Network Services

SENSITIVE BUT UNCLASSIFIED IP DATA

PRINT PAGE Add This

DESCRIPTION

SBU IP Data provides point-to-point connectivity to DISA mission partners. This unclassified IP data service for internet connectivity and information transfer supports Department of Defense (DoD) applications such as e-mail, web services, and file transfer. The SBU IP Data service also provides DoD customers with centralized and protected access to the public internet.  NIPRNet provides support to SBU IP Data telecommunication services for combat support applications to the DoD, Joint Chiefs of Staff (JCS), Military Departments (MILDEPS), Combatant Commands (COCOM), and senior leadership.  It provides seamless, interoperable, common user IP services to customers with access data rates ranging from 56 kilobits per second (Kbps) to 2.4 gigabits per second (Gbps) via direct connections to a NIPRNet router, and services to the Tactical community via Integrated Tactical-Strategic Data Network /Standard Tactical Entry Point (ITSDN/STEP) sites.  It also provides access to the internet through controlled Internet Access Points.

FEATURES

Quality of Service (QOS) - provides the ability to provide different priorities to different pre-marked packets (applications, users, or data flows) or to guarantee a certain level of performance to those packets across the DISN.  It does not provide on customer's traffic a higher priority than another customer's traffic.

Connectivity Features

  • Rate-Limited Access Bandwidth — IP data rate limited to the customer-requested access bandwidth up to the maximum supported by the interface.
  • Control and Routing Exchange — Static configuration or dynamic updates using the Border Gateway Protocol (BGP) that is supported for IP routing between the DISN Edge and Customer Edge (CE) routers.

Information Assurance Protection Features

  • Access Load-Sharing and Diversity — Supports multiple access links to improve service survivability. Options for ordering access circuits include load-sharing (active/active) and active primary with secondary backup (active/standby) for interface, node, or site diversity to meet site Command and Control (C2) survivability requirements.
  • External Network Gateways for Perimeter Protection — Provides protected, centralized interfaces to external networks. The internet access points, or gateways, screen DoD network assets from Internet threats and provide secure connectivity to the Intelligence Community (IC) and other federal government and allied networks operating at the unclassified level.
  • NIPRNet Federated Gateway (NFG) — Provides protected, centralized interfaces to external networks.  The gateways provide secure connectivity to the DoD, Intelligence Community (IC) and other Non DoD federal government and allied networks operating at the unclassified level.

Network Management Features

  • Network Time — Network time protocol distributes the time-of-day clock to CE routers for system time synchronization and event correlation.

 

Service Offering Sensitive but Unclassified IP Data (formerly known as NIPRNet)
Service Lifecycle Status Maintain & Sustain
Security Classification Up to and including Sensitive but Unclassified (SBU)
Value to Our Mission Partners

The NIPRNet Hardening program is a Defense-in-Depth Information Assurance (IA) and Computer Network Defense (CND) effort designed by DISA to satisfy some, but not all, of the requirements specified by CJCSM 6510.0.  The NIPRNet Hardening Program consists of several projects that together will improve the defensive posture of all unclassified DoD networks.  The Web Content Filter (WCF) program is one of the associated NIPRNet hardening programs.  WCF provides boundary protection at the application layer for web (HTTP/HTTPS) traffic and provides URL filtering for requests and malware filtering on responses.  WCF program efforts will assure mission execution in the face of cyber-attack by reducing the NIPRNet attack surface and improving information to attack diagnosis, detection, and response (A2DR) systems.  The WCF will provide uniform protections for clients against web vulnerabilities.  This unclassified IP data service for internet connectivity and information transfer supports DoD applications such as email, web services, and file transfer. The SBU IP Data service also provides DoD mission partners with centralized and protected access to the public internet. This service supports up to and including SBU security classification.

In addition, the NIPRNet Federated Gateway (NFG) architecture implements enterprise capabilities that support additional DoD-wide solutions that protect against dangerous protocols, secure DoD-wide Domain Name Service (DNS), and secure enterprise-wide support to the teleworking workforce.  This creates a clear boundary between DoD and others; enables improved sharing with key partners; and focuses cyber-attack detection, diagnosis, and reaction on the most important DoD missions.  This gives DoD some ability to maneuver at the boundary in response to cyber-attacks.

Service Performance

Service performance is measured, monitored, and reported as defined in the Telecommunications Service Level Agreement, which can be found on the Telecommunications Service Level Agreement page.

Service Rates Service rate information can be found on the DISA Direct Home page at https://www.disadirect.disa.mil under Inventory and Billing.
Connection Approval There are services that require a connection approval. Information regarding connection approvals can be found at the DISN Connection Process website for unclassified users, and at https://www.disa.smil.mil/connect website for classified users.