No Required Mitigation Services for 250 (DDoS) Defense is a service that is 250 Mbps Mbps of traffic designed to detect and mitigate flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 100.01 - 250Mbps of traffic flow.

267

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 7 DDoS DOS7 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,072.00 Each Yes No Required Mitigation Services for 500 (DDoS) Defense is a service that is 500 Mbps Mbps of traffic designed to detect and mitigate flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 250.01 - 500Mbps of traffic flow.

268

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 8 DDoS DOS8 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,072.00 Each Yes No Required Mitigation 1 Services for 1 (DDoS) Defense is a service that is Gbps Gbps of traffic designed to detect and mitigate flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 500.01 Mbps - 1000 Mbps traffic flow.

269

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 9 DDoS DOS9 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,856.00 Each Yes No Required Mitigation 5 Services for 5 (DDoS) Defense is a service that is Gbps Gbps of traffic designed to detect and mitigate flow. distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 1001Mbps - 5 Gbps of traffic flow.

270

271

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Feature Contractor’s Description, Restrictions Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Description and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 11 DDoS DOS11 DDoS Mitigation AT&T Distributed Denial of Service $0.00 $2,856.00 Each Yes Yes Required Mitigation 10Gbps (DDoS) Defense is a service that is 10Gbps designed to detect and mitigate distributed denial of service attacks on your network using best practices and best of breed tools. DDoS Defense helps identify and block malicious packets in near real time to help you prevent possible negative affects regarding the flow of your business traffic. DDoS Defense is the service based on the data from the AT&T IP backbone network and doesn't require you to purchase additional bandwidth or premises equipment. Depending on your configuration, a shared or dedicated set of network mitigation devices scrub your traffic for denial of service attacks. A shared configuration allows you to share network detector devices and a farm of network mitigation devices with other AT&T customers. A dedicated configuration provides you with network mitigation devices dedicated to you. AT&T circuits are supported. 5.001 Gbps - 10 Gbps of traffic flow.

272

24.5.2.1 Extended Demarcation Wiring Services Contractor’s Description of Service:

[AT&T Extended Demarcation (Extended Demarc) wiring services support the services covered by Contract for all Customer occupied buildings where services under this Contract are being offered. Extended Demarc wiring includes wire/cable related activities required to extend the demarcation point to the Customer defined termination location or cross-connect point from the Contractor’s MPOE. Extended Demarc wiring shall include the necessary wire/cable, connectors, jumpers, panel, and jack. Extended Demarc wiring shall also include associated trouble shooting, testing and labeling. The Contractor shall not be required to complete Extended Demarc wiring from the MPOE to the extended Demarc location if: 1. The wire/cable pathway is blocked, and cannot be cleared without significant effort or damage to the Customer site; 2. The wire/cable pathway is in an asbestos or other environment hazardous to the Contractor’s personnel, or where such work would be hazardous to the public or to the Customer’s staff; or, 3. Upon written release provided by either the Customer or by the CALNET Program.]

Geographic Availability: [ Statewide] State Associated Administrative Fee Charge - Services identified below with “Yes” in the SAAF Applied column will have a 2.5% fee applied to the Monthly Recurring Charge or usage. Charges below do not include the SAAF. The SAAF will appear as a separate line on the customer’s invoice.

273

Table 24.5.2.1 – Extended Demarcation Wiring Services Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Per Item per Unit Measure (Yes/No) (Yes/No) Discretionary 1 Extended EDCR Wiring services to extend AT&T assumes customer $505.53 N/A Installation No No Required Demarcation Facilities from the has adequate -Copper – Customer’s MPOE to the pathways. Regular Hours Customer’s point of utilization from a copper trunk or trunking equipment. Includes 300 feet of four-pair cable and an RJ48 or equivalent jack. 2 Extended EDCO Wiring services to extend AT&T assumes customer $646.03 N/A Installation No No Required Demarcation Facilities from the has adequate -Copper – Customer’s MPOE to the pathways. Overtime Customer’s point of Hours utilization from a copper trunk or trunking equipment. Includes 300 feet of four-pair cable and an RJ48 or equivalent jack. 3 Extended EDCH Wiring services to extend AT&T assumes customer $926.98 N/A Installation No No Required Demarcation Facilities from the has adequate -Copper – Customer’s MPOE to the pathways. Sunday and Customer’s point of Holiday Hours utilization from a copper trunk or trunking equipment. Includes 300 feet of four-pair cable and an RJ48 or equivalent jack.

274

275

276

277

278

279

280

24.5.3 Services Related Hourly Support Contractor’s Description of Service:

[ The customer is offered at the aggregated price for labor and material per unit description. Material and labor are not available separately.] Geographic Availability: [ Statewide] State Associated Administrative Fee Charge - Services identified below with “Yes” in the SAAF Applied column will have a 2.5% fee applied to the Monthly Recurring Charge or usage. Charges below do not include the SAAF. The SAAF will appear as a separate line on the customer’s invoice.

Table 24.5.3 – Services Related Hourly Support Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 1 Field Service MVV Field technician Field technician properly $117.01 N/A Hour Yes No Required Repair properly trained to trained to an expert level for Technician an expert level for the service being dispatched Regular Hours the service being to diagnose and/or repair a dispatched to CALNET DNCS service problem diagnose and/or that turns out to be caused by repair a CALNET factors outside the DNCS service responsibility of the problem that turns Contractor. out to be caused by factors outside the responsibility of the Contractor.

281

Non- Monthly Recurring Recurring SAAF Delegation Contractor’s Contractor’s Description, Charge Per Charge/Item Unit of Applied Needed Required or # Feature Name Product ID Feature Description Restrictions and Limitations Item per Unit Measure (Yes/No) (Yes/No) Discretionary 2 Field Service MVVO Field technician Field technician properly $163.98 N/A Hour Yes No Required Repair properly trained to trained to an expert level for Technician an expert level for the service being dispatched Overtime the service being to diagnose and/or repair a Hours dispatched to CALNET DNCS service problem diagnose and/or that turns out to be caused by repair a CALNET factors outside the DNCS service responsibility of the problem that turns Contractor. out to be caused by factors outside the responsibility of the Contractor. 3 Field Service MVVH Field technician Field technician properly $257.91 N/A Hour Yes No Required Repair properly trained to trained to an expert level for Technician an expert level for the service being dispatched Sunday and the service being to diagnose and/or repair a Holiday Hours dispatched to CALNET DNCS service problem diagnose and/or that turns out to be caused by repair a CALNET factors outside the DNCS service responsibility of the problem that turns Contractor. out to be caused by factors outside the responsibility of the Contractor.

282