New Router Distribution Features CALEA Intercept Tools

ImageStream® has released a new version of ImageStream Linux™ that includes new CALEA intercept tools. ImageStream Linux 4.2.10-11 (or 4.3.2 for the Envoy) is the first of several planned software releases from ImageStream that will include support for CALEA compliance.

ImageStream's CALEA intercept tools are based on the OpenCALEA software project that is actively developed by Merit. The intercept tools included in this release have been tested in conjunction with Intelleq, ImageStream's preferred TTP. Support for direct delivery of intercepts has not yet been tested with law enforcement, however the software complies with the ATIS LAES protocol standard, which provides carriers with a safe harbor for intercept delivery under CALEA. ImageStream had planned to test its intercept tools with the FBI before this release, however the FBI engineering team was too backlogged to perform the required testing.

ImageStream's intercept tools address a number of critical CALEA compliance requirements. For example, the software can perform communications intercepts based on MAC or IP address, and it can filter out traffic that is not targeted by the court order, which is required by CALEA. ImageStream's solution also supports "fan-out" for intercept delivery to multiple law enforcement agencies, and it includes a collector module that can be run on a Linux server to support capture-to-disk based on the FBI's recommendations for local intercept buffering. The current release even implements the ATIS LAES protocol to provide carriers with a safe harbor.

The new 4.2.10-11 distribution can be used to implement CALEA intercepts, however the tools included in this release do not include support for simplified provisioning. When released, the upcoming provisioning software will become the standard for intercept configuration on an ImageStream router. This system will be described in detail in ImageStream's coming White Paper and documentation for setting up intercepts. Until this provisioning software is released, ImageStream customers will be required to contact their TTP or ImageStream technical support for assistance setting up a court-ordered intercept.

There are additional CALEA compliance requirements that go beyond intercept delivery. For example, carriers are required to file a document known as the System Security and Integrity (SSI) plan with the FCC. As a part of this compliance plan, carriers are required to identify the individual who is responsible for receiving and carrying out court-ordered intercepts. This person is often referred to as a Security Offier, and he or she is required to maintain confidentiality regarding all court orders and intercepts.

With an ImageStream router, Systems Administrators have access to everything, which presents a compliance issue for organizations with multiple Sys Admins who do not act as Security Officer. To secure intercept provisioning from other systems administrators, ImageStream is developing an low-cost product called Intercept Manager, which can be used to provision intercepts remotely.

When carriers provision CALEA intercepts with Intercept Manager, the Security Officer can be given exclusive access to the Intercept Manager to maintain the confidentiality of the court ordered intercepts. At the same time, the other Sys Admins can continue to have full management access on the same routers without access to intercept configurations. Carriers that have a single person acting as Sys Admin and Security Officer do not require Intercept Manager to address the confidentiality requirements of CALEA. The expected release date for Intercept Manager is June 1st, and it will retail for $2,500 with hard drive for local intercept buffering, or $2,000 without hard drive.

If you have any questions about ImageStream's CALEA compliance solutions, or if you have questions about CALEA compliance, please contact compliance@imagestream.com.

About ImageStream
ImageStream Internet Solutions, Inc. is a leading supplier of Linux-based LAN and WAN solutions for small offices, corporate LANs and WANs, and Internet backbone providers. ImageStream products include high-performance routers and switches, network cards, monitoring taps, and network management software. The company is headquartered in Plymouth, Indiana. For more information, go to www.imagestream.com.