Board of Selectman Regular Meeting Materials (linked)

Memo
December 1, 2022
Mr. Rob Brule
First Selectman
Town of Waterford
15 Rope Ferry Road
Waterford, CT 06385
Re: Cooperative Purchasing-Cohesity Dataprotect
Dear Mr. Brule:
In keeping with Section 3.08.010 of the Purchasing Ordinance- Cooperative Purchasing,
the Purchasing Agent on behalf the IT Department, respectfully seeks the Board’s approval
to award the contract for Cohesity Dataprotect to Total Communications for
$39,570.73.This purchase is in accordance with State of Connecticut DAS Contract
18PSX0202.
-
rae
a a oe syaitetie ff om Line Item 10147-54130, Computer Equipment.
A
Rawle Dummett
Pupthasing Agent,
"own of Waterford

Mr. Rob Brule, First Selectman
Town of Waterford Town Hall
15 Rope Ferry Road
Waterford, CT 06385
Dear Mr. Brule,
The IT Department currently possess $68,819.83 in L.I. 10147-54130, COMPUTER EQUIPMENT.
We are continuously evaluating and researching Information Technology solutions to ensure we can
keep the data flowing to the departments that need it when they need it. We are specifically looking
for a platform that would substantially increase the safety of our backups and decrease our recovery
time over the current solutions we have in place.
Procuring the purchase of the Cohesity Dataprotect from Total Communications will allow us to
modernize our IT infrastructure specifically to enhance the availability and reliability of critical systems.
if purchased, the Cohesity data protection platform will help mitigate the Town of Waterford’s exposure
to data loss and business continuity issues from ransomware and other cybersecurity attacks. This
system will allow us to maintain immutable backups and support cloud based archives of data based on
policies.
The IT Department respectfully request the Board of Selectman to accept the purchase of the Cohesity
Data protect product through Total Communications for $39,570.73 through the cooperative purchasing
program.
Respectfully submitted for your consideration
Jeffrey M. Robillard,
IT Manager
Town of Waterford
cc: Kim Allen — Director of Finance
Rawle Dumett — Purchasing Agent

state: | CT Engineer: | Steve Barbarito
Zip: | 06385 Equipment:
1 Cobssity C5016-SFP FOUR (4) NODE BLOCK WITH 48 TB SECURE ERASE HDD, 8.4 TB PCI-E FLASH, 255 GB RAM, 46X 10GQE SFP+ PCIE, 4X 1PM $21,532.12 $21,532.12
45 Coheslty DataProtect Backup and Recovery Service Subscription (1 13} across On-Prem and Cloud workloads, - Term - 12 Months $531.86 $7,977.90
15 Cohesity Reptica/Retentlon Service Subscription {1 1B), Subscription par 78 of usable storage capacity. - Term - 12 Months $205.88 $3,088.20
8 CABLE, 106, SEP, TWINAX, 3M $58.23 $465.84
1 Premium {24x7} Support for C5046-106-SFP-4-INFO; Subject to the Cohesity Support Malntenance Terms and Conditions, - Tarm- $2 Months $2,666.67 $2,666.67
A signed copy of this Sales Order should be returned withits 30 days of the date of this form. After 30 days, all prices are subject to h-FotatiPa $35, 730.73
change, The Purchase Price does nat include any sales, use, excise, property, trlp charge, freight charges, fuel surcharges, or ather taxes, if
4 40% Deposit of the Purchase Price Is due upon execution of this agreement. The 40% deposit will be applied to the equipment
sell prize and the balance of the equipment will be Invoiced upon equipment delivered to site or stored at Total's facilities, ano $3,840.00
Professional services to be invoiced on a monthly basts untif the installation has been completed.
Alf Invoices are Due Upon Receipt, ota $39,570.73
(f customer is T&M, our current telephony labor rate is: (Minimum per Tech: Onsite - 1 Hour; Remote — 0.5 Hour)
if customer Is under service agreement, our current
telephony labor rate is: (Minimum per Tech: Onsite - 1 Hour; Remote — 0.5 Hour)
An onsite service charge of $189.00 will also be included (Waived for new system orders).
After hours work will be billed at the time and a half rate. Sunday is double time.
Notes:
Customer hereby orders the equipment set forth above under the “Terms and Conditions” set forth on page 2 of this document.
X Date:
Authorized Signature
Name: Title:

TCI SHALL UNDER NO CIRCUMSTANCES, EXGEPT FOR TCI'S WILLFUL MISCONDUCT, BE LIABLE FOR ANY DAMAGES, WHETHER SPECIAL, CONSEQUENTIAL OR
OTHERWISE FOR ANY DELAYS IN DELIVERY OR INSTALLATION.
3, WARRANTY: :
a. Subject fo the provisions of this parageaph and Paragraph 7, when the Equipment is purchased, TC! warrants for a period of ninety (90) days from the instalation Completion
Date, thal as of the instailation Completion Date the Equipment will be free from defects in material and workmanship, if any defects covered by this Warranty appear within the
above stated ninety (90} day period, TC! shall have the option of repairing or replacing the Equipment at its expense during routine business hours, Such repalr or replacement shall
be Customer's exclusive remedy for TCl's breach of warranty, or for willful misconduct or gross negligence and Customer wilfingly, knowingly, and voluntarily waives all other
remedies. in cases where TC! does not Install the Equipment, TC{ warrants that the equipment only, if properly installed and maintained, shail be free from defects for a period of
ninety (90) days. .
b, TCI will not be obligated to service, repair or replace any Equipment which has been repaired or serviced by others, abused, or Improperly handled, stored, altered or used or
otherwise intermingled with third party material or equipment. No warranties shall apply fo, and TC! shall not be obligated to service, repair or replace any equipment which has been
installed, repaired, or serviced by others without the express prior written consent of TCI.
¢. WHEN THE EQUIPMENT IS PURCHASED, THE WARRANTY STATED ABOVE SHALL BE IN LIEU OF AND EXCLUDES ALL OTHER EXPRESS OR IMPLIED WARRANTIES,
INCLUDING WITHOUT LIMITATION AND WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
4, LIMITATIONS ON TCP’S OBLIGATION AND LIABILITY:
a. When the Equipment is purchased all obligations and warranties of TCI hereunder, including warranty obilgatlons, shail be subject to and relleved by any force majeure, Act of
God, war, riot, fire, explosion, lightening, power surge, accident, flood, sabotage, Inabilily to obtain fuet or power, governmental laws, regulations or sitikes, lockouts or inlunctlons
(whether or not such labor event is within the reasonable control of TC!). Customer acknowledges that in order to provide the Equipment to the Custamer, TCI and the Customer
must rely on third parties beyond the control of TCI and the customer, including, withoul limitation, the Customer's local telephone ullllly. TC!’s maintenance responsibilities do not
extend to Equipment of the public telephone network, nor is TGl responstbte for malfunctions In the communication system or Equipment caused by maffunctions in the public
telephane network or caused by abuse or misuse of the communication system or Equipment by other than TC1, TCI shall not be responsible for the failure to fulfill any obligation
hereunder, inciuding, without {imitation any warranty obligations, when such thitd pariles hava not provided or maintained the service or products to Customer which are necessary
for TCI to Fulfill Its obligations under this Agreement.
b. WHEN THE EQUIPMENT 1S PURCHASED, TCi SHALL NOT BE LIABLE FOR ANY SPECIAL OR CONSEQUENTIAL DAMAGES OR FOR LOSS, DAMAGE OR EXPENSE
DIRECTLY OR INDIRECTLY ARISING FROM THE USE OF EQUIPMENT SOLD OR LEASED HEREUNDER OR ARISING FROM CUSTOMER'S INABILITY TO USE THE
EQUIPMENT EITHER SEPARATELY OR IN COMBINATION WITH ANY OTHER EQUIPMENT OR FROM ANY OTHER CAUSE.
6, PRICE:
Prices are subject to change. Quoted prices listed ars valid for thirty (30) days after the “Date Order Taken” date on this document, Any deviations to this order after date mentioned,
such as quantity changes, partial releases, or changes in specifications, are subject fo a potential price increase,
6, DEFAULT:
It any of Customer's obligations to TCI shalt not be paid when due, of if Customer shall be in default hereunder, and all sums and obligations hereunder shall, at TCl’s option, become
immediately due and payable. Upon Customer's defauit, in addition to the rights and remedies specifled herein, TC! shail have alt tha rights and remedies under the Uniform
Commercial Code and any other laws, Including the sight to any delinquent payments for which the Customer shall remain fully lable. Additlanaily, upon Customer's default, TCt shall
have the right, In its sole discretion and without any Itabillty to, or recourse by, Customer whatsaever for any damages, whether actual, special or consequential including without
limitation any damages for lost business, fo terminate or suspend any and ali Warranties with respect lo the Equipment and any and ait obligations TCl may have to service, repair or
replace the Equipment, whether arising under this Agreement or othenvise. No remady of TCt hereunder shail be exclusive of any other remedy herein or provided by law, but such
remedies shall be cumulative and In addition fo every other remedy
7. REPOSSESSION:
Customer agrees that upon its failure a pay any sum hereunder ar within forty-five (45) days thereof, TC! shail have ihe complete right to enter the Premise at any reasonable time for
purposes of repossessing the Equipment, Customer agrees to cooperale fully with TCl In such repossession, TC! shall use reasonable care in removing the Equipment but shail not be
Hlable fo restore the Premises after the Equipment is so removed. Other than ihe obligation fo use due care in removing the Equipment, TC! shall have no llablity to, and Customer shall
have no recourse against TCI whatsoever for, any damages resuillng from such repossession, whether actual, special, or consequential, including withaut limitation, any damages for
lost business,
8, COMMERCIAL TRANSACTION:
THE CUSTOMER ACKNOWLEDGES THAT THE TRANSACTION OF WHICH THIS AGREEMENT IS A PART IS A COMMERCIAL TRANSACTION, AND HEREBY WAIVES [TS
RIGHT TO NOTICE AND HEARING UNDER GHAPTER 903a OF THE CONNECTICUT GENERAL STATUTES, OR AS OTHERWISE ALLOWED BY ANY STATE OR FEDERAL
LAW, WITH RESPECT TO ANY PREJUDGEMENT REMEDY WHICH TCI, ITS SUCCESSORS OR ASSIGNES MAY DESIRE TO USE.
9, TITLES; FILINGS; POWER OF ATTORNEY:
Customer agrees that TCt shall retain tile to the equipment until all sums due TC! from Customer shall have been paid in full. Customer hereby appoints TCI as ils attorney in fact,
coupled with as interest, to file UCC financing statements and ofher such documents, and to do such other acts, as may be reasonably necessary to give notice of TCI's retention of
tle to the Equipment and other provisions of this Agreement.
10, INDEMNIFICATION:
Customer agrees to indemnify and save harmless TCI from all suits, loss, damages, actfons or claims of any character, Including reasonable altorney’s fees and legal costs incurred by
TCI In collecting any amounts owed to It by Customer, in enforcing, Its rights hereunder or brought on account of any Injuries or damages recelved or sustained by any person, persons,
or property by or from the Customer or Customer's contractor or sub-contractor or their employees, of by, or in consequence of any neglect in safeguarding the work, of by, or on
account of any act of omission, neglect or misconduct of the Customer ar his, agent, contractor, sub-contractor arising out of any law ordinance,
11, APPLICABLE LAW; JURISDICTION:
This Agreement and all {ransacllons hereunder, and all the rights of the parties, shall be governed as ta validity, construction, enforcement and in all other respecis by the laws of the
Slate of Connecticut. Customer agrees that the Superior Court for Judicial District of Hariford or the United States District Court for the District of Connecticut shall have jurisdiction to
hear and determine any claims or disputes periaining to the financing transactlons of which this Agreement ts part and/or to any matter arising of In any way related fo thls Agreement
or any other agreement between TCI and Customer and expressly submits and consents In advance to such Jurisdiction in any action or proceeding,


g
gi
Specialized Partner, we have the depth and breadth of experience to deliver sophisticated, large-scale technology
solutions.
SERVICES & CAPABILITIES
As the premiere technology solutions advisor and provider in the Connecticut, Total Communications has set itself apart
fromm the competition with our ability to exceed client expectations, Each solution is designed to meet your organization's
specific requirements and we ensure that your team is properly trained to use it effectively.
Security & Disaster Recovery:
Physical and cybercrimes are extremely costly ~ both in money and operational downtime. Our layered security solutions
reduce your exposure to ever-increasing, attacks, and business. continuity solutions make restoration efforts faster and
less painful, : : ,
Networking & Wireless: . .
With a continuously expanding demand for more users sand applications to connect, we will help optimize your network for.'..
speed, security and introduction of new services. Taking the core-to-edge approach, Totat Communications offers : .
networking solutions from industry leaders ttthat work on your behalf. : :
Cloud Infrastructure &. Software: pore : . sft &
Data and applications are at the heart of your business. Let us help.us help you manage them with a 1 modernized:
infrastructure and approach specific to your performance improvement needs. Our intelligent data center solutions are not,
a one- size -fits. all, put rather ‘Specifically ©engineeres ith your business, :
Collaboration: :
Now more than ever, your “business needs to provide exceptional ‘work: fram-anywhere collaboration. Partnering with the
industry's leading providers, Total Communications will increase your team's ability to communicate ® effectively and
seamlessly with our flexible. voice, video, chat and team workspace solutions.
TOTAL ihe
COMMUNICATIONS

EXPERTS IN STATE & LOCAL GOVERNMENT SOLUTIONS
Successiully providing services to nearly 40% of municipalities in Connecticut, Total recognizes the importance of
having systems that function reliably, seamlessly and securely, And we understand the criticality of protecting sensitive
data. Serving your constituents is a 24/7 job, and we specialize in helping you maximize available resources to continue
meeting the needs of the community.
SAFER SCHOOLS, SAFER WORKPLACES
School and workplace environments have drastically changed as students and employees are no longer limited by
traditional borders. The need for remote connectivity continues to rise and it is imperative that this is done successfully
and safely. As a trusted partner, we bring the experience and expertise to manage this balance, which includes having
developed and installed citywide wifi and outdoor school space.
Working together, Total Communications and Cisco have been prioritizing Safer
Schools & Safer Workplaces through integrated IT and physical security solutions.
From Cisco Optical Sensors and Informacast Emergency Notifications to defining and
deploying critical E911 compliancy features, we assist in making communities safer
across physical and digital threatscapes.
HISTORY OF SUCCESS
* Founded in 1980 ; + 42+ Years of Experience in Voice
+ Cisco® Partner since 1998 + 27+ Years of Experience in Data
+ Implemented one of the earliest and + 23+ Years of Experience In VoIP / UC
largest successful Cisco VoIP projects + Solutions for 10 to 7,500+ Users
Cisco Qualifications
_ «Cisco Gold Certified Partner
" (Cisco's highest partner level; Heid by less than 1% of Cisco Partners)
* Cisco Master Collaboration Specialized Partner
- (Cisco's highest level of specialization, requiring demonstrated ability
to deliver sophisticated, value-added collaboration solutions)
» Cisco Advanced Collaboration Architecture -
_ 20 network engineers; 50+ Cisco Certifications
~ ¢1 Cisco Certified Design Expert (CCDE)
. (Cisco's highest level of certification for design, only.-250 worldwide) 1
+ 4.Cisco Certified Internetwork Experts (CCIE)
‘(Cisco's highest level of, professional certification for Planning and
: . “eperating infrastructures)
+ Cisco Advanced Data Center Architecture "7 . te 9 Professional Certifications (CCNP, CCDP)
* Cisco Advanced Enterprise Network Architecture + 11 Associate Certifications (CCNA, CCDA)
» Cisco Advanced Security Architecture
TOTAL
COMMUNICATIONS

¢ C sco Secu ty
« Cisco Meraki Cloud-Managed
Networking
* Cisco Safer Schools Products
* Total360 Business Continuity &
Disaster Recovery
* Flash Storage
» Structured Cabling
¢ Network Monitoring &
Alert Notification
+ CREC
» City of New Haven
« New Haven Public Schools
* New Haven Free Public Library. «
° City of Hartford .
+ Hartford Board of Education
*City of Meriden
+ Town of Greenwich
-.¢ Town of West Hartford _-
* City of Norwalk, °°”
“* Town of Mansfield
« HPe Aruba
* Vonage
* Zoom
¢ Bx8
+ NEC Authorized Dealer
* Microsoft Solutions Provider
: Bartial Client List
. -* Trumbull Board of Education _ -
"== City of Trumbull
*"s City of Bristol
.« Bristol School System
“+ Tawn of Madison
City of North Adams ,-
City.of Middletown, 7”
City of Northampton -.
City of Norwalk
TOTAL
COMMUNICATIONS
\ * » Town of New Milford ~:
«Town of Watertown
. Bridgeport Public Libraries
‘s Clty of Bridgeport Be
.* Town of Newtown
«City of New London
+ Town of Westport..0 57+
» Town of Farmington 2° *..” ”
* Watertown Board of Education *
« Town of Rocky Hill: :
eo
ila]
RG

y
‘Key Benefits :
*: Protect your data and::.
husiness with.a defense-in-
depth architecture
‘Quickly identify potential
attacks with machine
tearntng-based anomaly
detection.
Reduce downtime with rapid
recovery at scale
Data is a differentiator In the digital economy. That's why data has simultaneously become the most
valuable and the most targeted business asset. Cybersecurity Ventures expects global cybercrime
costs to reach $10.5 trillion USD annually by 2025 and that a busIness will fall victim to a ransomware
attack every 2 seconds by 2031), Even as awareness of digital extortion schemes (s rising, more
sophisticated and focused attacks increasingly target backup data and Infrastructure continuing to
threaten enterprises worldwide. For businesses that do become compromised, steep financial loss is
often compounded by customer distrust, and in the case of healthcare, risk to human life.
Cohesity effectively counters ransomware attacks and helps your organization avold paylng ransom.
Cohesity’s comprehensive, next-gen data management solution features a multi-layered approach
to protect backup data against ransomware, detect and rapidly recover from an attack. Cohasity’s
unique Immutable architecture ensures that your backup data cannot be encrypted, modified or
deleted, Using machine fearning, it provides visibility and continuously monitors for any anomalies In
your data, And if the worst happens, Cohesity helps to locate a clean copy of data across your global
footprint, including public clouds, to Instantly recover and reduce downtlme,
Detect
Machine-driven
_Protect : Intelligence establishes
tramutable backup . patterns and
snapshots combined automatically detects and
with DataLock j | reports anomalies
won RBAC, G 3
mutti-factor
authentication, data COHE SITY S Recovet
encryption, and Sweey Maintain a vaulted data
Quorum prevent Pao mr copy that is always
your backup data : : available. Simple search
from becoming a = and instant recovery to any
target <a point in time gets you back
. : Le 2 in business fast. Instantly
recover hundreds of virtual
machines (VMs), databases,
and files and objects
Figure 1: Cohesity delivers comprehensive capabiltties to protect, detect and recover from a ransomware attack
1. Cybersecurity Ventures: Top 6 Cybersecurity Predictions And Statistics For 2021 To 2025 (Dec. 30, 2021)

because immutability is at the foundation,
* Immutable snapshots - All backup snapshots, by default, are stored In an immutable state within Cohesity. The
original snapshot (aka gold copy) Is never mounted or exposed to any external system or application. The only
way to write new data ar mount the backup for recovery in read-write mode Is to create a zero-cost clone of the
original backup, which Is done automatically by the system,
* DataLock ~ WORM capability for backup enables the role-based creation and application of a Datalock policy to
selected backup snaps, The security officer rale in your organization can use this feature to store snaps in WORM
format. The time-bound setting enforcing spans cannot be deleted, even by the administrator or securlty officer
role, providing an extra layer of protection against ransomware attacks.
® Role-based access control (RBAC) - To reduce the risk of unauthorized access to data and systems, Cohesity
enables your IT staff to grant each person a minimurn level of access to what is needed to do a particular job.
* Multifactor authentication (MFA) - Should a criminal actor get access to your system password, that individual
would not be able to access the Coheslty backup without passing an additlonal layer of security in the form of MFA
or muttlstep verification. Cohesity supports a variety of authentication and authorization capabilities, Including
strong Active Directory integration, MFA, access control lists, mixed-mode role-based access control (RBAC), and
comprehensive system and product-level auditing.
* Data encryption ~ Cohesity features software-based FIPS-valldated, AES-256 standard encryption for
your data in flight and at rest. This cryptographic module validated by the United States National Institute
of Standards and Technology (NIST) at the Federal Information Processing Standards (FIPS) 140-2 Level 4
standard Is trusted worldwide.
® Quorum - To protect your data and systems from insider threats and stolen credentials, Cohesity requires
any root-level or critical system change anyone in your organization wants to make be authorized by more
than one person.
Cohesity Helios, a next-gen data management platform, delivers a unique combination of immutable backup
snapshots, DataLock capabilities, RBAC, MFA, plus Quorum (aka the four-eye rule), to prevent backup data from
becoming part of a ransomware attack.
Detect
As cyber criminals continue to strengthen and modify their approaches, Coheslty makes it easier for your organization
to detect Intrusions with a global, enterprise SaaS-based management solution. Cohesity customers have a
single dashboard to see, manage, and take action fast on their data and applications globally. In the fight against
ransomware, Cohesity Hellas machine learning (MU) provides insights humans may miss because it automatically and
continuously monitors and notifies you when an anomaly is detected,
The cutting-edge ML algorithms proactively assess your IT needs and automate infrastructure resources regularly. If
your organization's data change rate, including data ingest is out of the normal range—based on dally change rates
on logical data, stored data after global deduplication, or historical data Ingest—Cohesity Helios’ machine-driven
anomaly detection sends a notification to your IT administrators. Instantly, IT is informed that data changes do not
match normal patterns.
COHESITY

y
y
9301602
E
Hestoprted 2
Pusecsitcid — QJaodas
Ce Sc)
W reeranemareces Ll tuntagba
Figure 2: With Cohesity Helios, organizations detect ransomware [ntrusions
Because Helios machine-driven learning establishes patterns and automatically scans for data ingest/change rate
anomalies, it flags a potential ransomware attack, Should an anomaly be detected, the platform simultaneously alerts
both your enterprise IT team and Cohesity’s support team, expediting remediation.
Besides monitoring backup data change rate to detect a potential ransomware attack, Cohesity uniquely detects and
alerts for flle-level anomalles within unstructured files and object data, This Includes analyzing the frequency of files
accessed, number of files being modified, added or deleted by a specific user or an application, and more to ensure, a
ransomware attack Is quickly detected,
Recover
Cybersecurity threats, internal and external, do happen, and fast, That’s why recovery has to be predictable and rapid.
Cohesity speeds the process of getting back your ransomed enterprise data and applications—at scale, In addition
to the immutable backups, Cohesity offers multiple policy-based methods to isolate your mission-critical data and
have the last good copy secured. To meet your unique recovery and security requirements, you can isolate your data
into the Cohesity-managed cloud vault - Cohesity FortKnox, repilcate it to another immutable cluster, or tape it out to
offsite storage, like Iren Mountain.
Cohesity Helios’ machine-drive assistance helps accelerate the recovery by recommending a clean copy of data ta
restore. Alternately, you can leverage the platform's global search capabllities to quickly tocate and access the data
across environments.
To ensure a clean restore and avoid re-injecting a cyberthreat or software vulnerability into your production
environment, Cohesity’s CyberScan provides deep visibility Into the health and recoverability status of protected
snapshots. CyberScan shows each snapshot’s vulnerability index and actionable recommendations to address
software vulnerabilities. This helps you to cleanly and predictably recover from a ransomware attack.
With the combination of fully hydrated snapshots with Cohesity’s proprietary SnapTree’s B+Tree architecture,
MegaFlle, and instant mount, you can dramatically reduce your downtime by restoring hundreds of virtual machines
(VMs), flles, objects, and large databases instantly,
COHESITY

{2 in this example} to
reconstruct
A,B, Cn
: St | Sa : c 33 “ — Always fixed traverses
—— Time
Figure 3: Cohesity patented SnapTree technology delivers unlimited snaps with no overhead,
supporting instant recovery at scale
Counter Ransomware Attacks with Cohesity
Backup is your last line of defense against sophisticated and crippling ransomware attacks. Cohesity’s
comprehensive anti-ransomware solution protects, detects and most importantly, rapidly recovers what
you need to reduce downtime and ensure business continuity.
Learn more at www.cohesi y.com/salutions somwareTM::
COHESITY —
19 2022 Cohesity, Inc. Altvights reserved. a
Cohesity the Coheshiy tone, SnapTree, SponFs, Datablatform, DataProtect, Helios, ani ther Cohesliy marks ae radema/4s or realsteredratenarks dt cals necn the US andor Imesnavonaly. us angen
© product agmes may be trademarks of the respective compantes with which thay are assuclated. This enaterial {opis intended to provide you fylurinattun about Cohestty and ous business and products; {u} was believed to be
Hueandaceurateat the tine twas vuitton, vutis subject to change vaithour notice; and (c) fs provided on an “AS IS” basis, Cohusity disclainis al express of implled conditions, representations, wateanties of any kind,
Cohesity.com : | 1-855-926-4374 "| 300 Park Ave. Suite 1700, San. Jose, CA 95110 ! : + 3000015-008-EN .7-2022_

Abstract
ESG Lab performed remote testing of a significant feature of the Cohesity DataPlatform: its ability to instantly restore a
large number of virtual machines (VMs) to any previous recovery point, with no change as the number of VMs increases.
Backup copies are always fully hydrated and Instantly available. This feature enables Cohesity to deliver the web-scale
protection and recovery that today’s agile, dynamic organizations need to remain productive, while reducing both storage
and management costs.
The Challenges: Balancing Protection, Uptime, and Cost
Respondents to an ESG survey of midmarket and enterprise organizations reported that more than half of their production
workloads (52%) demand less than one hour of downtime.' This cannot be achieved with traditional data protection
schemas, which consist of daily full backups that take hours, if not days, to recover, Incremental backups can offer shorter
backup windows with more recovery points, but restores require that the backup application stitch back together the daisy-
chain of incremental changes since the last full backup, a time-consuming task that leads to a performance penalty over
time. Creating an occasional synthetic full backup with the most recent incremental changes provides one image ready to
restore, but typically only that most recent one is available for restore. In addition, prolific secondary storage growth occurs
as organizations create multiple copies for data protection, as well as discrete information silos for protection, test/dev,
analytics, etc, These silos consume more storage capacity, add management complexity, and are disruptive to upgrade.
The Solution: Cohesity DataPlatform
Cohesity DataPlatform is an intelligent,
scale-out, software-defined platform that is
deployed on hyperconverged nodes with
compute, flash, and hard disk capacity.
Cohesity provides fully converged data j
protection with DataProtect software, a \_ Databases Sg = }
complete backup and recovery solution.
Cohesity can also be used as a target for
third-party backup applications including
Cohesity Data Protection
Veeam, Commvault, and NetBackup, as well COMMVAULT: ir ®
as dedupe storage for database dumps and VERITAS
copies taken with native database tools such ORACLE’
as Oracle RMAN. Administrators use QL RMAN
DataProtect to manage backup jobs, establish policies, and apply these policies to groups of servers or VMs; DataPlatform
itself manages global deduplication and compression. Cohesity ellminates the complexity of deploying and scaling separate
media servers, master servers, proxies, media agents and target storage; DataPlatform scales simply by adding
hyperconverged nades to the cluster, each of which brings CPU and storage capacity, expanding the global filesystem. It is
tightly integrated with VMware, including the VMware APIs for Data Protection (VADP) that provide Changed Block Tracking
(CBT) so only incremental changes are transferred, Cohesity DataPlatform includes unlimited snapshots that can be created
1 Source: ESG Research Report, The Evolving Business Continuity and Disaster Recovery Landscape, Feb. 2016,
This €SG Lab Review was commissioned by Cohesity and is distributed under license from ESG.
© 2017 bv The Entervrise Strateev Group. Inc. All Rights Reserved,

Cohesity’s SnapTree functionality enables a virtually unlimited number of snapshots that are always fully hydrated and
ready to restore. With each new backup, Cohesity clones the most recent backup image and then applies the changed
blocks; all backups in the catalog are immediately available as snapshots for instant restore. SnapTree provides unlimited
clones because the global file system creates a series of intermediate pointers using a B-tree structure; as a result, it takes a
fixed number of hops to access any block, regardless of when the snapshot was created or how many intermediate
snapshots have been created,
Instant VM Restore
A significant feature of the Cohesity platform is instant restore of a virtually unlimited number of VMs and applications, to
any recovery point. Because the Cohesity DataPlatform can present an NFS mount point for any file, every backup image is
immediately and directly accessible to all ESX hasts. Instead of instantly restoring a few VMs like most traditional backup
solutions, administrators can instantly restore an unlimited number of VMs, or even an entire vCenter. The PCle flash in
each Cohesity node ensures high performance for restored VMs.
Instant restore is automated by the Cohesity console. Administrators can mount a specific image stored on Cohesity as an
NES data store, redirect the VMware ESX host to that image, and then initiate the VM boot process and application
recovery. The end-user returns to full operations in the time it takes to recover the VM, without the time-consuming re-
hydration and data transfer that most data protection schemas require. After application restart, administrators can use
storage vMotion to transparently migrate the image back to the primary data store.
ESG Lab Testing: Instant Restore
ESG Lab tested instant
restore on the Cohesity
2500 DataPlatform using
the Recovery workflow,
which involved cloning
Admitted 40 O 9) 40 Oe Shan
statue etal eet, since Eatery Hono ‘test Fara
Recovery Options
VMs from a Cohesity
backup image, mounting SNS EB
them to the vCenter/ESX «That Pere Smee tpscane
: + vist Nome: coheshiy et 016038
host, and running the + Gonitnca an Bron Ho
«Pawar Stale: Oo
VMs from the Cohesity
storage.
Object Slant Time Buratlon Status Message
Under the Protection tab
of the UI, we clicked
Recovery/Recover VMs
and selected the ESG
jobs detail, showing a list
of completed backups of
40 Windows Server
2012 VMs. Each VM was configured with 40 GB of storage, 64 MB memory, and 2 vCPUs. We selected all the VMs, chose
the 6:39 am snapshot, and clicked Add to Cart and Continue. Next, we changed the Recovery Options to append “-E5G” to
2 Ame U2qvER-Oz 8/19/2017 10.083 fe a ‘computed
Asn se ceenaring
> umes O$-DE02 05/19/2017 10.959 ci é Swenopreteg
Heo a reaserane
> tyno-wn-02 WEB 6/9/2017 1. dgam nis @ Si comme
wea iremase
> uamyn02-02 Gnste/2087 10.08am fe 4 St comrade
toa Setoraineg
wena + seve a nae nne ee - ee nn ee A ER erent ete ennai tena cat
© 2017 by The Enterprise Strategv Group. Inc. All Rights Reserved.

» Test/Dev and Recovery Workflows: In Cohesity’s test/dev workflow (used here}, instant restore boots the VMs on
Cohesity but does not perform the background storage vMotion back to primary storage; this enables organizations to
execute tasks such as service pack testing before committing changes that impact the production data center. In the
Cohesity Recovery workflow, after instant restore, storage vMotion can return the image to primary storage. ESG Lab
successfully tested both scenarios.
ESG Lab also tested instant recovery of a 40GB SQL Server VM that had used both VMware VADP to capture only
incremental changes and Microsoft VSS to create a consistent, point-in-time snapshot of the database. We viewed a table,
deleted it, and then queried that table to prove it was no longer there; this simulated problems that plague IT organizations
such as databases becoming unresponsive, corrupted, and even deleted. Next, we instantly restored that single table back
to a point in time before the deletion and successfully queried the database, proving it was back up and running. This
granular instant restore means that administrators can get back in operation immediately, without having to restore the
whole database and disrupt other users.
Finally, ESG Lab created a theoretical comparison of Cohesity with a similarly configured, non-flash, traditional backup
software and appliance that evaluated the time for each appliance to prepare VMs to a ready-to-boot state for instant
restore. All times were based on internal Cohesity test results. This comparison looked only at storage-related tasks. Non-
storage-related tasks were removed from the equation, including the time to mount a data store to vSphere (a VMware task
that would be the same for both appliances) and the time to actually boot the VM (a VMware task that is dependent on the
VMware infrastructure). This leaves only the time for the Cohesity clone operation, and for the traditional appliance to
rehydrate and restore. As the chart shows, the Cohesity time remains predictably low and constant, while the traditional
solution takes significantly longer as the number of VMs scales. (Note that all data points were increased by one to enable
the Cohesity data to be viewable in the chart.)
Instant Restores: Time Until Ready to Boot
60
50 +
40
30
20
0 i
1 25 50 75 100
Number of VMs
Time (in minutes)
# Cohesity Restore Operation m Traditional Rehydrate/Restore
© 2017 bv The Enterprise Strategv Groux. Inc. All Rights Reserved.

same amount of time as one VM, while the traditional solution took progressively longer,
Traditional vs, Cohesity Data Protection
Production Hosts and VMs
Traditional instant restore:
* Rehydration through multiple
incrementals
* Time increases with # of VMs
d f back
Cohesity instant restore:
Fy,
* Single clone operation, no A
rehydration ;
* Fast regardless of # or age of
“Master Servers °
‘COBECITY,
2 Ibid.
© 2017 by The Enterprise Strategv Grou. inc. All Rights Reserved.

forced to choose between maintaining multiple protection points and being able to restore quickly. As organizations
virtualize more of their applications for greater agility and efficiency, they need data protection processes to step up to the
same agility and efficiency, instead of holding them back.
Along with many other features, the Cohesity DataPlatform enables Instant VM restore at scale to any recovery point,
minimizing downtime and keeping organizations up and operational. And, you can restore many VMs (even an entire
vCenter) from any snapshot, no matter how old or how many incremental changes have been made, in just the time it takes
to boot the VMs. This takes no pre-planning and no proxy servers. Cohesity’s global file system and Snaptree functionality
enable every member of the cluster to access all the data immediately. For production applications, you can boot the VM
and then migrate the image back to primary storage using Storage VMotion in the background, while for test/dev projects
you can boot the VM and test your patches without propagating into production, and then easily destroy that clone. While
other solutions limit the number of instant restores that can take place at a given time, Cohesity eliminates that bottleneck.
Key to the value is that this converged platform scales linearly, adding CPU and storage with each new node; as you add
capacity, you also add restore threads, so you increase the number of VMs or physical servers to restore at the same time.
Cohesity can also reduce the amount and cost of storage, since a single snapshot can serve many secondary storage
purposes, from data protection to analytics to test/dev. For organizations looking to minimize downtime, maintain business
continuity, and reduce costs, the Cohesity DataPlatform deserves a good look.
All rademar
ste Pat
deprduction ot igdistibutian ar this pak
property al ther respective comparing. tnleraestion +
> pelt
ation, ie whole of in part, w!
ito Boe Har path ined Oy senires ihe baterpr
ch hay Th
nrAay contain apinians of
et beet la Fea
na authorized to
ob The Palette Slzaleyy Grau, te
tad TSG Clerk elation: at 30%
U.S, copyright baw wed sell be
please


Line No. Org. Gode Object Code Object Description Amount Budget Budget
4 10147 51240}CLERICAL AND TECHNICAL 125,787.00 74,121.91 20,273 94,395
2 10147 52043/SERVICE CONTRACTS INFO 773,609.00 238,412.37 10,000 248,412
3 10147; 54130/ COMPUTER EQUIPMENT 99,909.00 68,819.83 10,273 79,093
4 a
5 Qo
6 9)
7 9]
8 Q
9 ie)
40 0
i]
ie]
TOTAL 20,273 20,273
Explanation
FOR THE PURGHASE OF A NON-EXPIRING BLOCK OF TIME FOR [T INFRASTRUCTURE SUPPORT SERVICES AND FUNDING THE PURCHASE
OF A IN IMMUTABLE BACKUP SOLUTION CAPABLE OF RAPID RANSOMWARE RECOVERY AND CLOUD SASED OFFSITE ARCHIVAL.
Jeffrey Robillard
Department Head
Director of Finance
First Selectman
Commission/Board Approval
11/30/2022
Date
Date
Date
Date
revised 9/9/20

8h e070. €9°TT e0"00s 00°90 00°700S
SUSNSdXa Wlawsunaniay OL0eS LVTOT
SHSNAIXE PIGVSUNAWIAY 0107S
0‘ST 00°90 00-0 00°080‘ST 00°0 c0*080 ‘ST
URANO sand osozs
2z 9b PZE ‘SET LT*ZL8‘6SE 00°609‘ELL. | oo'o 
00'609’ELL
NOTLYWYOENI SLOWYLNOOD ZOTAWRS Evocs LeTaT
NOLIWAMOANI. SLOWAENOD HOTAMAS €7Ozs
842T 00-0 T6°T0z’9 00° TPO‘6T 0070 00° THO*6T
. “WOT as UeeTs LeTOT
“WOT I'A OZETS
e‘b co-o 68° UST oo-000’S 00°0 00°000/S
SWAT IMBAO OTSsTs Letot
BAIINGAO O1StS
L 00"o 60°S99‘TS 00° L8L‘GZT 00°90 00° L8L‘S2T
TWOINHOGL -ONW TWOIWEIO OTets Leto
: TWOINHOGL GNY 'IWOIMHIO OTZTS
29 00°0 PT'08h ‘0S OO°OOT8TT o0'o 
00°00T‘8TT
NOLIVUISININGY OTITS LETOT
' NOLEWULSININGY OTITS
TANSAXE ADO'IONHOUL NOILYWMOENT LETOT
WIIVAY. SHONWEENOONT GSGNR4axa Giz iapdad GasTAsa SINSray/SsNwaL d0uddv TYENISTYO
GNO3 'THHENED TOT -Yog SiNnoooW
€T
€20z
wo
| IMoama Lagana SIva-oL-uwan! _wsTTExX
LO ‘pzoyze3em FO umoy] £2:80 220Z/T0/2T

T9°
LOT‘
bOT
$87
109
7067
00°
TSE
*09T‘T
‘00°
OO
T6E
09T‘T
SHSNGdXa
TWLOL
TO"
LOT‘
b6T
$8°T09
‘06%
00°
T6e09T‘T
00-0
00"
Tee
‘09T‘T
GNA
TWHENSS
TYLOL
ST"€L8°8
ZO°9TS*e%
00°606
‘66
00°o
00°606
‘66
INSWAINOX
WALAAHOO
eters
LyTOT
00-0
oo"0
,
oo'oss’T
00°0
oo"
oss’‘T
SMALINANA
OOPS
LETT
00°0
co"o
00°STe‘T
oo"o
00°STS‘T
SNOHAATSL
ca
Lp
FIAVIIVAN
SHONWHENOONT
GHANHAXa
GLA
EgOGna
CESTAa
SENSLUE/
SNE
dowddy
TWNIOTYO
GNOZ
TWHSNED
TOT
‘WOs
saNnooow
EL
€207
wor
wiodmA
LaSdoE
aLwa-or—yvas|
UST
TEX
LO
‘pxzozzazeM
FO
waoL|
LZ280
220Z/10/ZT
zs
ze
i


To: Finance Director Kim Allen
Ce: First Selectman Rob Brule
From: Marc Balestracci, Chief of Police
Date: November 30, 2022
Re: Capital Improvement Projects
The Waterford Police Department plans to request two large renovation projects in the 2023-2024 town capital
improvement plan. These projects, totaling $88,016, are to update the evidence room and armory within the
police department. These projects are needed for several reasons including more secure areas to hold evidence,
dedicated workspaces for officer safety when handling dangerous substances and weapons and chain of custody
improvements for court and liability concerns.
In addition, the police accountability bill requires police departments in the state to be accredited by 2025. As we
navigate through the lengthy process, which includes our first site visit from the state on February 16, 2023, we
need to reach acceptable standards in these two areas.
As we have concerns about the cost of these projects increasing and the time it takes from funding request to
project completion, we are requesting this project be funded prior to the 2023-2024 capital improvement
request.
Thank you for any consideration.
Thank you,
Marc Balestracci
Chief of Police
Waterford Police Department

TOWN
OF
WATERFORD
.
CAPITAL
IMPROVEMENT
PLAN
PROJECT
CONSOLIDATION
FORM
FY
2024-2028
Police
Dept:
FUNDING|
FISCAL
YEAR
FISCAL
YEAR
FISCAL
YEAR
FISCAL
YEAR
FISCAL
YEAR
PROJECT
NAME
SOURCE
‘2023-2024
2024-2625
2025-2026
2026-2027
2027-2028
TOTAL
R
Update
1
:
66,658)
:
66,658!
U
1
19,358
19,358
Block/Kitchen
Update
1
+
25,000
25,000
Equipment
1
35,000
.
35,000
Updates
(Shared
1
40,000
.
40,000
Lyme}
‘
1
.
28,000
28,000
Update
(3
year
3
73,000
73,000
146,000
0
0;
0
0
26,016
60,000
68,000)"
73,000}
73,000|°
360,016
SOURCES,
YE
CAPITAL
IMPROVEMENTS
BUDGET/SEWER
CAPITAL
MAINTENANCE
FUND
CAPITAL
&
NONRECURRING.
LONG
TERM
DEBT
FINANCING
UNDESIGNATED
FUND
BALANCE
FEDERA
GRANTS
FUNDING

1. DESCRIPTION AND JUSTIFICATION (describe the type, purpose & anticipated accomplishments of the project)
The Evidence Room of the Police Department requires a high level of security of the property and evidence held within,
and has become a highly scrutinized area within law enforcement. The current evidence room has not received
consistent updating since the building was origionally built, and utilizes repurposed shelving, free-standing gym lockers
and a make shift evidence processing table and workstation for the Evidence Officer. Accredidation standards imposed
by the Police Accountability Bill have required that some of the components requested be implemented. The requested
upgrades would modernize the space with significatly more secure evidence holding components, provide dedicated
workspaces for officers to safely process evidence including dangerous substances and Improve security and chain of
custody concerns,
2: |PROJECT STATUS IF IN PROGRESS
LIST OTHER PROJECTS WITHIN. YOUR DEPARTMENT OR ANOTHER DEPARTMENT.THAT WILL BE IMPACTED BY THIS
3 (REQUEST. . : : coo! SEs
4 DESCRIBE THE IMPACT ON DEPARTMENT. OPERATING BUDGET (include cost estimate if applicable)
_ |GRANT FUNDING/ OTHER FUNDING, If applicable (detailed explanation ‘of grant/other funding, including the amount,
5 |source of funding, status, town match; if any. Attach award letter if available) oe ;
ATTACH PLAN ESTIMATE, SERVICE AREA MAP. ‘AND/OR OTHER SUPPORTING DOCUMENTATION, {if;none, simply state that
6 In the area below) ; ee : es 3
7 ee : = COST/FUNDING SOURCE
APPROVED
FUNDING TO
FUNDING SOURCE * DATE FY2024 FY2025 FY2026 FY2027 FY2028
4 |Current Year Capital 0 66,658
Utility Budget/Sewer Cap Maint Fund
Transfer to CNR
Short/Long-term Bonds
LoCiP (detail in section 5 above)
CNR Undesignated Fund Balance
Federal/State Grants (detail in section
7 {5)
Other Funding (detail in section 5
8 above} -
TOTALS: : “O| 66,658 Op of Oj 8
almpe|otr

DESCRIPTION AND JUSTIFICATION (describe the type, ‘purpose & anticipated accomplishmenis of the project)
The Armory of the Police Department requires a high level of security for the weapons and ammunition held within. The
current armory has not received updating since the building was originally built, and utilizes cabinets that are broken and
in a state of disrepatr. It holds a make shift weapons cleaning table and workstation for the range officers and the blast
resistant lighting fixtures need replacing as the lighting conditions are very poor. The requested upgrades would
modernize the space with significatly more secure holding components, provide dedicated workspaces for officers to
safely clean and maintain the department's weapons and improve security and chain of custody concerns.
PROJECT STATUS JF IN.PROGRESS
LIST: OTHER PROJECTS WITHIN-YOUR DEPARTMENT OR ANOTHER DEPARTMENT THAT WILL.BE IMPACTED. BY Y THis
REQUEST : : :
DESCRIBE THE IMPACT ON DEPARTMENT. OPERATING BUDGET (include cost estimate if applicable)
GRANT FUNDING/OTHER FUNDING, If applicable (detailed explanation of grant/other: funding, including the amnouns, i
source of funding, status, town match, if any. Attach award letter if available)
ATTACH.PLAN ESTIMATE, SERVICE AREA MAP. AND/OR OTHER SUPPORTING DOCUMENTATION. (if none, simply state that
inthe area below). : : ;
COST/FUNDING SOURCE
APPROVED
° FUNDING TO
FUNDING SOURCE . DATE FY2024 FY2025 FY2026 FY2027 FY2028
Current Year Capital 0 19,358
Utility Budget/Sewer Cap Maint Fund
Transfer to CNR
Short/Long-term Bonds
alu} p)eir
LoCIP (detail in section 5 above)
CNR Undesignated Fund Balance
Federal/State Grants (detail in section
5}
Other Funding (detail in section 5
above)
TOTALS : oo of a9,85BF | 0 0) ee 0

This Estimate is Prepared For:
Waterford Police Department
41 Avery Lane,
Waterford CT 06320
61 W Main St | Mystic, CT 06355
(O] 860-536-7663 | (F] (860) 536-7674 |[{E] info@advimplic.com |
Advanced Improvements LLC HIC #0607800 NIC #0011904

Job Location: 41 Avery Lane, Waterford CT 06320
This estimate is to frame a vatiety of walls in the evidence/locker room as presented on hand-
drawing. This estimate includes framing with metal studs, three 36” doors, sheetrock, tape,
sand, and primer the walls, relocate sprinkler system as needed for the work area, build lower
cabinets with countertop area as presented on drawings. This price does not include any
electrical or data.
Evidence Room
e Mobilize
e Frame area presented with metal studs
e Relocate sprinkler system at affect work area only
e Framing to take place just above ceiling grid
e Install 3 solid doors
e Install 5/8 Sheetrock
* Tape & Sand
© Primer & Paint
« Install four 18” lower cabinets
¢ Install countertop with solid surface
o Selection to be determined at time of construction
Total Labor & Material: $23,267.00
Countertop on lower cabinets
¢ Install countertop with solid surface
oc Selection to be determined at time of construction
Total Labor & Material: $1,500.00
61 W Main St | Mystic, CT 06355
[0] 860-536-7663 |{F] (860) 536-7674 |[E] info@advimpllc.com |
Advanced Improvements LLC HIC #0607800 NIC #0011904

Total Labor & Material: $375.00
Customer Courtesy Discount for Public Safety Service: - $750.00
Advanced Group’s dumpster and permit fees are included in this proposal.
Advanced Group proposes to furnish all material & labor complete
in accordance with specifications above.
524,392.00
*This price does not include sales tax. If sales tax is applicable, It will be added to each Invoice.
** Any additional scope af work beyond listed scope of work will be considered a change arder for the client.
Grand Total
*** Advanced Group recommends a professional lawn care company be contacted to ensure proper regrowth of disturbed areas.
61 W Main St | Mystic, CT 06355
[OQ] 860-536-7663 | [F| (860) 536-7674 | [E] info@advimplle.com |
Advanced Improvements LLC HIC #0607800 NIC #0011904

to install data and electrical wiring at the Police Dept.
Project Scope
e D/E/F will install a new 8’ light fixture to replace the existing one on the ceiling above the north wall of
the evidence room
« D/E/F will install a new duplex outlet receptacie and 2 single outlet receptacles in a newly constructed
wail
e D/E/F will install a new Duplex 120 receptacte and a double data Cat 6 Location in the new “East Lyme"
area of the Evidence Room
¢ =©D/E/F will install a new 120 volt circuit In the "East Lyme” area and a new circuit in the “Waterford Area”
« — Light's within the original room will be separated so that each newly separated area will be on its own
light switeh
* D/E/F will install two new single data locations in the ceiling to be used for the installation of future IP
cameras
o Install of cameras by others
Cost: $3,150.00
Statement of Clarifications and Exclusions:
« Bid Bond, Performance and Payment Bonds are excluded
* installation of additional grounding methods/means is excluded
* Any and all utility fees and/or usage charges for power is excluded
« Dumpster, trash / debris removal from site is excluded
* Saw-cut slab and Patch to Match Is excluded
¢ Any and all site work outside of scope is excluded
* Overtime / additional time caused by delays due to other trades or schedule acc