INTERNET ACCESS POINT (IAP) DEMILITARIZED ZONE (DMZ)

Overview

The Internet Access Point (IAP) Demilitarized Zone (DMZ) VPN service provides mission partners the ability to obtain internet access through an MPLS layer 3 VPN at any Defense Enterprise Computing Center (DECC) location. It is an enterprise VPN service providing IAP internet access to mission partners across the DISN. This service is available as part of the DSS at any DSS location that includes SBU IP Data network (formerly known as NIPRNet).

The VPN ID for the IAP DMZ service is provided by DISA and will always be the same for every mission partner. IAP DMZ Service VPN ID is: DOL300230.

This service is the implementation of Multiprotocol Label Switching (MPLS) VPN to move traffic across the DISN from Internet Access Point (IAP) to DMZ Extension. Using Virtual Routing and Forwarding (VRF’s) and Virtual Firewalling techniques to terminate the connection at an enclave boundary.

NOTE: IAP DMZ service is an “internet only” service. Mission partners ordering this service will be connected to the DISN but will only have access to the World Wide Web. No access to DoD networks is available.

Value to Our Mission Partners

This service provides for logical and physical isolation of Public Internet facing applications at the DoD CC/S/A/FA provided DMZ locations.

Features

DISA managed VPN using Multi-Protocol Labeled Switching (MPLS)
Provides privacy and limits access to IP data to VPN members only
Quality of Service (QOS): will NOT be available to mission partners.
Circuit connection to DISN can be physical or virtual. Virtual connections are supported on a limited number of interface types. Contact the DGSC for the list of supported interfaces.

Rates

This is an "emerging" service and cannot yet be ordered via DDSF. It is expected to be available for ordering by 2Q 2015. Service will be available as a DISN Subscription Service (DSS) at any DSS location that includes NIPRNet IP Data.

Service Support

1-844-DISA-HLP (347-2457), Option 2
disa.dccc@mail.mil
disa.scott.conus.mbx.dccc@mail.smil.mil

Terms of Reference

Service Performance	Service performance is measured, monitored, and reported as defined in the Telecommunications Service Level Agreement, which can be found on the Telecommunications Service Level Agreement page.
Connection Approval	There are services that require a connection approval. Information regarding connection approvals can be found at the Enterprise Connection website for unclassified users, and at https://www.disa.smil.mil/connect website for classified users.
Customer Ordering Guide	For step-by-step information on how to order VPN Service, access the ordering guide available to mission partners. This is the Establish & Connect to a VPN consolidated guide detailing the steps to Establish a VPN and the steps to Connect to an Established VPN.

Additional Information

Service Lifecycle Status	Maintain & Sustain
Security Classification	Up to and including Sensitive but Unclassified (SBU)