LandWarNet 2008

1. LandWarNet 2008

2. Army NetOps Enterprise Services PURPOSE: To present and discuss: Present information about Army level enterprise services Discuss realities and requirements of managing Army network services as an enterprise OBJECTIVES: By the end of this presentation you will be able to: Examine NetOps from different points of view Understand the complexity of the Army enterprise Understand the development cycle

3. Location as a Point of View

4. Enterprise NetOps Services Current Enterprise NetOps Services IP space management Domain Name Service (DNS) E-mail Public Key Infrastructure (PKI) Antivirus protection Future Enterprise Services Host Based Security System (HBSS) Web Filtering and Analysis

5. IP Space Management Architecture C-TNOSC currently allocates Army IP space (under discussion) Theaters allocate space regionally to local service providers Deployable forces have deployable space Capabilities Key requirement for networks IPv6 changes coming Deployable Deployed Force As DF organizations move, the supporting Network Support Centers (NSCs) must ensure traffic flows efficiently to, from, around and through the unit

6. Domain Name Service (DNS) Architecture Utilizes geographically dispersed DNS servers C-TNOSC manages Army Enterprise DNS servers NOSCs manage local DNS servers (domain controllers) Capabilities Key enabler for routing and web traffic Active Directory (AD) Deployable Forces Moving units must transition their DNS servers to point to new entry points into the Army or DOD DNS structure

7. Email Architecture AKO Webmail MS Exchange Managed at Exchange organization AKO email address forwarded to local exchange organization Mail filtering Capabilities Digital signatures and encryption Mail filtering Deployable Forces Network Service Centers (NSCs) must maintain paths for e-mail to and from the unit to ensure mail flows as units move

8. Public Key Infrastructure (PKI) Architecture Army service is an extension of the DISA service Online Certificate Status Protocol (OCSP) repeaters / responders managed at theater level Validation software and hardware managed locally Capabilities Single Sign On (SSO) Email Encryption and Digital signatures Army Registration Authority Deployable Forces DF must transition their NIPRNET systems to get PKI support from the most efficient locations

9. Antivirus Protection Architecture ACERT manages Army servers Local service providers administer local instances Capabilities Warns of or prevents malware attacks Deployable Forces DF must ensure antivirus definitions and patches continue while moving through operational phases

10. Capabilities Project Phases

11. Summary The Army does have enterprise networks, services, and systems NIPRNET and SIPRNET are Army managed pieces of the GIG Enterprise level C2 does exist Army NetOps could use a Project Manager (PM) for all systems and services PEO C3T supports tactical systems (only) Cradle to grave fielding should support all organizations Current processes cannot program personnel and long range funding well

12. Discussion