* 1. Hand-held Device (HHD): WIN-T will provide selected users with a handset that will connect via terrestrial and satellite means to the WIN-T infrastructure (threshold); via airborne platforms (objective), to communicate within the theater of operations, to include in and around TOCs. It will have a secure (NSA-approved Type 1) capability that provides voice and limited text data communications (threshold) and voice, data, and video communications (objective). The HHD will provide position location information to the user (objective). The HHD must provide a global address and phone number that supports the user’s execution of his duties, either mounted in his TOC, or dismounted (objective).

Rationale: The network infrastructure must support the warfighter's requirement to move swiftly and freely, without sacrificing the ability to communicate as necessary on the battlefield in order to achieve dominant maneuver. Unrestrained movement, with the ability to exchange C2 information, requires that the infrastructure elements be designed to provide multimedia communications to support dismounted warfighter's moving untethered around the battlefield. Current and evolving technologies (military terrestrial, commercial and military satellite, and unmanned aerial vehicles) must be pursued to support mobile forces.

2. Maneuver TOCs: The network must provide maneuver brigade and their subordinate battalion TOCs (including supporting battalions such as combat engineer, field artillery, cavalry squadron) with the capability to exchange voice and limited data while on the move (limited to the throughput of the wide-band digital radio) (threshold), voice, data, and video (objective).

Rationale: All maneuver TOCs (e.g., DTAC, Mvr Bde, Mvr Bn, supporting Bns) require the capability to communicate via voice, data, and video while maneuvering on the battlefield. The mobility of the TOC must not be restricted by the communications infrastructure.

3. Aviation Platforms: The network must provide aviation platforms (rotary wing) with the capability to exchange voice and limited text data (limited to the throughput of the hand-held device) between pilots, commanders, and staff while on the move (threshold); voice, data, and video (objective). This will be provided by the WIN-T hand-held device, which will connect to the network via a console in the platform provided by the aviation program.

4. The WIN-T system will support multi-level precedence and preemption for voice calls within the network and provide seamless multi-level precedence and preemption interoperability to the Defense Switched Network (DSN) for voice calls to and from users on the DSN (threshold).

(g) Security: WIN-T will provide an MSL capability. The network must support TS/SCI, Secret, and SBU information in accordance with the requisite security policy requirements. WIN-T will provide the IA infrastructure to implement DoD Defense in Depth concepts. Mechanisms must be available to control, filter, and protect both incoming and outgoing connections to the network (i.e., boundary protection, network perimeter and internal intrusion detection systems, encryption to prevent interception of data) (threshold).

Rationale: Army XXI units will not survive as a networked force without access to the network at their appropriate security level. Army XXI information systems require protection (e.g., firewalls, guards, intrusion detection systems, and malicious code detection) against computer and information network attacks.

(h) System Design: The WIN-T system design will enable ease of installation, operation, maintenance, training, and management. Its elements will include graphic and multimedia user interfaces, built-in-test equipment, automated fault diagnosis, automation of repetitive and well-defined tasks, management information bases, and training aids that facilitate plug, point, and play installation, support pull/push and replace diagnosis, and maintenance operations. WIN-T workstations and system assemblages must provide efficient and effective interfaces with operators and maintainers, particularly as related to system design, configuration, and required operating procedures. WIN-T’s modular design can be scaled to users’ requirements, and adapted as necessary by mission evolution, expansion, or contraction (threshold).

Rationale: WIN-T’s design will minimize training requirements, ensure simple execution of complex service support to the warfighter, limit network maintenance downtime, enable the warfighter to adapt to battlespace conditions, and rapidly incorporate state-of-the-art technologies into WIN-T’s infrastructure in order to gain the operational advantage. The requirement stated here is for the overall system to be designed with human factors engineering in mind. The sentences which follow the first one in this paragraph describe the specific design factors which should be built into the system to ensure the "ease of installation, operation, maintenance, training, and management." These include "graphic and multimedia user interfaces, built-in test equipment, automated fault diagnosis, automation of repetitive and well-defined tasks, management information bases, and training aids that facilitate plug, point, and play installation, support pull/push and replace diagnosis, and maintenance operations."

(i) Services: WIN-T services are grouped into the categories of voice, video, and data.

1. WIN-T provides the capability to conduct secure and non-secure VTC and white-boarding sessions. WIN-T supports JTA-compliant VTC systems and provides gateways between systems (H.320 to/from H.323) (threshold).

2. Deployed DMS services will interface with the WIN-T infrastructure (threshold). DMS services will be integrated into the WIN-T infrastructure (objective).

3. As the warfighter moves around the WIN-T battlespace, he must be able to exchange information while maintaining his global host name/telephone number. The network must provide the capability for the warfighter to automatically connect to the network, as he/she moves, without having to reconfigure his/her device (threshold).

Rationale: The warfighter requires the appropriate freedom of maneuver within the battlespace to effectively execute the mission. He must be able to take the tactical initiative without the interruption of network services.

4. WIN-T’s design will incorporate state-of-the-art subscriber services, as they become available. Minimum threshold features are described below:

a. Call forwarding.

b. Non-secure voice conferencing (progressive or pre-programmed) with up to 20 simultaneous persons. Secure voice conferencing (progressive or pre-programmed) with up to three simultaneous persons (threshold)/20 simultaneous persons (objective).

c. Call transfer (non-secure).

d. Call waiting.

e. Speed dial.

f. Direct access service.

g. Line hunt groups.

h. Voice mail (non-secure only).

i. Redial.

Rationale: The above capabilities are common features of today’s commercial and military voice telephone systems and must be incorporated into the WIN-T design to support the warfighter’s communications requirements, including collaborative planning. These are standard subscriber services. Speed dial is required to minimize the time a subscriber has to spend dialing or redialing. "Line hunt groups" are lists of numbers for key subscribers which can be dialed in sequential order when the first dialed (then the next and next . . .) is not available. The requirement for a division level conference call is 20. A 20-person conference call supports a conference call between the division commander, his staff, and brigade commanders.

5. WIN-T requires use of a Tactical Standard Global Database (joint, Army, Navy, Air Force, Marine Corps) that applies a standard naming convention for all voice, data, and video subscribers (threshold).

Rationale: Use of the Tactical Standard Global Database will facilitate interoperability among users throughout the battlespace.

(2) Infrastructure. WIN-T’s infrastructure includes switching, routing, and transmission configurations at CPs/TOCs, WAN Nodes, Subscriber Nodes, Remote Access Subscriber Interface, and information transport systems that augment, enhance, and extend network connectivity.

(a) WAN Node:

1. WAN Nodes will be shelterized assemblages, which include switching/ routing/transmission, network management, and IA capabilities. WAN Nodes will be tandem capable and terminate multiple transmission systems. WAN Nodes will establish the wide area backbone infrastructure and support subscribers at all echelons. WAN Nodes will be capable of remote operation. WAN Nodes must interface with the supported unit’s capability for C2OTM (threshold). The WAN Node is to have the switch/router and high speed LOS radios integrated into a single shelter and employ wireless LAN technology (objective).

2. Utilizes transmission systems that provide high speed, high capacity connectivity to the other nodes within the network (threshold).

3. Supports the use of specified WIN-T user interfaces (threshold).

4. WAN Nodes will include embedded IA solutions that support an MSL network (threshold).

5. Initial setup time (to include at least one link to an adjacent WAN or Subscriber Node) shall not exceed 30 minutes with a maximum crew size of three (threshold). 20 minutes (objective).

6. Set-up/tear-down times may be 50 percent longer at extreme temperatures and/or within a Nuclear Biological Chemical (NBC) environment (threshold).

7. The WAN Node will include wide-band digital radio systems (threshold) JTRS (objective) that connect warfighter LANs to the WAN and support C2OTM operations.

Rationale: The shelterized WAN Node assemblage establishes WIN-T’s high-speed infrastructure and extends WIN-T’s WAN to the warfighter’s LAN. The numbers, locations, and ranges of Subscriber Nodes that support CPs/TOCs are not sufficient to connect all CPs/TOCs across the extensive area of operation. The WAN Node assemblages will provide this connectivity. The WAN Node must be capable of rapid set-up/tear-down in order to keep pace with the rapid movement of the warfighter. The required set-up/tear-down time for the legacy system (MSE) assemblages is 45 minutes with a crew size of three. Legacy systems were not capable of "keeping up" with the warfighter during Desert Storm, according to published Lessons Learned. WIN-T assemblages must be capable of more rapid set-up/tear-down.

(b) Subscriber Node: Subscriber Nodes will come in two versions, shelterized [installed, operated, and maintained (IOM), by the Signal Battalion] and integrated (IOM by the user). Each version will include switching, routing, transmission, and IA capabilities. Subscriber Nodes will extend the WAN to the warfighter’s CP/TOC LAN and be capable of remote operation. The Subscriber Node will include wide-band digital radio systems (threshold) that connect warfighter LANs to the WAN and support C2OTM operations. Wireless LANs will be used to facilitate CP/TOC setup (Objective).

1. Maneuver brigade and higher CPs/TOCs, will be supported by Shelterized Subscriber Nodes. Shelterized Subscriber Nodes will be tandem capable and terminate multiple transmission systems. The Shelterized Subscriber Node will have the switch/router and high speed LOS radios integrated into a single shelter (threshold).

a. .Shelterized Subscriber Nodes support the use of specified WIN-T user interfaces.

b. Shelterized Subscriber Nodes will include embedded IA solutions that support an MSL network (threshold).

c. Initial set-up time (to include at least one link to an adjacent WAN or Subscriber Node) shall not exceed 30 minutes with a maximum crew size of three.

d. Set-up/tear-down times may be 50 percent longer at extreme temperatures and/or within an NBC environment (threshold).

Rationale: The shelterized Subscriber Node assemblage establishes WIN-T’s high speed infrastructure and extends WIN-T’s WAN to the warfighter’s LAN. The Subscriber Node must be capable of rapid set-up/tear-down in order to keep pace with the rapid movement of the warfighter.

2 The Integrated Subscriber Node will be provided to division maneuver brigades and selected battalions in order to provide TOCs that are on-the-move with voice and limited data capability (threshold). The Integrated Subscriber Node in mobile TOC platforms will provide C2OTM capabilities (video and increased throughput) and will replace Subscriber Nodes at division and below (objective). WIN-T provides users with secure and non-secure wireless multimedia switching/routing services that are supported by the user’s organic transmission system (objective). See subparagraph 4a(1)(f)2.

a. Integrated Subscriber Nodes (maneuver brigade/battalion and separate/supporting battalion TOCs) will require wireless voice and data capabilities integrated into each platform to facilitate quick-halt operations. In a "quick-halt," the warfighter comes to a complete stop to communicate. However, establishment of communications is immediate and does not require set-up of an assemblage and antenna mast (threshold).

b. The switch/router will interface with intercom capabilities to facilitate TOC operation (objective).

Rationale: Warfighters require freedom of maneuver in order to seize the operational initiative. Integrated network capabilities that require only organic soldiers to IOM and that adapt to the battle’s evolving requirements will facilitate the warfighter’s ability to execute his intent. Organic network capabilities further minimize the warfighter’s requirement to task organize for signal support, reduce the user’s air and sea-lift requirements, and lessen the need for signal unit augmentation during the warfight. The objective requirement described herein is for node capabilities to be integrated into warfighter platforms to allow them total freedom of maneuver. As described previously, this cannot be accomplished until certain technologies (such as new antenna technologies, protocols, and inclusion of a wide-band digital waveform into the JTRS) are available. This rationale justifies the need for those node capabilities to be integrated into warfighter platforms.

(c) Remote Access Subscriber Interface: The RASI will augment the WAN Node and the Subscriber Node and provide scalability and the capability to provide service to remote subscribers. The RASI will be a man-portable integrated concentrator capable of terminating voice, data, and video subscribers to provide multimedia capability to locations not supported by a WAN Node or Subscriber Node.

1. The RASI will provide multiple loop subscriber connections. "Multiple loop subscriber connections" indicates that the RASI will provide a means for multiple single subscribers to connect to the network (e.g., interface box/boxes) (threshold).

2. The RASI will support at least one secure and one non-secure LAN. (threshold).

3. The RASI will interface with the AN/TRC-170 TROPO, AN/TSC-85B and AN/TSC-93B satellite terminals, Secure Mobile Anti-jam Tactical Terminal (SMART-T), Super High Frequency Tri-band Advanced Range Extension Terminal (STAR-T), and WIN-T terrestrial transmission systems (threshold).

Rationale: Warfighters require freedom of maneuver in order to seize the operational initiative. Integrated network capabilities that require only organic soldiers to IOM and that adapt to the battle’s evolving requirements will facilitate the warfighter’s ability to execute his intent. Organic network capabilities further minimize the warfighter’s requirement to task organize for signal support, reduce the user’s air and sea-lift requirements, and lessen the need for signal unit augmentation during the warfight.

(d) General characteristics of WIN-T’s information transport systems: WIN-T transport systems must interface with WIN-T’s switches and routers. Information transport systems will comply with DoD, national and international spectrum management policies and regulations. WIN-T LOS transmission systems will have secure and non-secure orderwire capability for engineering and troubleshooting between local and remote systems (threshold).

1. WIN-T will have the capability to remote multiple LOS radio systems up to eight km from the node (threshold).

Rationale: Warfighters require the capability to establish operations in locations that are not conducive to signal operations. The capability to remote will allow warfighters to retain their operational flexibility and protect the force from the enemy’s electronic detection capabilities. Eight km is an EAC requirement.

2. Antenna subsystem: WIN-T will deliver functional, easy to install, simple to operate, smart antenna systems that support the WIN-T transmission systems.

a. The LOS antenna mast subsystem must ensure that trees, (45-90 foot trees) do not obstruct radio signals. Each mast must be deployable/recoverable in winds up to 25 miles per hour (mph) and in any direction, provide the system specified pointing accuracy in winds up to 60 mph and in any direction, and must survive winds up to 80 mph in any direction, have no permanent deformation and meet the specified performance when redeployed. (All wind velocities are referenced to ten feet above ground). Each mast must be easy to erect and be easy to use or operate by the soldier with minimal training (threshold).

b. The LOS antenna and mast system(s) must have the capability to be remotely configured for optimal performance (operator must have capability to align antenna from remote location (e.g., inside shelter)) (threshold). The LOS system will be able to automatically report azimuth and elevation to the soldier, be self-aligning, and software programmable (objective).

c. The LOS antenna and mast configurations must minimize visual and thermal identification and radio frequency side and back lobe radiation (threshold).

Rationale: The WIN-T LOS antenna system(s) must connect the infrastructure in order to ensure continuous, uninterrupted exchange of critical information. Antennas that are self-aligning, self-erecting, and difficult to detect facilitate the ability of the warfighter to execute his mission. Antenna masts must withstand winds up to 80 mph in known training and deployment locations [e.g., NTC, Saudi Arabia (based on Lessons Learned)]. The soldier will be hold a signal Military Occupational Skill (MOS).

3. WIN-T must interface with the AN/TRC-170 (V) TROPO, AN/TSC-85B and AN/TSC-93B satellite terminals, SMART-T, and STAR-T (threshold).

Rationale: Legacy information transport systems will continue to be used to provide connectivity for and range extension in support of non-linear and distributed operations as required by Army XXI units.

(e) Transmission Relays/Terminals: WIN-T requires shelterized, high capacity, wide-band LOS radio systems with capability to operate as either transmission relays or terminals (connect to WAN Nodes/Subscriber Nodes) (threshold). The JTRS (wide-band) digital radio capability is to be used when fielded (objective).

Rationale: Transmission terminals will be dual purposed as relays, and will extend WAN connectivity to CPs/TOCs or connect WAN Nodes and Subscriber Nodes as necessary.

(f) The WIN-T will use communications relay packages on airborne platforms for range extension and node-to-node connectivity (transmission system relays) (objective). WIN-T will use airborne communications nodes on various platforms to support network expansion options (objective).

Rationale: Transmission relays in manned airborne platforms or on Unmanned Aerial Vehicles are required to provide range extension to CPs/TOCs or connect WAN Nodes and Subscriber Nodes as necessary.

(g) User Interfaces/Devices:

1. Wireless HHD is described in paragraph 4a(1)(f)1

2. WIN-T will provide both secure and non-secure wireline voice telephones (threshold).

Rationale: WIN-T’s user devices must allow the timely sharing of critical command, control, and intelligence information so that warfighters can make knowledge-based decisions and disseminate those decisions in time to make an operational difference.

(3) WIN-T Network Management System (WIN-T NMS). Network management is vital to the awareness of the performance, reliability, security, and structure of the network. WIN-T NMS will use commercial-standard network and systems management protocols and interfaces to manage the entire network, which consists of multiple levels of security.. WIN-T NMS will provide the network management capability for the deployed WIN to include the management of all deployed C4 systems. WIN-T NMS must leverage all present network management capabilities and modules, with a goal of having all network management capabilities on a single DII COE compliant platform. The WIN-T NMS will interface with the Joint Network Management System (JNMS) and all ISYSCON versions to include the V4 and eventually subsume the ISYSCON V4 functionality for the wide-band digital radio and future wide-band waveforms: Tactical Internet (TI) [Enhanced Position Location Reporting System (EPLRS) and Single Channel Ground/Air Radio System (SINCGARS)]; EPLRS non-TI network; and the TOC/CP LAN, at all command echelons. Combat Net Radio (CNR) [non-TI SINCGARS, Improved High Frequency Radio (IHFR), and Single Channel Tactical Satellite] NM capabilities will remain a stand-alone capability until integrated into the WIN-T NMS. The WIN-T NMS will subsume all ISYSCON satellite network management requirements, less the MILSTAR Communications Planning Tool-Interim. WIN-T hardware will be used to host JNMS and WIN-T NMS software capabilities.

(a) WIN-T NMS must allow multiple network managers controlled (i.e., password/ privilege-protected), simultaneous access to the management data base (including a remote capability) in order to perform all aspects of communications system-high level planning; detailed planning, engineering, activation and modification; monitoring, control, and reconfiguration; spectrum planning and management; IA and security management (threshold).

Rationale: Network managers at levels within the WIN must be able to monitor, configure, control and protect their respective portions of the network and observe changes in overall network status. The use of passwords/privilege profiles will prohibit access to the management database by unauthorized users. The ability to assign data access privileges will additionally enhance the survivability of the networks and ensure that control is maintained during required CP movement.

(b) The WIN-T NMS must be able to distribute and selectively replicate, in part or in total, critical information needed to configure/manage the network amongst other WIN-T NMS facilities (threshold).

Rationale: Decisions to change a communications network supporting a mission must be made depending on the dynamics of the battlefield. Vertical and horizontal distribution of critical information (e.g., the CTP) ensures information integrity is maintained and that the management database can be reconstructed in case of a catastrophic failure.

(c) The WIN-T NMS must interoperate with the Army Key Management System (AKMS) Automated Communications Engineering Software (threshold).

Rationale: Network managers must have the ability to interface with AKMS to facilitate the generation and distribution of Signal Operating Instructions (SOI) and frequency resources required to support CNR nets.

(d) WIN-T NMS must provide an automated capability for the development and distribution of Signal Operations Order (OPORD)/Operations Plan (OPLAN) annexes. The automation tools used for network management text and graphics will be consistent with requirements in the ABCS CRD (threshold).

Rationale: The network manager requires automation tools to support the creation and distribution of OPORD and OPLAN annexes over tactical communications systems. The automated capability for the development and distribution of Signal OPORD/OPLAN annexes will provide automatic generation of all signal related annexes (e.g., SOI, Communications Plan). This reduces planning time and increases the commander's ability to react to changes in mission.

(e) WIN-T NMS must be able to receive, store, retrieve, transmit, and print classified and unclassified information between WIN-T NMS workstations at the same classification level (threshold).

Rationale: The data required to manage the two networks, the SBU and Secret, must be received, retrieved and stored separately. This is dictated by regulatory requirements for the handling of classified information. The aggregate listing of units, their associated equipment and locations becomes classified . Additionally, OPLANS and OPORDs are normally classified at least Secret. This information is required by network managers to plan and engineer supporting networks.

(f) The WIN-T NMS must be able to provide statistical and graphical analytical tools to support configuration management (network planning engineering, battlefield spectrum management, WAN, security management). The configuration management tools must be able to plan, engineer, configure, and control the WAN and LAN:

1. WAN Architecture:

a. WIN-T NMS must have the ability to display the map background for network planning and engineering, and have the option to graphically display the network without a map background for WAN management (threshold).

Rationale: Graphical common network picture enables network managers to plan, engineer, and monitor the WAN network. This capability enhances the network manager’s ability to rapidly reconfigure the network within the context of the evolving warfight. The map refers to a topographical map on which the physical layout of the communications network can be displayed. This allows the commander to physically see where communications resources are located on the battlefield for a various number of reasons (e.g., support plans, force protection plans, etc.). This is opposed to a network display without map background, which is easier to monitor and brief. Automatic configuration management allows for the remote gathering of information about the current network status, the use of this information to modify the configuration of the network as necessary, and to store and maintain the status of the network management devices and to reconfigure these devices as necessary. These tasks are virtually impossible to perform manually in a timely manner because of the disparity of these devices throughout the network and with the various different network management systems and operating systems in existence. Without these automated configuration tools, the process would be extremely manpower intensive.

b. WIN-T NMS must be interoperable with and provide the network status to the Joint Network Management System (threshold).

Rationale: The common picture permits joint and Army network managers to support current operations, while planning subsequent network configurations that facilitate the warfighter’s adaptation to the evolving mission. Without this capability, the warfighter runs the risk of outpacing the network infrastructure, potentially jeopardizing mission accomplishment.

c. WIN-T NMS must provide network managers with modeling and simulation capability for planning and training of WIN-T and other tactical communications systems used by the network (threshold).

d. WIN-T NMS must interface with the DMS to remotely perform systems management service functions and configuration of DMS components (threshold). Integrate DMS management services into WIN-T management capabilities (objective).

Rationale: DMS will provide official message services to organizational and individual users. DMS will initially be fielded with a separate management system. Without interface between DMS and the WIN-T NMS, network managers would have to physically check with the operator of DMS to get status information. This interface would provide automated system updates and identify potential problems with any of the DMS components. Additionally, it would allow the remote configuration of system components if DMS fails or is rendered incapable of performing that function.

e. WIN-T NMS must assign and de-conflict frequency assignments for current and future network architectures while monitoring current operations (threshold).

Rationale: Efficient and proper utilization of already scarce spectrum resources is an imperative. The system will be used to analyze authorized frequencies, de-conflict their usage with other systems and against the Joint Restricted Frequency List, and then make assignments against system requirements.

f. WIN-T NMS must plan, configure, and monitor wired and wireless communications services (threshold).

Rationale: The dynamics of the battlefield dictate the employment of highly mobile wireless communications. Effective use of limited spectrum resources requires that planners be able to plan, configure and monitor wired and wireless services required for each individual user. When the services are provided by commercial sources, the system will be used to monitor and provide usage data on individual user services.

g. Assign, monitor, and manage policies to establish user access to network services by utilizing classmarks and specific user profiles (threshold).

h. WIN-T NMS must have an automated capability to plan, assign and control all Internet Protocol (IP) addresses. This capability must be transparent to the user and allow warfighters to move and automatically reconnect at any location within the network (threshold).

Rationale. The network manager must be able to configure and control all network and host IP addressing and observe changes in network status. The system must assign an IP address to all data network routers/servers and every host user. The network data equipment and the host users require IP addresses in order to access the data network and use network services. Without the ability to plan, monitor, assign and control IP addresses, WIN-T will not be able to deliver data of any kind to the warfighter

i. WIN-T NMS must monitor and manage name to network address translation service (threshold).

Rationale. This capability will allow the network manager to keep up with all of the host users and reconfigure, initiate control measures, or take other actions required to manage and sustain operations. This allows the user to type in a user’s name or position (e.g., S-3, 3/69 AR, S-4, 1/9 FA) in the "to address" block when sending a message; and the system sends the message to the appropriate IP address of that user. This alleviates the requirement for the user to know the individual IP address of the users to whom he sends mail. This also includes the requirement for the network to find the user even when he/she moves or his/her IP address changes (periodically update name/IP address tables).

j. WIN-T NMS must plan, configure, monitor, and manage interfaces to external networks (threshold).

Rationale. Networks are connected to each other through interfaces or gateways. The network manager must be able to plan, configure, monitor and manage all aspects of the network including these network interfaces. This capability must look at the network and identify all devices connected to the network and any external connections to the network (e.g., identification of a modem). An unauthorized modem connection to a commercial line could allow uncontrolled, unfiltered (through a firewall), and unmonitored (through an intrusion detection system) access to the network.

k. WIN-T NMS must provide a network-mapping tool to identify all network and user external connections (back doors) (threshold).

2. LAN Architecture: Network managers must be able to plan, configure, manage, and control the following:

a. Network services residing on network servers (threshold).

b. Routers and switch port configurations within the LAN (threshold).

c. LAN to WAN interfaces (threshold).

d. Develop access lists to information services (threshold).

e. Network services within the CP/TOC (threshold).

Rationale: The Signal Corps is now responsible for LAN management. Network managers plan network services (e.g., e-mail service, printer services, shared hardware devices, etc) for all users. To establish these services, network managers must have the ability to configure routers and switch port configurations within the LAN without having to physically touch each box. LAN interfaces to the WAN enable users to access other network services external to their LAN. Network planners plan these interfaces to ensure user requirements are met.

(g) Must be able to provide statistical, graphical, and analytical tools to support performance management. The performance management capability must be able to monitor the voice and data network performance of the system and store for future trend analysis and historical reporting (threshold).

Rationale: The network manager must be able to monitor all aspects of the network and observe changes in network status. The capability to obtain performance information (e.g., throughput and speed of service data) allows communications planners to make proactive and reactive adjustments or changes in the communications infrastructure to support users and their associated requirements.

(h) Must be able to provide statistical, graphical, and analytical tools to support accounting management. The accounting management tools must be able to determine network and user utilization for the network and store information for future trend analysis and historical reporting (threshold).

Rationale: This capability enables the manager to measure and report accounting information based on individual and group users. This data can then be used to allocate resources and compute the tactical cost (in terms of bandwidth, dollars, etc.), by user, of transmitting data across the network. This capability will allow the node manager to be proactive upon future system requirements instead of reactive. This information should be available for analysis at a later time (storage or archiving). Accounting management allows the network manager to monitor the individual user’s usage level on the network. This allows for forecasting the need for additional network resources for certain high volume users. Also, accounting metrics can be used to allocate usage to certain users based on need or to deny certain lower priority users access to network services. Accounting services can also be used for tracking user’s usage for billing purposes.

(i) Must provide statistical and analytical tools to support security and IA management. Security management tools must be able to monitor and manage the protection of the network:

1. Graphically display IA systems/components within the network (threshold).

2. Plan, configure, manage and monitor IA systems (e.g., firewalls, firewall feature sets, access control lists, in-line network encryptors, and intrusion detection systems). WIN-T NMS will also alert network managers of computer network attacks and have the ability to plan and implement appropriate responses (threshold).

3. WIN-T NMS will support the installation of security software upgrades and the testing and verification of system configuration management (threshold).

4. AKMS is a component of security management. WIN-T NMS will interface with AKMS security features (threshold); integrate AKMS security features (objective).

Rationale: Security of the network is performed in accordance with DoD’s Defense in Depth concepts. Network managers must be able to view the actual status of network intrusion and detection devices protecting the initial networks established with primary focus on the IP networks. Changes in the status of these devices must be displayed as they occur (near real-time). This capability provides the network managers with an accurate vulnerabilities assessment of these networks. The goal of this capability is to provide network managers with an accurate vulnerabilities assessment of all networks comprising the joint backbone by monitoring and displaying the status of all IA devices on those networks. These capabilities will ensure an uninterrupted flow of information and establishes one of the key enablers for information superiority – network security.

(j) Must provide statistical and graphical analytical tools to support fault management configuration. Tools must provide the network manager with a correlated, near real-time fault notification and event filtering with audible alarm and video display (threshold).

Rationale: The system will automatically monitor and maintain the status of the network’s manageable devices. It will allow a network manager to become aware of network problems as they occur based on trouble tickets generated automatically by the affected device or network. Once the trouble ticket is received, the network manager must be able to respond then or let the system automatically forward it to the next echelon in near real-time. The trouble ticketing system will allow the network manager to track all related actions to a particular event until it is resolved. All data will be archived for later playback and analysis. The system will be capable of interfacing with the trouble-ticketing system at the next higher echelon. This capability alleviates the need for the network manager to dedicate personnel to constantly monitor the network, report outages, and track corrective actions. The system will correlate alarms to eliminate those that are duplicated or false, initiate tests, and perform diagnostics to isolate faults to a replaceable component. This automated proactive capability will respond to pre-determined near-fault conditions that degrade system reliability and may eventually result in an impact on the network or its services. The system will use artificial intelligence or knowledge-based technologies to correct faults or recommend corrective actions based on rule sets, past conditions, or trends indicated by historical data to implement fixes.

(k) The system design must provide for an uncomplicated and intuitive operator interface (threshold).

Rationale: For WIN-T NMS, the human-computer interface (HCI) is particularly critical. The software interface should walk the operator through a process ensuring a "user friendly" interface with respect to human performance constraints. The HCI must minimize complexity and workload requirements, decrease the probability of errors and time delays, and reduce training time/costs.

(4) Security System. The network security services will provide the IA tools to protect, detect, and react to adversarial actions to our information systems, allowing the uninterrupted flow of information which establishes the warfighter’s key enabler of information superiority. The network will provide: