MACDILL AIR FORCE BASE, Fla. -- Technicians from the 6th Communications Squadron base infrastructure shop are currently installing the Cisco Identity Services Engine (CISE) across MacDill Air Force Base, Florida, as part of a required Defense Information Systems Agency cybersecurity upgrade.
All users of Non-secure Internet Protocol Router (NIPR) computers and Voice over Internet Protocol (VoIP) phones will be affected by this upgrade as it authorizes access based on network certificates rather than hardware addresses.
“People are used to port security, which means that each network device can only go to a particular port,” said Senior Airman Christopher Evans, a cyber transport systems technician assigned to the 6th CS who has been optimizing the network device configuration to allow the new upgrade to be utilized across the base since January. “With the new upgrade, you can move your phone or computer anywhere in your office and you can authenticate with our server, so it gives you more flexibility as an user.”
This new way of authorizing access eliminates the need for port security, which creates a streamlined process to reduce the amount of man-hours necessary to move equipment.
“It takes all this paperwork just to move a computer from one side of the room to another,” said Master Sgt. Jeffrey Selonke, the base infrastructure section chief assigned to the 6th CS. “The estimate of work hours this upgrade is going to save across the base is in the tens of thousands per year because of all the administrative work that will no longer be necessary.”
Along with eliminating the need for port security, this new upgrade also improves security.
“The new upgrade provides a more-in-depth process for authenticating computers, phones and printers through common access card certificates, and uses this process to determine if these devices are allowed access to the base’s network,” said Senior Airman David Barksdale, a base infrastructure shop technician assigned to the 6th CS who has been configuring, installing and integrating the new servers into the network. “This keeps adversaries from being able to plug in any laptop and gaining access to potentially harmful information. The more control we have over who can and can’t get onto the base’s network and access its resources, the better protected we are.”
While CISE allows for more flexibility with equipment, as well as improving security, this new upgrade may initially cause glitches for users.
“The biggest issue so far is that if people haven’t received the proper updates, it just blocks you from the network,” Evans said. “Printers are the second issue because the network upgrade is coinciding with a printer update.”
According to Evans, MacDill AFB is the first Air Mobility Command base to fully implement CISE as part of an overall larger effort to keep the base’s mission safe from cyberattacks.
“If your response time from the Communications Squadron is slow as of late, just know that it is only temporary as the team prepares for the base Command Cyber Readiness Inspection at the end of August,” said Selonke. “Passing this inspection will require every member of the MacDill team to understand how to mitigate cybersecurity threats. The first place you should look for answers is your annual cybersecurity ADLS training.”
The 6th CS team is working around the clock to finalize the upgrade as soon as possible and minimize impact.
“These inconveniences should be minimal,” said Evans. “The original estimated completion date was September 30, and we’re on track to be completed by late June.”
Just like any cybersecurity upgrade, there will be connectivity issues. If there are issues with phones, printers or computers not working, resetting should fix the problem. If resetting these items does not work, please call the communications focal point at 828-2666.