The Department of Defense (DoD) Enterprise Email (DEE) service provides secure cloud-based email to the DoD enterprise that is designed to increase operational efficiency and facilitate collaboration across organizational boundaries. As an enterprise-wide service, DEE reduces the cost of operations and maintenance by consolidating hardware into DISA’s secure, global Defense Enterprise Computing Centers (DECCs). DEE creates a common platform for the DoD, ensuring Agencies can easily and effectively share information among virtual groups that are geographically dispersed and organizationally diverse. The technical and functional benefits of DEE include:
- Secure access to your email anywhere, at anytime, from any place, whether stationary or mobile
- Coordinating efforts by sharing individual, organizational, and resource calendars across the DoD
- Cost reduction of email by eliminating unnecessary administration and inefficient resource utilization, enabling resources to focus on other priorities
- Replication of data between the DECCs, ensuring communications are secure and available when needed
DEE is designed to support the deployment of email capability for 4.5 million users and a global address list (GAL) scaled to support 10 million objects (e.g., DoD common access card (CAC) personas and non person entities (NPEs). Using a modular design, DISA’s Enterprise Services has the capability to grow capacity to support the DoD. Infrastructure is located at strategic geographic locations around the globe. DISA replicates data between paired sites to facilitate continuity of operations (COOP) in the event of a catastrophic failure, which includes a 24/7 central service desk. This strategy ensures:
- Messages are protected and accessed securely
- The “guns, guards, and gates” offer security to protect an agency’s data from physical threats
- The DoD’s strategic initiatives and an organization’s mission are met
- Coordination of efforts by sharing individual, organizational, and resource calendars across the DoD
- Efficient operations and collaborative capabilities with DEE’s interoperability with Enterprise Services such as Identity and Access Management and the DoD Enterprise Portal Service (DEPS)
|Secure Access||DEE access is CAC Authenticated, users will gain access to their email with their Email certification using a transport layer security (TLS) session, S/MIME, and advanced mail messaging hygiene to protect your email|
|Mail Sanitization||DEE utilizes the Electronic Mail Security Gateway (EMSG) for Internet email traffic and McAfee GroupShield for all email|
|Autodiscover||Exchange Autodiscover allows users to set up their profile from Exchange when they sign in with their DEE address which they can obtain using Outlook Web Access|
|Cached Exchange Mode||DEE operates in Cached Exchange Mode which maintains a client-side copy of a users’ mailbox in Outlook and synchronizes the copy automatically with DEE. This allows users to maintain optimal responsiveness with the system even when network conditions exists that could otherwise affect users.|
|Non Person Entity Accounts||Non person entity accounts include distribution lists, organizational mailbox, audio/video conference bridge, room, vehicle, portable audio-visual device, other equipment, and miscellaneous NPEs as required.|
|Naming Standard||DEE follows the DoD Enterprise USERNAME, Display Name, and Email Address Standard under the authority of DOD Directive 8320.03 This directive is followed within DEE and DMDC for the creation of the persona and non-person entity @mail.mil email addresses and display names.Email address examples as follows:
Utilizing DISA Enterprise Service’s Pod technology architecture, DEE will support 105,000 (NIPR) and 41,000 (SIPR) users per Pod and is capable for scaling to the needs and size of an organization. Each Pod has the capacity to provide Enterprise Email service for users, local redundancy, and Continuity Of Operations (COOP) service for Pod(s) at other service delivery location(s). Pods include their own storage and archiving capacity, along with the components needed to provide mobile device services, terminate secure user sessions, and transfer mail.
DEE is designed to support the deployment of email capability for 4.5 million users and a global address list (GAL) scaled to support 10 million objects (e.g., DoD Common Access Cards personas and Non Person Entities).
DEE design provides redundancy both locally and remotely for all components of the system, replicating data between paired sites to facilitate COOP in the event of a catastrophic failure. DEE is implemented at all DISA DECC locations throughout the world to provide service and optimal performance based on geographic locations to users. These sites are strategically paired to provide COOP with each site having the capacity to support the primary instance and paired site in the event of a COOP situation. Data is continuously replicated from the primary site to the paired site. This design allows DEE to provide this service with 99.9% availability.
Service Desk Support
DEE provides a Level II, Tier I service desk to an organization’s Level I, Tier I and II end user support. DEE service desk will coordinate with an organization’s service desk to resolve incidents and problems related to DEE should they arise. DISA integrates organizations into the operational structure and provides 24/7 support through a central service desk – ensuring you receive the support and information assurance you need, when you need it most.
The DEE Service Desk utilizes a combination of remote access/control services and touch labor support for associated customer support to resolve incidents and problems related to DEE. The DEE Service Desk will escalate ticket(s) using their standard ticket procedures.
|Archiving||The archiving feature within DEE provides users with a PST free experience by automatically moving older messages (greater than 120 days) into a message archive. Once moved into the archive, users are able to reply, forward, or read attachments from any message. Archiving allows organizations to further restrict the use of PST’s and better control what data users are maintaining locally.Archiving takes place nightly and automatically requiring no user intervention. Messages that are older than 120 days will be archived and viewed as a message stub. The message stub contains a summary of the original message as well as a URL to retrieve the message.|
|Journaling||In order to adhere to legal and regulatory requirements, DEE provides the ability to retain all messages and their attachments sent to and from selected journaled mailboxes. A copy of messages and attachments are stored in a separate mailbox, often referred to as the message journal. Users are unable to delete or modify content contained in this mailbox, and messages are retained for a period of up to 10 years. Additionally, DEE has the ability to permit trusted administrators to search non-encrypted messages within journaled mailboxes.|
|Rights Managements||Rights management allows a sender to limit recipients’ ability to forward or print selected messages.*Requires a Microsoft Enterprise CAL|
|Mobility||Blackberry – DEE provides unclassified mobile email messaging to customers using the BlackBerry platform. The BlackBerry Enterprise Servers (BES) are co-located with the users’ Exchange mailboxes in DEE Pods deployed worldwide. Customers are able to select resources to receive administrative rights to the BlackBerry environment in order to provide Level I/Tier I or II support.|
VALUE TO OUR MISSION PARTNERS
DEE is built on a configurable, multi-tenant environment with the inherent capabilities of Microsoft Exchange 2010. DISA manages the common infrastructure that supports and provides the DEE solution. DEE enables an organization to:
- Efficiently and effectively work together by allowing users to exchange electronic mail including attachments among the DoD and other email systems
- Have calendar functionality with access to the GAL which consists of all CAC holders within the DoD, allowing users to coordinate across DoD Components
- Easily and effectively share information among virtual groups that are geographically dispersed and organzationally diverse through a common DoD platorm
DISA has standard performance level data available for our partners to view. Additional data can also be provided as requested. All performance data to be provided will be documented in the SLA which will be executed when the service is ordered.