Appendix B ITCSU Softwaree Technologies v1.pdf

Appendix B.

ITCSU SOFTWARE AND TECHNOLOGIES

The ITCSU's primary focus is on supporting DISN-connected networks, which comprise the bulk of its mission, with an infrastructure divided into distinct functional areas, or enclaves, including Data Center, Campus, Collaboration, and Edge, providing a secure and isolated environment for each RKB tenant's traffic. The ITCSU's design is guided by the principles of "Zero Trust" and "Comply to Connect," with a long-term goal of implementing a software-defined architecture featuring Software-Defined Networking

(SDN), Software-Defined Access (SDA), Intent-Based Networking (IBN), and Network Functions

Virtualization (NFV) once the technology meets the required standards, ultimately creating a more flexible, scalable, and secure network infrastructure that can adapt to changing mission requirements and support the needs of its RKB tenants.

The ITCSU's current hardware and technology deployment includes Cisco physical and virtual networking devices for Campus, Security, and Data Center environments, featuring a range of products including Cisco UCS Servers, Catalyst switches, Gigamon HC, Secure Firewall, Firepower Firewall, Firepower Management Console (FMC), Palo Alto, Juniper, Secure Network Analytics (SNA), Identity

Services Engine (ISE), Nexus 7700 and 9300 switches, and Dashboard Manager.

The Government is required to maintain versions of these technologies to within two releases of the most current version at all times.

ITCSU SOFTWARE:

The ITCSU's software deployment is a comprehensive and integrated suite of tools and technologies designed to support the secure, efficient, and effective operation of our network infrastructure. Our security software portfolio includes a range of industry-leading solutions, such as Trellix ESS, Trellix

ESM, Cisco Secure Firewall, Secure Network Analytics (SNA), Identity Services Engine (ISE), Cisco

Secure Client, Squirrel Defender, and HigherGround, all of which are carefully configured and managed to provide robust protection against a wide range of cyber threats.

Our network management software is equally extensive, featuring Firepower Management Console

(FMC), Cisco Catalyst Center, Cisco Nexus Dashboard Manager, Science Logic, Device42, Veeam

Backup and Replication, Lantronix, Akkadian Labs, Forward Networks, Gigamon, Cisco Intersight, Cisco

UCS Manager, Palo Alto Panorama Firewall Manager, VCenter, Titan SFTP Server, PuTTY, and NTP

Servers, all of which are used to monitor, manage, and optimize our network infrastructure to ensure maximum uptime, performance, and security.

Our supported operating systems are also up-to-date and industry-standard, including Microsoft Windows

11 and newer, Microsoft Windows Server 2019 and newer, Cisco IOS, NXOS, IOS-XE, Cisco Firepower

Threat Defense 7 and newer, Cisco ASA 9 and newer, and various Cisco Unified Communications

Manager and Cisco Meraki versions, as well as RHEL 8 and newer, Ubuntu 20 and newer, and VMware

ESXi 7 and newer. This ensures that our systems are running on stable and secure platforms, and that we can take advantage of the latest features and security patches.

In addition to our security and network management software, we also utilize a range of productivity software tools to support our critical business operations. These include Microsoft Active Directory, Microsoft DNS/DHCP, Microsoft Office 2019 and newer, Microsoft SQL 2019 and newer, and Microsoft

Visio 2019 and newer. These tools are widely used throughout the organization, and are essential for facilitating communication, collaboration, and information sharing.

We also utilize a range of collaboration software tools, including NIPRGPT, Microsoft Teams, and Cisco

Jabber/WebEx. These tools are designed to facilitate communication and teamwork across the organization, and include features such as instant messaging, video conferencing, and screen sharing.

Finally, our compliance and governance software, including Evaluate STIG, STIG Viewer, RMF

Software, VRAM, EMASS, and ACAS, plays a critical role in ensuring that our network and systems are configured and operated in accordance with relevant laws, regulations, and industry standards. This includes ensuring that our systems are compliant with DISA STIGs, and that we are meeting the requirements of the RMF.

ITCSU TECHNOLOGIES:

HCI, SDA, SDN, IBN, RADIUS, TACACS+, Syslog, Netflow, SNMPv3, API, VSAN, OSPF, BGP, ACL, SSH, Cisco Virtual Port-Channel (vPC), HTTPS, SFTP, VMWare VCF, NTP, VRF