Appendix_A.pdf

Appendix A

052014v1

AMS TECHNICAL ENVIRONMENT

MAY 2015

In order to efficiently support the Agency’s mission, the AMS’ Information Technology Service (ITS) has standardized the technical environment of the Agency. The standards below are intended to ensure interoperability of systems and minimize life-cycle costs for AMS programs and stakeholders of AMS services.

AMS BACKBONE (INTERNAL NETWORK) TECHNICAL ENVIRONMENT

DESCRIPTION STANDARD

Wide Area Network All AMS sites are connected to USDA MPLS Network and are connected by at least a T-1.

All AMS sites can use gateways at DC or Denver for Internet connectivity.

The default gateway for sites are split between DC and Denver and use the other site as a backup as needed.

Home offices/remote Field Offices use VPN via High-Speed Broadband

(DSL and Cable) .

Routers/Switches AMS Head Ends (DC/Denver) – CISCO 3945

Field Offices – CISCO 2851, CISCO 2951, Juniper EX2200, EX1200, EX4300 and CISCO 3845

All Other Switches –CISCO 3650, CISCO 3750, CISCO 6509, CISCO

6513, CISCO 4507, Juniper SRX100H2, SRX220H2 and SRX240H2.

Network Protocols Network OS – Windows 2012 Server

TCP/IPv4 and IPv6 Dual Protocol stack for all servers and clients

BGP Protocol for all routers (IPv4)

Directory Services – Active Directory 2008

Firewalls with Network Address Translation (NAT)

Servers HP Proliant Series servers with full redundancy implemented in a VMWare

Virtual Environment. Standalone servers are used for critical Infrastructure functions as AD Domain Controllers. Critical business applications use

VMWare with Disaster Recovery to fail over between DC and Denver.

Desktop Clients Client OS –Windows 7

Application Software o Microsoft Office 2013 including Word, Excel, PowerPoint, and

Access o Lync 2013

Internet Explorer Version 11.x

Collaborative Intranet

Tools Microsoft Office SharePoint Server 2010 (Existing applications) & 2013

(New and upgraded applications) Windows SharePoint Services 4.0

Intranet Database

Service

SQL Server 2008 (Existing applications); SQL Server 2014 (New and upgraded applications)

Redundant Site Server rooms in DC and Denver serve as paired disaster recovery sites for critical AMS Business applications. These sites have synchronized data sets for applications that need fail-over capability.

Programming

Environment

The following represents the required programming environment for new system applications: Other current technology languages and tools are subject to approval by AMS with appropriate business justification.

Visual Basic.Net in Visual Studio 2012

ASP.NET 4.5, ASP.Net 4.0, or ASP.NET MVC 4.0

Dynamics Customer Relationship Management (CRM) 2011 (Existing applications); Dynamics Customer Relationship Management (CRM) 2015

(New and upgraded applications)

JBoss Enterprise Application Platform 6.2 and 6.4 – open source application server

SQL Server 2008 (Existing applications); SQL Server 2014 (New and upgraded applications)

Team Foundation Server 2013 (for version control, development)

Rational AppScan source edition for security version 8.0.0.2

AgilePoint BPM v6.0 SP4 (form generator and CRM connector)

Selenium (testing)

Oracle Database Enterprise Edition 11gR2 and 12cR2 (existing applications only)

Project management and development tools

Microsoft Visio 2010 (for modeling support)

Team Foundation Server 2013 (for agile process management)

Visio 2010/2013

Project 2013

Section 508

Compliant

The technical environment must be compliant with Section 508 standards as set forth via www.section508.gov.

Compliance Testing Tools

Total Validator Pro

WAVE WebAIM

Back-Up & Disaster

Recovery Tools

Symantec NetBackup Solution for servers

HP Business Copy for performing DR testing, exercises, and certain backup functions.

Electronic Forms Adobe LiveCycle solution for internal and external form solutions including workflow

Metastorm – for legacy internal and external form solutions including workflow.

AgilePoint BPM v6.0 SP4 (for electronc form generation)

Forms Management

Software Adobe LiveCycle Designer ES 8.2 for designing PDF forms

Adobe Acrobat 9 Pro Extended for modifying PDF forms

ETL (Extract, Transform and Load)

Tool

SyncSort DMExpress (DMX) is the enterprise ETL tool for migrating, transforming, and integrating data.

Mobile Devices Apple iPhone (SmartPhone) 5S, 6 or 6 Plus, 16GB standard

Apple iPad Mini or Air models, 16GB standard.

Upon request cell phones (non-smartphone) can be procured, selected http://www.asp.net/mvc/mvc4 http://www.section508.gov/ models must be on government contract.

4G Wireless Data Cards (Mi-Fi or HotSpot) from AT&T, Verizon or Sprint

For corporate email use on a mobile device, users are required to have a government issued smartphone or iPad. Management of all AMS issued government devices is managed through the Department’s Mobile

Management and Deployment system (MDM). Personal mobile devices commonly known as Bring Your Own Device (BYOD) are not allowed on the

AMS Network.

AMS INTERNET TECHNICAL ENVIRONMENT

DESCRIPTION STANDARD

Internet Network The AMS Internet domain is situated in the DMZ and houses our Internet facing servers. The AMS Internet website is externally hosted by NITC in

Kansas City, Mo, with links to AMS applications and search functions located on servers in the AMS DMZ. The AMS DMZ network is separated from the

AMS Backbone and the Department Internet environment by firewalls. The domain structure is Active Directory Windows 2008 Server.

Application Servers Windows 2012/ IIS 7 (Only ports 80, 443, and required ports for e-

Authentication are open on the application servers).

All servers are Windows 2012 virtual servers.

Collaborative

Extranet Tools Microsoft Office SharePoint Server 2007 (Existing applications); 2012

(New and upgraded applications)

Windows SharePoint Services 4.0

Bamboo Password Management Toolkit for Sharepoint 2007

FTP An FTP server and a secure FTP server are in the DMZ. Anonymous read-only FTP, SFTP, (FTP over SSH) are supported. Applications that need to transfer files to or from AMS shall use web services and a web servces gateway that are provided by AMS. Jobs will be created and scheduled to run directly on the FTP server if necessary.

Email An SMTP server is in the DMZ. Applications shall use .NET libraries to send

SMTP mail. Only outbound mail is permitted.

Internet Database

Service SQL Server 2008 (Existing applications); SQL Server 2012 (New and upgraded applications) including Standard and Enterprise

MySQL

Public Browser

Support

The following browser versions released in the last five years:

All recent Internet Explorer versions

All recent Chrome versions

All recent Firefox versions

All recent Safari versions

Webkit-based browsers on Android, iOS and Blackberry

All recent versions must provide as much functionality as possible, with the consideration that minor look and feel differences may occur compared to the latest browser versions.

Redundant Site Server rooms in DC and Denver serve as paired disaster recovery sites for

AMS Internet applications. These sites have synchronized data sets of all

Internet-facing applications.

Commercial Cloud Provider services for test and development and public-facing production use as available through enterprise contracts.

Application

Deployment

Internet applications have to be successfully deployed through the test and preproduction environments prior to production. See Directive 3130.3

“Development of Browser-Based Applications”, for a detailed overview.

Business Intelligence TIBCO Spotfire 6.5 and 7.0

Web components and Akamai analytics Google Analytics

AWSTATS

SmarterStats Enterprise Edition 9.0

Sisense Prism 4.5.1019 and 5.7.5.1105

Open Source

Software/Tools

Drupal (Web CMS) Zenoss Jenkins

JIRA