UNCLASSIFIED
Mission Partner Environment
DISA Multinational Information Sharing
Col Roman Hund, USAF
13 May 2014 PM – DISA MNIS
UNCLASSIFIED 2
Persistent CCDR level US Centric
Bi-lateral /Multi-lateral Specified Mission Partners
JIE – MPE Tier 1 and Tier 2
LEGEND
National Classified Network (e.g. SIPRnet) National Unclassified Network (e.g. NIPRnet)
Tier 2 National Contribution (3rd Stack); Nat’l DOTMLPF, IA, Security
MPE Tier 1
**Presence of country flags does not imply an actual agreement or connection**
Tier 2 Federated Network; Commander accepts risk, sets rules
Tier 2
CJTF CFACC CFLCC CFMCC CFSOCCEpisodic CJTF level Commander centric Unknown Coalition of the Willing
JIE
(NIPR & SIPR)
US BICES-X Tier 1 CCDR Connect Access Share CCDR CCDR MPG MPG MPG
Note: Flags and organizations are for illustration only
UNCLASSIFIED
MPE
AMN CENTRIXS BICES-XDODIN
Mission
Partner
DoD
UISS/APANJIE
PEGASUS MPE Tier 1 MPE Tier 2UNCLASSIFIED
DISA – Multinational Information Sharing
• MNIS is a portfolio of projects dedicated to coalition information exchange
• Combined Enterprise Regional Information Exchange System (CENTRIXS) • Combined Federated Battle Lab Network (CFBLNet)
• Pegasus (formerly Griffin)
•Unclassified Information Sharing Service - All Partner Access Network (UISS-APAN)
• Common Mission Network Transport (CMNT)
• MNIS has been collaborating with JS J6 and external stakeholders (CENTCOM, PACOM, USDI (BICES office), JITC/CIAV) to advance the Mission Partner
Environment effort.
UNCLASSIFIED
• Combined Enterprise Regional Information Exchange System (CENTRIXS)
– Family of bilateral and multilateral coalition networks
– Non-POR, no centralized program office oversees CENTRIXS – Approximately 70 separate networks in existence
• Referred to as “enclaves” or “Communities of Interest” (COIs) • MNIS provides:
– Centralized services for five enclaves (ISAF, GCTF and three bi-lats) • Services hosted at DECC Pacific and DECC Columbus
– Enclave connection approval for same five enclaves
– Gateway services between SIPRNet and CMNT for same five enclaves
UNCLASSIFIED
• As a network, CFBLNet forms a laboratory environment.
• The CFBLNet consists of a distributed and integrated Wide Area Network (WAN) architecture of infrastructure components:
– From Combined, Joint and Service sources
– Including networks, database and application servers, client workstations, etc.
– Located within the confines of the various battle laboratories and experimentation sites of mission partners
– Partners also provide the applications, analytic tools, security devices and communications necessary to conduct Initiatives.
UNCLASSIFIED
CFBLNet members
Approved Coming
Guest Mission Partners
BEL BGR CAN CZE DNK EST FRA DEU GRC HUN ISL ITA LUX LVA LTU NLD NOR POL PRT ROU SVK SVN ESP TUR GBR USA ALB HRV NATO Legend
• Orange Solid: NATO Nations with other representation to C-EG (and C-SSG). • Black Solid: Nations with permanent connectivity to CFBLNet. • Black Dotted: Nations with recent temporary connectivity to or showing active interest in CFBLNet.
UNCLASSIFIED
• Purpose: To improve secure information sharing between FVEY nations by connecting national SECRET networks through national gateway proxy servers.
• Governed by the Combined Communication Electronics Board
• Attaining objective capabilities in three phases, maturity is specific to service and partner:
– Phase I Email improvements
• Use native email addresses (i.e., first.last.xxx@mail.smil.mil or first.last@defence.gov.au) • Any 5E nation can email any 5E nation (complete)
– Phase II
• Two way web browsing
• Secure voice – VoSIP is a technical solution
– Phase III
• Chat
• Selected C2/mission applications • IP VTC also discussed
– Improved service management
• Pegasus Service Operations Management • Coalition Network Operations Center
UNCLASSIFIED
Pegasus
AUS National Network (DSN) CAN National Network (CSNI) NZL National Network (SWAN) US-AUS COTS email (Jun 09)
Web (Aug 10)
TS 11 applications (Jan 11)
CAS, COP, several C2 apps
VoSIP (2012) US-UK COTS-GOTS email (2012) GBR Gateway (2014) Apps/services (TBD) US-NZL COTS email (TBD) Web (TBD) Apps/services (TBD) AUS Gateway CAN Gateway UK National Network (DII) UK Gateway US National Network (SIPRNet) C2/Other Apps VoSIP NORAD Enterprise Network (NEN) US National Gateway REL DMZ Griffin Concept Approved by Flag Panel DRSN DRSN Secure Voice Interfaces US-CAN
COTS email (Nov 10)
CAN Gateway (2014)
1-Way Browsing (2013)
2-Way Browsing (2014)
VoIP (late 2014)
UNCLASSIFIED
UISS - APAN
•
Web-based, non .mil collaboration platform• Developed to foster information and knowledge sharing between the United States DoD and non-DoD entities • Available to any user with an internet account
• Hosted at DECC-Montgomery, development at Pacific Warfighting Center • Services include: • Blogs • Wiki pages • Forums • Chat • Conferencing • Web-based email • Language translation • Others collaboration platform
UNCLASSIFIED
• The purpose of Common Mission Network Transport (CMNT) is to
provide coalition traffic a dedicated transport vice using the SIPRNet.
Common Mission Network Transport
CENTRIXS-CMFP (VPN) CENTRIXS-GCTF SIPRNET Core CMNT L3 VPN CENTRIXS-Japan CENTRIXS-GCTF CENTRIXS-CMFP CENTRIXS- Korea
Any other coalition network CENTRIXS- CMFC As-Is To-Be IPT-PE CTX-X CTX-Y CMNT-CE H H C MN T L3 VP N DISA Customer MPLS
UNCLASSIFIED
• CMNT is a candidate MPE transport • Working with USD(I) BICES-X office
• Collaborating with PACOM and the Joint Staff to refine operational use of CMNT • Teaming with the Joint Staff and DoD CIO to define methods by which foreign
partners will be connected to CMNT/MPE
CMNT Links to Mission Partner Environment
UNCLASSIFIED
Mission Partner Environment POCs
Mission Partner Environment POCs:
CENTRIXS: 301-225-5068 CFBLnet: 301-225-5015
Pegasus: 301-225-5040 APAN: 301-225-5054