FY27 - Enterprise Wi-Fi Expansion

Confidential

IT Governance Business Case Enterprise Wi-Fi Expansion Technology Solutions

Confidential

Background The City of Durham's Technology Solutions (TS) department manages the City's network infrastructure, and it has a focused role in ensuring the Local Area Network (LAN) connectivity is reliable and stable. Each City site includes its own complex layer of network equipment that enables City employees and guests to access the internet, including equipment like network switches, wireless access points, and ethernet cables.

Although the core network equipment lives inside of network closets, ethernet cables extend from the closet to connect desktops and laptops to the internet. Some facilities also have wireless access points that allow for wireless connectivity so users can connect their devices from any location within range. Currently, the City has 377 TS-managed access points deployed at a variety of City sites.

Confidential

Current Business Problem TS is routinely asked by other departments to deploy Wi-Fi "everywhere" to enable a modern, flexible work environment across the City. Although TS has deployed 377 access points (AP), there are many locations still lacking wireless coverage. At locations without wireless access points, users must rely on wired ethernet connections or MiFi solutions that enable wireless connection for their device. And other City sites have deployed external internet services for wireless connectivity, which reduces the City's ability to centrally manage and secure its network traffic.

Before this business problem can be solved, the City must first complete the compliance efforts to refresh its network closets and refresh its outdated APs.

Confidential

Current Pain Points • Inequitable technology experience across City sites • Incomplete coverage at strategic sites • Overreliance on MiFi solution to connect mobile devices • Lack of flexibility in performing routine operations • Reduced ability to centrally manage and secure network

Confidential

Future State Benefits •

Consistent, equitable technology experience across City sites

•

Complete coverage at strategic sites

•

Easy, automatic connection for mobile devices

•

Flexible work environment

•

Centrally managed and secure network

Confidential

Strategic Alignment

Confidential

Analysis and Recommended Solution

Confidential

Current State & Issues Current State: • •

City sites with TS-managed Wi-Fi: 36 City sites without TS-managed Wi-Fi: 38

Key Issues: • • •

Many City sites lack wireless connectivity.

Strategic sites have Wi-Fi dead zones.

Other sites are using external service providers to gain wireless connectivity.

Recent wireless surveys conducted at City Hall and Fleet Management recommended additional APs to ensure complete coverage: • City Hall (+11) • Fleet Management (+4) PDHQ and Water Management are examples of sites with comprehensive wireless coverage.

Sites with TS-managed Wi-Fi

# of APs

Sites with TS-managed Wi-Fi

# of APs

Armory

3

Morreene Rd. Recreation Center

1

Brown W.S.T

3

New Sign and Signal Shop

3

City Hall

48

11

Community Development

6

North Durham Water Reclamation Facility

Durham Fire Academy

2

Parks and Recreation Admin Office

3

Durham Teen Center

2

Police Districts 1, 2, 3, 4

32 (total)

Emergency Service backup 911 Center

1

PDHQ

111

ESS South (PWOC)

8

Fire Garage

1

ESS Admin

6

Fire Stations 1, 6, 10, 17, 18

15 (total)

South Durham W.S.T.

6

Fire Supply

1

Transfer Station

3

Fleet Management

6

Walltown P&R

1

General Services

8

Water Management

80

Golden Belt

5

West Point on the Eno

1

Maplewood Cemetery Office

1

Williams W.S.T.

4

Morgan-Rigsbee Parking Deck

5

Confidential

Solution Analysis Environments: Wireless connection is needed in both

indoor and outdoor environments for routine City work: • Indoor: Flexible connectivity for desktops, laptops, and other mobile devices • Outdoor: Vehicle diagnostics, inventory checks, field equipment updates, etc.

Alignment: Ensuring complete, TS-managed wireless coverage at all City sites enables:  Consistent wireless experience at all City sites  Flexible and efficient work environments  Centrally managed and secure network

TS recommends allocating funding for 450 new APs to ensure comprehensive Wi‑Fi coverage at every City site, supporting all indoor workspaces and key external environments used for fleet, operations, and other public services.

Project Costs Item

Qty

Unit Cost

Subtotal

FortiAP-431G Indoor APs

400

$800

$320,000

Fortinet Outdoor APs

50

$1900

$95,000

FortiCare Support 1-Yr (per AP)

450

$90

$40,500

Installation Services

450

$150

$67,500

TOTAL

$523,000

Confidential

Market Analysis Current State: The City currently uses Cisco Meraki APs at all sites with wireless connection.

Alternative: TS has recently invested in Fortinet solutions, which offer comparable capabilities at a more competitive cost. Fortinet offers core network equipment as well as APs.

Cost Analysis: Vendor

One Time Cost

Support Cost

Recurring Cost

3-year Investment

Cisco Meraki

$540/each

Included in recurring cost

$180/each annually

$1,080

Fortinet FortiAP

$800/each

$90/each OTC

$0/each annually

$890

Although Fortinet requires greater upfront investment, it significantly reduces operational costs to maintain the City's network.

Confidential

Recommended Solution: Expand Wi-Fi across the City

Description

Pros

Cons

Procure the goods and services needed to expand the current fleet of TS-managed wireless access points across all City sites.

• • • • •

Consistent technology experience across City sites Complete coverage at strategic sites Easy, automatic connection for mobile devices Flexible work environment Centrally managed and secure network

•

N/A

Confidential

Recommended Solution - Project Financial Estimate COST ESTIMATES Description

FUNDING

Implementation Costs (Hours)

Post Implementation Run Costs (Hours)/ KTLO

1,840 Hours

420 hours

Departmental Funding Amount:

$0.00

Labor $ (Hours) Internal TS Department:

Funding Requested (Y/N):

Y

Business Analysis

20 hours

Internal Labor New FTE – Year 1 Costs

Architecture Office

15 hours

Project One Time Costs (External)

$607,150

Managed Services

450 hours

*Total Project Funding Requested for Year 1

$607,150

Cybersecurity

5 hours

*Total Project Funding Requested for Year 2

$0

PMO

PMO Staff Augmentation Installation Services Non-Labor $

420 Hours

1000 hours

$84,150 $67,500

FortiAP-431G Indoor AP (Wi-Fi 6E)

$320,000

Fortinet Outdoor APs

$95,000

FortiCare Support 1-Yr (per AP)

$40,500 * Total Project Funding Requested Year 1 includes New FTE Labor, External Labor and Non Labor

$0.00

Confidential

Risk Identification Description of Risk

Risk Impact (High/Medium/Low)

Vendor performance

Low

N

N

Cyber Security

Low

N

N

Project Team Turnover

Low

N

N

Poor Execution

Low

N

N

Mitigated (Y/N) Contingency(Y/N)

Confidential

Mitigation Risk (Costs) •

N/A

Contingency Risk (Costs) •

N/A

Confidential

Our ask We are asking the IT Governance Steering Committee to approve and score the business case to expand the City's Wi-Fi coverage for all sites. If approved, the business case will be scored, ranked, and submitted to the City Manager for final approval.