SITEC - Technology Profile V4 0 - updated 032410.pdf

USSOCOM

Special Operations Forces

Information Technology Enterprise

Contract

Technology Profiles by Service Area

Table of Contents

1.0 Introduction and Purpose

2.0 Special Operations Forces Information Enterprise (SIE)

3.0 USSOCOM Future State Architecture

4.0 Information Technology Management Office (ITMO)

5.0 Service Desk High-Level Service Summary

6.0 Data Center High-Level Service Summary

7.0 Enterprise Network High-Level Service Summary

8.0 Distributed Computing Services High-Level Service Summary

1.0 Introduction and Purpose

USSOCOM has invested in technology in support of their IT service delivery. The purpose of this document is to communicate the current state of the technology architecture as it supports the IT

Service Management service areas today. These technologies are expected to be available to prospective bidders to leverage, supplement as needed, or propose alternatives in their responses and proposed IT Service Management solutions.

USSOCOM is providing this information to assist prospective IT Service Management Partners (ITSMP) and best-of-breed Service Area Providers to understand the SIE current state and future needs in the following core infrastructure service areas:

Information Technology Management Office

Centralized Service Desk

Data Center Services

Enterprise Network Services

Distributed Computing Services

Application Management

2.0 Special Operations Forces Information Enterprise (SIE)

The SIE is defined as the information infrastructure, systems, processes, people, and knowledge that are required to support the full spectrum of special operations activity, from staff functions to war. SOF must access information wherever it resides, therefore the SIE must be net-centric. Thus, the SIE also connects infrastructures (e.g., Defense Information System Network (DISN), commercial networks) and applications (e.g., Joint, Combatant Command, Service, Agency, and NGO applications) external to

USSOCOM. The SIE is USSOCOM’s implementation of the SOF portion of the Global Information Grid

(GIG). The following is a high level depiction of the SOF Information Enterprise (SIE).

As noted in previous USSOCOM commissioned studies, the availability and accessibility of infrastructure data is essential and dictated by ITIL and other IT based best practice frameworks and models. Just as in previous analysis, key data is scattered across various islands of infrastructure information located in the

SIE IT delivery model as well as within the Component Command that use the SIE services. The key challenge is not necessarily in the accuracy of the information, but rather the accuracy and summary of the information to provide the foundational understanding of the SIE, the associate architecture, and related IT service management and delivery models. Key elements that need validating include the type of services provided, the number of users accessing or providing these services, as well as metrics on the performance of these services and resources that provide these to the SIE. USSOCOM has made great strides in collecting this information in a central database (CMDB – Configuration Management

Database) where the data is generally accurate. There are areas where major IT components are not managed today as part of SIE service delivery end-points. Understanding of core enterprise infrastructure breaks down across security enclaves due to availability, sensitivity of mission area supported, and classification once information is aggregated.

The SIE consists of a complex and diverse architecture supported by multiple security enclaves with the primary networks consisting of the NIPRNet(Unclassified), SIPRNet(Secret), JWICS (Joint Worldwide

Intelligence Communications System – rated for TS/SCI). Additional security enclaves exist to support

Focal Point/Special Access Programs (SAPs), and specialty networks where USSOCOM have connections to include Coalition Net. In most cases support for these networks consists of only maintaining the local presence required for supporting network subscriptions and the handling of Service Desk tickets as required for handling related incident/ problems for connectivity or degradation of service.

The majority of USSOCOM SIE services are delivered over the primary networks to support the

Enterprise. The enterprise services are generally acknowledged as the services delivered up to and including the USSOCOM Strategic Entry Point (SSEP) which serves as the enterprise gateway for non-garrison, tactical, and field operations. Exceptions to this rule include providing tier-x escalation support for administrators and first tier resolution staff operating out of garrison and those in-garrison components and component functions that receive USSOCOM support for their architecture (i.e.

repackaged applications and services for inclusion on their own networks). This includes the Tactical

Local Area Network Infrastructure (TACLAN) (as deployed infield and connected to the SSEP), JIANT

(JSOC Information Automated Network), and SOIS (Special Operations Intelligence System) networks.

JSOC supports six of their own networks as part of the JIANT and SOIS infrastructures. The JSOC support also includes the JDI unclassified network and 4 higher level security enclaves and special Intelligence and Coalition network subscriptions as dictated by mission requirements. In total the JSOC environment supports over 19,000 users on 11,500 workstations connected to these networks out of 75,000

USSOCOM users worldwide. Additionally, individual USSOCOM components have their own component network enclaves fielded which may require USSOCOM global support (e.g. DARBY and NightNet for

USASOC).

In general application services are delivered over a global network supported by SCAMPI as the backbone of the WAN. The Data Centers infrastructure includes two core data centers with full replication capabilities. Component Commands have their own “data centers” with a push to centralize as much of the common infrastructure and systems, and service in the Core USSOCOM data center(s) to provide greater redundancy and to consolidate support needs as architecture, security, and performance of services permits. The data center is primarily a Microsoft Server OS based infrastructure with active projects to improve monitoring and support of the environment. Data Center’s processing capability is composed of a mid-range Microsoft Windows based server environment supported by an infrastructure of rack-mounted virtualized blade servers. Storage services consist of multi-level mirrored

NAS and SAN capabilities. Back-up occurs on electronic media with no tape support outside of the MS-

Exchange storage services which is supported by a hierarchical storage management system with near-line storage capabilities that extend to tape for long-term migration of seldom used information assets.

All data centers have backup power capability that allows them to run for an extended period of processing before having to “fail-over” to a mirrored site if primary power is interrupted. Data center services are protected within a Sensitive Compartmented Information Facility (SCIF) environment.

Applications are to be transitioned to the central data center as appropriate from components as part of a centralized web-hosting initiative. During this transitional period the architecture for SIE is very dynamic and changing as operational tempo permits.

Figure 1. Special Operations Forces Information Environment (SIE)

Source: SOCOM Directive 25-1 (Management of Information Resources for the Special Operations Forces (SOF)) 21 July 2008

Similarly other initiatives for other service areas are currently in-flight including the centralization of

Service Desk functions for tier 1 support into a virtual Enterprise Service Desk hosted in two locations.

“Reach-back” support will be provided by the Central Service Desk for TACLAN components to allow for escalating of “tickets” for incidents, problem, changes, and requests that cannot be handled in the field or a regional level due to breadth of impact or need for additional knowledge/ skill/ resource IT assets.

Additionally, users may call in directly as a level 1 support back into the USSOCOM Service Desk. Level-2 support can also include handling of trouble tickets and routing of tickets as needed that are supporting

Component level system enclaves, as needed by Component assets in the field that are out of garrison in order to promote communication and coordination of responses across USSOCOM Components.

USSOCOM generally tries to stay within common state-of-the-art technologies with the following lifecycle refresh cycles (LRC). This is impacted by available budget, but guidance is to true-up refreshes in the next budget year or as funding permits.

Figure 2. Example of Non-Garrison "Reach-Back" Support of USSOCOM Components

3.0 USSOCOM Future State Architecture

The future state architecture for the SIE is expected to provide an environment with the following characteristics:

Consolidation of domains: one forest, one domain, multiple OUs

Deliver operations and intelligence data storage retrieval

Collaboration

Service/Theater Portal Coalition Inter Agency Specific Services (Portal, Coalition, Inter-Agency, Language Translation Applications)

Data at rest security with automated key distribution and management)

Cross domain solutions

Unified communications ( ROSIP, Integrated Voice/Video/Chat, SOF , global 7-Digit dialing)

Tactical Network Capability (Self-Healing/Forming, Secure Wireless, Tactical Messaging)

Figure 3. SIE Future State Architecture

4.0 Information Technology Management Office (ITMO)

4.1. Current State

Currently there is no centralized management office to provide oversight for the existing contract and service delivery contractors. Currently, the CIO does not have a mechanism to coordinate across SIE project schedules, resources, or budget. Government project leads are not able to determine impacts of a schedule delay for themselves or for other dependent projects. Although each project manager may manage their own project schedule, there is no roll-up of project schedules in a tool. Some project managers within the CIO also use Primavera’s Prosight, to manage requirements.

The current effort is managed as a contract by the Contracting Officer (KO), a Primary Contracting Officer’s Representative (PCOR), acquisition personnel (as required), each component has Contracting Officer’s Representative, and each component command has representation on a CIO Council.

Contractor performance is assessed through self-reporting metrics that are generated by Service Level Agreement Tracking Environment (SLATE), a custom database built by the current contractor. Reports are generated on a regular basis but few government personnel consume the data. Government project leads do not feel that they have the right level of visibility into contractor performance and struggle with the appropriate measurements. Some USSOCOM environments use an informal or verbal process to report contractor performance but there is no mechanism to inform appropriate assignment of incentives or penalties related to contractor performance.

The current contractor uses several knowledge repositories managed in custom databases and

SharePoint but there is no mechanism or framework to adopt and leverage USSOCOM’s knowledge and experience. A new Knowledge Management team was created to understand SIE Knowledge

Management needs and strategize ways to leverage existing knowledge stores.

USSOCOM currently does not have a Service Catalog to help discern costs related to changes. Resource management and development is not conducted consistently across the Enterprise. Resource management is often an ad-hoc process.

4.2. Future State ITMO

USSOCOM is establishing a Government lead and staffed ITMO responsible for integrating IT service delivery operations across all in-scope IT Service Areas. A primary responsibility of the ITMO will be management, coordination, integration, and synchronization of all Service Area Providers. USSOCOM requires support from the IT Service Management Partner (ITSMP) to establish and maintain the ITMO.

In the future the ITMO will have to establish services required to manage, integrate, and coordinate all facets of service delivery and service support for all of USSOCOM's IT infrastructure and application service environments across all IT Service Areas.

The Information Technology Management Office (ITMO) will be a new construct for delivering the services and capabilities associated with the SIE. The ITMO will reside within the USSOCOM J6 organization and will be designed as an integrating entity capable of managing multi-tiered sourcing relationships and associated IT Service Management delivery.

As part of standing up the ITMO, the ITSMP will support the government in defining and aligning with the Command’s existing IT management infrastructure – the J6.

4.3. ITMO Technology Summary

ITMO View Technology Summary

Networks: The ITMO primary operational network will be SIPR just as the rest of USSOCOM uses this network for operational communication. JWICS will support applications and communications classified Top Secret/SCI. NIPRNet will be used for unclassified support.

Software: CORE Service Desk Tools:

BMC Remedy, V6.3, 7.1; Microsoft SharePoint Server 2007; Office 2007 Monitoring:

Orion SolarWinds V9.5; Microsoft Systems Center Operations Manager (SCOM 2007), Microsoft Systems Center Configuration Manager (SCCM)/ Systems Management Server (SMS); HP OpenView V B.07.53; EMC Navisphere R6; Integrated Management VOIP Monitoring Manager; VMWare (Virtual Center, ESX) V3.6;

Reporting and SLA Tracking:

Crystal Decisions Crystal Reports V9; HP OpenView (OVIS); SLATE (Custom SLA Tracking System) Monitoring and Reporting of Backup and Risk Management Microsoft Visual Source Safe V6; Intellitactics Security Management; Symantec Antivirus;

McAfee Virus Scan Enterprise; Retina e-Eye Digital Security; V5.10; CheckPoint Pointsec Protector V4.91; McAfee HBSS R8.7;

Note, outside of the SLATE system no centralized tracking for SLAs and project initiatives exists. Microsoft Project is used on a project by project basis without rollup on a central server. Microsoft Office SharePoint Server (MOSS) is available for document and workflow/automation services.

Hardware: The ITMO supports and helps manage the SIE. No specific hardware outside of server and distributed computing components required to support MS-Office services have been identified. BMC Remedy infrastructure is also underpinned by a server and hardware infrastructure. Appropriate laptop and desktops will need connectivity to USSOCOM production network environments as ITMO support requirements will define network classification access needs.

User Population:

USSOCOM is made up of the six Component Components with approximately 75,000 users at 49 locations (CONUS and OCONUS). The majority of the ITMO support will be performed at the USSOCOM headquarters in Tampa, FL.

5.0 Service Desk High-Level Service Summary

5.1. Service Desk Current State

USSOCOM HQ provides a baseline image to all components which is supported by a central service desk providing tier 1 services to the following components:

AFSOC – Primary focused on facilities located at Hurlburt Field and AFSOC functions in and around Ft. Walton Beach, FL, Cannon AFB, NM, and functions providing reach-back support of forward deployed units

USSOCOM Headquarters (HQ) – Primarily focused on facilities located in Tampa, FL and

Washington, DC area

JSOC – Primary focus on locations in and around Fayetteville, NC plus 5 other global sites.

For the purposes of this summary JSOC information is provided as informational only.

Special security requirements limit data availability. JSOC IT Services will not be vendor managed

MARSOC (HQ) - Primary focused on facilities located at Camp Lejeune that support functions in and around Jacksonville, NC , with two other CONUS sites; reach back support provided as need to forward deployed IT Services from MARSOC (HQ) and USSOCOM

NAVSOC – Focused on facilities in Coronado, CA with coverage of the Little Creek, VA location, with three OCONUS locations, and functions providing reach-back support for forward deployed sites

USASOC – Primary focused on locations in and around Fayetteville, NC plus 9 additional

CONUS sites and 4 OCONUS prime locations (approximately 30 sites that reach-back to

USASOC or USSOCOM for services)

Over the past 2 years USSOCOM has put forth a concerted effort to centralize NIPR and SIPR Service

Desk services from 4 decentralized autonomous service desks into a centralized service desk, load balanced across two geographically separate locations. In FY09, USSOCOM identified the two sites and established an automated call distribution system as a means of load balancing trouble calls. Both locations are currently in operation, share the same resources and can route problem resolution appropriately. An effort is currently underway to apply the appropriate force protection measures necessary to load balance SOCRATES (JWICS) service desk services across both centers and provide enhanced capabilities related to trouble documentation and rapid first time trouble resolution. The goals of this effort are to reduce cost and complexities associated with maintaining 4 separate service desks and assists in ensuring the availability of systems for collaboration and information sharing across the SIE. It should be noted that this consolidation is in-progress and as part of that consolidation the component help desks will not only have to be consolidated, but in the case of USASOC, sub-component help desks that are not forward deployed exist to support various sub-elements. These sub-component elements include USASOC education, training locations, National Guard Units, and some OCONUS based units.

Additionally, USSOCOM has expressed a future requirement to monitor holistic end-to-end services. The current configuration management system within BMC Remedy only contains the Configuration Items

(CIs or Service Components) that are managed by the current contractor. In most cases this includes delivery of the service to the enterprise component (e.g. Application Server) but may not include the final end-user end-points (TACLAN end-user devices, AFSOC end-user devices, etc.).

5.2. Future State Enterprise Service Desk Services

The Enterprise Service Desk is expected to be a multi-tier, end-to-end Service Desk. Services to be provided include:

Original Equipment Manufacturer (OEM) and Software Vendor (SV) Problem Coordination and Management

Lifecycle Ticket Management

Knowledge Management (KM) and KM System administration and management

End User Account Provisioning and Administration

End User Service Desk Operations and Management

Customer Support Portal Operations and Administration

Service Desk coordination and participation in COOP/DR activities

Interactive Voice Response (IVR) Management and Administration

Provide Remote Service Management

Provide and support secure web chat and remote break/fix, diagnostic, and support via

Government provided solutions

The ITSMP will operate the USSOCOM Enterprise Service Desk. The Enterprise Service Desk will act as the single point of contact between the end user and the service area provider. The Enterprise Service

Desk handles all incoming IT related service issues (e.g., incidents, problems, service requests). IT Service

Desk tasks will include the following as defined in the Performance Work Statement (PWS):

One enterprise service desk currently supported by two locations (NAVSPECWARCOM – Little

Creek, VA and USSOCOM HQ – Tampa, FL) providing support 24 X 7 X 365. Receiving and recording all issues from end users, which deal directly with simple problems, requests and queries

Providing “Level 1” assessment and diagnosis of all incidents and either resolve incidents in 1st level support and / or refer unresolved incidents to the appropriate “Level 2” and “Level 3” support group, based on agreed service levels

Monitoring and forwarding all incidents according to agreed service levels as defined in the PWS

Keeping end users informed on status and progress until the incident is resolved

Proactively informing users regarding known overall problems (e.g. “hot news”) according to the priorities and categorizations via appropriate media-channels

TACLAN users will begin calling into CSD for reach-back support beginning approximately April

Through the Enterprise Service Desk, the ITSMP will own the complete incident lifecycle from time of receipt of an end-user incident or request through to ticket closure, incident resolution, and/or request fulfillment. This means that the ITSMP will be responsible for answering, logging, performing an initial diagnosis, monitoring, tracking, and escalating (if necessary) all end-user incident and service requests in the case of incidents routed to the 2nd and / or 3rd level support, standard request. The Enterprise

Service Desk will incorporate the features of a standard help desk but also address the broader issue of managing service and support requests to improve the operational efficiency and quality of service of

USSOCOM’s service delivery organization. Through the Enterprise Service Desk, the ITSMP will be responsible for managing, tracking, and coordinating the problem management process and working with the various IT service providers to develop, verify, and implement approved system changes for the purpose of building a more predictive service-and-support delivery organization.

5.3. Enterprise Service Desk Technology Summary

Service Desk View Technology Summary

Networks: All three USSOCOM prime networks are supported by the Enterprise Central Service Desk.

The enterprise service desk is hosted in SIPR for the ISD (formerly named Integrated Service Desk now being rebranded CSD) instance of BMC Remedy and on JWICS network for TS/SCI level support.

Software: CORE Service Desk Tools:

BMC Remedy, V6.3, 7.1; Dameware V6.6.2.2; Microsoft SharePoint Server 2007; Office 2007 Monitoring and Resolution:

Orion SolarWinds V9.5; Microsoft Systems Center Operations Manager (SCOM 2007), Microsoft Systems Center Configuration Manager (SCCM)/ Systems Management Server (SMS); HP OpenView V B.07.53; EMC Navisphere R6; Integrated Management VOIP Monitoring Manager; VMWare (Virtual Center, ESX) V3.6; HAMI (Custom) Reporting and SLA Tracking:

Crystal Decisions Crystal Reports V9; HP OpenView (OVIS); SLATE (Custom SLA Tracking System) Backup and Risk Management Veritas Netbackup V6; Microsoft Visual Source Safe V6; Intellitactics Security Management;

Symantec Antivirus; Security; McAfee Virus Scan Enterprise; Retina e-Eye Digital Security;

V5.10; CheckPoint Pointsec Protector V4.91; McAfee HBSS R8.7 Call Management Combination of Cisco Call Manager and Cisco ICM (Intelligent Contact Manager) and IPCC (IP Connection Center).

TACLAN

Microsoft Dynamics NAV- Property Management –NaVision for configuration/asset management; HBSS(see backup and risk management)

Hardware: The Enterprise Service Desks are supported by enterprise class rack mounted blade multi-core /multi-processor servers such as the HP DL580 series depending upon the current configuration of the virtual environment.

User The USSOCOM Service Desk is required to be operated 24 hours a day every day of the year.

The service desk team is located in Tampa, FL and Little Creek, VA. The service desk supports

Service Desk View Technology Summary Population: a user population of:

Enterprise USSOCOM is made up of the Six Component Commands with approximately 56,000 users at ~ 49 locations (CONUS and OCONUS). The majority of support is focused largely on USSOCOM headquarters and 4 Components. The following details make up the user base and the workload generated by those users for the Service Desk and tier-x support elements. Note the following is a subset of the overall 56,000 users. In some cases end-point counts are provide to give more details of the support volume due to multiple security enclaves and devices per users at some sites and some devices having dual-boot or multiple users with access (shared devices, central kiosks, visitor support, etc.)

USSOCOM HQ as a Component USSOCOM HQ represents approximately 5,586 in garrison Headquarters Staff and Contractors that are primarily located in the Tampa, Fl; Washington, DC; and Lexington, KY regions. This includes a little less than 13,000 HQ supported user end-points (due to multiple devices per users), about 60% on SIPR versus NIPR.

AFSOC

The total number of AFSOC users is approximately 20,323. The AFSOC User workload makes up approximately 14,000 workstations and laptops, plus miscellaneous mobile and other spatiality computer processing device with an IP address in the SIE. The AFSOC Service Desk supports about 11,000 devices total with related Interactions averaging about 5,000 monthly. Of these, around 50% being email/ portal requests, and 35% the result of an alert.

About 65% deal with IMAC requests and about 80% of those are handled by tier 1. The Largest AFSOC Tier 2 activity deals with LAN/WAN data network issues. (Note: End User services are provided by government CSA staff and are not captured.) Currently USSOCOM is not providing first-tier support for the non-enterprise class devices within the distributed computing service area. Otherwise, all tiers of support service are provided for all service areas within all security enclaves.

NAVSOC

The total number of NAVSOC users is approximately 7,540. NAVSOC Service Desk interactions average 1,000 monthly interactions with about 65% via inbound voice calls.

Approximately 40% are IMAC related and about 125 are related to change requests. The NAVSOC user base utilizes 8,000 end user devices plus an additional 300 PDA mobile/blackberry devices are part of the end-user devices. This includes about 1,800 laptops. Approximately 2,500 of these devices are dual boot to multiple networks and about 4,500 support multiple users. About 25% of these devices have dedicated SIPR access and around 5% have TACLAN access.

USASOC

The total number of USASOC users is approximately 23,785 distributed across approximately 20 world-wide sites with close to 300 buildings with about 32,000 network connections over the three networks. The USASOC HQ Service Desk fields about 4,500 Service Desk interactions on a monthly basis. Approximately 60% or voice calls and 40% via email or portal. Approximately 1,700 have dual boot capability to more than one network and 500 devices are Schoolhouse/Training related. Approximately 10,000 of these devices are laptops and 6,500 devices are dedicated to supporting more than one user. The USASOC support of the National Guard units currently is approximately 6 units with long-term plans to increase the number of locations to approximately 30.

Service Desk View Technology Summary

MARSOC

The total number of MARSOC users is approximately 1,780. MARSOC receives their service desk support already from the USSOCOM Enterprise Service Desk and statistics and call volumes are reflected in the Enterprise Service Desk numbers reported. MARSOC has approximately 2,000 devices either currently or projected by the end of FY2010.

Approximately 100 devices boot on multiple classification networks and 150 devices are shared assets between users. Approximately half of the devices are laptops and the remaining desktops.

JSOC

The total number of unique JSOC users is estimated at approximately 19,000 currently. JSOC HQ Service desk is independent from the USSOCOM Enterprise Service Desk. More details will be provided regarding JSOC as classification permits.

TACLAN

TACLAN provides a SOF deployed network infrastructure to support operations, intelligence, planning and reporting. The infrastructure includes, but not limited to, the routers, hubs, switches, servers, network management and information assurance tools, printers, scanners, cabling, and workstations. It also supports communication services (e.g. Radio Frequency (RF)) to connect liaison elements and tactical teams to SIE. Current Service Desk interactions average around 1,000 interactions monthly and support 8,400 plus laptop devices on the TACLAN.

6.0 Data Center High-Level Service Summary

6.1. Data Center Current State

The Data Center is in a secured facility co-located in Tampa, FL within a USSOCOM compound on MacDill AFB and at Fayetteville, NC within the Ground Intelligence Support Activity (GISA) facility at Fort Bragg.

The data center services support a highly distributed computing environment providing management and hosting service for servers, storage, and a collaborative computing environment supporting the SIE.

The environment is connected via a WAN supported by the SCAMPI network. Processing is supported at all three levels of classification including interconnections with NIPR, SIPR, and JWICS (TS/ SCI). This environment is interconnected within the USSOCOM domain to component nodes.

The data center is primarily a Microsoft Windows environment with fully mirrored rack mounted blade and virtual servers. The replicated and clustered server farm is hosted via SIPRNet.

Approximately 1,600 servers are part of the Command’s server resources including component command servers that are part of the USSOCOM mission. There are 180 enterprise servers providing service to the entire Command and approximately 620 servers in use at USSOCOM Headquarters outside of the Component Commands. All servers are categorized as having an availability requirement of 60 minutes or less maintenance per month. The majority of devices are manufactured by Dell or Hewlett-Packard. This includes about 250 application and database servers, approximately 100 Microsoft Exchange related servers, and approximately 30 web servers in addition to the remaining systems software and enterprise services servers. The server OS is Microsoft Windows Server 2003 Enterprise Edition, with approximately 3% using the 64 bit edition. Servers are refreshed on a 4-year lifecycle. Approximately 100 servers have direct attached storage accounting for approximately 1 Petabyte combined. The majority of servers used NAS or SAN for storage services. The storage consists of less than 20 SAN storage components (SUN, EMC, and Pillar) and approximately 100 NAS devices (NetApp and DataDomain). Each of the environments is about 1.5 Petabytes each plus or minus 10%; for a combined total of 3.1 Petabytes. Storage is refreshed on a 5-year lifecycle.

6.2. Future State Data Center Services

The selected Data Center Service Area provider will staff and operate the USSOCOM Data Center and infrastructure. The data center will provide all enterprise computing services supporting the SIE. The data center environment is undergoing a technical architecture transition and will benefit from several current initiatives including:

Enterprise Management System (EMS) - EMS is a collection of tools that allow for efficient proactive management of the SIE IT infrastructure. The services provided by these tools include network compliance management, patch management, trouble identification and notification, server management and fault resolution to name a few. In FY09 USSOCOM made significant progress in concert with SIPRNET consolidation at standardization of this toolset across the Enterprise. This effort included deployment of a standardized set of Solarwinds tools across the Enterprise allowing each component to more effectively manage their infrastructure, and the HQ the ability to manage the WAN at a very granular level. USSOCOM rolled out Cisco compliance manager for management of the switching and routing infrastructure and is in the process of rolling out System Center Configuration Manager (SCCM) enterprise wide. With these toolsets currently standardized and operational, upon completion of the Active Directory consolidation, USSOCOM will have the pieces in place to centrally manage the Enterprise IT assets providing the war fighter a robust, survivable, recoverable infrastructure.

Data Archival and De-duplication - Given the complexity and decentralization of the SIE infrastructure reliable backup and restore of critical data represent significant challenges for USSOCOM. Operational tempo, environmental conditions, geographical separation and transport all present unique challenges to the design and implementation of a reliable local and remote site backup architecture. In addition to complexity, duplicative backup storage across the enterprise represented a significant cost. Over the past year as part of the consolidation effort USSOCOM has apportioned storage targets at each of the two consolidated environment data centers to host offsite backup data for all Component Commands and their subordinate units. These data centers are currently hosting SIPRNET and SOCRATES offsite backup data from 25 sites across the globe. USSOCOM recently deployed Data Domain technology across the SIE on SIPR and SOCRATES networks to de-duplicate, store local backup copies and transport the data to the data centers where it is de-duplicated again and stored as an offsite copy for each site. Prior to rollout of this technology very few sites conducted reliable recoverable backups to tape and if they did, even fewer actually transported them offsite. Using this technology USSOCOM was able to successfully automate the process and conduct real world local and remote server restores within the first weeks of deployment. Over the initial three month period sites collectively pushed over 1.5 PB of backup data into the Data Domain devices. De-duplication at the site and again at the data centers resulted in a reduction of 1.5 PB of data down to a total of 35.9 TB on the storage targets. While not directly related to net centricity or collaboration this capability provides reliable, rapid, restoral of services and data across the SIE enhancing the survivability and ensuring the availability of services for information sharing, collaboration, and shared situational awareness.

Figure 4. USSOCOM Data Domain Architecture

Blade Server Technologies and Virtualization - USSOCOM is dedicated to utilizing the latest technologies available to reduce datacenter footprint, power consumption, and operational costs and provide the war fighter the absolute best service and availability possible. Included in this effort USSOCOM has built out both consolidation environments, to include Exchange, AD and the web based computing environment, entirely on blade server technology maximizing capacity through the use of server virtualization when possible. Standard rack mounted servers while still necessary in some instances are for the most part being replaced with blade server technology through life cycle replacement.

Web and DB Consolidation/ Critical Applications Hosting - Phase two of USSOCOM’s consolidation effort entails centralization of web and database services from four site unique environments into a single environment mirrored across two geographically separate datacenters. Development of a solution that provides high assurance and failover of services is complete. This architecture provides high availability, disaster recovery and failover for all HQ USSOCOM and Component Command web and portal environments as well as resource consolidation and sharing. Subsequent to physical consolidation of portals and hardware and in concert with resource migration into the new domain USSOCOM will begin migration of the component portal environments into a single Microsoft Share Point Portal to facilitate better collaboration amongst the HQ and Component Commands. In this environment both database and front ends replicate in real time between 2 data centers. If either database or front end fail users are directed to the mirrored farm while recovery takes place. As indexes are kept up to date in real time there is no need to re-index, significantly reducing the time to provide full capabilities after a failure.

Figure 5. USSOCOM Web and Database Consolidation and Resource Sharing

Figure 6. Web and Database Consolidated Architecture

Web Based Application and Thin Client Technologies - USSOCOM has invested heavily in web based computing to facilitate delivery of applications as a service, centralize management of software resources, and reduce total cost of ownership related to workstation operation and maintenance. Using Microsoft’s Terminal Services, Citrix and Thin Client technologies USSOCOM has provided a low cost, high performance web based application delivery solution reducing the per seat Total Cost of Ownership (TCO) for workstations by approximately $1,000 per seat.

USSOCOM has currently deployed nearly 1,000 thin client terminals at the HQ and is expanding services out to the Component Commands. It is expected that deployment of this solution will replace 70%-80% of the current workstation environment with a potential LCR cost avoidance of $20M over a seven year Life Cycle Replacement (LCR) period. Phase 1 of this effort provides an operational and integration capability at each Component Command site. Phase 2 will consolidate resources in concert with AD migration and provide failover between sites should one site experience a catastrophic event.

Figure 7. Web-Based Application and Thin Client Architecture – Phase 1

Continuity of Operations (COOP) Facility - currently in development.

Full Motion Video Archival/ Capture and Dissemination - A significant effort related to the SSEPs is currently underway to capture, store and disseminate ISR data from assets that do not provide beyond line of site capability in theater. As the data is collected by the tactical user much of it is used and subsequently lost. Capture of this data and ingest into the SIE provides a means of storage and transport via IP for dissemination to tactical elements for situational awareness, mission planning and intelligence analysis. Initial operational capability in the current theater of operations is scheduled for June 2010 with follow on Defense Common Ground System (DCGS) enhancements to provide more robust capabilities related to the intelligence gathering and exploitation. This initiative provides instant and on demand visibility of critical data related to situational awareness, mission planning and intelligence exploitation.

In short, getting the information the war fighter needs when they need it, in a form they can understand and act on with confidence.

Exchange Consolidation - This two year effort is a subset of the AD consolidation and effectively consolidates four site unique Microsoft Exchange environments of over 36,000 users and associated storage into a single Exchange environment mirrored across two geographically disperse datacenters. This architecture provides high availability, disaster recovery (DR) and failover for all HQ USSOCOM and Component Commands. In addition to High Availability (HA) and disaster recovery (DR) a single Exchange infrastructure reduces complexity, hardware, operational and sustainment requirements and enhances the communication capability between components, garrison environments, command and tactical elements.

Enterprise Vault - In concert with the Exchange consolidation USSOCOM implemented Enterprise Vault (EVAULT) on SIPRNET and SOCRATES information stores. This initiative archives email, file and database data from primary to secondary (less expensive) storage and then off to tertiary storage based on age while allowing the end user seamless access to archived data.

This effort is resulting in a tremendous reduction of Tier I storage requirements, a reduction of storage growth and provides significant cost avoidance. Currently only SIPRNET email is vaulted with file and database data scheduled to follow completion of the Exchange consolidation.

Figure 8. USSOCOM Enterprise Vault Collection File Migration

6.3. Data Center Technology Summary

Data Center View Technology Summary

Networks: All three USSOCOM primary networks are supported by the data center(s). The data center equipment is hosted on the appropriate security enclave depending upon classification of the data. NIPR related processing is hosted in the same SCIF environment as the SIPR and JWICS environment with separate and distinctive racks.

Software: CORE Service Desk Related Tools used to support Data Center:

BMC Remedy, V6.3, 7.1; V6.6.2.2; Microsoft SharePoint Server 2007; Office 2007;

Monitoring and Resolution:

Orion SolarWinds V9.5; Microsoft Systems Center Operations Manager (SCOM 2007), Microsoft Systems Center Configuration Manager (SCCM)/ Systems Management Server (SMS); HP OpenView V B.07.53; EMC Navisphere R6; Integrated Management VOIP Monitoring Manager; VMWare (Virtual Center, ESX) V3.6 Reporting and SLA Tracking:

Crystal Decisions Crystal Reports V9; HP OpenView (OVIS); SLATE (Custom SLA Tracking System);

Backup and Risk Management Veritas Netbackup V6; Microsoft Visual Source Safe V6; Intellitactics Security Management;

Symantec Antivirus; Security; McAfee Virus Scan Enterprise; Retina e-Eye Digital Security;

V5.10; CheckPoint Pointsec Protector V4.91; McAfee HBSS R8.7;

Hardware: Microsoft Windows environment with rack mounted blade servers.

Approximately 1,600 servers are part of the Command’s server resources including component command servers that are part of the USSOCOM mission.

There are360 enterprise servers providing service to the entire Command and

Data Center View Technology Summary approximately 620 servers in use at USSOCOM Headquarters outside of the Component Commands. Each server has an availability requirement of 60 minutes are less maintenance per month.

The majority of devices are manufactured by Dell or HP.

Approximately 250 application and database servers, 100 MS-Exchange related servers, 30 web servers in addition to the remaining systems software and enterprise services servers.

Server Operating System o Primary OS is Microsoft Windows Server 2003 Enterprise Edition o 3% using the 64 bit edition.

Storage o Approximately 100 servers have direct attached storage accounting for approximately 1 Petabyte combined.

o Most servers use NAS or SAN for storage services.

o Approximately 20 SAN storage components (SUN, EMC, and Pillar) o Approximately 100 NAS devices (NetApp and DataDomain).

o Each of the environments is about 1.5 Petabytes each plus or minus 10%. For a combined total of 3.1 Petabytes.

Racks o 55 racks at GISA facility dedicated to enterprise services (with embedded temperature monitoring) o 58 racks at USSOCOM Headquarters dedicated to enterprise services) o 200 Additional racks at Headquarters for local HQ applications and services (non-enterprise))

Tape - Only tape solution is part of hierarchical storage management linked to offline near real-time storage of exchange data

User Population:

USSOCOM is made up of the HQ, four Components and a sub unified command with approximately 56,000 users at ~49 locations (CONUS and OCONUS).

7.0 Enterprise Network High-Level Service Summary

7.1. Enterprise Network Current State

The Enterprise Network is supported within the Data Center facility located in Tampa, FL within a USSOCOM compound on MacDill AFB. A Global Network Command Center (GNCC) is supported out of MacDill AFB, FL, that provides enterprise network monitoring.

The network service area supports a highly distributed computing environment that provides management and hosting services for servers, storage, and a collaborative computing environment supporting the SIE. USSOCOM currently operates its own Top Secret/Special Compartmentalized Information (TS/SCI) network (Special Operations Command Research and Threat Evaluation System (SOCRATES)) within the JWICS cloud as a single Active Directory (AD) Domain. This AD architecture supports centralized management and a centralized service desk that provides support services on a global scale. On the Secret Internet Routed Protocol Network (SIPRNET) the SIE consists of multiple domains within the same forest. USSOCOM has established trusts between Component Commands, partner war fighters and established Tactics, Techniques, and Procedures TTPs for sharing information.

Network devices are refreshed every 4 years.

7.2. Future State Enterprise Network Services

The selected Network Service Area provider will staff and operate the USSOCOM Network

Infrastructure. The data center will provide all enterprise computing services supporting the SIE. The enterprise network environment is undergoing architecture transition and will benefit from several current initiatives including:

Active Directory Consolidation - Using the SOCRATES network architecture as a model, USSOCOM is currently consolidating the SIPRNET to achieve the same seamless collaboration currently experienced by USSOCOMs intelligence analysts on SOCRATES. To do this, USSOCOM has created a new active directory network domain named SOCSDS. This consolidation is being accomplished in three primary stages:

o Stage 1 - Standup of Microsoft Exchange (Email) environment in the new SOCSDS domain and migration of HQ and Component mail services.

o Stage 2 - Consolidation of Web, Portal and Database services in the new SOCSDS domain.

o Stage 3 - Migration of users and resources into the new SOCSDS domain.

Active directory consolidation includes all critical enterprise services (Email, Web, Database, and

Storage/File Stores) critical applications and objects. Critical Core Services (Email, Web, Database and Storage) are scheduled to be complete on SIPRNET in September 2010. Following the SIPRNET consolidation, NIPRNET (Unclassified) is scheduled for consolidation with a completion date of September 2012. These efforts include the simultaneous augmentation of two existing identical (mirrored) geographically separate data centers that replicate data providing a level of High Availability (HA) and failover for critical systems. This effort significantly transforms SIE into a truly collaborative and survivable networked environment across the Enterprise.

SSEP Expansion (as part of FY2010 Enterprise Technology Insertion / Capability Equipment

Replacements – CERPs) – Current initiative is to deploy a major hub-regionalization for SIE gateway access while enhancing WAN and SIE COOP capability and functions. SSEPs currently exist at:

o Tampa, FL - MacDill AFB o Stuttgart, Germany o Fayetteville, NC – Fort Bragg o Qatar o Hawaii

Each regional SSEP requires 24 X7 X 365 to support.

7.3. Enterprise Network Technology Summary

Enterprise Network View Technology Summary

Networks: The USSOCOM network consists of multiple security enclaves with the prime three being the SIPRNet(Secret), NIPRNet(Unclassified), JWICS (Joint Worldwide Intelligence

Enterprise Network View Technology Summary

Communications System – rated for TS/SCI), additional enclaves exist to support Focal Point and Special Access Program (SAP) networks, and specialty networks where USSOCOM must have connections to include Coalition Net. Management is provided over the SCAMPI WAN that provided the backbone for connectivity to LANs and phone switches up to and including the SSEP which serves as the enterprise gateway for non-garrison, tactical, and field operations. Interconnectivity is provided to JIANT (JSOC Information Automated Network) and SOIS (Special Operations Intelligence System) networks. JSOC supports 6 of their own networks as part of their JIANT infrastructure and is out of the support. JSOC supports the JDI unclassified network and 4 higher-level security enclaves and special Intelligence and Coalition network subscriptions as dictated by mission requirements. Additionally, individual USSOCOM components have their own component network enclaves fielded which may require USSOCOM global support (i.e., DARBY and NightNet for USASOC).

Software: CORE Service Desk Tools used to support Enterprise Network Service Area:

BMC Remedy, V6.3, 7.1;

Monitoring and Resolution:

Orion SolarWinds V9.5; Microsoft Systems Center Operations Manager (SCOM 2007), Microsoft Systems Center Configuration Manager (SCCM)/ Systems Management Server (SMS); HP OpenView V B.07.53; Integrated Management VOIP Monitoring Manager; V3.6;

Reporting and SLA Tracking:

Crystal Decisions Crystal Reports V9; HP OpenView (OVIS); SLATE (Custom SLA Tracking System);

Backup and Risk Management Intellitactics Security Management; Symantec Antivirus; Security; McAfee Virus Scan Enterprise; Retina e-Eye Digital Security; V5.10; CheckPoint Pointsec Protector V4.91;

McAfee HBSS R8.7;

TACLAN

Microsoft Dynamics NAV- Property Management –NaVision for configuration/asset management; HBSS(see backup and risk management)

Hardware: The SIE networks connect infrastructures (e.g., Defense Information System Network (DISN), commercial networks) and applications (e.g., Joint, Combatant Command, Service, Agency, and NGO applications) external to USSOCOM. The SIE is USSOCOM’s implementation of the SOF portion of the Global Information Grid (GIG). USSOCOM in general has standardized on CISCO enterprise class network devices where available and for areas cost competitive equipment is available to meet mission needs. This includes a portion of the approximately 2,800 switches, 125 firewalls, 1,300 routers, and numerous specialty devices and VPN appliances that are supporting both LAN and WAN needs. Examples of specialty equipment including various network components supporting military specification grade encryption services from specialty network vendors (example General Dynamics).

USSOCOM has recently deployed the Riverbed Steelhead Appliance (Application Accelerators) as part of their Network optimization.

Specific counts of devices are available in the Bidder Reference Library.

User Population:

USSOCOM is made up of the HQ, four Components and a sub unified command with approximately 75,000 users at 49 locations (CONUS and OCONUS).

See Service Desk Area user population definition for more component detail.

More details will be provided around JSOC in the SIPRNet reading room as classification permits.

8.0…