Commercial Solutions for Classified
Information Assurance Specialists, Inc. (IAS) is a market leader in the design, development, and implementation of Internet Protocol based networking appliances and systems that specifically target the National Security Agency’s (NSA) Commercial Solutions for Classified (CSfC) Program.
IAS has followed the NSA’s CSfC security design principles for the layering of commercial off-the-shelf security appliances to protect classified information while in transit. The IAS Small Tactical Executive WAN (STEW) communications solution and the IAS KG-175D Replacement Unit ( KG-RU) are the ONLY single device/dual VPN Gateway appliances that have received placement on the NSA CSfC Component List. Additional information regarding NSA’s CSfC Program and how US Government and Department of Defense users can register their CSfC solutions can be found here.
As requirement for participation in the NSA CSfC program, IAS has successfully obtained the National Institute of Standards in Technology Federal Information Processing Standard (FIPS) 140-2 Level 2 certification (certificate # 2672) and the National Information Assurance Partnership (NIAP) Common Criteria Network Device and VPN Gateway Extended Package Protection Profile certification. More information on these certifications, and IAS’s certificates and related documentation, can be found at the National Institute of Standards and Technology (NIST) site and the National Information Assurance Partnership (NIAP) site. Obtaining these security certification insures that IAS’s products are robust and secure, so much that they can be used for the protection of classified information up to and including the level of top secret.
The IAS STEW and KG-RU were placed on the NSA CSfC Component List in March 2015 and are currently in use by the US Government and Department of Defense. These first of their kind products make fielding CSfC simple and easy for IP networking applications, and eliminate the guesswork associated with architecting solutions and building cobbled together “kits” based off two different vendors’ solutions.
The IAS STEW is targeted at executive leadership communications, down range deployable communications, and quick reactionary/quick setup forward operating classified network extension use cases. The IAS STEW weighs less than 4 pounds and is smaller than a ream of paper, yet contains both outer (gray) and inner (red) VPN Gateways required in a CSfC VPN Gateway solution. This single small form factor device replaces what executive communicators would typically need a pelican case to transport AND eliminates the issues associated with using Type 1 CCI COMSEC outside of a secured location. The IAS STEW is a game changing product in the world of Government and Military deployable communications.
The IAS KG-RU has been designed from the ground up as a form, fit, functional replacement for the KG-175D HAIPE device. The KG-RU leverages CSfC security design principles and incorporates both outer (gray) and inner (red) VPN Gateways required in a CSfC VPN Gateway solution, but does so in a form factor that is plug and play in applications where the KG-175D is being used. The KG-RU is ideally suited for applications where a user wishes to remove a Type 1 KG-175D HAIPE device in favor of an unclassified CSfC solution. These may include uses cases where there may be a high risk of COMSEC loss/over run, cases where there is a need for secured communications with allies but hand receipting COMSEC is not possible, uses where there is a desire to remove the logistical burden of Type 1 CCI COMSEC. No changes to customers’ ancillary equipment is needed, as the KG-RU is simply a plug-and-play replacement to the KG-175D within a user’s network environment.
IAS Router Micro
The IAS Router MICRO has also been designed for use in CSfC applications (NSA CSfC Component List listed as of March 2015), and has been NIAP Common Criteria Network Device and VPN Protection Profile certified and NIST FIPS 140-2 Level 2 validated. The IAS Router MICRO is an enterprise class IP networking router and VPN gateway. It features the ability to leverage one or more Ethernet ports, one or more Wi-Fi radios in WWAN/client mode and/or Access Point mode, one or more USB or Mini PCIe 3G/4G cellular radios, and one or more serial interface based WAN access transport technologies as a way to access the internet for robust, reliable network connectivity and VPN tunneling. The IAS Router MICRO is unlike any other commercial small form factor router/VPN Gateway appliance based on its ability to consume just about any commercially available WAN technology, and use it as part of its robust fail over/failback network connectivity scheme. Despite its small size and low power consumption (consuming only 20 watts on average when the 802.3af POE port is not in use) the ISA Router MICRO offers switching, routing and VPN throughput surpassing that of other commercially available rack mount appliances.
IAS 5915ESR VMS
IAS has also developed two Cisco 5915 Embedded Service Router based IP networking appliance for use in CSfC applications. The IAS 5915ESR Virtual Machine Server and the IAS 5915ESR router devices are based on the tried and true Cisco 5915 Embedded Service Router that is widely in use by the DOD today. The Cisco 5915ESR is also listed on the NSA CSfC Component List. The IAS 5915ESR Virtual Machine Server pairs a Cisco 5915ESR with a small form factor embedded computer that is capable of hosting any number of virtual machine hypervisors and virtual machines based on customer preference. The IAS 5915ESR router is one of the smallest, lowest power, 5915ESR integration efforts for someone who may be looking to “add on” additional CSfC red networks behind a single CSfC gray networks. The 5915ESR router offers the user a single 802.3af POE port and a regulated 12VDC output to provide power to external peripheral electronic devices (such as HAIPE devices, Cradlepoint devices, etc.)
IAS is the only IP networking device manufacturer that has the design engineering experience, deep knowledge of NSA’s CSfC concept, knowledge of Type 1 COMSEC and information assurance, and agility to work with customers to build custom, one off, highly integrated CSfC solutions. The IAS KG-RU and IAS STEW are examples of how IAS has developed solutions to meet customer needs. Our intellectual property, our experience and our time to market for new products set us above typical baseband kit providers. Whereas others build “kits” around repackaging other companies commercial solutions, IAS builds appliances from the PCB and software up. It is this design approach that provides customers with the smallest form factor, highest performing, lowest recurring cost solutions available in the market today.