Private, Public or Hybrid
solutions to fit your need
STACS 200 was designed with confidence to meet NSA Suite B Cryptology.
It is designed to provide security against any known adversary.
STACS Secure Cloud (SSC)
STACS provides an efficient and cost-effective way to enhance and extend your company’s IT infrastructure. Our portfolio includes Public, Private and Hybrid options, assuring you the flexibility, reliability and security that your business demands. STACs eliminates the servers, network equipment and maintenance costs associated with operating your own infrastructure—resulting in significant savings.
Public is a highly available, highly redundant virtualized hosting platform built on a scalable, multi-tenant infrastructure; all housed in enterprise class data centers. IT resources— applications, compute, storage, and network—are securely delivered to you as a service, when and where you need them, and are all easily scalable to meet your changing business demands. And because it provides access to shared computing services and resources, you can benefit from excellent economies of scale. Public allows you to increase redundancy, decrease provisioning time for new servers and storage, save money by eliminating hardware support contracts, and enjoy quick expandability compared to hosting your own physical servers.
Private is a fully dedicated, not shared or multi-tenant virtualized, hosting infrastructure housed in enterprise class data centers. This is a great when your business demands the efficiency, flexibility, and reliability of cloud computing and wants the certainty of dedicated infrastructure for performance and security. It is also an ideal solution for businesses with heavy regulatory compliance requirements in place— such as HIPAA/HITECH—that also want to take advantage of the cost savings of a hosted, managed private cloud environment.
Hybrid gives you the best of both worlds: the best features of multi-tenant Public and dedicated Private environments, plus the ability to utilize physical hardware from your colocation environment. This allows you to utilize Hybrid for certain resources like compute and storage, and seamlessly integrate existing colocated backend resources, such as databases, into your solution via private layer 2 or 3 connections. You can also connect cloud compute resources directly into your colocation environment to handle overflow situations such as seasonal spikes that require extra compute capacity. The possibilities are limitless.
Leverages VMware VCloud Platform
High end, high availability HIPAA/ HITECH compliant cloud infrastructure
Enterprise grade hardware deployed in redundant implementations
Robust Service Level Agreements (SLAs)
Rapid scalability to immediately respond to business demands
Secure Web portal or API allows you to manage cloud resources on demand
Hosted in a data center, with fully redundant 2 (N+1) power, cooling, and connectivity
24x7x365 onsite Support
Cloud based ROIP
No Network Configuration Required
All endpoints require only an internet connection to connect to the ROIP Cloud, and all communications are automatically encrypted using a build-in VPN in all endpoints. Only a standard web browser is required to monitor ROIP activity and make configuration or security changes.
Private Cloud Capabilities
All capabilities provided by the STACS redundant server cloud are also available on a Private Cloud architecture using agency hosted servers. Private Cloud servers can be hosted on the internet using the build-in VPN encryption included in STACS ROIP, or run over a private, secure network for Military and Intelligence applications. Multiple, redundant servers hosted at geographically diverse locations are recommended. Several COTS servers have been qualified for STACS Private Cloud operations, or the STACS Site System can be used for small to medium sized agencies.
Very low overhead protocol for minimum backhaul cost and maximum audio quality
Standard protocols including SIP and ISSI are supported at all STACS ROIP endpoints, however, STACS uses proprietary protocols between endpoints to provide a better than 50% bandwidth savings over the protocols used by other vendor solutions. The STACS ROIP system automatically selects from several audio compression codecs based on the radios in use to maximize audio quality on all communications.
All communications encrypted using PKI and AES encryption
Whether operating on the open internet or on a private network, the STACS ROIP system uses RSA-2048 based public key cryptography to exchange AES-256 keys used to encrypt voice and control communications. AES keys are automatically rotated based on customer rules, and ECC based encryption is available as an alternative to RSA on customer request. Export systems are limited to AES- 128 except by waiver.
Push-to-Talk from Windows and Android
Push-to-talk ROIP clients are provided for Microsoft Windows(tm) and Android(tm) based systems. With appropriate credentials, Windows and Android users can connect to the STACS push-to-talk network from anywhere an internet connection is available and use their devices to monitor and participate in radio communications. Licensing is based on maximum concurrent users allowing push-to-talk software pre-deployment to all agency employees and outside resources to provide maximum readiness without unreasonable licensing fees. License limits are soft limits and are not enforced during emergencies allowing agencies focus on providing relief.
Bridge Recording and Audit Included
All communications over the STACS Cloud Server networks can be recorded including an audit history of all connections to the system. These recordings can be automatically delivered to agencies at the conclusion of an exercise or deployment or can be accessed interactively at any time. Recordings are normally retained for 90 days after the end of an exercise or deployment. Audit records including all configuration and administrative changes are retained for a minimum of 1 year and are continuously archived on an offline append-only server.
Cloud based VOIP
The STACS Cloud based VOIP Gateway Servers provide a geographically distributed, redundant infrastructure for handling phone calls between STACS endpoints and between STACS endpoints and the public telephone network. Multiple incoming and outgoing gateways provide a shared nothing VOIP network. Secondary incoming phone numbers are provided using separate carriers and usually in a separate area code to maximize system availability in case of a large-scale telephone network outage.
Incoming Number Portability across Backhauls
The STACS network automatically routes calls to your incoming phone numbers to the appropriate STACS system regardless of which backhaul is in use. Whether you are using BGAN, VSAT or cellular data backhaul, you can be reached using the same phone numbers. When a backhaul link is disrupted, the STACS system will automatically divert the phone call to any available backhaul link without dropping the call. If no available backhaul link can be established, the callers are informed of the situation via spoken message and given an opportunity to leave a voicemail message. The voicemail message will be delivered immediately on reestablishment of any backhaul link and delivered via an outgoing call to each party on the original call.
Cloud Conference Bridges
Distributed Cloud Conference Bridges are included with the STACS system. This conference system allows multiple users to participate in a conference bridge using either VOIP or ROIP/push-to-talk endpoints. A single audio link is used between each remote system and the Cloud VOIP Gateway Servers allowing up to 20 on-site users to participate in a conference call at the same bandwidth cost as a single phone call.
BYOD (Bring Your Own Device) Support
In addition to standard SIP based VOIP devices, STACS supports Windows, Android and IOS based soft phones at no additional cost. Using an Android or IOS cell phone on the STACS network does not require cellular service and allows for incoming and outgoing calls on the STACS phone system.
Internal Cell Phone Number Routing with Roaming
Personal and agency cellular numbers can be automatically routed inside the STACS network. If the cell phone is connected using the STACS BYOD support and another users on the STACS network dials the cell phone's cellular number, the call will automatically be forwarded inside the STACS network regardless of cellular coverage. Note that calls from the public telephone network to the cellular number cannot be routed through the STACS network and will not be completed if there is no cellular coverage.
Personal Extension Routing with Roaming
The STACS network provides personal extension numbers that can be assigned to agency personnel. Calls to these extension numbers will be completed automatically regardless of which STACS system the person is currently connected to. Cell Phone and Windows based clients can make and receive calls using their personal extension numbers when connected to the internet anywhere in the world.
Incident Role Extensions
Special extension numbers can be established for various roles in incident response. As staff log into and out of the system, these numbers are automatically routed to the phone (or phones) that are on duty in that particular role. These roles can be routed across STACS systems allowing (for example) extension 100 to be assigned to the Incident Commander. When the incident becomes a mutual response incident and another STACS system becomes active for the new coordinated response command, dialing 100 from any phone associated with the incident will automatically be routed to the new coordinated Incident Commander. Up to 100 role based extensions can be established and Incident Response Templates can be used to automatically invoke a preplanned set of role based extensions.
Virtual Response Network
The STACS VPN functionality automatically connects all STACS systems in an agency and optionally establishes connections across agencies based on MOU activation in a mutual response scenario. Template based firewall rules can be automatically enforced by the system between agencies. This Virtual Response Network allows on-site and off-site resources to be shared between agencies in realtime. On-site, off-site and EOC connected devices are supported allowing for video, audio, sensor and structured data to be coalesced into a single integrated dataset. The STACS VPN system utilizes standard Open VPN servers and clients with certificate based security to allow integration of VPN endpoints from third parties without compromising operational security.
Guest Agency Firewall
A local DMZ network can be established to provide internet access to a guest agency without providing access to local or remote agency network resources. Bandwidth limits can also be applied to the DMZ network to prevent guest agency operations from interfering with primary network operations. A cost limit (in dollars) can also be applied to the guest agency network preventing excessive consumption of expensive satellite time.
Cost Based Routing
The STACS system can manage up to 8 concurrent backhaul links. Each link defined with a cost (in dollars) per megabyte transferred over the network with optional usage tiers (e.g. $0/MB for the first 5GB and $0.10/MB beyond the first 5MB for a cellular plan). The system automatically tracks the availability of each backhaul link and will select the active link based on link reliability and capacity and the cost of each link. When operating under a declared emergency, the cost is ignored and only the reliability and capacity are used to determine the active backhaul link.
The STACS 200 system is completely modular. Only One primary device, the STACS 200IH, is required to provide a complete Voice, Data, Radio, Video, Sensor functionality and is available as a standalone device or as the core component of a packaged kit.
STACS 200PP Man Portable Package for Military Personnel, Strategic Forces, Field Agents, Public Safety, Disaster Relief, Third World Environment
STACS 200VP Vehicle Platforms of All Types both Commercial & Military
STACS 200MP Marine Platforms of All Types, Offshore Oil and Gas
STACS 200SP Critical Government Sites, EOC, Operating Bases, Utility Infrastructure, Educational Institutions, Hospitals, Banks
All systems may be expanded with additional 200IH or 200RM-2 devices.
Durability, Logistics, Life Cycle
The STACS 200 Integration Hub is IP 67 rated and designed for the most harsh environments and applications and meets relevant requirements of Mil-Std-202 and Mil-Std-810. The Integration Hub is designed for a minimum 10 year product life cycle with battery replacement approximately every five years. 12 The STACS 200 system is based on a Secure Linux platform with custom applications and management software. All software components are updated using over-the-air updates which can be applied automatically or on approval from the customer.