1. UNCLASSIFIED US BICES-X TNE Introduction and Services 2 June 2015

2. UNCLASSIFIED Training Overview Introduction Account Request Process Support Documents and Help Process Summary 2

3. UNCLASSIFIED US BICES-X Mission and Purpose The DoD requires an enduring, secure information sharing capability with partners around the world US BICES-X provides a system capable of conducting planning through execution of any mission or operation US BICES-X is capable of bilateral and multinational communications and ensures the security and the releasable aspect of all information 3

4. UNCLASSIFIED What is US BICES-X US BICES-X is not a traditional network but rather a cross-domain solution that connects multiple networks The United States and several partner networks are connected via US BICES-X: –US SIPRNet –United States Battlefield Information Collection and Exploitation System (US BICES) Network 28 NATO Countries + 7 Non-NATO Countries –Bilateral connections to various single country networks 4

5. UNCLASSIFIED Trusted Network Environment ® (TNE) The Trusted Network Environment (TNE) is an environment within US BICES-X that controls access to data sent via 3 services (Email, Chat, and File Share) –Separate accounts are required for access to TNE Chat and File Share services –TNE is a classification-based environment based on the network the user is gaining access from Trusted Network Environment (TNE) TNE Services Available: Email Chat File Manager US BICES-X 5

6. UNCLASSIFIED TNE Method The 3 TNE services have 2 common features: –Items are marked with classification markings (email message, chat room, and files) –Classification markings determine who has access to it TNE files are posted to one data repository where all users can view the information if it contains a classification commensurate with their connected network A classification marking of Secret dominates TNE EXAMPLE: File A labeled “Rel to Zz” and File B labeled “Rel to Yy” can be in the same database Users from the Zz network can only see file A, but not file B 6

7. UNCLASSIFIED TNE Account Request Users will contacts the Coalition Support Service Desk (CSSD) The CSSD will email users an Account Request form to be completed and returned to the CSSD The CSSD will submit a ticket for the new account –Attach the completed Account Request form to the ticket –A TNE Administrator will create the account –Users will receive their new account user name and initial password via an email message once their account is created 7

8. UNCLASSIFIED User Support User can contact the CSSD for help with: –New Account Requests –Account Lock Out/Password reset support –System outage help –Slow system help –Contact numbers provided at the end of this presentation 8

9. UNCLASSIFIED Help Documents and Training Numerous help documents are available –User Guides –Manuals Training –Training slides –Training classes Presented by US BICES trainers 9

10. UNCLASSIFIED Workstation Access Log onto your participating workstation using the credentials (user ID and password) provided when your account was created Your workstation has been configured to allow you access to TNE workstation based services –Email –File sharing* –Chat* If your workstation is not configured to access the TNE services contact your local network administrator *TNE User Accounts Required for Access 10

11. UNCLASSIFIED Email 11

12. UNCLASSIFIED Email Overview Most common communications tool used to transmit messages or information across a network between two or more individuals or groups Use the Email application available on your local network All Emails transiting TNE must contain a classification line as the first line in your email 12

13. UNCLASSIFIED Email Requirements All messages must meet these requirements: –Contain a classification and caveats text line above and below the body of the message –Formatted in plain text vs. html –There currently is no size limits in TNE, but your local network may have limits 13

14. UNCLASSIFIED Classifications and Caveats All messages must contain a classification and caveat identifier at the top and bottom of the body of the message There are 3 classifications for CPN messages: –Unclassified –Confidential –Secret There are many caveats (stipulations) to select from –Refer to your local security classification guide for details –See the classification tool on the next slide for details 14

15. UNCLASSIFIED Classifications and Caveats (cont) All messages must have a caveat Classification//REL Caveats, (Caveats) SECRET//REL TO USA, XXX CONFIDENTIAL//REL TO USA, XXX UNCLASSIFIED//REL TO USA, XXX Classification Tool –Most Windows workstations have a classification program to classify and caveat messages –EUCOM SIPRnet uses Classify for Windows and EUCOM bilats and BICES use MW Classify No Classification Tool –If a classification tool is not available, you can manually enter a classification line at the top of your email Make sure it is in the appropriate format Example: SECRET//REL TO USA, CAN Classify for Windows *When sending an attachment, you must select the same classification for class with and without an attachment! 15

16. UNCLASSIFIED Rejected Emails Messages that are incorrectly classified will be rejected by the system Rejection message is the same for any issue –HTML vs. Plain text –Classification error –Release statement error 16

17. UNCLASSIFIED Plain Text Format All messages that travel across TNE are required to be formatted in plain text and not HTML Format and write your message * in plain text or your html message will lose its meaning when viewed in plain text To select plain text click the Format Text tab Click the Plain Text button and verify it stays enabled (yellow color) Type your message 17

18. UNCLASSIFIED HTML to Plain Text If you fail to type your message in plain text but realize it before you send: switch it to plain text Click the Plain Text button and then click the Continue button to change the format Note – messages sent within a country may be sent formatted in HTML. In country messages do not cross TNE thus plain text is not a requirement 18

19. UNCLASSIFIED Addressing Messages There are two options to address a message –Click the To button and use your in-country list –Type the address of the individual in the text box next to the To button Separate multiple addresses with a semicolon (;) There is no Global Address Listing (GAL) or directory to show all email addresses across the networks and all countries Your local network GAL will only lookup other uses on your network It is recommended that users find and contact key counterparts to build personalized email listings in order to conduct business A global address list is under development and will be available on the TNE web 19

20. UNCLASSIFIED Addresses Email address extensions for EUCOM connected networks Network@ Address SIPRNet mail.smil.mil US BICESbices.org EC-01 xxxx.srel.mil EC-02 usxx.srel.mil EC-03 usxx.srel.mil 20

21. UNCLASSIFIED Send When all aspects of the message have been addressed press the Send button to transmit the message 21

22. UNCLASSIFIED Email Dirty Words Email has a feature that checks for text in an attachment or body of the message that are considered “dirty” A dirty word could be an indicator the message classification should be kept Secret Dirty words will be stripped from attachments by TNE If a dirty word is in the body of a message it will be rejected by TNE Dirty Word Examples –Secret – “SECRETary” or “The secret to success is planning…” In both examples the dirty words feature will not allow an email message to be classified as confidential or unclassified If a message you think is not Secret will not reach you intended recipient please submit a ticket to request administrator assistance with trouble shooting and possibly placing a word like “secretary” on the clean word list 22

23. UNCLASSIFIED File Manager 23

24. UNCLASSIFIED File Manager Overview Users who want to share information (files) will be able to access/share authoritative data and finished Intelligence, Operations, and Plans products All finished products can be accessed or posted within the TNE File Manager Uploaded files are automatically labeled at the HIGH of their network connection Within this established framework, a logical folder structure will be set up by subject area, to facilitate easier access to shared and posted finished products: –Category 1 User = Download/Upload/Relabel permissions –Category 2 User = Download/Upload permissions –Category 3 User = Download permissions 24

25. UNCLASSIFIED Levels of Access and Responsibilities Users will be granted permission to operate within three user categories, or levels of access: Category 3 (Download files in shared folders) – Majority of Category 3 users must identify any inappropriately marked products to a Category 1 user Category 2 (Download and Upload files to shared folders) – Users will be allowed to: 1.Manage content on assigned folders 2.Upload documents on behalf of Category 3 users, as required Category 1 (Download, Upload, and Relabel) – Users will be allowed to change classification and releasable information in the shared folders 1.Accounts will be restricted to Foreign Disclosure Officers, Disseminators, nationally appointed release authorities, and administrators only 2.Only authorized to relabel files they own and cannot relabel files uploaded by other users. 25

26. UNCLASSIFIED Verify Your Access Category The title bar of your browser will verify your level of access It will state “CATX”, where the “X” is a 1, 2 or 3 indicating access category 26

27. UNCLASSIFIED Access File Manager Open a browser and enter the address provided in your account creation message The first time you access the TNE web you may be required to accept the TNE certificate Accept the consent notice Enter your credentials and click OK First time users must reset their password 27

28. UNCLASSIFIED Reset Password First time users must reset their password after initial log in All users must reset their password every 60 days Please note the restrictions of the new password on the change password page 28

29. UNCLASSIFIED Welcome Screen The Welcome Screen shows when your password expires 29

30. UNCLASSIFIED Access File Share (cont) On the Welcome Page look for the Applications menu and click the New Explorer Library link It opens a Windows Explorer type page where files and directories are listed 30

31. UNCLASSIFIED Download and View Files View files by downloading them first: 1.Click the file you wish to view Two file viewing options: Click the Down Arrow button Right-click then click Download a File option 2.Click either Open, Save, or Cancel on the pop up dialog as desired 3.View or use the file as desired 31

32. UNCLASSIFIED File Naming Convention All users should follow a set of file naming standards to ensure easy access and retrieval of information All content that requires recurring information products should be dated using the YYYYMMDD format and the file name (Example: 20140510-OIR-Reports) File names should be short and succinct, but provide enough information on the product contents to be discoverable Note: The only characters authorized in the naming convention are as follows: 0-9, A-Z, a-z, hyphen (-), period (.), underscore (_), and open and close parentheses () Failure to follow these naming conventions will result in the file not being uploaded –Spaces in the file name will automatically be replaced with underscores (_).bmp.gif.ppt.txt.bz2.gz.pptm.wmf.doc.jpeg.pptx.xls.docm.jpg.tar.xlsx.docx.pdf.tif.xlsm.emf.png.tiff.zip Supported File Types 32

33. UNCLASSIFIED Uploading (Posting) Files Users (Category 2 or 1) will have permission to upload files into folders Two file upload options: –Click the Up Arrow button –Right-click and select Upload File 33

34. UNCLASSIFIED Uploading (Posting) Files (Cont.) From the File Uploader window click on Select a File Select the file using the Choose a File to Upload dialog The file name selected will appear in the File 1 text box To upload click the Upload button Click the OK button on the Upload Status dialog –The Upload Status box will display the classification level your file will be labeled 34

35. UNCLASSIFIED Finalize the Upload After a short period (1 to 5 mins) after file upload click the Finalization Queue button In the window that appears click the check box to select the file then click the Accept Change button –If you file is not yet available you may have to hit refresh until the file appears. The larger the file the longer it takes. Click Yes on the Accept Changes dialog Close the Finalization Queue dialog The file is ready for use 35

36. UNCLASSIFIED Create/Delete Folders Category 1 users can create folders: Right click on any folder for a list of options –Create a New Folder (sub-folder) Select the New Folder Name Select the Security Level Select the Compartments (release) –Delete an Existing Folder –Make Folder Private/Public if required (folder owner only) –Folder mangers (View the manager of a folder) 36

37. UNCLASSIFIED Relabel Items Category 1 users can change the classification or releasable aspect of a file or folder Files are uploaded at your connection high with no release statement Click on the file to relabel it Click the Change File/Folder Label button Click the Yes button to confirm the desire to change 37

38. UNCLASSIFIED Relabel Items (cont) Select the new Security Level Select the new Compartments (release statements) Click the Change Classification button Click the Yes to confirm your change Click the OK in side car response window once change is made 38

39. UNCLASSIFIED Finalize the Change After a short period (1 to 5 mins) after the change click on the Finalization Queue button In the window that appears click the check box to select the file then click the Accept Change button Click Yes on the Accept changes dialog Close the Finalization Queue dialog The file security classification is changed 39

40. UNCLASSIFIED File Manager Dirty Words File Manager also has a Dirty Words feature for posted files A dirty word could be an indicator the message classification should be kept Secret File Uploads that contain a dirty word will not be uploaded by TNE If a dirty word is in the body of a message during a re-label, the re-label will not be allowed. Dirty Word Examples –Secret – “SECRETary” or “The secret to success is planning…” In both examples the dirty words feature will not allow an file to be uploaded at any level other than “Secret” If a message you think is not Secret will not reach you intended recipient please submit a ticket to request administrator assistance with trouble shooting and possibly placing a word like “secretary” on the clean word list 40

41. UNCLASSIFIED Email and File Manager Transfer Issues TNE inspects files for classification content and verifies the content is in accordance with the assigned classification before it passes through TNE (posts or email attachments) The system rejects some files based on technical issues or user error The workarounds or solutions to these known issues are listed in the next three slides 41

42. UNCLASSIFIED PowerPoint File Fixes Remove unnecessary Slide Master Formats (only keep the ones you're using) Check Slide Masters to ensure there are no embedded classification markings higher than the classification of your document Look at the content of each slide. If you have boxes overlapping, touching, or extending off the slide, any of those reasons will cause the file to not pass through the TNE successfully. 42

43. UNCLASSIFIED MS Office Files Fixes (PowerPoint, Excel, Word) Inspect the file for issues (remove Header/Footer (not in word otherwise it will strip your classification marking), Embedded documents, Macros, forms, ActiveX controls, Custom XML Data, Invisible Content, Off Slide Content, Comments and Annotations, and Notes just to name a few) –The steps to do this is covered on next slide Fix classification markings (comply with CAPCO i.e. SECRET//REL TO USA, MESF, not SECRET//REL MESF) Ensure classification markings are correct (a common mistake is when a period vs. a comma is used or putting an extra space in; e.g., SECRET// REL TO USA. MESF Dirty Words. Do not use the words UNCLASSIFIED, CONFIDENTIAL, or SECRET anywhere in your document unless it’s a classification marking. This will cause it to fail. Do a keyword search for those terms to ensure they are not present. Ensure your document has a REL TO classification marking (you cannot send a regular UNCLASSIFIED document/emails between networks, it has to be releasable to someone) Save your product as an Office 2003 Format (.doc,.xls,.ppt), instead of the normal 2007 or newer format (.docx,.xlsx,.pptx) If all else fails, save your product as a PDF. 43

44. UNCLASSIFIED Check File For Issues To check a file for issues such as hidden properties or personal information that may cause TNE to reject the file follow these steps: 1.Click File 2.Click Info 3.Click Check for Issues 4.Click Inspect Document 5.Check the items to inspect 6.Click Inspect 7.Remove issues that exist 8.Re-inspect as needed 9.Save the file 44

45. UNCLASSIFIED Chat 45

46. UNCLASSIFIED Chat Overview (U) Common uses of Chat –Relaying time sensitive information (troop contact; threat tippers, indications & warnings) –Collaboration between US BICES-X participating users –Command and Control (C2) of ISR platforms Users must have a TNE account to use this service TNE uses an XMPP chat server that is compatible with the TransVerse Chat Application User are required to have the TransVerse chat application installed on their local workstation. 46

47. UNCLASSIFIED Configure TransVerse Click the Start menu and type Transverse to find the TransVerse program. Click the application name to launch it Configure the New Account dialog that open as follows: –Login & password provided by account creation message –Click the check-boxes next to Save Password and Auto Login –My Chat Server: Enter xmpp146 –Click the Options button to expand the dialog box 47

48. UNCLASSIFIED Configuration (continued) Cross Domain tab – verify Disabled is selected for Cross Domain Mode Advanced tab –Connection Host: Enter the IP address of your network as provided by a TNE administrator –Port: Enter 5222 –Leave all other fields as defaulted Click Login 48

49. UNCLASSIFIED Change Password You are required to change your initial password when TransVerse opens or your account will be locked/disabled You are also required to change your password every 60 days Click Edit then Change Password Password rules: Minimum of 14 characters, contain at least one uppercase letter, one lower case letter, one special character (! @ # $ % ^ ( ) & *), one number, and cannot have any characters repeat more than three times Click Change Exit TransVerse Reopen TransVerse (if you checked the Save Password and Auto Login you will be automatically logged in) 49

50. UNCLASSIFIED Creating a Chat Room Chatting takes place within rooms Create a room as follows: –Click the My Places tab –Right click on the My Server folder –Select Add Room Room naming convention –Room names are constructed in three (3) parts and all spaces “ ” will be replaced with an underline “_”: Part 1 will be the abbreviated name of the operation (e.g., OIR). Part 2 will start the country of the subject area Part 3 will state the subject area, subject group/organization, or subject asset callsign the room is intended to be used for (e.g., Mosul_Dam, TF- 92, or MQ1_Hackney01). Click OK to create the room 50

51. UNCLASSIFIED Room Set Up The Configuration dialog appears automatically: –Set the classification and releasability for the room—default is the maximum level of the connection (cannot be changed once set) –Set the maximum number of room occupants (0=unlimited). –Ensure Make Room Publicly Searchable? and Make Room Persistent? are the only two boxes checked in the list. –These are the only features available in our environment Click OK 51

52. UNCLASSIFIED Chatting Double click on the desired room to communicate via chatting in it Number in parenthesis is the number of people in the chat room Type your information in the text box and press the Enter key Click the close button to leave the room New message notifications; system tray, Group chat tab, icon color changes 1. Message History 2. Enter new text and press the Enter key 52

53. UNCLASSIFIED Chat Buttons and Participants Chat Room Buttons –Undock –Scroll Lock –Session History –Disable Enter = Send –Find –Filter Participants –User Name format –FirstInitialLastNameCountry IE - jsmithusa Chat Participants 53

54. UNCLASSIFIED TransVerse Menu Edit –Change Password –Accounts – see set up of your account –Other items – not relevant View –My Places –Group Chat – a tab that contains all chat rooms you are active in –My Chat Sessions – a window that shows all open chat rooms Other Menu items are not relevant and not used in our environment 54

55. UNCLASSIFIED Destroy a Chat Room When the room is no longer needed - destroy it (only the room creator can destroy the room) 1.Enter the room you created 2.Click the Red X icon to destroy the room 3.Click Yes to confirm the destruction of it, then OK 4.The room will be gone the next time you log in 55

56. UNCLASSIFIED Disabled Features Invite others to chat User Search 160 character maximum per chat line (not a user preference but a system setting) Issues There are a few issues that will log you out if attempted. Issues will slowly be resolved over time. Issues, Features and Preferences Preferences Click the Edit menu then click Preferences –Adjust your preferences as desired –Suggest you click on Display then uncheck the Show HTML… checkbox 56

57. UNCLASSIFIED Reminders and Tips Reminder –US BICES-X allows users the ability to share information within a multi-domain environment as well as segregate and protect data based upon user profiles settings and access –Even with this type of safeguards in place, users must remain vigilant when it comes to network security –It is the individual user’s responsibility to adhere to instructions and regulations on Cybersecurity/Information Assurance set forth in host nation user agreements and by appointed security officers Tip –Suggest you create shortcuts on your workstation or browser for TransVerse Chat 57

58. UNCLASSIFIED Coalition Support Service Desk Contacts Phone –DSN: 314-268-2815 –Commercial: + 44 1480 84 2815 –VoIP: 001-311-2000 –VoSIP: 302-428-3501 Email –Classified: osd.molesworth.osd.mbx.USBICES-coalition-servicedesk@mail.smil.mil –Unclassified: coalitionsupport@usa.bices.org –Unclassified: osd.molesworth.osd.mbx.USBICES-coalition-service-desk@mail.mil 58

59. UNCLASSIFIED TNE Summary Services –Chat –File Share –Email Users on networks connected via US BICES-X can now communicate in a secure manner to support operations Information shared is only available to those they share it with User names and passwords required for: Chat File Share Email and File Share require the user to set the classification and caveats of the file or message Email requirements: Classification and caveat Plain text No size limit 59