Attachment P8 - DoD SAFE Help.pdf
PDF 314 KB Posted
- Solicitation number
- N00421-19-R-0003
About this file
This document provides details for a federal contract opportunity to provide Irregular Air Platform Engineering services to the Naval Air Warfare Center - Aircraft Division in support of the integration of airborne capabilities for manned and unmanned platforms. The scope of work includes program management, research, analysis, design, parts procurement, installation, testing, training, and operational support. Interested businesses of all sizes are requested to submit capability statements by 12 July 2018 demonstrating relevant experience, technical skills, facilities, and personnel to perform efforts such as program management, engineering, testing, and training services from the draft statement of work. The anticipated single award contract would have a five year ordering period and cost-plus-fixed-fee and firm-fixed-price contract types. The place of performance would include Naval Air Station Patuxent River, Webster Field, and Yuma Proving Grounds.
View the file
Other files
Show all 50
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Logged on as user: EMMART.CAROLYN.A
Home Drop-Off Request a Drop-Off Pick-up Outbox Help Logout
DoD SAFE
What is DoD SAFE?
DoD SAFE is a web-based tool that provides authenticated DoD CAC users and guests (unauthenticated users) the capability to securely send and receive large files, including files that are too large to be transmitted via email. Guests can receive files from CAC users and (only if CAC users requested files) send files to CAC users. Notification is achieved via email.
DoD SAFE has an ATO and is approved for transfer of FOR OFFICAL USE ONLY (FOUO), Personally Identifiable Information (PII), and Protected Health Information (PHI) data.
DoD SAFE utilizes the latest web browser encryption transport protocols to secure files when they are in transit. Files uploaded into SAFE can be encrypted at rest if the sender selects the corresponding check box on the DoD SAFE site. DoD SAFE users are responsible for ensuring they encrypt FOUO, PII, and PHI data. DoD SAFE is for UNCLASSIFIED USE ONLY.
What credentials are accepted?
Users should select their SIGNATURE certificate issued through the DoD Email Certificate Authority (CA) or select the AUTHENTICATION PIV certificate issued by the DoD Identifier (ID) Certificate Authority (CA) in order to connect.
What credentials are not accepted?
Non-DoD Personal Identity Verification (PIV) certificates or External Certificate Authority (ECA) are not currently supported.
Problems accessing the DoD SAFE site by non-CAC users
Problems accessing the DoD SAFE site by external (non-CAC) users are typically due to SSL and/or client certificate issues. If the user receives a warning about a problem with the website's security certificate, this is because their browser is not configured to trust the DoD certificate authorities.
The user can either import the DoD certificate authorities by following the instructions in the DoD PKI PMO's guide on Install Root or they can accept the risk and click on the option to continue to the website. The current guide on Install Root can be found HERE
Sending Files
Authenticated CAC users can send files to any email address (i.e., .mil, .gov, .com). Guests (i.e., PIV holders, users with .com and .edu emails) can send files but only if solicited by CAC users.
Requesting a Drop-off
In order for a guest user to create a drop-off, they must receive a drop-off request from an authenticated user. A drop-off request is valid for 14 days.
Encrypting a Drop-off
Click on the "Encrypt every file" checkbox and provide a passphrase when creating a drop-off. DoD SAFE does not store the passphrase nor send a copy of the passphrase to the recipients due to security reasons. The sender is responsible for sharing the encryption passphrase with the recipients through a secure channel such as encrypted email or secure phone conversation.
How many files can I upload at one time?
Up to 25 files per package.
How long will the recipient have access to my files?
Seven (7) days.
What is the maximum file size of a package?
8 (eight) GB maximum.
Can I send FOUO (For Official Use Only), PII, PHI files?
UNCLASSIFIED/FOUO USE ONLY
Page 1 of 3DoD SAFE
3/20/2020https://safe.apps.mil/about.php
Yes.
Is there a limit on how frequently files may be exchanged?
No. DoD SAFE has no limit for how frequently files may be exchanged.
Can the recipient download my files multiple times?
Yes. Packages are not locked after the first successful download.
Are my files scanned for viruses?
Yes. The recipient should still exercise as much caution in downloading and opening files.
Is DoD SAFE available on SIPRNet?
No. DoD SIPR File Transfers are supported using the Army Research Laboratory (ARL) utility: https://safe.arl.army.smil.mil
Unsupported functionalities
For functionalities that are not currently supported in DoD SAFE, we recommend you or your command contact the DISA Mission Partner Engagement Office (https://disa.mil/Do-Business/Engagement-Executive) to formally submit a request to add the functionalities to future DoD SAFE revisions.
How do I report spillage?
Contact the DoD SAFE Help Desk.
Where can I find the User Agreement?
Use of DOD SAFE falls within the conditions of the "STANDARD MANDATORY USER AGREEMENT" and can be found at this link.
What are the Rules of Behavior?
The authorized users must:
-Immediately report all cybersecurity-related events (e.g., data spill) and potential threats and vulnerabilities (e.g., insider threat) to the appropriate ISSO or, in the absence of an ISSO, the ISSM.
-Protect authenticators commensurate with the classification or sensitivity of the information accessed and report any compromise or suspected compromise of an authenticator to the appropriate ISSO.
-Protect terminals, workstations, other input or output devices and resident data from unauthorized access.
-Observe policies and procedures governing the secure operation and authorized use of DoD IT, including operations security.
-Use DoD IT only for official or authorized purposes.
-Not unilaterally bypass, strain, or test cybersecurity mechanisms.
Should I follow local, agency-wide and DoD-wide policies when using DoD SAFE?
Yes. Users should follow all applicable policies and laws when using DoD SAFE.
How are my files secured?
In transit, your files are secured with TLS. At rest, your files can be secured with AES encryption (a FIPS 140.2 Level 2 approved encryption) if you select the corresponding encryption check box. Note: DoD SAFE users transferring FOUO, PII, and PHI data MUST select the encryption check box.
What browser should I use?
Firefox, Chrome and Edge are recommended. Internet Explorer is not recommended. Please note that Internet Explorer limits uploads to 2GB.
Is DoD SAFE accredited?
Yes. DoD SAFE has an ATO. More information can be found at https://cyber.mil/dcs (CAC-protected; users without CACs need to contact their DoD sponsor to access this information).
UNCLASSIFIED/FOUO USE ONLY
Page 2 of 3DoD SAFE
Security | About DoD SAFE | Accessibility | New Functionality Request
WARNING! This Department of Defense interest computer system is subject to monitoring at all times.
Unauthorized access is prohibited by Public Law 99-474 (The Computer Fraud and Abuse Act of 1986). Users are advised to read and agree to the Security Notice.
What if my files exceed the maximum size?
Compressed file-types (zip, 7z, tar.gz, etc.) can be used to reduce the size of a file. Alternatively, large files can also be separated into multiple 8 GB or less segments that can be sent in several individual package transfers.
The sender and/or the recipient of a DoD SAFE package is not receiving email notifications. Why?
There can be a number of possible reasons. First, the sender might have entered an incorrect email address. Please contact the sender to verify the recipient's email. Second, the sender's local email server might be blocking DOD SAFE Mail Relay emails. Please contact the sender's local IT department to ensure 'NoReplyTo@mail.mil' is accepted.
I am having connectivity issues; what should I do?
Contact your local helpdesk to ensure local web browsers and/or proxy servers are not interfering with access to DOD SAFE web traffic. Moreover, users of Internet Explorer should ensure 'Compatibility Mode' does not contain parameters that affect 'safe.apps.mil' (.e.g., *.apps.mil or *.mil, etc).
Is there a limit on the number of recipients per package?
The number of recipients per package should not exceed five hundred (500).
I need to update my (sender’s) email address in DoD SAFE. For example, I need to change it from @mail.mil to @navy.mil. How should I proceed?
The address can by changed through the RAPIDS Self-Service Website at https://www.dmdc.osd.mil/self_service
Where can I find a DoD SAFE User Guide?
CLICK HERE for the official DoD SAFE user guide.
More Information https://cyber.mil/dcs/ (CAC protected) and https://public.cyber.mil/dcs/ (public)
DoD SAFE Help Desk
For DoD CAC holders experiencing technical difficulties, please contact the Global Service Desk for support.
All others: Please contact your DoD sponsor (the individual who you are working with within the DoD) who can submit a ticket on your behalf.
GSD Phone:
COMM: 1 (844) 347-2457
DSN (312) 850-0032
Option 1, 1
GSD Email:
Unclassified: disa.gsd.apps@mail.mil
Server: WEB02 -- Version: 1.0-99
UNCLASSIFIED/FOUO USE ONLY
Page 3 of 3DoD SAFE
File details come from the government source that posted it. Updated .