{"id":22338,"date":"2021-01-14T23:17:40","date_gmt":"2021-01-14T23:17:40","guid":{"rendered":"https:\/\/one.sightlinemg.com\/defensenews\/uncategorized\/2021\/01\/14\/pentagon-testing-office-finds-problems-again-with-network-security-system\/"},"modified":"2026-08-08T17:53:24","modified_gmt":"2026-08-08T17:53:24","slug":"pentagon-testing-office-finds-problems-again-with-network-security-system","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/defensenews\/pentagon\/2021\/01\/14\/pentagon-testing-office-finds-problems-again-with-network-security-system\/","title":{"rendered":"Pentagon testing office finds problems \u2014 again \u2014 with network security system"},"content":{"rendered":"\n

WASHINGTON \u2014 For the fourth year in a row, the Pentagon\u2019s chief weapons tester recommended Thursday that components stop migrating to a fraught network security system<\/a> until the department proves that the system can effectively help defend against cyberattacks<\/a>.<\/p>\n\n\n\n

The department\u2019s Joint Regional Security Stacks program faces numerous shortfalls, continuing to provide insufficient network defense capabilities<\/a>, according to the annual report from the Director of Operational Test and Evaluation office. Components should look to other cybersecurity programs in the department\u2019s pipeline, including work on zero trust, the report recommended.<\/p>\n\n\n\n

The security system is supposed to improve cyber situational awareness of DoD network defenders by increasing their ability to continuously monitor and analyze network traffic on the DoD information network (DoDIN). The program, managed by the Defense Information Systems Agency, is supposed to be deployed on both the Nonclassified Internet Protocol (IP) Router Network (NIPRnet) and Secret Internet Protocol Router Network (SIPRNet). Its capabilities include firewall functions, intrusion detection and prevention, enterprise management, and virtual routing.<\/p>\n\n\n\n

Migrations to the NIPRnet\u2019s security stacks system have continued \u201cdespite DOT&E recommendations to suspend them until the stacks are shown to be effective in operational testing,\u201d the report said. Assessments since 2016 found that the security system for NIPRnet hasn\u2019t helped network defenders protect against realistic cyberattacks, the report said.<\/p>\n\n\n\t