The Marine Corps Systems Command has drafted the System/Subsystem Specification (SSS) for the End User Remote Access Solution (EU RAS) under the Marine Corps Enterprise Network (MCEN). The document outlines the need to modernize the existing VPN-based remote access method, which posed security vulnerabilities, by developing a new solution that enhances authentication and authorization protocols. The SSS details system requirements, verification methods, and necessary compliance with federal and DoD standards, including FIPS 140-2 certification and adherence to cybersecurity regulations.
Furthermore, it establishes operational requirements, including network capability specifications, system interface needs, and high availability measures to support up to 150,000 concurrent users. Key components such as the Policy Decision Point and Policy Enforcement Point are identified as crucial for managing secure access to MCEN resources. The document emphasizes maintaining compliance throughout the project lifecycle, focusing on both logistical considerations and user authentication needs.
In summary, this draft serves as a comprehensive guideline for designing and integrating a robust remote access capability into the Marine Corps enterprise environment, ensuring operational security and efficient resource utilization.
The Marine Corps is issuing a Request for Information (RFI) for an End User Remote Access Solution as part of the Marine Corps Enterprise Network (MCEN) initiative. This RFI is intended for market research to inform future procurement of a commercial product that enables secure remote connections for users, with potential expansion to Secure Service Edge (SSE) and Zero Trust Network Access (ZTNA) capabilities. It is explicitly stated that the Government is not seeking integrators at this time. Interested vendors are encouraged to provide feedback on the attached specifications, with submissions due by January 8, 2025. Key contact details and required vendor information are outlined, including the need to identify proprietary information clearly. The government emphasizes that responses will not be compensated and proprietary details will be protected as required by law. Overall, this RFI seeks to gather valuable insights from industry participants to refine future solicitations related to remote access solutions for the Marine Corps.