EFFECTIVE USE OF REMOTE WORK OPTIONS

[Tony]

UNCLASSIFIED//

ROUTINE

R 172159Z MAR 20 MID110000481380U

FM CNO WASHINGTON DC

TO NAVADMIN

INFO CNO WASHINGTON DC

BT
UNCLAS
PASS TO OFFICE CODES:
FM CNO WASHINGTON DC/N2N6//
INFO CNO WASHINGTON DC/N2N6//

MSGID/GENADMIN/CNO WASHINGTON DC/N2N6/MAR// 

NAVADMIN 068/20

SUBJ/EFFECTIVE USE OF REMOTE WORK OPTIONS//

REF/A/NAVADMIN/OPNAV/122210ZMAR20//

REF/B/NAVADMIN/OPNAV/142000ZMAR20//

REF/C/ALNAV/SECNAV/121914ZMAR20//

REF/D/MEMO/DON CIO/ACCEPTABLE USE OF DEPARTMENT OF THE NAVY INFORMATION 
TECHNOLOGY/25FEB2020//

REF/E/WEBPAGE/RAS GUIDE FOR NMCI USERS//

NARR/REF A IS NAVADMIN 064/20, NAVY MITIGATION MEASURES IN RESPONSE TO 
CORONAVIRUS OUTBREAK.  
REF B IS NAVADMIN 065/20, NAVY MITIGATION MEASURES IN RESPONSE TO CORONAVIRUS 
OUTBREAK UPDATE 1.  
REF C IS ALNAV 025/20, VECTOR 15 FORCE HEALTH PROTECTION GUIDANCE FOR THE 
DEPARTMENT OF THE NAVY (DON).  
REF D IS DON CIO ACCEPTABLE USE OF DEPARTMENT OF THE NAVY INFORMATION 
TECHNOLOGY.  
REF E IS REMOTE ACCESS SERVICES WEBSITE FOR NMCI USERS AT 
https ://homeport.navy.mil/support/topics/remote-access-services-
(ras)/?sort=date&page=1.//

POC/ERIC MCCARTNEY/CAPT/OPNAV N2N6G32/EMAIL:  ERIC.S.MCCARTNEY(AT)NAVY.MIL
/TEL:  571-256-8399/DSN 312-260-8399//

RMKS/1.  This is a joint OPNAV N2N6 and Fleet Cyber Command, and Commander 
TENTH Fleet message.

2.  In addition to references (a) and (b), and to further mitigate the spread 
of Coronavirus Disease 2019 (COVID-19), reference (c) directed implementation 
of maximum telework flexibilities for shore commands, consistent with command 
operational needs as determined by their heads.

3.  The Joint Force Headquarters for Department of Defense Information 
Networks (JFHQ-DODIN) has begun to initiate the blocking of streaming media 
websites (YouTube, Netflix, Pandora, etc.) and may soon block social media 
websites (Facebook, Instagram, etc.) to maximize operational bandwidth 
available for COVID-19 response.  Exceptions to these policies with mission 
justification may be approved by O6/GS-15 or above and submitted via Fleet 
Cyber Command Battle Watch Captain at EMAIL:  c10f_bwc.fct(at)navy.mil.

4.  The following guidance applies to shore commands using Navy and Marine 
Corps Intranet (NMCI) and ONE-NET, describing the capacity of remote work 
resources and the priority in which they should be leveraged.  We must be 
prudent and optimize the utilization of the available network resources.  
Currently, NMCI and ONE-NET can support roughly 240,000 simultaneous 
connections for Outlook Web Access (OWA) and 40,000 for Virtual Private 
Network (VPN) access.  NAVWAR and PMW-205 are working to expand capacity, 
where possible, over the next several weeks.  There are a limited number of 
Mobikey and Enhanced Virtual Desktop (EVD)/Virtual Desktop Infrastructure 
(VDI) instances that may be used to support telework.  Navy does not intend 
to negotiate any more licenses.  Navy has issued 35,000 Blackberry Unified 
Endpoint Management (UEM) devices (iPhone, iPad and other mobile devices).  
Bandwidth limitations preclude the addition of new devices.

5.  Utilize remote work options in the following prioritized order:
    a.  Mobikey and EVD.
    b.  Mobile devices with Blackberry UEM.  Consider downloading all of the 
Blackberry Work / Edit / Access applications to get full capability, 
including the ability to edit documents.  Reach to your local support team 
for help in getting these apps on your phone.
    c.  OWA.  Ensure OWA users have a signed agreement and are well trained 
on OWA requirements and best practices.  Command Access Card (CAC) readers 
are required for use with OWA.  A CAC reader that has been used on a personal 
computer may NOT be brought back to work and used to connect to the DOD 
Information Networks (DoDIN).  If a government CAC reader is brought home and 
used, it must remain at home.  Individual commands will determine whether 
individuals should bring Government CAC readers home permanently to support 
OWA use.  As heavy OWA use is expected during the implementation of these 
measures, users should connect periodically to stay updated, but disconnect 
afterward to facilitate access for other remote users.  Users with government 
laptops should access email via OWA vice Remote Access Service (RAS) whenever 
possible to reduce RAS connection load.  Naval Network Warfare Command 
(NETWARCOM) enabled OWA to support file download and upload when using 
Internet Explorer (IE) ONLY.  Other browsers will not permit download or 
upload of attachments as files.  The use of IE for file download and upload 
provides new, additional flexibility while using OWA and should relieve some 
of the need for RAS access.
    d.  RAS.  Use in accordance with references (d) and (e).  The ratio of 
government laptops to available connections is about four to one (159,000 
devices with only 40,000 simultaneous connections available).  Again, 
personnel with government laptops should connect via OWA for email access as 
a first option to limit RAS connection load.  Using RAS when needed; 
personnel should only connect to download or transmit emails, or to access 
other resources only accessible by VPN, and then log off to reduce RAS 
connection load.  Work offline until next period needed to 
transmit/receive/access.  NETWARCOM is implementing time restrictions on the 
VPN, so expect to be kicked off if you are logged on too long.

6.  Defense Collaboration Services (DCS) is an available option for 
collaboration and virtual meetings at https://conference.apps.mil.
SharePoint portals may be used for collaboration and file sharing, including 
Milsuite at https://www.milsuite.mil.  Navy users should use only the DoD 
approved collaboration tools and not seek out commercial collaboration 
sources for DoD-only events.

7.  Mobile SIPRNET Device.  Senior leaders requiring mobile SIPRNET access 
may submit a request for a DoD Mobility Classified Capabilities (DMCC) device 
via echelon II Command Information Officer (CIO).  Due to limited number of 
devices, echelon II CIO requests will be consolidated and reviewed by OPNAV
N2N6 for submission to Defense Information Systems Agency (DISA).

8.  Additional remote work guidance:
    a.  Properly protect ALL Personally Identifiable Information (PII) and 
Protected Health Information (PHI) data.
    b.  One significant limitation of OWA use is inability to encrypt or 
decrypt emails by default.  One alternative is to enable encryption via OWA 
by user intervention (by making the OWA link a Trusted Site in browser 
security settings and enabling S/MIME control).  See the instructions posted 
on the references page listed in paragraph 11.  Another alternative is the 
use of Department of Defense (DoD) Secure Access File Exchange (SAFE) as 
described below in paragraph 8.
    c.  If you need to purchase your own CAC reader, https://milcac.us/tweaks
lists the types of CAC readers best for your personal computer operating 
system.
    d.  For OWA, a government laptop should be the first choice; if no 
government laptop is assigned, use of a personal computer is permitted ONLY 
if a proper antivirus solution such as Microsoft Defender is operating on the 
device.  Antivirus solutions must be kept up to date.
    e.  Limit attachment file size to minimize network impact and prevent 
hitting inbox size limits.  If you must send large files, use services like 
DoD SAFE (https://safe.apps.mil).
    f.  Limit use of REPLY TO ALL when responding to group emails to minimize 
network traffic.
    g.  SIPRNET and JWICS accounts will continue to be disabled after 30 days 
without activity.  Consider logging in periodically to keep classified 
accounts active, even during this period of maximizing remote work.

9.  For secure and/or large file transfers, DoD SAFE is available for use.  
Both DoD CAC users and guests can use the service for UNCLASSIFIED files up 
to 8GB in size.  DoD SAFE is approved for transfer of FOR OFFICAL USE ONLY 
(FOUO), PII, and PHI data.  More information and the link to DoD SAFE can be 
found at the following link:  
https://www.doncio.navy.mil/ContentView.aspx?id=12723

10.  When using remote work options, information security is paramount.  As 
we continue to operate in remote work environment, we cannot allow ourselves 
to violate security protocols.  Using personal e-mail and other commercial 
services (e.g.:  Gmail, Zoom, WebEx, and others) for official business is not 
permitted.  The potential vulnerabilities open the door for our adversaries 
to collect information that could be used against us.  Getting the job done 
at the expense of information security is unacceptable.  It is better that 
work be delayed than be done in a way that compromises information.

11.  The NMCI and ONE-NET Help Desks are still the best avenue for help for 
individual users, along with seeking support with local representatives, such 
as NMCI assistant contract technical representatives (ACTRs).

12.  References in this NAVADMIN and links to additional remote work guidance 
can be found at 
https://portal.secnav.navy.mil/orgs/OPNAV/N2N6/DDCION/N2N6BC1/SitePages/Effec
tive%20Use%20of%20Remote%20Work%20Options.aspx

13.  Request widest dissemination.  This NAVADMIN will remain in effect until 
cancelled or superseded.

14.  Released by VADM Matthew J. Kohler, Deputy Chief of Naval Operations for 
Information Warfare, OPNAV N2N6.//

BT
#0001
NNNN
UNCLASSIFIED//