Multi-national, foreign partner, joint, inter-agency.  Today’s warfighters train and fight together in evolving coalitions and need the flexibility to communicate between multiple security levels and monitor multiple networks for exercises and real-world operations.

Integrated solutions utilizing the Forcepoint suite of flexible communication products can now provide our federal, military, and their multi-national partners with an NSA-approved complete solution to communicate in a broad range of security domains.  From public to coalition partner to top secret on a single client device with a single encrypted wired or wireless connection, all are made possible through the Forcepoint suite.

Traditionally a single secure network needs a WAN circuit to the building with an encryption device and COMSEC, router, switch, along with protected distribution fiber to a dedicated workstation for each user, along with GSA storage for removable hard drives and laptops.  This configuration is necessary for each needed additional top secret, secret or unclass individual participating as a foreign partner or coalition network. The cost, complexity, and security management overhead for a modern coalition exercise in a single building or a real world deployed location is enormous.

Add in multiple on-base, tactical or global locations, ships, vehicles, aircraft, and mobile users combined with cross domain, email, file, telemetry and streaming services requirements and the burden grows exponentially.

The new NSA Commercial Solutions for Classified (CSfC) standards now allows approved commercial encryption protocols to be “double wrapped” in validated commercial packages meeting NSA standards for top secret and below networks.  This also allows modern commercial off-the-shelf (COTS) solutions to deliver an end-to-end encrypted connection to a range of user devices. These can include mobile, wired, wireless and radio networks without cumbersome communication security (COMSEC) protection requirements.

Dedicated circuits, COMSEC, encryptors, multiple switches, protected distribution (including fiber), dedicated workstations (with their updates), multiple printers, removable hard drives, GSA storage, and other costly requirements for legacy solutions can be drastically reduced through the implementation of CSfC technologies. Importantly, after implementation, end user devices do not store or retain classified information.

Secure Thin Client Solutions

Implementing Forcepoint’s distribution consoles and client software products allows each desired network to be connected at existing global locations be meshed with other networks and delivered to each user locations along with other capabilities. Such capabilities include cloud and locally delivered storage and print services.  Operators can view and control multiple domains through secure windows opened on their existing workspace.  A single attached printer at each location can support all attached networks.

Adding a Forcepoint thin client solution allows a user to log in to their thin client terminal and access their allowed subset of up to 20 networks over a single connection. Users can later disconnect like a telephone leaving a clean device with no residual data to protect.  Another user could then leverage the same thin client to access their completely different set of allowed networks.  The system is designed to satisfy information assurance requirements, eliminate potential leaks  and provide users with a familiar desktop environment

The product’s distribution management console allows administrators to dynamically tear down or stand up new “mission” networks when needed without service interruption via rapid, real-time network configuration. Administrators can quickly push out updates from the low side to all networks via one-way “diode” cross domain devices.

Integrating Forcepoint solutions into ruggedized packages including PacStar, allows utilization in all environments including forward deployed locations. Users can expect to:

• Securely operate over almost any medium including commercial Internet,
• Be centrally managed from multiple points
• Rapidly reconfigure and scale to hundreds of locations and platforms
• Add additional networks on the fly allowing a high degree of flexibility and resiliency to meet complex evolving mission needs.

Cross Domain Solutions

The Forcepoint’s Suite of Products includes a full range of cross domain products including: bi-directional guards for unstructured and structured data, telemetry, video, and uni-directional data diodes. The suite can deliver high speed secure and approved transfers between domains for virtually any data type.

Presidio Federal Support

All Forcepoint products have been tested and approved however, it is the entire system that will need approval and authorization. Forcepoint uniquely has experienced security staff that provides customer advice and support at whatever level is required to move forward to rapidly “Get to ATO” for the system needed to meet the mission.

Presidio Federal has a long history of delivering complete systems, to federal and DoD customers and can offer all stages of ongoing lifecycle management to meet the customer’s needs. Our capabilities include the delivery of modern, scalable, and highly secure multi-domain networks at a huge savings utilizing the Forcepoint’s new CSfC approved solutions.