{"id":3725,"date":"2016-11-02T11:23:17","date_gmt":"2016-11-02T15:23:17","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/azuregov\/?p=3725"},"modified":"2016-11-02T11:23:17","modified_gmt":"2016-11-02T15:23:17","slug":"dod-region-preview-frequently-asked-questions","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/azuregov\/dod-region-preview-frequently-asked-questions\/","title":{"rendered":"DoD Region Preview frequently asked questions"},"content":{"rendered":"<p>Since announcing our Azure Government DoD Region Preview last week at Microsoft\u2019s Government Cloud Forum, we have had overwhelming interest from customers and partners in participating.\u00a0 We\u2019ve spent time compiling answers to the most frequently ask questions we\u2019ve heard to help customers and partners understand what this unprecedented investment from Microsoft means to the Department of Defense and its partners and how to qualify for access to the environment.<\/p>\n<p><b><span>What are the Azure Government DoD Regions?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>The <\/span><span>US DoD East and US DoD <\/span><span>Central <\/span><span>r<\/span><span>egion<\/span><span>s<\/span><span> are physically <\/span><span>separated<\/span><span> region<\/span><span>s<\/span><span> of <\/span><span>Microsoft <\/span><span>Azure architected to meet <\/span><span>US<\/span><span> Department of Defense (DoD)<\/span> <span>security requirements for cloud computing,<\/span><span> specifically <\/span><span>for data designated as <\/span><span>DoD Impact Level 5<\/span><span> per the DoD Cloud <\/span><a href=\"http:\/\/iasecontent.disa.mil\/cloud\/Downloads\/Cloud_Computing_SRG_v1r2.pdf\"><span>Computing Security Requirements Guide (SRG)<\/span><\/a><span>.\u202f\u202f<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>What is the difference be<\/span><\/b><b><span>tween Azure Government and the<\/span><\/b><b><span> Azure Government DoD Regions?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>Azure Government is a US government community cloud providing services for Federal, State and Local government customers, tribal, entities subject to ITAR, and solution providers performing work on their behalf. All Azure Government regions are architected <\/span><span>and operated <\/span><span>to meet the security req<\/span><span>uirements for DoD Impact Level 5<\/span><span> data<\/span><span> and FedRAMP High standards<\/span><span>.\u00a0\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><span>\u00a0<\/span><span>The Azure Government DoD regions are architected to support the <\/span><span>physical separation<\/span><span> requirements for Impact Level 5 data by providing dedicated compute and storage infrastructure for the use of DoD customers only.\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>What is the difference between Impact Level <\/span><\/b><b><span>4<\/span><\/b><b><span> and Impact Level <\/span><\/b><b><span>5<\/span><\/b><b><span> data?\u00a0<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>Impact Level 4 data is controlled unclassified information (CUI) that may include data subject to export control, privacy information protected health information and other data requiring explicit CUI designation (e.g. For Official Use Only, Law Enforcement Sensitive, Sensitive Security Information).<\/span><span>\u00a0<\/span><\/p>\n<p><span>Impact Level 5 data includes controlled, unclassified information <\/span><span>(CUI) <\/span><span>that requires a higher level of protection as deemed necessary by the information owner, public law or government regulation.\u00a0 Impact Level 5 data is inclusive of unclassified National Security Systems.<\/span><span>\u00a0 More information on the <\/span><span>SRG impact levels, their distinguishing requirements and characteristics <\/span><span>is available <\/span><span>in <\/span><a href=\"http:\/\/iasecontent.disa.mil\/cloud\/SRG\/index.html\"><span>section 3<\/span><\/a><span> of the <\/span><span>DoD Cloud Computing Security Requirements Guide<\/span><span>.<\/span><span>\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>What is Microsoft doing differently to support Impact Level 5 data?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>Impact L<\/span><span>evel 5 data <\/span><span>by definition <\/span><span>can only be processed in a dedicated infrastructure that ensures physical separation of DoD customers from non-Federal government tenants<\/span><span>.\u00a0 In delivering <\/span><span>the<\/span><span> US DoD East and US DoD <\/span><span>Central<\/span><span> regions, Microsoft is providing <\/span><span>an exclusive service for DoD customers that <\/span><span>meets an even higher bar than <\/span><span>DoD\u2019s stated requirements and <\/span><span>exceeds the level of protection and capability offered by any other hyperscale commercial cloud solution.<\/span><span>\u00a0\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>Do <\/span><\/b><b><span>these regions support classified data requirements?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>These Azure Government DoD regions support only unclassified data up to and including Impact Level 5.\u00a0 Impact Level 6 data is defined as classified information up to Secret.\u00a0\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>Wh<\/span><\/b><b><span>at organizations in the DoD can use the Azure Government<\/span><\/b><b><span> DoD Regions?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>The <\/span><span>US DoD East<\/span><span> and <\/span><span>US <\/span><span>DoD <\/span><span>Central <\/span><span>regions are built to support <\/span><span>the <\/span><span>US Department of Defense customer base.\u202f <\/span><span>This includes:\u00a0<\/span><span>\u00a0<\/span><\/p>\n<ul>\n<li><span>The Offi<\/span><span>ce of the Secretary of Defense<\/span><span>\u00a0<\/span><\/li>\n<li><span>The Joint Chiefs of Staff<\/span><span>\u00a0<\/span><\/li>\n<li><span>The Joint Staff<\/span><span>\u00a0<\/span><\/li>\n<li><span>The <\/span><span>Defense Agencies<\/span><span>\u00a0<\/span><\/li>\n<li><span>Departme<\/span><span>nt of Defense Field Activities<\/span><span>\u00a0<\/span><\/li>\n<li><span>The Department of the Army<\/span><span>\u00a0<\/span><\/li>\n<li><span>The Department of the Navy<\/span><span> (including the United States Marine Corps)<\/span><span>\u00a0<\/span><\/li>\n<li><span>T<\/span><span>he Department of the Air Force<\/span><span>\u00a0<\/span><\/li>\n<li><span>The United States Coast Guard<\/span><span>\u00a0<\/span><\/li>\n<li><span>The unified combatant commands<\/span><span>\u00a0<\/span><\/li>\n<li><span>O<\/span><span>ther offices, agencies, activities, and commands <\/span><span>under the control or supervision of any <\/span><span>approved entity<\/span><span> named above\u00a0<\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<p><b><span>Are the DoD regions more secure?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>Microsoft operates all of its Azure datacenters and supporting infrastructure to comply with local and international standards for security and compliance &#8211; leading all commercial cloud platforms in compliance investment and achievemen<\/span><span>ts<\/span><span>.\u202f These new DoD regions will provide specific assurances and commitments to meet the requirements defined in the DoD SRG for Cloud Computing.<\/span><\/p>\n<p><b><span>Why are there multiple DoD regions?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>By having multiple DoD regions, Microsoft provides customers with the opportunity to architect their solutions for <\/span><span>disaster recovery<\/span><span> scenarios across regions to ensure business continuity and satisfy requirements for system accreditation.\u00a0 In addition, customers may optimize performance by deploying solutions in the geography within closest proximity to their physical location.\u00a0\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>Are these DoD regions connected to the NIPRNet?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>The DoD mandates that commercial cloud services used for CUI must be connected to customers through a Cloud Access Point (CAP).\u00a0 <\/span><span>The<\/span><span>refore,<\/span> <span>the <\/span><span>Azure DoD regions are <\/span><span>connected to the NIPRNet through redundant connections to <\/span><span>multiple geographically distributed CAPs<\/span><span>.\u00a0 A DoD CAP is a system of network boundary protection and monitoring devices that offer protection to DoD information system network and services.\u00a0\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>When will the Azure Government DoD Regions be available?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>We <\/span><span>are working with DoD customers who are interested in <\/span><a href=\"https:\/\/blogs.msdn.microsoft.com\/azuregov\/2016\/10\/26\/preview-of-new-department-of-defense-regions-in-azure-government\/\"><span>previewing<\/span><\/a><span> the DoD regio<\/span><span>ns to provide them with access<\/span><span>.\u00a0 We <\/span><span>expect <\/span><span>the DoD <\/span><span>regions to <\/span><span>be accredited at Impact Level 5 by the government by the end of calendar year 2016 and <\/span><span>to <\/span><span>make our DoD regions <\/span><span>generally <\/span><span>available to <\/span><span>all <\/span><span>DoD customers<\/span><span> with financially-backed service level agreements<\/span> <span>in January of 2017.<\/span><\/p>\n<p><b><span>How<\/span><\/b> <b><span>does a DoD customer<\/span><\/b> <b><span>acquire Azure <\/span><\/b><b><span>Government <\/span><\/b><b><span>DoD services<\/span><\/b><b><span>?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>Azure <\/span><span>Government <\/span><span>DoD services <\/span><span>may be purchased by qualified entities <\/span><span>through the same <\/span><a href=\"https:\/\/azure.microsoft.com\/en-us\/offers\/azure-government\/\"><span>reseller channels<\/span><\/a><span> as Azure Government.\u00a0 <\/span><span>In keeping with Microsoft\u2019s commitment to make cloud services <\/span><span>a<\/span><span>cquisition<\/span><span> planning and cost estimation<\/span><span> simple, pricing for Azure Government DoD regions will be included in the Azure <\/span><span>Pricing calculator at the time of general availability.\u00a0 <\/span><span>Azure Government DoD services <\/span><span>can quickly scale up or down to match demand, so you only pay for <\/span><span>what you use.<\/span><span>\u00a0<\/span><\/p>\n<p><span>No contractual modifications will be required for Enterprise Agreement customers already using Azure Government.<\/span><span>\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>How <\/span><\/b><b><span>does a DoD organization get validated for the Azure Government DoD regions<\/span><\/b><b><span>?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>In order to gain access to the Azure DoD regions, customers must complete a pre-qualification process for verifying their organization and intended use of the Azure DoD environment.\u00a0 After successful completion of the pre-qualification process, Microsoft will provide the organizational applicant with further instructions for creating a subscription, accessing the environment and providing role-based access control to other members of the organization.\u00a0\u00a0<\/span><span>\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>Can independent software vendors and solution providers building on Azure deploy solutions in the <\/span><\/b><b><span>Azure Government DoD<\/span><\/b><b><span> regions<\/span><\/b><b><span>?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>S<\/span><span>olution providers <\/span><span>with cloud service offerings<\/span><span> built on <\/span><span>Azure <\/span><span>may <\/span><span>operate<\/span> <span>DoD<\/span><span>-only<\/span> <span>single tenant and multi-tenant solutions <\/span><span>in the Azure Government DoD regions<\/span><span>.\u00a0 These providers <\/span><span>must first<\/span><span> demonstrate eligibility<\/span><span> by providing documented evidence of a contract with an approved DoD entity or have a sponsor let<\/span><span>ter from an approved DoD <\/span><span>entity.\u00a0 <\/span><span>P<\/span><span>roviders offering service<\/span><span>s<\/span><span> in the Azure Government DoD regions<\/span><span> must <\/span><span>include<\/span> <span>computer network defense, incident reporting and screened personnel for operating solutions handling Impact Level 5 information<\/span><span> in their offering<\/span><span>.<\/span><span>\u00a0 Additional guidance for <\/span><span>solution providers may be found in the DoD Cloud Computing S<\/span><span>ecurity <\/span><span>R<\/span><span>equirements <\/span><span>G<\/span><span>uide<\/span><span>.<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>Will Office 365 or <\/span><\/b><b><span>Microsoft Dynamics 365 <\/span><\/b><b><span>be a part of this offering?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>Microsoft is providing Office 365 services for the DoD at Impact Level 5 in conjunction with this offering.\u00a0 Dynamics 365 is planning to offer Impact Level 5 services from the Azure DoD regions at a future date.\u00a0\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>How do I r<\/span><\/b><b><span>equest to join the DoD Region Preview?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>In order to gain access to the Azure DoD regions, customers must complete a pre-qualification process for verifying their organization and intended use of the Azure DoD environment. After successful completion of the pre-qualification process, Microsoft will provide the organizational applicant with further instructions for creating a subscription, accessing the environment and providing role-based access control to other members of the organization. If you represent a DoD entity interested in previewing our DoD regions, please contact your Microsoft sales team or contact us at <\/span><span>AzureGovtDoDPreview@microsoft.com<\/span> <span>to begin this validation process.<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>How do I connect to the DoD Region Preview once I have a subscription?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>The DoD regions for Azure Government are available through the Azure Government management portal at <\/span><a href=\"https:\/\/portal.azure.us\/\"><span>https:\/\/portal.azure.us<\/span><\/a><span>.<\/span><span>\u00a0 DoD customers approved for use will see the regions listed as available options whe<\/span><span>n deploying available services.<\/span><span>\u00a0 For general guidance on managing your Azure Government subscriptions please consult our <\/span><a href=\"https:\/\/azure.microsoft.com\/en-us\/documentation\/articles\/documentation-government-manage-subscriptions\/\"><span>documentation<\/span><\/a><span>.<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>What Data is categorized as Impact Level 5?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>Level 5 accommodates controlled unclassified information (CUI) that requires a higher level of protection than that afforded by Level 4 as deemed necessary by the information owner, public law, or other government regulations. Level 5 also supports unclassified National Security Systems (NSSs).\u00a0 This level accommodates NSS and CUI information categorizations based on CNSSI-1253 up to moderate confidentiality and moderate integrity (M-M-x).\u00a0<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>How will usage be billed during the Preview period?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>The DoD Region Preview is a no cost <\/span><a href=\"http:\/\/azure.microsoft.com\/en-us\/support\/legal\/subscription-agreement\/?country=US\"><span>subscription agreement<\/span><\/a><span> with<\/span> <a href=\"https:\/\/azure.microsoft.com\/en-us\/offers\/ms-azr-usgov-0036p\/\"><span>specific terms and conditions<\/span><\/a><span>.<\/span><span>\u00a0<\/span><\/p>\n<p><b><span>What services are available during the DoD Region Prev<\/span><\/b><b><span>iew?<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>The following services are planned to be available during the DoD Region Preview.\u00a0 Additional services are being added to the roadmap for the DoD regions following general availability:<\/span><span>\u00a0<\/span><\/p>\n<table class=\"table table-bordered table-condensed table-striped\">\n<tbody>\n<tr>\n<td><b><span>Management<\/span><\/b><span>\u00a0<\/span><\/p>\n<ul>\n<li><span>Azure Resource Manager<\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<p><b><span>Security<\/span><\/b><span>\u00a0<\/span><\/p>\n<ul>\n<li><span>Key Vault<\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<p><b><span>Hybrid Integration<\/span><\/b><span>\u00a0<\/span><\/p>\n<ul>\n<li><span>Service Bus<\/span><span>\u00a0<\/span><\/li>\n<li><span>Azure Batch<\/span><span>\u00a0<\/span><\/li>\n<li><span>Event Hubs<\/span><span>\u00a0<\/span><\/li>\n<li><span>Scheduler<\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<p><b><span>Data<\/span><\/b><span>\u00a0<\/span><\/p>\n<ul>\n<li><span>SQL Database<\/span><span>\u00a0<\/span><\/li>\n<li><span>RedisCache<\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<p><span>\u00a0<\/span><\/td>\n<td>&nbsp;<\/p>\n<p><b><span>Storage\u00a0<\/span><\/b><span>\u00a0<\/span><\/p>\n<ul>\n<li><span>Blob<\/span><span>\u00a0<\/span><\/li>\n<li><span>Table<\/span><span>\u00a0<\/span><\/li>\n<li><span>Azure Files\u00a0<\/span><span>\u00a0<\/span><\/li>\n<li><span>Queues<\/span><span>\u00a0<\/span><\/li>\n<li><span>Premium Storage (SSD)<\/span><span>\u00a0<\/span><\/li>\n<li><span>Import\/Export<\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<p><b><span>Compute<\/span><\/b><span>\u00a0<\/span><\/p>\n<ul>\n<li><span>A Series Virtual Machines<\/span><span>\u00a0<\/span><\/li>\n<li><span>D &amp; DS Series Virtual Machines (including v2)<\/span><span>\u00a0<\/span><\/li>\n<li><span>F &amp; FS Series Virtual Machines<\/span><span>\u00a0<\/span><\/li>\n<li><span>Cloud Services<\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<p><b><span>Networking<\/span><\/b><span>\u00a0<\/span><\/p>\n<ul>\n<li><span>Load Balancer<\/span><span>\u00a0<\/span><\/li>\n<li><span>Virtual Networking\u00a0<\/span><span>\u00a0<\/span><\/li>\n<li><span>VPN<\/span><span>\u00a0<\/span><\/li>\n<li><span>ExpressRoute<\/span><span>\u00a0<\/span><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><b><span>Who do I contact for technical assistance during the Preview?\u00a0<\/span><\/b><span>\u00a0<\/span><\/p>\n<p><span>An onboarding session may be requested as part of the Preview program.\u00a0 On<\/span><span>c<\/span><span>e you have been validated as an eligible DoD entity, this session may be requested through <\/span><a href=\"https:\/\/aka.ms\/AzureGovSupport\"><span>https:\/\/aka.ms\/AzureGovSupport<\/span><\/a><span> by specifying Problem Type: \u2018Onboarding\u2019 and Category: \u2018Schedule a partner <\/span><span>or customer onboarding call\u2019.\u00a0 <\/span><span>For additional technical support throughout the Preview period, please contact <\/span><span>DoDRegionSupport@microsoft.com<\/span><span>.<\/span><span>\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Since announcing our Azure Government DoD Region Preview last week at Microsoft\u2019s Government Cloud Forum, we have had overwhelming interest from customers and partners in participating.\u00a0 We\u2019ve spent time compiling answers to the most frequently ask questions we\u2019ve heard to help customers and partners understand what this unprecedented investment from Microsoft means to the Department [&hellip;]<\/p>\n","protected":false},"author":1771,"featured_media":20423,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2,9,25],"tags":[75,95,262,285],"class_list":["post-3725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-announcements","category-events","category-portalpreview","tag-azure","tag-azure-government","tag-dod","tag-faq"],"acf":[],"blog_post_summary":"<p>Since announcing our Azure Government DoD Region Preview last week at Microsoft\u2019s Government Cloud Forum, we have had overwhelming interest from customers and partners in participating.\u00a0 We\u2019ve spent time compiling answers to the most frequently ask questions we\u2019ve heard to help customers and partners understand what this unprecedented investment from Microsoft means to the Department [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts\/3725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/users\/1771"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/comments?post=3725"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/posts\/3725\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/media\/20423"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/media?parent=3725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/categories?post=3725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/azuregov\/wp-json\/wp\/v2\/tags?post=3725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}