CommPower: Multi-Function Gateway (MFG/MFI)

CommPower Presents:
The US e-Mail™ Multi-Function Gateway

Click on the image to enlarge.

CommPower's Multi-Function Gateway MFG (also known as the MFI) is a complete translator and server product that provides a transparent means through which disparate communities can exchange electronic data. Designed to accommodate both civilian and military user needs, the MFG (MFI) delivers unmatched trusted message handling in a secure, feature-rich and reliable environment.
Key features of the MFG (MFI) are illustrated as follows:

The product is available on NT 4.0 as well as UNIX platforms.
Connectivity to the MFG (MFI) is virtually limitless, providing the capability to support hundreds of discrete and individually managed interfaces using interface standards such as ACP123/STANAG 4406, X.400, AUTODIN (JANAP128 over Mode I and Mode II), NICS-TARE (ACP127 over EDC and Async), and Internet (SMTP-MIME).
In support of world-wide messaging, the MFG complies with the NATO STANAG 4406 and ACP123 messaging standards including full support of the MSP/CSP/Fortezza as well as S/MIME security functions, and conversion between the U.S. and NATO formats and protocols.
In addition to the general messaging security requirements, the MFG (MFI) employs an embedded B2 data labeling and exchange mechanism known as the Secure Network Queue Manager (SNQM) to provide true multi-level security/sensitivity processing.

Recognizing the need for flexibility in the areas of connectivity and security policy processing to support unique local/national requirements, the MFG offers the following customization features:
I/O API

The I/O API allows third party development of specialized legacy protocols for input/output of ACP127/JANAP128 messages (i.e. ship-to-shore protocols, FTP, etc.).

An I/O API toolkit, complete with source code examples, comes standard with the product to aid in the rapid development of the customized protocol.

Security Policy Translation Tables (SPTTs)

Security processing and label translation within the R3.0 MFG is driven completely via configurable Security Policy Translation Tables (SPTTs). These tables define the security policy in effect (i.e. the classification values, categories, and caveats), and specify the translation between legacy and X.411 formats. In addition, multiple spellings for each classification, category, and caveat are supported enabling the MFG to process security labels in any language, and also to recognize and process local and national labels.

These translation tables are maintained via the Security Policy Translation Table (SPTT) Toolset described separately.

Message Processing Extensibility (MPX) API

The MPX API allows an external, third party S/MIME-V3 module to be bolted onto the MFG for encryption and signature processing. Through use of this API, the MFG can be made to conform to virtually any local security policy.

This API is modeled after the most popular S/MIME toolkits (RSA, Baltimore, Getronics, and Entrust).

Ongoing enhancements to the product include intelligent routing via message content profiling and XML I/O capabilities. The profiling option includes an extensive profile administrative interface for creation and maintenance of the messaging profiles, each of which supports weighted zone searches and complex Boolean search criteria for more than 220 attachment types (i.e. Word, PowerPoint, PDF, text, etc.). These new capabilities will be available in 2001/2002.

The MFG is sold under two titles:

The Multi-Function Gateway (MFG) is the export version of the product and has been sold to NATO allies in the U.K., Denmark, Germany, Austria, Italy, Spain, Turkey, and Canada and to Saudi Arabia.

The Multi-Function Interpreter (MFI) is the U.S. version of the product. This DMS certified component is an integral part of the ongoing U.S. AUTODIN closure program and is solely responsible for all infrastructure DMS/AUTODIN transition activities.

More than 210 licenses of the MFI have been sold per July 2001.

US e-Mail™ & SNQM are Trademarks of CommPower, Inc.
UNIX is a registered Trademark of The Open Group
When printing hard copy output of this page, we recommend setting the printer driver to landscape orientation.

Download the Product Description for the MFG (MFI) as a .PDF file

Download the Product Description for the MFG (MFI) as a .TXT file

MFG (MFI) Features For DMS Release 2.2

The following table summarizes the features currently available in CommPower's U.S. e-mail MFG product line for DMS Release 2.2.

Feature Comments

Hewlett Packard HP-UX 10.2 Platform This platform is replaced by NT 4.0 at the time of Release 3.0 deployment.

JANAP128/ACP127 to X.400 routing based on Routing Indicators This functionality will allow JANAP128/ACP127 Plaindress and Codress messages as well as piloted messages and TARE RI addresses to be passed into DMS.

JANAP128/ACP127 Plain Language Address Office Code support Routing to the individual, rather than the post, will be achievable with this added capability.

SMTP Alias Table No longer will SMTP users be forced to address Military X.400 users using clumsy X.400 Distinguished Names.

Translation of the USMTF body part into JANAP128/ACP127 This body part is growing in popularity and thus the MFG will follow suit.

The ability to place the entire JANAP128/ACP127 message within the X.400 body To support profiling of messages by the DMS PUA, the MFG will support a configurable option whereby the X.400 body will contain the entire JANAP128/ACP127 message; not just what appears between the "BTs".

Translation between AUTODIN/NICS-TARE SVC messages, X.400 Non Delivery Reports and SMTP Non Delivery Reports No longer will the message originator be blind with regard to failed delivery attempts in another domain.

Expanded control/monitoring capabilities Thanks to our European customers, a host of enhanced reporting and monitoring features have been added to the product. These include: live message reports, automatic FLASH receipt handling, outbound queue viewing, automatic CSN reset, idle channel alarms.

Full ACP127(G) processing capabilities This feature is in extensive use within the European community.

Full Backside Switching capabilities The MFG is not just a gateway. Discrete JANAP/ACP I/O connections can be configured to fully support backside users. This support includes full JANAP/ACP127 message switching functionality.

Support for Security Guards Should the MFG determine that a message will travel across security domain boundaries, an additional token for the appropriate guard will be added to the message thus permitting security boundary processing to be carried out.

Enhanced Security Breach Handling The MFG has been enhanced to include additional reports and tools to aid the operator in analyzing and recovering from a possible security breach condition.

Message Identifier Cross Reference Report data associated with message traffic can now be obtained using either an AUTODIN/NICS-TARE message identifier or an X.400 message identifier. This eliminates the cross referencing procedures currently being practiced within DMS today.

Legacy Traffic Service Station Support In support of unmanned operations, the MFG has been enhanced to send error notifications directly to a designated traffic service station.

Miscellaneous Legacy Functionality In support of AUTODIN/NICS-TARE closure, the MFG has been enhanced to support a broader range of Legacy functionality. These enhancements include:

Relaxation of Straggler Validation.
Special Handling of NATO RESTRICTED for U.S. operations.
CAD (collective) handling.
Relaxed handling of addresses for which the MFG has no delivery responsibility.
Audible alarms.

Note: As with all specialized MFG functionality, configuration options exist to enable/disable.

Copyright © 2001 Communications & Power Engineering, Inc. ALL RIGHTS RESERVED.

< Back to Software Products


The following table summarizes the features currently available in CommPower's U.S. e-mail MFG product line for DMS Release 2.2.
Feature	Comments
Hewlett Packard HP-UX 10.2 Platform	This platform is replaced by NT 4.0 at the time of Release 3.0 deployment.
JANAP128/ACP127 to X.400 routing based on Routing Indicators	This functionality will allow JANAP128/ACP127 Plaindress and Codress messages as well as piloted messages and TARE RI addresses to be passed into DMS.
JANAP128/ACP127 Plain Language Address Office Code support	Routing to the individual, rather than the post, will be achievable with this added capability.
SMTP Alias Table	No longer will SMTP users be forced to address Military X.400 users using clumsy X.400 Distinguished Names.
Translation of the USMTF body part into JANAP128/ACP127	This body part is growing in popularity and thus the MFG will follow suit.
The ability to place the entire JANAP128/ACP127 message within the X.400 body	To support profiling of messages by the DMS PUA, the MFG will support a configurable option whereby the X.400 body will contain the entire JANAP128/ACP127 message; not just what appears between the "BTs".
Translation between AUTODIN/NICS-TARE SVC messages, X.400 Non Delivery Reports and SMTP Non Delivery Reports	No longer will the message originator be blind with regard to failed delivery attempts in another domain.
Expanded control/monitoring capabilities	Thanks to our European customers, a host of enhanced reporting and monitoring features have been added to the product. These include: live message reports, automatic FLASH receipt handling, outbound queue viewing, automatic CSN reset, idle channel alarms.
Full ACP127(G) processing capabilities	This feature is in extensive use within the European community.
Full Backside Switching capabilities	The MFG is not just a gateway. Discrete JANAP/ACP I/O connections can be configured to fully support backside users. This support includes full JANAP/ACP127 message switching functionality.
Support for Security Guards	Should the MFG determine that a message will travel across security domain boundaries, an additional token for the appropriate guard will be added to the message thus permitting security boundary processing to be carried out.
Enhanced Security Breach Handling	The MFG has been enhanced to include additional reports and tools to aid the operator in analyzing and recovering from a possible security breach condition.
Message Identifier Cross Reference	Report data associated with message traffic can now be obtained using either an AUTODIN/NICS-TARE message identifier or an X.400 message identifier. This eliminates the cross referencing procedures currently being practiced within DMS today.
Legacy Traffic Service Station Support	In support of unmanned operations, the MFG has been enhanced to send error notifications directly to a designated traffic service station.
Miscellaneous Legacy Functionality	In support of AUTODIN/NICS-TARE closure, the MFG has been enhanced to support a broader range of Legacy functionality. These enhancements include: Relaxation of Straggler Validation. Special Handling of NATO RESTRICTED for U.S. operations. CAD (collective) handling. Relaxed handling of addresses for which the MFG has no delivery responsibility. Audible alarms. Note: As with all specialized MFG functionality, configuration options exist to enable/disable.