SMIT Attch J-29 NGEN Master Tools Library_Final Rev1.xlsx

Cover Sheet

READ-ME

PMW-205 Disclaimer

This worksheet provides the current state view of NGEN and One-Net capabilities.

The government does not implicitly nor explicitly warrant this listing as industry best of breed. Assessment and analysis of these capabilities remains in progress. Updates and revisions will be made as necessary and reissued to industry as appropriate.

DRAFT

NGEN Change Control Log

HPRM Notes Added: Version changing from 8.3 to 9.3 with no definitive date TRIM Note Added: Changed back to In Production as dataset still in use TRIM Status Change: Retired to In Production HPRM Classification Change: Repository to Tool HPRM Note Added: HPRM is the tool to view TRIM dataset

Manufacturer Changes: HP Secure Copy, DELL EMC to HP 2018-12-05 Added Descriptions and Purposes to following NMCI capabilities:

- NSA Disposal

- PEO-EIS Portal

- EMC Avamar change from EMC to Dell BlueCoat from BlueCoat to Symantec

2018-12-05 Added Descriptions and Purposes to following NMCI capabilities: - CTR Database Tool

- EEMT

2018-12-05 HPRM Remediation Changes: - Classification: (Cisco Prime – Utility to Tool)_(CADI – Tool to Application)

- Notes: (HCMS – HPRM contains a Tool & Repository instance in HPRM)_(Tanium - Government for day-to-day operations / Contractor for patching services to Contractor)

- Ownership: (Government to Contractor – CDR, ECMD, Incidentview, HPOM)_(Contractor to Government – HPAM, Pulse, Serge, Tanium)

- Maintenance : (Contractor to Government – Tanium)

- POC’s: (Cisco Prime, WCS – Ethan Clapp, Robery Kay Enright, Sam Hourani)_(Tanium – Christopher Malone, Daymon Hudson, John Matkin, Michael Gowey)_(OPS Console – Michael Millett)

- Production Status: (HPOM – In Production to Retired)_(ENAC – Future State to In Production)_(RIT – In Production to Retired), (Rational Asset Manager – Future State to In Production)_(Rational Doors – Future State to In Production)_(Rational System Architect – Future State to In Production)

- Capability Name: (iRAPT to Invoicing, Receipt, Acceptance, and Property Transfer (iRAPT))_(eInvoice to eInvoice (eINV))

- Structure Type: (Incidentview – Unstructured to Structured)

- Access Type: (Rational Doors – Not Accessible to Role Based)_(Rational Quality Manager – Not Accessible to Role Based)_(Rational System Architect – Not Accessible to Role Based)_(Cisco Prime – Not Accessible to Role Based)_(CADI – Unrestricted Read Access to Restricted)_(EMT – Unrestricted to Role Based)_(ENAC – Not Accessible to Role Based)_(ERMS – Unrestricted to Restricted)_(HCMS – Unrestricted to Restricted)_(HPOO – Unrestricted to Role Based)_(Informatica – Not Accessible to Restricted)_(CDOT – Unrestricted to Role Based)_(NetApp System Manager – Restricted to Role Based)_(NMCI Tool Box – Restricted to Role Based)_(Rational Asset Manager – Not Accessible to Role Based)_(BPM – Restricted to Not Accessible)

- Access Method: (BPM – Request via formal process Contractor to NA)_(EMT- Request via URL to Request via Formal Process Contractor)_(HPRM – Request via Formal Process Government to Request via Formal Process Contractor)

- Government Access Status: (ADUC – 6 to 4)_(Cisco Prime – 5 to 4)_(EMT – 2 to 4)_(CDOT – 1 to 5)_(Rational Asset Manager – 8 to 1)_(

- Access Links Updated: (Cisco Prime, CADI, ERMS, HPRM, NPfM)

- Removed Capabilities: (MiniMe – Removed as standalone capability, already alias to CLO)_(PuTTY - Removed as standalone capability, already alias to TACACS)

- Added Capabilities: (Microsoft Management Console (MMC))_(Infrastructure Update Portal Website) 2018-12-05 Notes updated for following NMCI capabilities::

- BOSS

- SearchNavy 2018-12-05 CMPRO Technical Data added for following ONE-NET capabilities:

ACAS, Apache Tomcat, Remedy ITSM, Nexus 1000, Citrix Metaframe, CMPRO, Sharepoint 2013, Quest Active Roles, Equal Logic, DMT, DoD Visitor, DoD PKI, ACCM, SCO, iSCSI Initiator, Sharepoint Designer, Sharepoint Server, Citrix Web Client, Symantec AntiVirus, WireShark, McAfee Rogue System Detection, Equal Logic, AD Topology, McAfee HBSS, McAfee Asset Baseline Monitor Agent, Dell Hardware, Sharepoint Backup, Remedy User, Remedy Service, McAfee HIPS, McAfee DLP, SQL Server

2018-12-05 Assessment Reports added for following ONE-NET capabilities:

- VMware

- BMC Tool Chain

- CommVault

- DMT

- DoD Visitor

- HBSS

- SCCM

- SCO

- SCOM

- SolarWinds

- UAP

2018-12-05 Software versions updated for following NMCI capabilities per InnCell reports:

ADAEO, BlueCoat, uCDR, uCMDB

2018-12-05 Technical Data index listings added for following ONE-NET capabilities:

- ADAM

- Netview Web

- Tumbleweed

- VMWare Tools

- VMWare VSphere

2018-12-05 The following NMCI capabilities added to NGEN List:

- Active Directory Users and Computers (ADUC)

- Custom Active Directory Interface (CADI)

- HP Records Management (HPRM) Total Records Information Management (TRIM):

o Retired from NGEN List.

- Deployable Seat Application / Deployables Management Tool

- IncidentView

- Juniper Unified Access Control

- Microsoft Deployment Toolkit (MDT)

- SnapDrive

- Tanium

- Virtual Storage Console 2018-04-11 Connect IT:

- Removed from NGEN-R List. Utility built into HPSM, should not be listed separately.

2018-04-11 HP Autonomy Connected:

- Removed from NGEN-R List. This a vendor specific tool not utilized on the NMCI network.

2018-04-11 HPES SharePoint Sites:

- Removed from NGEN-R List. Not an NMCI tool. HPES SharePoint sites are internal storage of vendor specific, business proprietary work products stored on an internal vendor file server.

2018-04-11 Impact 360 Quality Monitoring - Blue Pumpkin:

- Removed from NGEN-R List. Not an NMCI network capability. Contractor internal capability to track internal service desk functions.

2018-04-11 IXIA Network Testing:

- Removed from NGEN-R List. Not an NMCI tool. It is a set of devices used by the vendor for testing.

2018-04-11 MiniMe:

- Removed from NGEN-R List. Not an NMCI tool. Does not have a standalone interface, it is a component of Serge and CLO Status Management (CSM).

2018-04-11 Storage Virtual Machines (SVM):

- Removed from NGEN-R List. Not an NMCI tool. It is a component of NetApp Clustered Data On-Tap (CDOT).

2018-04-11 NetINFO:

- Removed from NGEN-R List. Not an NMCI tool. It is a component of Harris Configuration Management System (HCMS).

2018-04-11 Vulnerability Remediation Asset Manager (VRAM):

- Removed from NGEN-R List. VRAM is a government owned, government operated capability not on the NMCI network.

2018-04-11 Warranty Tracking System (WTS):

- Removed from NGEN-R List. Inaccurately recorded. Not a tool on the NMCI network.

2018-04-11 Cisco Wireless Control Server (WCS):

- Description revised to include the following: WCS is in the process of being replaced by the Aruba solution. Once Aruba is installed, then WCS should be removed from NMCI.

2018-04-11 Definitive Solutions Library (DSL):

- Description revised to include the following: In the process of being replaced by Rational Asset Manager (RAM). Expected date to retire is June 2018.

2018-04-11 Interim Product Baseline Library (iPBL):

- Description revised to include the following: In the process of being replaced by Rational Asset Manager (RAM). Expected date to retire is June 2018.

2018-04-11 IP Share:

- Description revised to include the following: Government owned, government operated repository of historical data from the end of CoSC/NMCI period of performance.

2018-04-11 PuTTY:

- Description revised to include the following: PuTTY is a client application that is used only to provide SSH capability to administrate network tools.

2018-04-11 Service Intelligence (SI) Suite:

- Description revised to include the following: Service Intelligence is on the NMCI network but not currently in use. There are currently 6 NIPR and 2 SIPR SI Servers located in San Diego.

2018-04-11 The below Cybersecurity capabilities were identified as being aligned to SIEM on either NMCI or ONE-Net. A corresponding "SIEM Use Case" was associated with each capability.

- BlueCoat

- Quest One Active Roles - Administration Service (64-bit)

- Quest One Active Roles - MMC Interface (64-bit)

- Quest One Active Roles Management Shell for Active Directory

- Firewall Enterprise Control Center (FECC)

- McAfee Virus Scan Enterprise (VSE)

- Symantec AV VPTRAY Fix

- Symantec Data Center Security (SDCS)

- Symantec Endpoint Encryption - Removable Storage Edition

- Symantec Endpoint Encryption Autologon

- Symantec Endpoint Encryption Framework

- Symantec Endpoint Encryption Full Disk Edition

- Symantec Endpoint Encryption Management Server

- Symantec Endpoint Live Update

- Symantec Mail Security for Microsoft Exchange

- Symantec Mail Security Management Service

- Symantec Endpoint Protection (SEP)

- Symantec Messaging Gateway (SMG)

- Symantec Security Information Manager (SSIM) 2018-04-11 Active Directory Services:

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 Assured Compliance Assessment Solution (ACAS):

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 Business Service Manager (BSM):

- Version changed from 9.25IP0 to 9.25.261

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 Central Database Repository (CDR):

- Capability/Component Name changed from Central Database Repository (CDR) to uCDR

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 CLO Status Management (CSM):

- Manufacturer changed from DXC to HP

- Information As Of: changed from 30-Nov-17 to 11-Apr-18 2018-04-11 eInvoice:

- Version changed from eInvoicing NGEN R1.2 to N/A

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

- Classification changed from Tool to Application

2018-04-11 eMarketplace:

- Version changed from eMP NGEN R1.3 to N/A

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

- Classification changed from Tool to Application

2018-04-11 Engineering Capacity Management Database (ECMD):

- Added following to Description: Soon to be called Performance and Capacity Management Database (PCMD) once upgrade process is complete (is underway)

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 Enterprise Performance Management Database (EPMD):

- Added following to Description: Soon to be called Performance and Capacity Management Database (PCMD) once upgrade process is complete (is underway)

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 Enterprise Mission Assurance Support Service (eMASS):

- Version changed from Unknown to 5.5

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

- Classification changed from Tool to Application

2018-04-11 Exclusion Records Management System (ERMS):

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 Firewall Enterprise Control Center (FECC):

- Changed Manufacturer from Forcepoint to McAfee

- Information As Of: changed from 10-Apr-18 to 11-Apr-18

- SIEM Use Case updated from blank to Detection of covert, malicious communications and encrypted channels.

2018-04-11 HP Asset Manager (HPAM):

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 Enterprise Self Service (ESS):

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

- Classification changed from Tool to Utility

2018-04-11 HP Service Manager (HPSM):

- Version changed from 9.31 to 9.3.1

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 HP SiteScope:

- Version changed from 11.24 to 11.2

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 Integrated Solutions Framework (ISF) Tools:

- Version updated from Unknown to 53

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 Interim Product Baseline Library (iPBL):

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 iRAPT:

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 IUID:

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Classification changed from Tool to Repository

2018-04-11 IXIA Network Testing:

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Classification changed from Utility to blank

2018-04-11 McAfee Virus Scan Enterprise (VSE):

- Information As Of: changed from 10-Apr-18 to 11-Apr-18

- SIEM Use Case updated from blank to Visibility and anomaly detection

2018-04-11 MiniMe:

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Classification changed from Utility to Script

2018-04-11 NetApp ONTAP (CDOT):

- Capability/Component Name changed from NetApp ONTAP (CDOT) to NetApp Clustered Data On-Tap (CDOT)

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 NGEN Contract Deliverables and Enterprise Reporting (NCDER) Website:

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 NMCI Enterprise Tool (NET):

- Capability Suite changed from NMCI Enterprise Tool (NET) to NMCI Enterprise System Tool (NEST)

- Capability/Component Name changed from NMCI Enterprise Tool (NET) to NMCI Enterprise System Tool (NEST)

- Version changed from 7.6.1 to 3.0

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

2018-04-11 NMCI/CoSC IP Share:

- Capability/Component Name changed from NMCI/CoSC IP Share to IP Share

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

- Description revised

2018-04-11 Project & Portfolio Management Center (PPM):

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

- Description revised

- Purpose revised

2018-04-11 Pulse Secure SSL VPN:

- Version changed from Unknown to 6000/7000 Series

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 Serge:

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Government VV&A Conducted by INNCELL changed from NO to YES

- Classification changed from Script to Tool

- Description revised

2018-04-11 Steel Central Controller (SCC):

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

- Description revised

2018-04-11 Universal Configuration Management Database (UCMDB):

- Manufacturer changed from HP to Microfocus

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

2018-04-11 Universal Discovery (UD):

- Manufacturer changed from HP to Microfocus

- Information As Of: changed from 30-Nov-17 to 11-Apr-18

NGEN Tools Data Dictionary

Tool - Software that is accessed from the network, and is needed to perform a job function under NGEN. Might involve data aggregation (or data mining) of NGEN Operational Data. A tool is not installed locally on a user's machine, but is often accessed via a web browser. One example of a Tool is BOSS.

Application - Software that is installed locally, and allows a user to create or compile data. One example of an Application is TRIM.

Script - Single task oriented function that is parsed at runtime. Assists the interface process with a tool or application.

Probe/Sensor - Software that scans the network environment for an asset or information (hardware, software, network traffic). One example of a Probe is UD (Universal Discovery) Probes for UCMDB.

Utility - Software with limited functionality. One example of a Utility is Storage Essentials (which feeds EPDM and CPDM).

Repository - Structured - Any location containing structured data (e.g. SharePoint) and supporting network operations.

Repository - Unstructured - Any location containing unstructured data (e.g. File Shares containing configuration items or pertinent artifiacts), and supporting network operations.

Product Type The type of software identified as :

COTS - "Commercial Off The Shelf" software products that are ready-made and available for sale or open source to the general public.

GOTS - "Government Off The Shelf" software products that were created and are owned by government agencies.

Contractor Developed - NMCI Specific - Software developed by the NMCI Contractor for a specific use within the NMCI environment Government Developed - NMCI Specific - Software developed by the Government for a specific use within the NMCI environment

In Production - The capability is currently deployed, being maintained and functioning on the enterprise.

Future State - Planned - The capability is designated to be deployed to the enterprise. It has an approved ATO and there is an established project plan that procures required licenses, establishes design requirements, conducts required testing and evaluation in a test/pre-production environment, and deploys the software package into production.

Retired - The capbability has been removed from the production environment and is no longer accessible.

Environment The enterprise environment where a specific capability is instantiated. For purposes of this library, two environments are documented:

(1) The Navy and Marine Corps Intranet (NMCI) for CONUS

(2) OCONUS Navy Enterprise Network (ONE-Net) for OCONUS

Customer Support Software - Assistance in planning, installation, training, troubleshooting, maintenance, upgrading, and disposal of a product.

Development Software - Computer programming, documenting, testing, and bug fixing involved in creating and maintaining applications and frameworks.

Enterprise Software - Collection of computer programs with common business applications, tools for modeling how the entire organization works, and development tools for building applications unique to the organization.

Finance and Accounting Software - Records and processes accounting transactions within functional modules such as accounts payable, accounts receivable, general ledger, payroll, and trial balance.

Human Resources Software - Combines human resources functions, including benefits administration, payroll, recruiting and training, and performance analysis and review into one package.

Information Technology Software - Use of systems and software for storing, retrieving, and sending information.

Marketing Software - Designed for marketing departments and organizations to more effectively market on multiple channels online such as email, social media, websites for repetitive task automation.

Professional Services Software - Assistance with professional services information, processes, and procedures that require holding professional licenses such as architects, auditors, engineers, doctors and lawyers.

Sales Software - Records when goods or services are sold to customers usually included on cash registers at retail locations to record the sale and direct it to the proper tracking system.

Vertical-Specific Software - Aimed at addressing the needs of any given business within a discernible vertical market specific industry or market and readily identifiable by the application specific graphical user interface which defines it.

Service Strategy - The center and origin point of the ITIL Service Lifecycle. It provides guidance on clarification and prioritization of service-provider investments in services. More generally, Service Strategy focuses on helping IT organizations improve and develop over the long term.

Service Design - The activity of planning and organizing people, infrastructure, communication and material components of a service in order to improve its quality and the interaction between the service provider and its customers.

Service Transition - To build and deploy IT services. The Service Transition lifecycle stage also makes sure that changes to services and service management processes are carried out in a coordinated way.

Service Operations - To make sure that IT services are delivered effectively and efficiently. The Service Operation lifecycle stage includes the fulfilling of user requests, resolving service failures, fixing problems, as well as carrying out routine operational tasks.

Service Functions - A novel concept and is particularly relevant for industrial firms that offer services. It highlights the fact that it is erroneous to equate services with the activities of the service organization. Instead, a more holistic approach to the management of service offerings is needed.

Continual Service Improvement - To continually align and re-align IT services to the changing business needs by identifying and implementing improvements to IT services that support business processes. CSI looks for ways to improve process effectiveness, efficiency and cost effectiveness.

Additionally, the description should address what data the capability produces and how to consume it.

NGEN Master Tools List

It is not a tool or application, however a request can be submitted for Admin Tools to be pushed to your machine. Directory Services. TMP511A.CMW00085802.06_DSA Active Directory Configuration Details_v1.0_F.docx D401.14407.04_Active Directory Application Mode for Global Directory Design_v2.9_F.docx D401.54032.03_Custom Active Directory Interface Design_v1.0_F.docx D401.SB014.01_NMCI Enterprise Active Directory System Services Infrastructure Design_v3.1_F.docx D403.11992.04 NNPI Active Directory_v3.0_FinalW.doc D403.12085.03 GPO Active Directory Group Dependencies for AHF_v1.0_F_2004.doc D403.13644.04_Active Directory Trusts_v1.4_F.doc D403.54032.01_Custom Active Directory Interface (CADI) Installation_v1.0_F.doc TMP401.CMW00079325_Navy Active Directory Detailed Design_v1.0_F.docx TMP511A.CME00031345.01_CAMS Web Server W2K8 Upgrade Active Directory Config Details_v1.0_F.docx Not Assessed

Active Directory Account Edit Operations (ADAEO) 1.7.1.0 DXC 30-Nov-17 Contractor Developed - NMCI Specific None N/A Government Owned Contractor Operated In Production NMCI CONUS Utility Information_Technology_Software Identity Management Software Service_Operations Function - Service Desk Allows for viewing/changning properties on Active Directory accounts (Agent-Friendly GUI for MMC). Manages Active Directory account properties. ADAEO and Account Instructors Guide.docx Government Assessment Completed

Active Directory Application Mode (ADAM Instance DS) 0 Microsoft 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Tool Information_Technology_Software Network Access Control Software Service_Operations Function - Service Desk A mode of Active Directory that is designed specifically for directory-enabled applications. ADAM is a Lightweight Directory Access Protocol (LDAP) directory service that runs as a user service, rather than as a system service. You can run ADAM on servers and domain controllers running operating systems in the Windows Server 2003 family (except for Windows Server 2003, Web Edition) and also on client computers running Windows XP Professional. Active Directory Application Mode. D406.14407.13_ADAM GAL Projects_v1.3_F.doc D401.15318.01_ADAM Design for DMZ POP_v3.0_F.doc D401.15320.02_ADAM for cPOP_v1.3 F.doc Not Assessed

Active Directory Users and Computers (ADUC) 2008 R2 Microsoft 8-Jun-18 COTS None N/A Government Licensed Contractor Operated In Production NMCI CONUS Tool Information_Technology_Software Authentication Systems Service_Operations Function - Service Desk Active Directory Users and Computers is an MMC snap-in that is a standard feature of Microsoft Windows Server operating systems in their set of Remote Server Administration Tools. It allows access to manage all objects in the directory. Customers have read only access to this tool. Directory Services. (blank) Not Assessed

Custom Active Directory Interface (CADI) 2 Microsoft 8-Jun-18 COTS None N/A Government Licensed Contractor Operated In Production NMCI CONUS Application Information_Technology_Software Authentication Systems Service_Operations Function - Service Desk CADI is a .NET based solution that allows the customer technical representatives (CTRs) to exercise their management rights through a custom interface similar to the Active Directory Users and Computers (ADUC) consoler, allowing a full view of the directory in a format already familiar to the user, while allowing administration to managed organizational units (OUs) only. Directory Services. D403.54032.01_Custom Active Directory Interface (CADI) Installation_v1.0_F.doc Not Assessed

Microsoft Management Console (MMC) NA Microsoft 27-Aug-18 COTS None N/A Government Owned Contractor Operated In Production NMCI CONUS Application Function - Service Desk Enterprise Content Management Systems Service_Operations Function - Service Desk Microsoft Manangement Console (MMC) / Active Directory (AD) is a directory service that Microsoft developed for Windows domain networks and is included in most Windows Server operating systems as a set of processes and services. AD is not a tool or application. But you can request Admin Tools pushed down to your machine, then search AD. Directory Services. (blank) Not Assessed

It is an integrated software solution that provides automated network vulnerability scanning, configuration assessment, application vulnerability scanning, device configuration assessment, and network discovery.

There are 5 components make up the ACAS solution:

- SECURITYCENTER - the central console that provides continuous asset-based security and compliance monitoring

- NESSUS VULNERABILITY SCANNER - features discovery, configuration auditing, and vulnerability analysis

- PASSIVE VULNERABILITY SCANNER - performs real-time network traffic monitoring

- X-TOOL - converts XCCDF/OVAL files into XML schema

- TOPOLOGY VIEWER (3D Tool) - provides a graphical network map Vulnerability compliance scanning. TMP511A.CMW00106942.01_ACAS - Java OpenJDK 1.7.0 Vulnerability Software Patch Install Configuration Details_v0.02_D.docx TMP017.CME00040547.01_ACAS RTM_v1.0_F.xlsx TMP400.CME00040547.01_ACAS AHLD_v1.0_F.docx TMP401.CME00040547.01_ACAS Detailed Design_v1.0_F.docx TMP511.CME00040547.01_ACAS_Transition Guide and Configuration Summary_v1.0_F.docx TMP511A.CME00040547.02_ACAS Upgrade 4.8 Install Config Details_v1.0_F.docx TMP511A.CME00040547.03_ACAS 4 8 Installation Config Details_v1.0_F.docx Government Assessment Completed

BlueCoat BlueCoat 6.5.4.4/9.2.4 Symantec 11-Apr-18 COTS NMCI_SIEM_Aligned_Capabilty Visualization using security events and log failures for pattern detection. Government Licensed Contractor Operated In Production NMCI CONUS Tool Information_Technology_Software Web Security Gateways Service_Operations Function - Application Management Provides visibility into your Blue Coat ProxySG installation, with detailed reporting on video and web application usage. Secure Proxy with video and web application usage reporting. TMP400.CME00030499_Architecture High Level Design Bluecoat Proxy Cache_v1.0_F.docx TMP414.CME00030499_Bluecoat Proxy Cache Test Plan_v1.0_F.docx D403.14375.12_Forward Proxy BlueCoat Installation_v2.4_F.docx D403.16103.02_Reverse Proxy Cache BlueCoat Installation_v1.4_F.doc D405.16103.01_BOM for Blue Coat Reverse Proxy Cache_v1.5_F.docx D406.14375.08_NMCI Engr Op Guidelines for BlueCoat Proxy and Directors_v5.8_F .doc D410.38749.03_BlueCoat WebFilter Install Guide_D_v1.0_F.doc TMP122.CMW00083330_Engineering Bill of Materials for BlueCoat Proxy Cache_v1.0_F.docx Government Assessment Completed

BMC Atrium Orchestrator BMC Remedy Migrator 7.6 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Tool Information_Technology_Software Migration Tools Service_Transition Service Asset & Configuration Management BMC Remedy Migrator automates the process of transferring objects and data from one source (server or file) to another. With BMC Remedy Migrator, you connect to one or more AR System servers and then select a source and destination for the objects, fields, or data you are migrating. Administration form and workflow importing, as well as data that form the basis of the AR System applications by automating the process of transferring objects and data from one source (server or file) to another Enables administrator form and workflow importing. (blank) Not Assessed

BMC Remedy Service Desk 7.5 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Application Information_Technology_Software Event Monitoring Software Service_Operations Event Management The Remedy 9 Service Desk license enables you to manage incidents, problems, and service requests, and you can empower your business users with the BMCDigital Workplace (formerly MyIT) self-service app.Remedy Service Desk is available standalone or as part of the Remedy Service Management Suite. It automates the incident and problem management processes to enable IT to respond quickly and efficiently to conditions that disrupt critical services. Provides ONE-Net Incident and Problem Management System that tracks problems and issues in all systems. (blank) Not Assessed

BMC Remedy User 7.6 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Tool Information_Technology_Software IT Service Management Software Service_Design Service Level Management The official name for the client is BMC Remedy User; however it is commonly referred to as the Windows User Tool (WUT) or Remedy thick client. ... o BMC Remedy Alert will also become unsupported in the same time frame. Allows Remedy users the option to utilize the mid-tier and email tool via a web based access. (blank) Not Assessed

BMC Remedy ITSM Apache Tomcat 7.0 Apache Tomcat Project 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Application Information_Technology_Software Hosted Virtual Desktop Services Service_Transition Release & Deployment Management Provides the web interface, the server will also run Microsoft Internet Information Services (IIS) Version 7 with the Apache Tomcat JavaServer Pages (JSP) engine. So in your Java project you can build your WAR (short for Web ARchive) file, and just drop it in the deploy directory in Tomcat. So basically Apache is an HTTP Server, serving HTTP. Tomcat is a Servlet and JSP Server serving Java technologies. Deploys Java Servlets and JSPs. (blank) Not Assessed

BMC Atrium Core 7.6 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Application Information_Technology_Software Configuration Management Databases Service_Transition Service Asset & Configuration Management Comprised of the Product Catalog and the BMC Atrium CMDB. The BMC Atrium Core solution works with other BMC Atrium solutions to facilitate the alignment of your IT organization with business priorities. BMC Atrium Core provides tight integration across management tools used in your IT environment, saving your IT organization time and money. Stores information about the Configuration Items (CI) in the IT environment and the relationship between each of them. (blank) Government Assessment Completed

BMC Atrium Integrator 3.2 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Tool Information_Technology_Software Data Integration Tools Service_Operations Function - Application Management Provides a component, the Atrium Integrator (AI), AI integrates with Microsoft System Center Configuration Manager and SolarWinds Network Management System (NMS) data stores using the included Java Transaction Services (JTS) drivers/connectors for Oracle®, Microsoft® SQL, XML, and Comma-Separated Value (CSV) files. Future customization of data source imports will utilize this component. Enables ONE-Net to transfer data between an external data store and BMC Atrium CMDB. (blank) Not Assessed

BMC Remedy ARS 7.6 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Application Information_Technology_Software Database Development and Management Tools Service_Strategy Service Portfolio Management BMC Remedy Action Request System enables you to automate many business processes without learning a programming language or complex development tools. Provides the development platform and application server service that manages the Remedy application modules and serves as the interface between the database, the application and the Atrium Core Automates business processes without complex programming language. (blank) Not Assessed

BMC Remedy Developer Studio 7.6 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Tool Development_Software Software Configuration Management Tools Service_Transition Service Asset & Configuration Management BMC Remedy Developer Studio is an integrateddevelopment environment (IDE) for BMC Remedy AR System applications. It provides all the applicationdevelopment functions of the previous BMC RemedyAdministrator tool with a modern, powerful, easy-to-use interface. Tool used for development of Remedy platform. (blank) Not Assessed

BMC Remedy ITSM 7.5 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Tool Information_Technology_Software IT Service Management Software Service_Design Service Level Management BMC Remedy ITSM streamlines and automates the processes around IT service desk, asset management, and change management operations. It also enables you to link your business services to your IT infrastructure to help you manage the impact of technology changes on business and business changes on technology-in real time and into the future. In addition, you can understand and optimize the user experience, balance current and future infrastructure investments, and view potential impact on the business using a real-time service model. Provides a ONE-Net Incident and Problem Management System that tracks problems and issues in all systems. (blank) Not Assessed

Crystal11_Redistributables 11 BMC Software 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Tool Information_Technology_Software User Virtualization Software Continual_Service_Improvement Continual Service Improvement Crystal Reports is a business intelligence application, currently marketed to small businesses[1] by SAP SE and is the presentation component that resides on the BMC AR user client Used to design and generate reportsfrom a wide range of data sources. (blank) Not Assessed

Oracle 11g Database 11.2.0.4 Oracle 30-Nov-17 COTS None N/A Government Licensed Government Operated In Production ONE-Net OCONUS - All Regions Application Information_Technology_Software Relational Databases Service_Operations Function - Application Management An entry-level, small-footprint database based on the Oracle Database 11g Release 2 code base. It's free to develop, deploy, and distribute; fast to download; and simple to administer. Provides the relationship between the data storage for Remedy and the workflow component. (blank) Not Assessed

Business Objects Support System (BOSS) Business Objects Support System (BOSS) 4.0 SAP 30-Nov-17 COTS None N/A Government Licensed Contractor Operated In Production NMCI CONUS Tool Information_Technology_Software Relational Databases Service_Transition Data Management (Knowledge Management) Data warehouse system that pulls data from multiple source systems and stores a copy of the data. Customized reporting. D410.54705.07_BOSS Implementation Guide_v1.0_F.docx D403.31026.08_BOSSSec_v500 GPO Man for NMCI_v1.0_F.doc D403.54705.03_BOSS Business Objects Enterprise BI Platform_v1.0_F.doc D403.54705.09_Shareplex 8 Installation for BOSS_v1.0_F.docx D403.SO200.01_BOSSSec_v800 GPO Manual for NMCI_v1.0_F.docx D405.54705.06_NMCI Eng BOM for BOSS_v1.0_F.docx Government Assessment Completed

Business Service Management Tool Business Process Manager (BPM) 7.26 HP 30-Nov-17 COTS None N/A Government Licensed Contractor Operated In Production NMCI CONUS Probe/Sensor Enterprise_Software Business Process Management Software Service_Strategy Business Relationship Management Synthetic monitoring product that simulates business transactions to provide a consistent, predictable measurement—whether or not real users are using your application.

Uses a centralized web-based solution (BSM) for configuring and managing the applications and associated entities to be measured by the end-user data collectors (referred to as probes). Scripts run by BPM will be configured to emulate real user transactions by using specified URLs or pre-recorded transactions that mimic the customers experience Transaction monitoring. TMP511A.CMW00078736.02_HP BPM Code-Sign Cert Updates v9.22 Config Details_v1.0_F.docx D403.15934.31_BEA AquaLogic BPM_v1.0_F.pdf D403.30807.31_Oracle BPM Enterprise 10gR3 on J2EE for IOC_v1.0_F.doc TMP122.CMW00091874_NMCI Engineering BOM for Business Process Monitor_v1.0_F.docx Government Assessment Completed

Business Service Manager (BSM) 9.25.261 HP 11-Apr-18 COTS None N/A Government Licensed Contractor Operated In Production NMCI CONUS Tool Information_Technology_Software IT Service Management Software Service_Operations Event Management End-to-end management solution that integrates network, server, application and business transaction monitoring.

Provides a framework supporting a set of integrated applications and a dashboard for performance monitoring, system availability management, service level management, application relationship mapping, diagnostics and problem resolution for business applications. Enables proactive monitoring, measurement and management of services. BSM Tool Information v4.pptx D403.36225.04_BSM Installation_v1.0_F.docx TMP012.A.CME00039040.01_Case Form Classified BSMv9.25 Patch Upgrade_v1.0_F.xlsx TMP012.B.CME00039040.01_CASE Form NIPR BSM v9.25 Patch Upgrade_v1.0_F.xlsx TMP018.CME00039040.01_1809418 N 0000 NOC BSM v9.25 Upgrade ABL PBL Update Lists_v1.0_F.docx TMP511.CME00039040_HP BSM Upgrade to v9 25 Trans Guide Config Summary_v1.0_F.docx TMP511A.CME00037578.01_Business Service Management (BSM) Emergency Patch Operations Management I Series (OMI)_00060 Configuration Details_v0.04_D.docx TMP511A.CME00039040.01_HP BSM Upgrade to v9.25_v1.0_F.docx Government Assessment Completed

Call Management System (CMS) Automatic Call Director (ACD) R9 Avaya 30-Nov-17 COTS None N/A Government Licensed Contractor Operated In Production NMCI CONUS Tool Customer_Support_Software Call Center Workforce Optimization Software Service_Operations Function - Service Desk Switching system that performs call routing functions for incoming and outgoing calls. Allows intercommunication between customers and call center agents on the SvD. Call routing. WN09-U-CE-VR0001v01-NRFK-Voice_ACD_ACL.doc D401.10594.02_Technical Design for ACD Implementation_v1.0_F.doc D401.12317.01_Tech Design for ACD Implementation_v1.4_F.doc Not Assessed

Call Management System (CMS) R12 Avaya 30-Nov-17 COTS None N/A Government Licensed Contractor Operated In Production NMCI CONUS Tool Customer_Support_Software Call Center Workforce Optimization Software Service_Operations Function - Service Desk Used for collecting and reporting on agent activity with regards to incoming customer calls. Call reporting. D405.34928.04_BOM for Avaya Service Desk Telephony_v1.3_F.docx Avaya ACDCMS Data.pdf D400.34928.09_Avaya Service Desk Telephony EOL EOS_v1.3_F.docx D401.14039.01_Avaya Msging Network EDSB_v1.0_F.doc D401.34928.10_Avaya Service Desk Telephony Design_v1.4_F.docx D403.1515.03_Avaya Solution_ v1.1_Final_2005.doc D403.12317.03_Avaya CMS, v1.0 F.doc D403.13511.03_CMS-to-BP-Configuration_v1.0_F.doc D403.14039.06_Avaya Msg Network EDSB_v1.5_F.doc D403.34928.01_Avaya Client Tools for Service Desk EOL Telephony Upgrade_v1.2_F.docx D403.34928.02_Avaya Service Desk IPT Call Management System_v1.5_F.docx D403.34928.03_Avaya Service Desk IPT Media Gateway_v1.2_F.docx D403.34928.05_Avaya Service Desk IPT Application Enablement Services_v1.4_F.docx D403.34928.06_Avaya Service Desk IPT Communications Manager_v1.5_F.docx D403.34928.08_Avaya Service Desk IPT NMCI LAN BAN Integration_v1.3_F.docx D403.34928.12_Avaya Service Desk IPT Communications Manager Messaging_v1.0_F.docx D404.12317.04_CMSHighAvail_v1.0_F.doc Not Assessed

Central Database Repository (CDR) uCDR 1.1.3 DXC 11-Apr-18 Contractor Developed - NMCI Specific None N/A Contractor Owned Contractor Operated In Production NMCI CONUS Tool…