DISA's $201M browser contract shows resellers still have a role to play

A new contract coming out of the Defense Information Systems Agency might be a blueprint for how value-added resellers can continue to play a key role in the market.

The new solicitation released Monday specifically asks for a reseller to provide a managed service for cloud-based internet isolation infrastructure, or CBII. This infrastructure executes all internet code remotely instead of on end-user devices.

The idea is that a DOD user visits a website, but the actual browser rendering happens in an isolated cloud environment. Only a safe visual stream is sent to the end user. Any malicious code or content never reaches the endpoint.

DISA has set this up as a competition among resellers, but has already picked Menlo Security as the infrastructure provider it wants to use. Bidders have to be authorized resellers of Menlo Security's products.

On the surface this seems counterintuitive, given all of General Services Administration’s talk about OneGov agreements and more direct relationships with original equipment manufacturers.

But this DISA solicitation is more than a contract to buy software. DISA is buying licenses and so much more.

The agency is looking for a contractor to operate, integrate, maintain and support the Menlo Security service within the DISA security stack. Running a managed service is not really what Menlo does.

The contract will continue work DISA started as an Other Transaction Authority project in 2019 with initial awards to By Light Professional IT Services and Sealing Technologies, now a division of Parsons.

By Light captured the production award in 2020 and has been obligated $208.4 million in order volume since. This award expires on April 14, according to Deltek data.

Proposals for the new contract are due by March 16. DISA plans to make the award on a lowest price, technically acceptable basis.