IAB Interactive Standardized Equipment List   return to main tree

Search Interactive SEL:




Last Updated: 10/18/2015 2:46:56 PM

Previous SEL Number: 05EN-00-ETRN

Description: A class of network access solutions, usually for remote access, that provide encrypted user access. May be used for remote access, point to point, or link encryption. Includes virtual private networks, and encrypted transmission modes such as SSH and SSL.

ImportantFeatures: Some solutions will utilize hardware "tokens" in addition to software clients (see 05AU-00-TOKN).
Link encryption will require devices at each end of the link.
Centralized management tools may be available for hardware based solutions such as link encryptors.

Operating Considerations: See NIST

National Institute of Standards and Technology

SP 800-36 for guidance.
When connecting two separate networks, it is important to ensure that the interconnection does not introduce unwanted risks or vulnerabilities. To protect against this, a third-party security audit of both networks is recommended prior to connection.
When utilized on handheld devices, the additional overhead may severely impact data transmission - consider platform(s).
Planning for key management is critical.

Training Requirements: Core Training: Per Manufacturer's Specifications
Initial Training: Minimal (<1 day)
Sustainment Training: Minimal (<1 day)

Mandatory Standards:

Applicable Standards and References:

Federal Information Processing Standard (FIPS) 140-2, Security Requirements for Cryptographic Modules, Change Notices, December 2002

Federal Information Processing Standard (FIPS) 197-upd1, Advanced Encryption Standard (AES), May 2023

NIST SP 800-036, Guide to Selecting Information Security Products, Oct 2003 (WITHDRAWN, still available.)

NIST SP 800-171 Rev. 2, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations, Updated 1/28/21

MSSL:

Law Enforcement: Forensic Technician

Law Enforcement: Maritime

Medical: Point of Dispensing