DoD Network InitiativesCEISC

13 Apr 2006

Mr. Walter ColeyMs. Kathy Cotton

AFWA/SCM

Distribution Authorized to U.S. Government Agencies and their Contractors only

2

Overview

Public Key Infrastructure (PKI)

FTP Replacement

Discussion

3

Joint Task Force (JTF) – Global Network Operations (GNO) Communications Tasking Order (CTO) 06-02

By 1 July 2006 PK Enable all non-public NIPRNet web servers

By 31 July 2006 Implement Smart Card Logon (SCL) to NIPRNet Identify all systems not PK enabled DoD contractors off-site must acquire certificates from an

approved DoD External Certificate Authority (ECA) New password and best practice guidance for “those

systems and user populations unable to achieve CAC/PKI logon”

Public Key InfrastructureDoD Mandates

4

FTP Replacement

FTP Ports (20, 21) will be blocked by DISA on 12/15/06

Applies to all FTP traffic between DoD and non-DoD enclaves

Several options being considered Establishing servers in the DoD DMZ

Migrate customers/data providers to Secure FTP

Must be FIPS 140-2 compliant, support scripting, and API

Commercial and Open Source alternatives being evaluated

Obtain waivers for non-DoD customers

Solution is being worked as a high priority

Discussion