ASTi products have a significant set of standard security features. Optional security features such as the security package or Information Assurance (IA) maintenance contract can also be added to the product to provide a further level of protection for systems running on classified or unclassified LAN or WAN. ASTi offers multiple levels of IA services to meet various customer requirements.

• Includes an NIAP-approved operating systems (OS) built on Red Hat^® Enterprise Linux^® (RHEL) version 5.x
• Minimizes open network ports by closing all ports not vital for the platform's operation
• Authenticates users by assigning unique user ID and passwords to individual accounts
• Multi-Level Security (MLS)
  • Security Enhanced Linux™ (SELinux) can be enabled
  • Faster MLS switching through use of iSCSI or Diskless network boot
• Diskless and iSCSI support offers:
  • Erasure of clients after powering off
  • Central model management
  • Time-saving solution (site visits, hard disk drive swapping, etc.)
• Restricts access to only essential configuration and management elements required for operation, resulting in limited secure remote access to the platform
• Tracks activities and modifications to the entire system, including: file system, processes, user actions (i.e. password changes), use of authentication services, and configuration changes
• BIOS password protection

» Standard IA

ASTi offers an additional security package that helps customers meet the DOD IA requirements for systems attached to a secure network. Typically the IA package is applied to the latest ASTi software revision, however it can be applied to a specific customer requested version. This benefits the military's land, sea and flight simulation world where custom software elements are frozen during acceptance testing. Security package features include:

• ASTi's IA hardening script
• Minimizes or eliminates all CAT I, II, III and IV issues
• ASTi SRR report against a specific STIG/SRR version
  • Provides a PDF report that documents the current status and actions required by the Designated Accrediting Authority (DAA)
  • Includes a high level summary and detailed sections organized by categories such as closed, manual review, false positive, waiver, open/future fix; an ASTi response is provided for all applicable Potential Discrepancy Items (PDIs)
• Includes one customer-requested update within a year of purchase

» IA Package

ASTi offers an ongoing IA maintenance contract for customers who require periodic patch updates. The IA maintenance contract includes all Security Package features and the following additional features:

• All Security Package features above²
• Includes scheduled software updates (quarterly or more frequent)
  • RedHat Network Patches
  • Latest ASTi software features and enhancements
• One, two and three year contracts available
• DIACAP approved for T4 product line. Contact ASTi for Voisus Server options.
• Tiered pricing structure to reduce cost as system count increases

» IA Maintenance

¹ DIACAP approved is currently only available on the T4 product line. Contact ASTi for Voisus Server options.

² The latest ASTi software release is always provided for the IA maintenance contract. Contact ASTi for complete details.