C-37_SIPR_Network_TRQ_Jan_2015_(UNCLAS).docx

TEMPEST Requirements Questionnaire (TRQ) Modifications to Existing Aircraft

It is United States Policy to use TEMPEST countermeasures in proportion to the threat of exploitation and associated potential damage to national security.

OPNAVINST 5510.93F/MCO 5510.19 requires that a completed TEMPEST Requirements Questionnaire (TRQ) be submitted to a Certified TEMPEST Technical Authority (CTTA) whenever a TEMPEST Countermeasures Review (TCR) is required. Submit the information requested below to the NAWCAD TEMPEST Branch, 5.4.4.7 whenever:

· A transmitter and/or receiver is modified, added, removed, or relocated

· A cryptographic device is modified, added, removed, or relocated

· A Classified Information Processing System (CLIPS) is modified, added, removed, or relocated. (A CLIPS can include: the ICS, helmets and cords, computers, displays, etc)

· Re-routing of any RED/BLACK interconnecting cabling and/or software/firmware updates take place that may affect the TEMPEST profile of the aircraft.

All CLIPS and transmitters should be installed using the guidelines found in NSTISSAM TEMPEST/2-95/2-95A (with Amendment). These guidelines provide guidelines for isolation and separation between classified (RED) and unclassified (BLACK) circuits.

1. Once completed, this TRQ should be e-mailed/faxed/sent via SIPRNET to your TEMPEST POC or mailed to:

2. Provide the aircraft type/model/series and modification title.

C-37A (Gulfstream-V) configured aircraft Modification: Upgrade existing C-LAN system Function: Secure Internet (SIPRnet) capability

3. Provide the name, address, position, title, and phone number of a point of contact that is knowledgeable of the processing requirements, system components and operation, and physical layout in the aircraft.

LT Ryan Hebert / CWO Doug Witham USCG Air Station Washington, DC 20593

4. Will classified information be processed during ramp operations? If yes, provide the following information.

The system will be used primarily during airborne operations, but also potentially on deck - depending on satellite signal strength.

a. The geographical location(s) where processing may take place.

Various commercial and / or military facilities, domestic and international.

b. Describe the physical security that is implemented around the aircraft. Include controls such as guards, patrols, and fences.

The level of physical security varies with location. At a minimum, general ramp access will be restricted to ground handling employees, other aircraft operators, and USCG personnel. Guards may be available at military facilities.

c. Are there non-US personnel at these location(s) with access to the surrounding area of the aircraft?

Potentially – yes.

5. What are the classification level(s) of information the new modification will be processing and what percentage is processed at each level?

Unclassified: 99% Classified (SECRET): 1%

6. What special categories of classified information are processed with this modification?

SECRET

7. Is there a direct connection of this modification to the Intercommunication System (ICS)?

No. This is a stand-alone data capability with no integration to the existing Intercommunication System (ICS).

8. Provide the make and model number of all equipment used by this modification to process, transfer, or store classified information. Include computers, peripherals, network hardware, ICS, RF transmitter(s), modems, instrumentation, Communications Security (COMSEC) encryption devices, etc.

Refer to Enclosure (1)

9. Provide signal flow block diagram of this modification, the physical layout and location(s) of all system components, and a brief description of the modification. Include a timeframe if system is just being used for “proof of concept” purposes.

*Note: Only one (1) SIPRnet port will be provided, to be located in the Communications System Operator (CSO) suite. All existing SIPRnet ports in the cabin will be converted to CGOne interface ports.

Modification:

- The existing Swift Broadband router system will be reworked to replace the existing Cisco 3560 routers and add a Duramar 5915 Parvus router.

- The existing two (2) Cisco 3560 routers, Part Number WS-C3560G-24PS-S routers will be removed and two new Cisco 3560 routers Part Number WS-C3560-12PC-S routers will be provided and installed.

- A new Parvus Cisco 5915 router will be interfaced into the router system.

- The system wiring interface will be modified as required.

- The new router will require a Flammability analysis, Spectrum Analysis, EMI/EMC testing and possible flammable component containment.

- Placards and switches will be relabeled as follows:

SIPRNET to CGOne NIPRNET to Internet

-Modify the TACLANE to CSO drop and re-key differently than the CGOne drop.

- Four (4) keyed RJ45 Ethernet cables will be provided for CGOne users.

*Refer to Enclosures (2) and (3) for proposed system diagram and signal flow.

Enclosure (1): CG-01 SIPRnet - Equipment Listing

PRV-5048-03 POWER SUPPLY, AC/DC CONVERTER, 24V, 5A OUTPUT,

100-240 VAC INPUT W/BANANA JACKS

Enclosure (2): CG-01 SIPRnet - System Diagram

Enclosure (2): CG-01 SIPRnet – Signal Flow image1.png image2.png