Web Enterprise Business (WEB.mil) provides customer organizations with a website content management system (CMS) and hosting solution referred to as AFPIMS, built with the Public Affairs (PA) mission in mind. The WEB.mil CMS is not meant to be an online publications library or document management system. It may not be feasible for our customers to use the CMS for this purpose.

Our online training resources at https://webtraining.dma.mil/ (CAC-enabled) will enable the average PA professional to post and share their news articles, releases, press advisories, transcripts, speeches, publications, biographies, contracts, imagery, and videos within AFPIMS. The PA professional will be able to share their content across the over 900 websites hosted in AFPIMS. The PA professional can also incorporate into their own content the existing content from the other AFPIMS websites.

There will be no need for the PA professional to rely on any special software or web services team that could affect their online performance or timeline. The PA professional can simply log in via an internet browser with their CAC from any location around the world, office, home, remote assignment, and complete their tasks at hand.

AFPIMS sites are designed so the content you see while editing appears as it does when it goes live for public viewers to see. The website in general, specific pages, or specific areas on a page can be customized with various levels of roles and permissions that establish controlled and standardized publishing workflows for any content to be posted. Examples of roles may include site manager, content manager, and content provider. More specific roles can be customized for the needs of the PA community. An example of permissions is a content provider allowed to only upload a news story and a content manager to actually approve it for the live post.

An AFPIMS login URL will be provided to the PA professional. Once logged into the site, the PA professional will have access to edit their sites’ content based on their roles and permissions.

AFPIMS integrates a suite of technologies: •

• The DVIDS Media Player pulls videos and audio uploaded to the DVIDS site onto your site for viewing by the public.
• YouTube videos can be embedded on your sites as well.
• The social media module in AFPIMS pulls in either Facebook or Twitter feeds or both.
• Standard website technology such as RSS and AddThis are also a part of the software collection that can be incorporated into any website. Orientation of the Public Affairs Mission, Technical and Web Design Perspective, Cybersecurity, Web Analytics, Customer Service, and WEB.mil Policy and Constraints.
• SiteGauge is currently the system used for metrics in AFPIMS to analyze traffic for your website and provides accurate and easy-to-understand web stats, web traffic statistics, and reports on your visitors.
• Akamai content delivery network (CDN) technologies will distribute your website content around the world within a matter of minutes from when a PA professional has posted new content or updated any current content.

American Forces Public Information Management System (AFPIMS) is a DotNetNuke core, browser-enabled content management system (CMS) developed with Microsoft .NET technology. AFPIMS customers will be provided an AFPIMS CAC-enforced Internet address (URL) to log into their respective AFPIMS web site(s). There is no special software needed to build or rebuild a website within AFPIMS. AFPIMS is basically a website builder with the following standardized design themes. 

DOD THEME (full width) - Website example at https://www.publicweb.dma.mil/

DOD THEME (not full width) - Website examples at https://mrdg.health.mil/ and https://www.unc.mil/

JOINT THEME (full width) - Website examples at https://ak.ng.mil/ https://www.arnorth.army.mil/ and https://www.2id.korea.army.mil/

JOINT THEME (not full width) - Website examples at https://ky.ng.mil/

AIR FORCE - Website example at https://www.af.mil/

MARINE CORPS - Website example at https://www.marines.mil/

NAVY (flagship version) - Website example at https://www.navy.mil/

NAVY (All Hands version) - Website example at https://allhands.navy.mil/

ARMY CORPS OF ENGINEERS - Website example at https://www.usace.army.mil/ 

Currently, at this time there is no Army-specific theme, however, this may change in the distant future. Most of our Army customers currently use the Joint Theme.

AFPIMS customers have the latitude to adjust a particular theme by customizing the cascading style sheet (CSS) code, but they will be responsible for maintaining such customized code and fixing it if it were to break due to scheduled maintenance, which may include periodic AFPIMS system updates.

AFPIMS makes the process of building websites and managing content simple and quick for even the most non-technical users. The functionality and features of AFPIMS is based on the use of modules. The available modules enable AFPIMS users to create and share website elements such as their news articles, releases, press advisories, transcripts, speeches, publications, biographies, contracts, imagery, and videos.

For a complete list of available modules or any other technical or functional details about AFPIMS please visit our online training resources at https://pwtraining.dma.mil/ (CAC Enabled).

Web Enterprise Business (WEB.mil) maintains the infrastructure and robust distribution system that meets all DoD standards for information security of AFPIMS websites. WEB.mil is accredited to host impact level 2 web sites, information cleared for public release, as well as some DoD private unclassified information not designated as controlled unclassified information (CUI) or critical mission data, but the information requires some minimal level of access control. Authorization To Operate (ATO) under the Low-Low-Low categorization level (Confidentiality-Low, Integrity-Low, Availability-Low).

Security objective of Confidentiality-Low Impact: The unauthorized disclosure of information could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals. Security objective of Integrity-Low Impact: The unauthorized modification or destruction of information could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals.

WEB.mil provides a Risk Management Framework (RMF) accredited, cloud-based hosting solution against threat actors. Our hosting solution is in accord with DoD best practices and aligned with forward-leaning initiatives articulated by the Secretary of Defense and DoD CIO to move into the cloud, decrease cost, and protect public-facing websites with a trusted leading content delivery network (CDN).

We notify AFPIMS customers and other mission partners whenever serious attacks are attempted, and make log/threat data available to AFPIMS customers upon request.

WEB.mil embraces modern agile processes to continually improve the code base for AFPIMS. Application security is baked into these processes by self-assessments and contracting with DISA for regular Web Vulnerability Scans (WVS). In addition, our developers are also responsive to findings reported by the public researcher (hacker) community.

WEB.mil was at the forefront of Secretary of Defense Ash Carter’s Force of the Future Initiatives, with the first-ever Department of Defense (DoD) bug bounty, “Hack the Pentagon.” The successes realized by this effort have led to additional bounties with DoD flagship domains and subdomains.

The Defense Vulnerability Disclosure Program (DVDP) spawned from the bounty effort and is proving to be of tremendous value to the Defense Department. The DVDP is evolving into a program that engages public researchers (hackers) to assess any DoD networked device connected to the public internet.

WEB.mil offers the Site Gauge web statistics analysis program as a means for web hosting customers to analyze statistics for their respective website(s). Site Gauge is a website traffic analysis application that provides near real-time statistics and analysis of user interaction with a website. Site Gauge enables Site Managers and Administrators to analyze their visitors, with the objective of interpreting and optimizing their website’s performance.

For new AFPIMS customers, a migration specialist will be assigned to provide the customer with guidance and assistance for the first 120 days of the actual website build or rebuild within AFPIMS, referred to as AFPIMS migration. After the 120 days of migration support or completion of the migration, whichever is sooner, the migration specialist is no longer expected to support the customer with their website content.

For any issues that don’t require updating content (i.e. something is broken, new user request), the customer will be expected to contact the Web Enterprise Business (WEB.mil) Service Desk.

The WEB.mil service desk has three SLAs, Tier-1, Tier-2, and Tier-3.

• Tier-1 support is basic troubleshooting of an issue and has a 3-hour initial response time and 8- hours to resolution SLA.
• Tier-2 support is when an issue is escalated for additional time and troubleshooting; this tier has a 10-business-day time to resolution.
• Tier 3 is for tickets that have been escalated for development support, and have a 90-business day time to resolution.

WEB.mil Service Desk provides support during normal duty hours between 0700 to 2100 Eastern Standard Time (EST) Monday through Friday, and 0900 to 1700 EST Saturday & Sunday, and *emergency on-call support after normal duty hours. Emergency on-call support is provided between 1800 EST and 0730 EST. The service desk can be contacted for both during normal duty hours and emergency on-call hours via email at dma.WebSD@mail.mil and phone at (301) 222-6600.

*Note: An emergency situation will need to fulfill the following criterion:

• The website is completely down and needs to be fixed immediately.
• AFPIMS is completely down and needs to be fixed immediately.
• A security incident (e.g. spillage) has occurred on the website.

WEB.mil is not responsible for the content of the AFPIMS customer’s website. The customer will be responsible for their entire website. WEB.mil will not perform any website/content management duties (i.e. page redirects, pages, text, imagery, etc.). This includes no support or development of any custom code for a specific customer. 

WEB.mil does not host the DNS for the AFPIMS customer’s public URL such as https://www.customer.mil/. The DNS (Domain Name System) is often referred to as the internet's phone book because it converts easy-to-remember hostnames like https://www.customer.mil/ to IP addresses like 216.58.217.46.

An authoritative DNS server holds the actual DNS records (A, CNAME, PTR, etc.) for a particular domain/ address. When a Web address (URL) is typed into a browser, DNS servers return the IP address of the Web server associated with that name. The DNS converts the URL https://www.customer.mil/ into the IP address 204.0.8.51. Without DNS, you would have to type the series of four numbers and dots into your browser to retrieve the web site, which you actually can do.

If you have an existing web site, then you already have an organization (authoritative DNS server) hosting your DNS. But, if you have a brand new web site that does not exist yet, then you will be responsible for hosting your DNS or finding an organization to host your DNS.

WEB.mil only hosts secure HTTPS for the AFPIMS customer’s public URL such as https://www.customer.mil/ and DOES NOT hosts non-secure HTTP such as http://www.customer.mil/. A White House Office of Management and Budget memorandum requires that all publicly accessible Federal websites and web services only provide service through a secure connection. There may be an additional cost to customers for Public Web to host non .mil or non .gov websites (i.e. .edu).

CUSTOMER REQUIREMENTS 

• New AFPIMS hosting requests must derive from government/military oversight. 
• Customers will use AFPIMS for updating their website content hosted by WEB.mil. 
• The AFPIMS user must have a government common access card (CAC) to access the AFPIMS login page. 
• The AFPIMS user must register for AFPIMS online training and complete before they are provided AFPIMS login credentials (username/password) for their new site. 
• Customer organization is responsible for hosting the DNS for their web domain or subdomain (web site) and registering any new URLs. 
  • Air Force organizations may need to register new URLs (af.mil subdomains) with Air Force Public Affairs Agency (publicweb@us.af.mil). 
  • Customer organizations may need to register any new .mil domains at https://www.nic.mil. 
  • Customer organizations may need to register any new .gov domains at https://www.dotgov.gov.

WEB SITE LIMITATIONS 

• All site content will be publicly released and fully accessible to the public. 
  • No password-protected or CAC-required areas are allowed on AFPIMS websites. 
• No FOUO or sensitive data will reside on AFPIMS websites. 
• No direct external database integration. 
  • API integration is acceptable but could require additional funds for configuration. 
• No custom web code, except for CSS and HTML. The customer is responsible for the use of any such custom code.
• No Common Gateway Interface (CGI) Bin Scripts. 
• No Personally Identifiable Information (PII) will reside on AFPIMS websites. Examples of PII include but are not limited to social security number, driver's license number, birth date, place of birth, and personal telephone numbers. 
• Data collected via web forms is not stored in AFPIMS databases. Such data can only be transmitted to customer designated email addresses.
• No support for server-side Java applets.
  • Support for client-side Java applets requires security analysis of code. 
• No third-party, executable code (i.e. DLL files, etc.) will run on the AFPIMS infrastructure. 
• WEB.mil does not provide DNS hosting support for AFPIMS customers. 
• WEB.mil will not update any content for AFPIMS customers.