Att 8_GEX Brochures 12-01-2008.doc

DISA/CSD is now offering the GEX (Global Exchange) Services to its customer-base.

GEX is an existing BTA (Business Transformation Agency) application that provides data mediation and messaging services to a large number of government and commercial customers to support the Department of Defense. The GEX services validates, archives, secures, translates, routes, and delivers mass volumes of transactions with guaranteed delivery and end-to-end accountability.

Benefits of DMZ GEX

· Flexible Messaging Service – offering and supporting multiple communication protocols, including SFTP, HTTPS, and Websphere MQ.

· Comprehensive Mediation Services – supports a wide range of data transformations, including EDI, HTML, TXT, XML, and UDF.

· Secured and Controlled Access Environment – encrypts and decrypts messages while providing access control to systems utilizing public-key and certificate-based encryption and authentication.

· Reliability – implemented within the DoD DMZ which provides load balancing, redundancy and high availability services to its users.

DMZ GEX supported traffic flows, protocols and systems

Typical uses of the GEX system Typical users of GEX would include those users with requirements of transferring and sending files in a secured manner using a batch-oriented process from a server-type system to another server-type system. Examples would be those users who need to transfer files to another system for invoicing, payroll, accounting, travel authorizations, shipping, logistics, healthcare record processing, procurement & acquisition processing, and for users needing to communicate with trading partners and other DoD agencies.

FREQUENTLY ASKED QUESTIONS:

1. Is GEX an official CSD product/service offering?

Yes, DMZ GEX is now included as a service offering within CSD’s Catalog of Services.

2. Is there a difference between GEX and DMZ GEX?

Originally, GEX was implemented at the DECC. Now, because of an increased awareness of security, the GEX server is now physically located in the DMZ, hence DMZ GEX. So, we may use GEX and DMZ GEX interchangeably.

3. When will GEX be available?

DMZ GEX is available now!

4. Does GEX support FTP?

The DMZ GEX service does not support native FTP on the customer-facing side (front-side of the DoD DMZ) from an external user. However, GEX does support FTP within the NIPRnet through a VPN tunnel. Within the NIPR (COIN network) it transfers files using FTP through a VPN tunnel.

5. If I have a customer who currently transmits files using FTP, what do I tell them they need to do in order to utilize the DMZ GEX system?

First, you should encourage the customer to migrate to SFTP (from FTP). Strategically speaking, using SFTP is best practice. If the customer does not want to migrate to SFTP, you will need to use a B2B setup (FTP through VPN) coming into the DMZ or into the Collo; depending if the user is from a .com or .mil address. Another alternative is for the customer to use the Tectia (client/server) software to establish an SSH tunnel for transmitting FTP data.

6. What protocols and services does GEX support?

The GEX system supports SFTP, HTTPS and MQ on the customer-facing side of the DMZ. It supports FTP, SFTP, HTTPS, MQ and SMTP (outbound only) within the COIN network.

7. Why doesn’t GEX support FTP and HTTP?

GEX does not support FTP and HTTP because they are unsecured TCP applications.

8. Does GEX support Email (SMTP)?

GEX only supports email or SMTP outbound, from the DMZ GEX server outward.

9. Does GEX provide real-time data processing?

The DMZ GEX server does not support or provide real-time data processing services. It is not a true proxy service. GEX is a store and forward process. It drops files off in one location and another process forwards the files to another system.

10. Does GEX support batch-oriented processing?

Yes, GEX is designed to handle batch processing.

11. Can users store files on the GEX server permanently?

Because GEX uses a store and forward process, files are sometimes left on the GEX server and are not deleted when they are forwarded to its destination system. You can arrange to have files left on the server for a very limited amount of time, or you could choose to have the files deleted immediately upon processing.

12. How can I move or process mainframe files to GEX?

Most mainframe users utilize the IBM Websphere MQ series to transmit mainframe files. If your mainframe system supports an SFTP or SSH client, the GEX server can also pull files from your system.

13. Does GEX perform any packet inspection or encryption?

Yes, the DMZ GEX server uses the HP-UX HIDS (host intrusion detection system) to inspect TCP packets. It also supports a wide range of encryption modules.

14. How long does it typically take to establish a GEX connection?

After a completed DMZ GEX Customer Checklist is submitted to CSD/CD4 along with a DD Form 2875 (if required), it will typically take two to three weeks (10 to 15 business days) to get a GEX communication channel established within the DoD DMZ. Times may vary depending on requirements.

15. How much does GEX costs?

Right now, there is no charge for DISA/CSD customers to use the GEX system as long as the customer is utilizing existing mediation and messaging services.

16. How do I get more information about GEX?

To get more information about GEX please contact the DISA/CSD office.

POC: Darryl House

Project Manager

(703) 681-2546.

DISA/CSD, Communications Management Division (CD4) December 2008

_1289556078.vsd

NIPR Net