City Council

TROY CITY COUNCIL FINANCE MEETING AGENDA JULY 21ST, 2022 6:00 P.M. Pledge of Allegiance Roll Call Presentation of Agenda Public Forum ORDINANCES 32. Ordinance Amending The 2022 General Fund Budget (Council President Mantello) (At The Request Of The Administration) RESOLUTIONS 88. Resolution Authorizing The Mayor To Enter Into An Agreement With Shi International Corp. For The Purchase Of A Dell Server Under The Sourcewell Consortium Shi Contract #081419-Shi (Council President Mantello) (At The Request Of The Administration) 89. Resolution Authorizing The Mayor To Enter Into An Agreement With Meridian It For Planning, Purchasing, And Implementing A New Firewall System For The Troy Police Department (Council President Mantello) (At The Request Of The Administration) 90 Resolution Supporting A New York State Consolidated Funding Application For A City Of Troy Wayfinding System (Council President Mantello) (At The Request Of The Administration) 91. Resolution Supporting A New York State Consolidated Funding Application For Preservation Work To Be Performed On The Soldiers And Sailors Monument (Council President Mantello) (At The Request Of The Administration) 92. Resolution Supporting A New York State Consolidated Funding Application For Riverwalk Planning From Jay Street To 111th Street (Council President Mantello) (At The Request Of The Administration) 93. Resolution Reorganizing The Standing Committees Of The Troy City Council And Appointing New Members (Council Member Steele) 94. Resolution In Support Of The Troy Public Library And Commemorating The 125th Anniversary Of The Hart Memorial Building (Council President Mantello) 1  ORD32 ORDINANCE AMENDING THE 2022 GENERAL FUND BUDGET The City of Troy, convened in City Council, ordains as follows: Section 1. The City of Troy 2022 budget is herein amended as set forth in Schedule A entitled: 2022 Budget Amendment(s)– August 2022 City Council Meeting which is attached hereto and made a part hereof. Section 2. This Ordinance will take effect immediately. Approved as to form, ____________________, 2022 Richard T. Morrissey, Corporation Counsel  ORD32 Memo In Support The reasons below are specific to the items as referenced on the Schedule A as justification for the budget transfer(s). 1. An increase in the appropriation within the vehicle expense account for the Fire Department as a result of increased costs to the department vehicles. This increase is being funded by reimbursement of EMS services that were provided to Rensselaer County.  Schedule A ORD32 2022 Budget Amendment(s) – August 2022 City Council Meeting Original Change Revised Department Account No. Description Budget* (+/-) Budget General Fund Revenues Miscellaneous A.1000.2770.0000.0000 Other Revenue 0.00 60,000.00 60,000.00 Total General Fund Revenue Increase 60,000.00 Expenditures Fire A.3410.0304.0058.0000 Vehicle Expense - Repairs 120,000.00 60,000.00 180,000.00 Total General Fund Budget Expenditure Increase 60,000.00 Net Impact On General Fund 0.00 * Or as previously amended  RES88 RESOLUTION AUTHORIZING THE MAYOR TO ENTER INTO AN AGREEMENT WITH SHI INTERNATIONAL CORP. FOR THE PURCHASE OF A DELL SERVER UNDER THE SOURCEWELL CONSORTIUM SHI CONTRACT #081419-SHI _____________________________________________________________________________ WHEREAS, the City of Troy Bureau of Information Services (“BIS”) needs a new server system for City Hall both for reasons of enhancing the security of the City’s information systems and to continue to provide a high level of service to City government; and WHEREAS, the City primarily uses Dell equipment for its server infrastructure to ensure compatibility and to simplify the day-to-day management, maintenance, and support of this critical infrastructure; and WHEREAS, the server that BIS desires, a Dell VXRAIL S570, 14X3.5", Dell - Part#: 210-APXN, has been customized to meet the City’s information processing requirements and has the security features and functionality that BIS requires; and WHEREAS, SHI International Corp. is an authorized distributor of the Dell server system that BIS desires to purchase; and WHEREAS, the City of Troy is a member of the Sourcewell Cooperative Purchasing Consortium and can procure the customized Dell server, including three years of Dell support, under the terms and conditions of Sourcewell Contract #081419-SHI for a price of $77,139.20; and WHEREAS, the City intends to use $77,139.20 in American Rescue Plan Act funding to pay for this expenditure. NOW, THEREFORE, BE IT RESOLVED, that the Troy City Council hereby authorizes the Mayor to enter into a contractual Agreement with SHI International Corp. for the purchase of a Dell VXRAIL S570, 14X3.5", Dell - Part#: 210-APXN, including three years of Dell support, under Sourcewell Contract #081419-SHI, the material terms of the agreement to be in substantial conformance with the SHI Pricing Proposal attached hereto, subject to inclusion of such terms, conditions, and provisions of City contracts as may be required and approved by Corporation Counsel. Approved as to form, ________________________ Richard T. Morrissey, Corporation Counsel  RES88 Memo of Support Date: February 7, 2022 From: Quinn Mahoney, BIS Re: Procurement – Server Infrastructure: Dell VxRail The City is looking to upgrade its IT virtualization infrastructure, to a supported, and highly available platform from Dell. In conjunction with Dell, we ran diagnostics on the current environemnt, and their consultants created a customized VxRail system to meet the City’s needs. This is a replacement server for City Hall. The VxRail system, would host applications for services such as: Financial management, Property Assessment, File Sharing, Network services, Fuel Inventory, Code Enforcementand, Clerk’s Office management, and more. Other departments have their own services, some on separate physical machines, which we are virtualizing to the respective new hardware. For example, Fire Department administration, Police Records Management, HVAC monitoring, Public Utilities Inventory, and many more services. Currently there are new servers at: TPU, TPD, and TFD. Services have to be migrated to the new server at TPD. For all departments, some of the applications need to be migrated to supported operating systems, and the applications need to be setup for vendor support. These upgrade steps, allow us to keep services as reliable as possible, and receive the security fixes. We’ve made a great deal of progress on these upgrades, and it’s an ongoing process. Our goal is to be on highly available, secure, and supported infrastructure and applications. This means, being on supported physical servers, supported virtualization sofware, and supported operating systems, and applications. These plans will give us the opportunity to keep operations reliable, recover from failures, and be more secure by following best practices. We want to get to a place where we have a Business Continuity Plan and Disaster Recovery in place. While we are actively implementing shared services with BOCES/NERIC (backup Internet at TCH and off-site backup at NERIC), upon further discovery, they are not ready to host our Disaster Recovery. The system from Dell, also gives us more options for Disaster Recovery. For example if the FD, TPU, or TPD infrastructure has issues, the VxRail is a reliable place to restore service to. For TCH, the server infrastructure is running hardware that is out of support from Dell, and will no longer support a VMware version that recieves security fixes as of the start of 2023. On CISA’s “Top Routinely Exploited Vulnerabilities” page - 2021 Top Routinely Exploited Vulnerabilities | CISA , VMware is listed, and to keep up-to-date with VMware, we need hosts that support VMware 7.x, which the current TCH hardware does not – all other locations have new infrastructure supporting 7.x. As we take on new systems, many of the demands have been large, for example, a data aggregation platform for Planning, camera systems for the PD, applications for the public, like a communication platform, employee time keeping, and a public works mobile application. As we’ve implemented these systems, we’ve chose the software-as-a-service model, where we can  RES88 focus on making the application function as needed, and keep it as reliable as possible, without worry about patching, or physical infrastructure maintenance. While for new services we’ve relied more on Microsoft, or Amazon infrastructure, there is still a need for our existing systems to receive security fixes, and have hardware refreshed. A long term plan would be to maintain a Hybrid system, moving more services to Microsoft Azure where possible. Some applications, are older, latency sensitive, and would require major shifts in architecture, which makes putting existing systems in Azure Government, a possible long term option, which regardless requires onpremise infrastructure for the foreseeable future. Our vision is new services, and service migration will take place in the “cloud”, depending on the application requirements, while we also have reliable infrastructure, on premise, running our City services. The Dell VxRail - Dell EMC Viral | Hyperconverged Infrastructure | VMware , makes working with VMware simpler, is in a highly available configuration, and if there is an issue, Dell provides critical fast support. This allows us to keep services reliable and allows us to spend less time on updating the infrastructure firmware and software. We use Dell for all our server infrastructure, and keeping the same company unifies the management, maintenance, and support. The ARPA funding may be a good use to put the City services in a strong position to move forward, and to meet the threats facing Information Technology. The support from Dell lasts for three years before renewal is required, and the hardware end-of-life date should be well into the future, as this is the latest recommend hardware.  Pricing Proposal Quotation #: 21604030 Reference #: 2/11/2022 Created On: 2/11/2022 Valid Until: 5/31/2022 CITY OF TROY Inside Account Executive Quinn Mahoney Robert O'Grady 433 RIVER STREET 290 Davidson Ave. SUITE 5001 Somerset, NJ 08873 Troy, NY 12180 Phone: 732-667-2786 United States Fax: Phone: (518) 279-7143 Email: robert_ogrady@shi.com Fax: Email: Quinn.Mahoney@troyny.gov All Prices are in US Dollar (USD) Product Qty Retail Your Price Total 1 VXRAIL S570, 14X3.5" 1 $291,942.67 $77,139.20 $77,139.20 Dell - Part#: 210-APXN Contract Name: Sourcewell- Technology Catalog Solutions Contract #: 081419-SHI Note: Participant ID# 117154 Total $77,139.20 Additional Comments Please note, if Emergency Connectivity Funds (ECF) will be used to pay for all or part of this quote, please let us know as we will need to ensure compliance with the funding program. Hardware items on this quote may be updated to reflect changes due to industry wide constraints and fluctuations. Thank you for choosing SHI International Corp! The pricing offered on this quote proposal is valid through the expiration date listed above. To ensure the best level of service, please provide End User Name, Phone Number, Email Address and applicable Contract Number when submitting a Purchase Order. For any additional information including Hardware, Software and Services Contracts, please contact an SHI Inside Sales Representative at (888) 744-4084. SHI International Corp. is 100% Minority Owned, Woman Owned Business. TAX ID# 22-3009648; DUNS# 61-1429481; CCR# 61-243957G; CAGE 1HTF0 The products offered under this proposal are resold in accordance with the terms and conditions of the Contract referenced under that applicable line item.  RES89 RESOLUTION AUTHORIZING THE MAYOR TO ENTER INTO AN AGREEMENT WITH MERIDIAN IT FOR PLANNING, PURCHASING, AND IMPLEMENTING A NEW FIREWALL SYSTEM FOR THE TROY POLICE DEPARTMENT WHEREAS, the City of Troy Police Department has received a Grant in the amount of $50,000.00 from the Division of Homeland Security and Emergency Services to upgrade the information technology infrastructure at the Police Department; and WHEREAS, the Police Department needs to replace its end-of-life firewalls to enhance the security of its information technology systems, on which the efficiency and effectiveness of a modern police force increasingly depend; and WHEREAS, Meridian IT and the City’s Bureau of Information Services have experience working together and will be able to cooperate to replace the firewalls and rebuild the network, thereby modernizing the Police Department’s aging information technology infrastructure for applications supporting Traffic Management, Records Management, Booking, Evidence Collection, Productivity software, and connections to other Agencies; and WHEREAS, the City of Troy is a member of the National Cooperative Purchasing Alliance and can procure the firewalls, products, and services from Meridian IT for approximately $25,362.94, under NCPA Contract 01-97; and WHEREAS, there is sufficient grant funding to pay for this infrastructure upgrading project. NOW, THEREFORE, BE IT RESOLVED, that the Troy City Council hereby authorizes the Mayor to enter into a contractual Agreement with Meridian IT for the planning, purchasing, and implementing of a new firewall system for the Troy Police Department under NCPA contract 01-97, the material terms of the agreement to be in substantial conformance with the Meridian IT Proposal attached hereto, subject to inclusion of the usual terms, conditions, and requirements of City contracts as approved by Corporation Counsel. Approved as to form, ________________________ Richard T. Morrissey, Corporation Counsel  RES89 Memo of Support – PD Network Infrastructure Date: May 17th, 2022 From: BIS Re: Grant for PD Information Technology The City has received the ability to upgrade the Information Technology infrastructure at the Police Department, via a Grant from the Division of Homeland Security and Emergency Services. The proposed work is to replace end-of-life firewalls at the PD. The work would improve the City’s cyber hygiene and increase stability by implementing highly available infrastructure. While the currently firewalls are functional, they are not receiving up to date information for threats on the Internet, like a modern firewall does. New firewalls would provide substantially more Information Technology security. MeridianIT would coordinate with the City on: • Implementing new Firewalls, with MFA for the MDTs, which insurance is requiring in the future (the MDTs are the tablets in the Patrol cars, and MFA, is something you have, in addition to something you know for authentication and access). MeridianIT and BIS can work together to rebuild the network, making sure the Police Department’s end-of-life firewalls are replaced. This equipment supports all applications at the PD, from Traffic Management, Records Management, Booking, Evidence Collection, Productivity software, and connections to other Agencies. Currently MeridianIT supports the voice system at the Police Department and has shown to be highly skilled in consulting projects involving modernizing aging IT infrastructure. The proposal includes two Palo Alto firewalls in HA configuration, with RA VPN MFA access, implemented on the MDTs. The firewalls filter all traffic to and from the Internet. Since the Internet has evolving state sponsored threats, the Palo Alto was chosen as it has the advanced threat mitigation, and a well-structured remote access VPN for the MDTs, that can integrate with current MFA systems. The acronym, MFA, is multi-factor-authentication. Something you have, where a password is “something you know”. Passwords have proved to be weak security, as they can be leaked after a compromise of an online service, and are often reused. The current firewalls, while are functioning with production ok, are not receiving firmware and software updates, and current threats are sometimes breaking management connectivity. They are also not capable of blocking the latest threats like the Palo Alto firewalls would. By utilizing Meridian IT, and the Grant funding it will allow City staff to: • Focus on making the Police Department network highly available • Meet future insurance requirements • Reduce issues with troubleshooting outages that could arise • Keep service continuity during power problems Please let me know if you have any questions. Page 1  PANFW Migration SRV154801 Proposal #017421 V2 PREPARED FOR City of Troy Police Department  PANFW Migration SRV154801 Account Manager: Prepared for: Details: Tom Hanley City of Troy Police Department Proposal #:017421 v2 1-315-362-9262 55 State St Delivery Date: 03/11/2022 tom.hanley@meridianitinc.com Troy, NY 12180 Expiration Date: 04/07/2022 Captain Shane T. Kiley Proposal Prepared by: Shane.Kiley@troyny.gov Danielle Smith (518) 270-4657 danielle.smith@meridianitinc.com Products Part # Description Qty Price Ext. Price NCPA Contract 01-97 PAN-PA-440 Palo Alto Networks : Palo Alto Networks PA-440 2 $928.80 $1,857.60 NCPA NTE Price: $1,238.40 PAN-PA-440-BND- Palo Alto Networks : PA-440, Professional Subscription Bundle (Threat Prevention, 2 $1,209.60 $2,419.20 PRO-3YR Advanced URL Filtering, Wildfire, DNS Security), 3 years (36 months) term NCPA NTE Price: $1,612.80 PAN-SVC-BKLN- PANW SUPPORT : PA-440, Partner enabled premium support, 3 years (36 2 $630.72 $1,261.44 440-3YR months), term. NCPA NTE Price: $691.20 PAN-PA-400- Palo Alto Networks : Rack mountable tray for up to two PA-400s and 4 power 1 $144.00 $144.00 RACKTRAY adapters for a 4 post rack mount NCPA NTE Price: $192.00 PAN-PWR-50W-AC Palo Alto Networks : 50W AC power adapter for PA-440, PA-450 and PA-460 2 $90.00 $180.00 NCPA NTE Price: $120.00 Products Subtotal: $5,862.24 Services Description Qty Price Ext. Price SOW: PANFW Migration SRV154801 (Fixed Fee 100% Due Upon Completion) (Quoted Using NCPA 1 $19,500.00 $19,500.00 Contract 01-97) Services Subtotal: $19,500.00 Meridian IT Inc. - CONFIDENTIAL 509 Erie Blvd. West Proposal #: 017421 v2 2/7 Syracuse, NY 13204 OppQ #: 154801 www.meridianitinc.com  Terms and Conditions This proposal details Professional Services to be performed by Meridian IT Inc. (“Meridian”) for City of Troy , New York Police Department (“Client”). The parties hereto acknowledge and agree that the Professional Services detailed in this proposal are governed by the following: TERMS AND CONDITIONS TERMS OF PAYMENT:Payment is due upon receipt of invoice, with one and one-half percent (1.5%) interest charged monthly on balances due past 30 days. If client disagrees with any invoice amount, it will notify Meridian in writing. If written notice is not received within 15 days of the invoice date, the invoice will be deemed accurate and payable as set forth herein. LIMITATION OF LIABILITY: MERIDIAN’S LIABILITY FOR DAMAGES, REGARDLESS OF THE FORM OF ACTION, IS LIMITED TO THE FEES RECEIVED HEREUNDER. UNDER NO CIRCUMSTANCES SHALL MERIDIAN BE LIABLE FOR INCIDENTAL, INDIRECT, SPECIAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES (INCLUDING WITHOUT LIMITATION DAMAGES FOR LOST PROFITS, BUSINESS INTERRUPTION, LOST BUSINESS INFORMATION, LOST GOODWILL OR WORK STOPPAGE), REGARDLESS OF THE THEORY OF RECOVERY AND REGARDLESS OF WHETHER CLIENT HAS BEEN ADVISED OF THAT POSSIBILITY AND NOTWITHSTANDING ANY FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY OR WARRANTY. Proposal Summary Description Amount Products $5,862.24 Services $19,500.00 Total: $25,362.24 By approving this order, you are affirming that you are a duly authorized representative of the indicated company and agree to be bound by this agreement’s terms and conditions. Only proposals that include Service Contracts will be countersigned and returned to the Client Contact. Meridian IT Inc. City of Troy Police Department Signature: Signature: Name: Name: Title: Title: Date: Date: PO Number: Additional Information: Meridian IT Inc. - CONFIDENTIAL 509 Erie Blvd. West Proposal #: 017421 v2 3/7 Syracuse, NY 13204 OppQ #: 154801 www.meridianitinc.com  SOW: PANFW Migration SRV154801 Client Legal Name: City of Troy, New York Police Department Statement of Work Description: PANFW Migration SRV154801 v2 Lead Architect: Anthony Luz Services will be performed remotely for: 55 State St Client Service Location(s): Troy, NY 12180 Client Project Contact: Captain Shane T. Kiley Client Contact Email: Shane.Kiley@troyny.gov Client Contact Phone: 518-270-4657 SCOPE OF SERVICES Meridian IT Inc. ("Meridian") will perform the following services under this Statement of Work (“SOW”): The services are focused around the implementation of a HA pair of Palo Alto Network firewalls to be deployed at the perimeter of the network replacing an existing Cisco ASA device. The configuration of the PAN firewall will follow suggested best practices by Meridian for protection of Client network leveraging features selected by Client. Security policies from the existing firewall will be referenced and/or migrated for the creation of equivalent security policies in the PAN firewall. Additionally, Client has an existing multi-factor authentication (MFA) with which Meridian will configure to work with the new user remote access system, GlobalProtect VPN. MFA will be provided through Cisco Duo and will be configured on this new HA pair of PA-440’s. Client has also requested the integration of physical security key manufactured by Yubico, to work in conjunction with Duo to a limited number of users. Meridian will work with Client to set up and test up to five (5) end users to ensure correct function of the MFA remote VPN system. Enrollment of end users to the Duo and/or Yubico MFA system is responsibility of Client. Meridian has been requested to provide a SOW to assist Client in achieving the project goal and the detailed objectives as outlined below. PLAN PHASE Upon receipt of the signed proposal, Meridian will contact Client Project Contact to schedule the work and to coordinate gathering design and specification details as needed.  Up to date network diagram representing the layer three topology of the segments included in the existing and proposed firewall configurations. If unable to provide this documentation, a discovery process can be completed by Meridian at additional expense to Client.  A list of network segments (IP, Netmask, gateway addresses, and VLAN numbers / descriptions), representing the customer environment.  A list of network routing protocols, and any static routes involved in network traffic flow to or through the existing or proposed firewall.  Access to the current firewall configuration.  Necessary IP addressing for internal, external, and management networks of new PAN device. Address information may also be necessary if additional segments (zones) are configured.  Client will perform testing of applications passing traffic through the firewall during the execute phase of the project and provide success/failure criteria for the cutover.  System information to use for Duo Authentication Proxy service (Provided by Client).  Authentication method (AD / LDAP or RADIUS).  Duo MFA Failure mode (Safe or Secure).  YubiKey security key details for hardware keys. Meridian IT Inc. - CONFIDENTIAL 509 Erie Blvd. West Proposal #: 017421 v2 4/7 Syracuse, NY 13204 OppQ #: 154801 www.meridianitinc.com  EXECUTE PHASE During this phase, Meridian will coordinate with Client Project Contact to complete the following tasks:  Perform initial Palo Alto configuration: (Manage Device) o Register and license Palo Alto devices (Client Task). o Perform initial management configuration of Palo Alto devices. o Download and configure automatic content updates. o Update PAN OS to current, recommended version. o Configure High Availability in Active / Passive mode. o Configure User Identification. o Configure LDAP profile for on premise AD group integration.  Configure base networking: o Configure up to five (5) ethernet interfaces. o Configure two (2) virtual routers with static routes to support outbound ISP failover. o Configure up to five (5) zones.  Configure outbound internet failover: o Leverage Policy Based Forwarding or similar to provide resiliency between two (2) ISP connections for outbound general internet traffic.  Configure Protection Profiles: o Configure up to two (2) anti-virus profiles. o Configure up to two (2) anti-spyware profiles. o Configure up to two (2) vulnerability profiles. o Configure up to two (2) file blocking profiles. o Configure up to two (2) Wildfire inspection profiles. o Configure up to two (2) URL filtering profiles. Note: Not all protection or inspection capabilities will be configured. Items such as, but not limited to, decryption, application-based policies, user credential protection and others are outside of the scope of this engagement.  Create and/or Migrate Cisco ASA policies to new PANFW: o Review current ASA configuration. o Verify zones replicating the existing ASA configuration. o Create appropriate policy objects and network objects, up to eighty-five (85) total. o Create and/or migrate security policies, up to fifty (50) total. o Generate NAT policies, up to twenty-nine (29) total. o Map appropriate Protection Profiles to Security Policies.  Global Protect Client VPN: Note: Client network will be configured with two (2) ISP connections which require static IP addresses be available to support GlobalProtect features. With this the GlobalProtect configuration can support one Portal and two (2) Gateways or two (2) Portals and two (2) Gateways. This is a design decision to be agreed on by Client and Meridian Engineer performing the configuration. o Configure L3 interfaces to support Global Protect configuration. o Create self-signed certificate on PAN firewall or CSR for Client to acquire certificate from public certificate authority. Note: If a public certificate is requested to be used, the retrieval of this certificate is the responsibility of Client. o Configure Global Protect Client VPN Portal(s) and Gateway(s), up to two (2) each. o Installation of Duo Authentication Proxy service onto Client provided host. o Configuration of proxy service for primary authenticator and for GlobalProtect. o Configuration of GlobalProtect for Duo.  Create a RADIUS server profile for Duo.  Create or Modify an authentication profile to leverage Duo.  Modify GlobalProtect Gateway to leverage authentication profile.  Optionally configure GlobalProtect Portal to leverage Duo. Note: that if Portal is configured to leverage Duo MFA, it is recommended to also enable cookies for authentication override on the Portal to avoid multiple Duo prompts for authentication when connecting. o Assist with up to five (5) user enrollments to Duo system. Note: that user enrollment to Duo system is responsibility of Client. o Assist with the configuration of YubiKey hardware token devices with Duo MFA system. o Configure one (1) test client to verify Client connectivity.  IPSec VPN connections: Meridian IT Inc. - CONFIDENTIAL 509 Erie Blvd. West Proposal #: 017421 v2 5/7 Syracuse, NY 13204 OppQ #: 154801 www.meridianitinc.com  o Configure L3 interfaces to support seven (7) IPSec tunnels. o Configure IKE and IPSec Crypto profiles. o Configure IKE Gateways. o Configure IPSec tunnel and needed routes. Note: That with multiple ISP connections it is possible to create dual VPN tunnels to the central site, however this is outside of this engagement. If resilient connections are required it is recommended to subscribe to the SDWAN capabilities of the firewall. Note: If the remote VPN endpoint is a 3rd party to Client, Meridian will make reasonable attempts to work with 3rd party in the configuration of VPN tunnel. Coordination and contact of 3rd party will be responsibility of Client. Items outside of tunnel creation, such as any additional NAT policies, 3rd party device configurations or similar are outside of the scope of this engagement.  Maintenance and knowledge transfer tasks: o Perform backup of the active PAN systems. o Provide network diagrams and knowledge transfer for Client IT staff.  Meridian will provide one (1) cutover / go live support maintenance window. CONTROL PHASE Meridian will supply to Client a project manager to oversee the engagement. Meridian will coordinate the efforts between all the stakeholders to produce a cohesive plan and align the schedules of key resources per the forecasted project milestones. The expected outcome is to manage the engagement and facilitate issues through completion. The services that Meridian will perform include:  Scheduling and coordinating the necessary resources to execute the project.  Working with the assigned resources to develop a preliminary project schedule, including milestones and tasks.  Facilitating regular status meetings and additional meetings, as required.  Acting as a single point of contact for Client Project Contact and assisting in project escalations, when needed.  Tracking project issues and creating change orders, when required.  Tracking equipment deliveries, if applicable.  Ensuring all deliverables are provided to close the project. CLOSE PHASE Meridian will confirm all services and deliverables as described in this SOW have been successfully completed. Deliverables for this project include:  Network diagram illustrating physical topology of PANFW and immediate connected devices.  Configuration of perimeter firewall system as described above, comprised of two (2) Palo Alto Networks PA-440 firewalls in an Active/Passive HA. CLIENT RESPONSIBILITIES The success of this solution is dependent upon a partnership with Client. Failure to fulfill the responsibilities detailed below may impact Meridian’s ability to successfully deliver the solution. The following activities are the responsibility of Client:  The proper performance and configuration of all existing Client and 3rd party equipment, software and circuits not explicitly included as part of these services.  Designating a primary technical contact for all project related communications, preparations and internal coordination activities. The activities may include: o Providing a purchase order and/or any special invoicing instructions needed to process invoices associated with these services. o Ensuring that all pre-installation worksheets, if applicable, are completed and returned by the agreed upon date during pre-kickoff communications. o Meeting requirements as detailed in the SOW above. o Participating in the project kick-off call and any subsequent project meetings. o Identifying and coordinating additional Client resources required during the execution of these services. o Confirming that all environmental and physical considerations have been addressed (rack space, HVAC, access, cables, connectivity, etc.).  Providing access required to successfully complete these services. Access may include: o Providing access to or escort (if needed) through facilities, including building and elevator access, at no additional cost to Meridian. o Providing appropriate credentials for access to all required equipment; or providing a project contact who will be available at all scheduled times to facilitate equipment access. Meridian IT Inc. - CONFIDENTIAL 509 Erie Blvd. West Proposal #: 017421 v2 6/7 Syracuse, NY 13204 OppQ #: 154801 www.meridianitinc.com   Providing a detailed list of all security clearance and employee testing requirements needed prior to scheduling resources to perform these services. Fees associated with any such requirements and not specifically identified in this agreement will be the responsibility of Client. ASSUMPTIONS AND REQUIREMENTS Meridian makes certain assumptions regarding environments, facilities and responsibilities when scoping services to be provided. Please carefully review the following list of assumptions and limitations that apply to the Service being provided. Failure to satisfy any assumption may negatively impact the proposed Service and result in increased costs:  Meridian’s professional services are limited in scope to those detailed in this SOW and are applicable only to the equipment detailed within this document, and the project’s Bill of Materials (if applicable).  Pre-existing issues with Client’s IT hardware, software or facilities that may prevent the successful completion of the project or contribute to production impacting service outages (that are not specifically identified as being remediated by the services provided in this SOW) must be addressed prior to the commencement of project services.  The costs detailed in this SOW are, in part, based upon: o Number of maintenance windows explicitly documented in the SOW. An increase in the number of “visits” or maintenance windows may negatively impact the proposed project schedule and result in increased costs. o Additional costs will result if the project extends beyond the estimated duration and will be documented in a Change Order.  Prices quoted are exclusive of taxes.  Prices quoted are protected for thirty (30) days from the proposal date.  Services are expected to be performed remotely and prices quoted are inclusive of travel expenses  If a project is permitted to be canceled in the applicable SOW, Client shall provide written notice of such cancellation to Meridian and Client shall pay for the services rendered and expenses incurred prior to the cancellation.  Meridian may require prepayment for services if credit is unsatisfactory upon Client signature. LIMITATIONS, CHANGES AND EXCLUSIONS Any changes to the project which require additions, omissions, or modifications to the original Scope of Services will be documented in a change order and will need the review and written approval of both Meridian and Client. Approved changes could result in additional or reduced overall costs. CLIENT CONTACTS The client contact listed above has been identified for directing the specific activities of their respective employees and has sufficient authority to represent Client, on matters arising in connection with the performance of the respective services. Client may replace the identified person on written notice to the other party. SERVICE FEES The Service Fees detailed in the proposal will be invoiced fixed-fee per the following schedule: Invoice Schedule: 100% Upon Completion Meridian IT Inc. - CONFIDENTIAL 509 Erie Blvd. West Proposal #: 017421 v2 7/7 Syracuse, NY 13204 OppQ #: 154801 www.meridianitinc.com  RES90 RESOLUTION SUPPORTING A NEW YORK STATE CONSOLIDATED FUNDING APPLICATION FOR A CITY OF TROY WAYFINDING SYSTEM WHEREAS, the City of Troy will benefit from the implementation of a comprehensive and strategic wayfinding and signage plan; and WHEREAS, the City, using funding from the Troy Redevelopment Foundation, previously hired a consultant to develop uniform wayfinding signage for the City; and WHEREAS, the City requires additional funds to implement the consultant’s plan fully. NOW, THEREFORE, BE IT RESOLVED, that the City Council supports the City’s New York State Consolidated Funding Application for a grant of up to $500,000 for wayfinding construction and installation. Approved as to form, ________________, 2022 ______________________________________ Richard T. Morrissey, Corporation Counsel  RES90 WM. Patrick Madden Steven Strichman Mayor Commissioner of Planning & Economic Development Christopher Nolin Deputy Mayor Department of Phone: (518) 279-7166 Planning & Economic Development Fax: (518) 268-1690 Steven.Strichman@troyny.gov City Hall 433 River Street Troy, New York 12180 To: City Council From: Steven Strichman Date: July 6, 2022 Re: NYS Grant Application Wayfinding We will be applying to New York State for a grant to cover wayfinding construction and implementation. The Troy Redevelopment Foundation provided funding for the design of the wayfinding, and the IDA provided funding for fabrication and installation, but the bids came in well above our estimates. There is currently a Downtown Redevelopment Initiative application for wayfinding which will cover a portion of the gap, but only for signage in the Downtown Redevelopment Initiative area and along the riverwalk. Additional funds are needed to fabricate and install wayfinding for other portions of the City.  RES91 RESOLUTION SUPPORTING A NEW YORK STATE CONSOLIDATED FUNDING APPLICATION FOR PRESERVATION WORK TO BE PERFORMED ON THE SOLDIERS AND SAILORS MONUMENT WHEREAS, the Soldiers and Sailors Monument, built between 1890 and 1891, was dedicated to the memory of Rensselaer County soldiers and sailor who fought for the Union during the Civil War; and WHEREAS, since the time of its construction, there has been minimal maintenance performed on the Monument, with the last caulking work being performed improperly; and WHEREAS, the City undertook an existing conditions assessment of the Monument in 2017, which found that some shifting of the superstructure stones had occurred as a result of failures at the masonry joints, and recommendations were made to undertake the necessary remedial work; and WHEREAS, the estimate of the amount needed to properly preserve the Monument is more than $300,000. NOW, THEREFORE, BE IT RESOLVED, that the City Council supports the City’s New York State Consolidated Funding Application for a grant of up to the maximum available for the required preservation work; and BE IT FURTHER RESOLVED, that the City Council will consider a future Resolution to appropriate necessary matching funds as required by the grant. Approved as to form, ________________, 2022 ______________________________________ Richard T. Morrissey, Corporation Counsel  RES91 WM. Patrick Madden Steven Strichman Mayor Commissioner of Planning & Economic Development Christopher Nolin Deputy Mayor Department of Phone: (518) 279-7166 Planning & Economic Development Fax: (518) 268-1690 Steven.Strichman@troyny.gov City Hall 433 River Street Troy, New York 12180 To: City Council – Planning Committee From: Steven Strichman Date: July 9, 2021 Re: NYS Grant Application Soldiers and Sailors Monument – Repair/maintenance work We will be applying to NYS for a grant of up to $400,000 to provide for maintenance work on the Soldiers and Sailors Monument. The Monument, completed in 1891, was turned over to the City of Troy in 1950. In its 130 years, there has been a very little amount of maintenance work performed on the structure. A 2017 study indicated the need to do the repair work soon. A previous grant application was not approved. The estimate for repairs in 2017 was for $289,000. The grant will require matching funds of between 25% and 50% depending on the funding source. I will have an updated estimate in time for the Finance Committee meeting, but for now, I am assuming between $350,000 and $400,000. Failure to perform the maintenance now will only result in further deterioration and increased future costs for this work.  RES92 RESOLUTION SUPPORTING A NEW YORK STATE CONSOLIDATED FUNDING APPLICATION FOR RIVERWALK PLANNING FROM JAY STREET TO 111TH STREET WHEREAS, the City of Troy has now completed a 1.5 mile section of the riverwalk downtown, and has applied for funding to continue the riverwalk north to Jay Street; and WHEREAS, the Troy Capital Resource Corporation has paid for the design of a one mile section of the Riverwalk from 111th Street north to 123rd Street, and City of Troy funding is in place to implement that section by the fall of 2022 or spring of 2023; and WHEREAS, upon completion of these two sections, there will be a gap in the riverwalk trail from Jay Street to 111th Street; and WHEREAS, the City ultimately intends to create a 7-mile riverwalk for the City’s entire Hudson River shoreline as proposed in Troy’s Comprehensive Plan. NOW, THEREFORE, BE IT RESOLVED, that the City Council supports the City’s New York State Consolidated Funding Application for a grant to fund the planning and design of the riverwalk trail’s 2- mile gap between Jay Street and 111th Street. Approved as to form, ________________, 2022 ______________________________________ Richard T. Morrissey, Corporation Counsel  RES RES92 WM. Patrick Madden Steven Strichman Mayor Commissioner of Planning & Economic Development Christopher Nolin Deputy Mayor Department of Phone: (518) 279-7166 Planning & Economic Development Fax: (518) 268-1690 Steven.Strichman@troyny.gov City Hall 433 River Street Troy, New York 12180 To: City Council From: Steven Strichman Date: July 6, 2022 Re: NYS Grant Application Riverwalk – North Central/Lansingburgh - design We will be applying to the New York State Department of State for a grant to fund the design of a 2-mile Riverwalk section filling the gap between 111th Street and Jay Street. The grant will be used to hire a firm to study the riverfront area, hold public meetings, and design a preliminary concept for the trail. When the design has been finally approved, the firm will prepare construction documents and bid documents. The grant will not cover construction, so there will most likely be an implementation grant applied for next year. It is likely that this will be an expensive section of trail, as much of it will need to be cantilevered out over the Hudson River Bank, because the commercial property owners need to use the space behind their buildings. With the construction of the 1st Avenue Trail this fall, the trail will soon traverse 5 miles of Troy’s waterfront.  RES RESOLUTION REORGANIZING THE STANDING COMMITTEES OF THE TROY CITY COUNCIL AND APPOINTING NEW MEMBERS WHEREAS, by Resolution 13 enacted at the Organizational Meeting on January 4, 2022, the City Council approved certain nominations for standing committee memberships pursuant to §§ C-9 and C-10 of the City Charter; and WHEREAS, the membership of the City Council has changed and the City Council desires to approve new nominations for certain standing committee memberships and chairpersons. NOW, THEREFORE, BE IT RESOLVED, that pursuant to §§ C-3 and C-9 of the City Charter, the President shall be the presiding officer of the Council, the chair of the standing committee on Finance, and ex officio a nonvoting member of all other standing committees; and BE IT FURTHER RESOLVED, that pursuant to §§ C-9 and C-10 of the City Charter, the following nominations for standing committee memberships are hereby approved: FINANCE: Membership on this committee shall include the President of the City Council as Chairperson, all City Council Members, Comptroller, Budget Officer, Auditor, Treasurer, Assessor, and Purchasing Agent. GENERAL SERVICES: Membership of this committee shall include the Commissioner of General Services, City Engineer, Director of Parks and Recreation, and at least three (3) City Council members, as follows: 1. Jim Gulli, Chair 2. Steven Figueroa 3. Sue Steele LAW: Membership on this committee shall include the Corporation Counsel, counsel staff as the Corporation Counsel desires, and at least three (3) City Council members as follows: 1. Irene Sorriento, Chair 2. Jim Gulli 3. Sue Steele PLANNING: Membership on this committee shall include the Commissioner of Planning and Economic Development, any assistant commissioners, the Chair of the Planning Commission, the Corporation Counsel, and at least three (3) City Council members as follows: 1. Emily Menn, 2. Irene Sorriento 3. Steven Figueroa PUBLIC SAFETY: Membership on this committee shall include the Commissioner of Public Safety, if any, the Police Chief, the Fire Chief, and at least three (3) City Council members as follows: 1. Sue Steele, 2. Jim Gulli 3. Emily Menn  RES PUBLIC UTILITIES: Membership on this committee shall include the Superintendent of Public Utilities, Chief Water Plant Operator, Supervisor of Water, Supervisor of Sewers, and at least three (3) City Council members as follows: 1. Irene Sorriento, Chair 2. Steven Figueroa 3. Kiani Conley-Wilson SCIENCE AND TECHNOLOGY: Membership on this committee shall include the Director of Operations, the Deputy Mayor and/or a representative of the Bureau of Information Services, and at least three (3) City Council members as follows: 1. Kiani Conley-Wilson, 2. Irene Sorriento 3. Jim Gulli BE IT FURTHER RESOLVED, that this Resolution shall take effect immediately. Approved as to form, ___________________________, 2022 ______________________________________________ Richard T. Morrissey, Corporation Counsel  RES94 RESOLUTION IN SUPPORT OF THE TROY PUBLIC LIBRARY AND COMMEMORATING THE 125th ANNIVERSARY OF THE HART MEMORIAL BUILDING WHEREAS, the Hart Memorial Building opened on May 12, 1897, as the new home of the library of the City of Troy; and WHEREAS, the Hart Memorial Building celebrates its 125th anniversary as the permanent location for the library in this year of 2022; and WHEREAS, the Hart Memorial Building was added to the National Register of Historic Places in 1973, and in 1976, won the Beautification Awards Contest sponsored by the Greater Troy Chamber of Commerce; and WHEREAS, the Troy City Council views the Hart Memorial building as a key element of the downtown cityscape, both for its historic character and for its role as the main branch of the Troy Public Library; and WHEREAS, the Hart building, as a historic structure, is considered to be one of the finest examples of American Renaissance style in the US, and features many large Tiffany windows, including the important Aldus window; and WHEREAS, the building attracts tourists and visitors to the downtown area, and is a source of pride for downtown residents. Its location between commercial downtown to the North and the residential areas to the South forms an important gateway between these two areas, in keeping with the Victorian character of the Historic Downtown district of Troy. Accordingly, it is considered a key element of the RiverSpark Heritage Area; and WHEREAS, the exterior and interior of the Hart Memorial Building attracts architecture buffs and film crews to the City through its beauty and historic authenticity; and WHEREAS, in addition to its importance as a historic structure, the Hart Memorial building is an important resource in making downtown Troy a vibrant, livable, walkable city as the main branch of the Troy Public Library; and WHEREAS, the building provides (at no charge): a safe public space with access to various services including Wi-Fi, computing equipment, public space for meetings and tutoring, educational programs for adults and children, and is a repository for historic artifacts dating to the earliest days of the City of Troy. These resources are all within easy walking distance of a diverse population, where almost 25% of Trojans are below poverty level; and WHEREAS, the ongoing preservation of the building will ensure that all of Troy's residents have continued access to these resources in the context of Troy's storied Victorian past and will ensure this building remains an important element in the built environment of downtown. -- NOW, THEREFORE, BE IT RESOLVED that the Troy City Council recognizes the importance of the Hart Memorial Building to the physical and social infrastructure of the City of Troy; and -  RES94 BE IT FURTHER RESOLVED that the Troy City Council enthusiastically supports recognition of the 125th anniversary of the Hart Memorial Building as a working library for the last 125 years in Troy and supports the building’s ongoing contribution for the next 100 years as well. Approved as to form, ________________, 2022 ______________________________________ Richard T. Morrissey, Corporation Counsel