Web Enterprise Business (WEB.mil) provides customer organizations with a website content management system (CMS) and hosting solution referred to as AFPIMS, built with the Public Affairs (PA) mission in mind. The WEB.mil CMS is not meant to be an online publications library or document management system. It may not be feasible for our customers to use the CMS for this purpose.
Our online training resources at https://pwtraining.dma.mil/ (CAC-enabled) will enable the average PA professional to post and share their news articles, releases, press advisories, transcripts, speeches, publications, biographies, contracts, imagery, and videos within AFPIMS. The PA professional will be able to share their content across the over 900 websites hosted in AFPIMS. The PA professional can also incorporate into their own content the existing content from the other AFPIMS websites.
There will be no need for the PA professional to rely on any special software or web services team that could affect their online performance or timeline. The PA professional can simply log in via an internet browser with their CAC from any location around the world, office, home, remote assignment, and complete their tasks at hand.
AFPIMS sites are designed so the content you see while editing appears as it does when it goes live for public viewers to see. The website in general, specific pages, or specific areas on a page can be customized with various levels of roles and permissions that establish controlled and standardized publishing workflows for any content to be posted. Examples of roles may include site manager, content manager, and content provider. More specific roles can be customized for the needs of the PA community. An example of permissions is a content provider allowed to only upload a news story and a content manager to actually approve it for the live post.
An AFPIMS login URL will be provided to the PA professional. Once logged into the site, the PA professional will have access to edit their sites’ content based on their roles and permissions.
AFPIMS integrates a suite of technologies: •
American Forces Public Information Management System (AFPIMS) is a DotNetNuke core, browser-enabled content management system (CMS) developed with Microsoft .NET technology. AFPIMS customers will be provided an AFPIMS CAC-enforced Internet address (URL) to log into their respective AFPIMS web site(s). There is no special software needed to build or rebuild a website within AFPIMS. AFPIMS is basically a website builder with the following standardized design themes.
DOD THEME (full width) - Website example at https://www.publicweb.dma.mil/
DOD THEME (not full width) - Website examples at https://mrdg.health.mil/ and https://www.unc.mil/
JOINT THEME (full width) - Website examples at https://ak.ng.mil/ https://www.arnorth.army.mil/ and https://www.2id.korea.army.mil/
JOINT THEME (not full width) - Website examples at https://ky.ng.mil/
AIR FORCE - Website example at https://www.af.mil/
MARINE CORPS - Website example at https://www.marines.mil/
NAVY (flagship version) - Website example at https://www.navy.mil/
NAVY (All Hands version) - Website example at https://allhands.navy.mil/
ARMY CORPS OF ENGINEERS - Website example at https://www.usace.army.mil/
Currently, at this time there is no Army-specific theme, however, this may change in the distant future. Most of our Army customers currently use the Joint Theme.
AFPIMS customers have the latitude to adjust a particular theme by customizing the cascading style sheet (CSS) code, but they will be responsible for maintaining such customized code and fixing it if it were to break due to scheduled maintenance, which may include periodic AFPIMS system updates.
AFPIMS makes the process of building websites and managing content simple and quick for even the most non-technical users. The functionality and features of AFPIMS is based on the use of modules. The available modules enable AFPIMS users to create and share website elements such as their news articles, releases, press advisories, transcripts, speeches, publications, biographies, contracts, imagery, and videos.
For a complete list of available modules or any other technical or functional details about AFPIMS please visit our online training resources at https://pwtraining.dma.mil/ (CAC Enabled).
Web Enterprise Business (WEB.mil) maintains the infrastructure and robust distribution system that meets all DoD standards for information security of AFPIMS websites. WEB.mil is accredited to host impact level 2 web sites, information cleared for public release, as well as some DoD private unclassified information not designated as controlled unclassified information (CUI) or critical mission data, but the information requires some minimal level of access control. Authorization To Operate (ATO) under the Low-Low-Low categorization level (Confidentiality-Low, Integrity-Low, Availability-Low).
Security objective of Confidentiality-Low Impact: The unauthorized disclosure of information could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals. Security objective of Integrity-Low Impact: The unauthorized modification or destruction of information could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals.
WEB.mil provides a Risk Management Framework (RMF) accredited, cloud-based hosting solution against threat actors. Our hosting solution is in accord with DoD best practices and aligned with forward-leaning initiatives articulated by the Secretary of Defense and DoD CIO to move into the cloud, decrease cost, and protect public-facing websites with a trusted leading content delivery network (CDN).
We notify AFPIMS customers and other mission partners whenever serious attacks are attempted, and make log/threat data available to AFPIMS customers upon request.
WEB.mil embraces modern agile processes to continually improve the code base for AFPIMS. Application security is baked into these processes by self-assessments and contracting with DISA for regular Web Vulnerability Scans (WVS). In addition, our developers are also responsive to findings reported by the public researcher (hacker) community.
WEB.mil was at the forefront of Secretary of Defense Ash Carter’s Force of the Future Initiatives, with the first-ever Department of Defense (DoD) bug bounty, “Hack the Pentagon.” The successes realized by this effort have led to additional bounties with DoD flagship domains and subdomains.
The Defense Vulnerability Disclosure Program (DVDP) spawned from the bounty effort and is proving to be of tremendous value to the Defense Department. The DVDP is evolving into a program that engages public researchers (hackers) to assess any DoD networked device connected to the public internet.
WEB.mil offers the Site Gauge web statistics analysis program as a means for web hosting customers to analyze statistics for their respective website(s). Site Gauge is a website traffic analysis application that provides near real-time statistics and analysis of user interaction with a website. Site Gauge enables Site Managers and Administrators to analyze their visitors, with the objective of interpreting and optimizing their website’s performance.
For new AFPIMS customers, a migration specialist will be assigned to provide the customer with guidance and assistance for the first 120 days of the actual website build or rebuild within AFPIMS, referred to as AFPIMS migration. After the 120 days of migration support or completion of the migration, whichever is sooner, the migration specialist is no longer expected to support the customer with their website content.
For any issues that don’t require updating content (i.e. something is broken, new user request), the customer will be expected to contact the Web Enterprise Business (WEB.mil) Service Desk.
The WEB.mil service desk has three SLAs, Tier-1, Tier-2, and Tier-3.
WEB.mil Service Desk provides support during normal duty hours between 0700 to 2100 Eastern Standard Time (EST) Monday through Friday, and 0900 to 1700 EST Saturday & Sunday, and *emergency on-call support after normal duty hours. Emergency on-call support is provided between 1800 EST and 0730 EST. The service desk can be contacted for both during normal duty hours and emergency on-call hours via email at firstname.lastname@example.org and phone at (301) 222-6600 and you can also submit a ticket via the portal at https://helpdesk.defense.gov/servicedesk/customer/portal/17 (CAC-Enabled).
*Note: An emergency situation will need to fulfill the following criterion:
WEB.mil is not responsible for the content of the AFPIMS customer’s website. The customer will be responsible for their entire website. WEB.mil will not perform any website/content management duties (i.e. page redirects, pages, text, imagery, etc.). This includes no support or development of any custom code for a specific customer.
WEB.mil does not host the DNS for the AFPIMS customer’s public URL such as https://www.customer.mil/. The DNS (Domain Name System) is often referred to as the internet's phone book because it converts easy-to-remember hostnames like https://www.customer.mil/ to IP addresses like 220.127.116.11.
An authoritative DNS server holds the actual DNS records (A, CNAME, PTR, etc.) for a particular domain/ address. When a Web address (URL) is typed into a browser, DNS servers return the IP address of the Web server associated with that name. The DNS converts the URL https://www.customer.mil/ into the IP address 18.104.22.168. Without DNS, you would have to type the series of four numbers and dots into your browser to retrieve the web site, which you actually can do.
If you have an existing web site, then you already have an organization (authoritative DNS server) hosting your DNS. But, if you have a brand new web site that does not exist yet, then you will be responsible for hosting your DNS or finding an organization to host your DNS.
WEB.mil only hosts secure HTTPS for the AFPIMS customer’s public URL such as https://www.customer.mil/ and DOES NOT hosts non-secure HTTP such as http://www.customer.mil/. A White House Office of Management and Budget memorandum requires that all publicly accessible Federal websites and web services only provide service through a secure connection. There may be an additional cost to customers for Public Web to host non .mil or non .gov websites (i.e. .edu).
WEB SITE LIMITATIONS
Web Enterprise Business (WEB.mil) Regulation Page
Web and Social Media Policies
Web Enterprise Business (WEB.mil) Steering Committee Charter
New Site Request
New Site Request Form
WEB Enterprise Business Training Site
DIVIDS Link to Past Webinars