REPORT TO THE CITY COUNCIL FROM: BRYON HORN, Chief Information Officer Information Services Department BROCK D. BUCHE, PE, PLS, Director Department of Public Utilities BY: ANTHONY WHITE, MBA, Assistant Director Department of Public Utilities - Water Division JAMIE BRAUN, Industrial Control Systems/SCADA Water System Supervisor Department of Public Utilities - Water Division SUBJECT ..Title Approve the purchase of Cisco Secure Firewalls, associated materials, and implementation for Supervisory Control and Data Acquisition for an amount not to exceed $336,087, utilizing the cooperative purchase agreement with AMS.NET, LLC., dba MGT Impact Solutions, Merced County FOCUS Agreement 2021092. ..Body RECOMMENDATION Staff recommends that City Council approve the purchase of Cisco Secure Firewalls, associated materials, and implementation for Supervisory Control and Data Acquisition (SCADA) segregation for an amount not to exceed $336,087 to enhance SCADA network security infrastructure; and authorize the Director of Public Utilities, or designee, to execute the necessary documents on behalf of the City of Fresno (City). EXECUTIVE SUMMARY The Department of Public Utilities - Water Division operates multiple SCADA systems across the City's water production and treatment sites. Critical components of these systems, including firewalls, have reached or surpassed end-of-life (EOL) status, jeopardizing system reliability, cybersecurity, and supportability. To ensure continued system performance, staff recommends purchasing and implementing the necessary upgrades at a total cost not to exceed $336,087. Funding is available in the Water Division's Fiscal Year 2025 Capital Improvement Program Budget. BACKGROUND The SCADA systems utilized by the Water Division monitor and control the City's groundwater and surface water production and treatment processes. Firewalls are needed at the Northeast Surface Water Treatment Facility (NESWTF) to isolate the Water Division's SCADA systems and networks from the City's business infrastructure, with the goal of strengthening cybersecurity. Additionally, while each SCADA system operates independently, they are interconnected for administration and management purposes. The requested devices will allow the Division to interconnect all locations using dark fiber, without relying on the City's enterprise networks. To address these issues: 1. Procure modern and supported firewalls for the NESWTF. 2. Procure six network switches to enable inter-site connectivity and full SCADA segregation. 3. Employ Intrusion Prevention and Detection services to monitor all system traffic. Procurement will be conducted through MGT, formerly AMS.net, a sole source provider and authorized distributor of the selected products, priced from a cooperative agreement, Merced County FOCUS Agreement 2021092 (FOCUS). The associated 10X Form (9316) was submitted and approved on April 25, 2025. The Information Services Department (ISD) has reviewed and approved the procurement of this equipment. ENVIRONMENTAL FINDINGS By the definition provided in the California Environmental Quality Act (CEQA) Guidelines Section 15378, the approval to procure this Service and associated equipment does not qualify as a "project" for the purposes of CEQA. LOCAL PREFERENCE Local preference was not implemented as this purchase is utilized through a cooperative purchase agreement. FISCAL IMPACT There is no fiscal impact to the General Fund. Funding for this purchase is included in the Fiscal Year 2025 Capital Improvement Program Budget within the Water Division's Enterprise Fund 4000-4001 under Project 411500723. Attachments: Cooperative Purchase Agreement Quote Summary 10X Form 9316