CSMS #39291311 - Information on the Retirement of the Current Cisco EzVPN Solution

U.S. Customs and Border Protection sent this bulletin at 08/09/2019 09:39 AM EDT

Cargo Systems Messaging Service

CSMS #39291311 - Information on the Retirement of the Current Cisco EzVPN Solution

CBP is in the process of implementing a modernized solution for all trade partners currently using IBM MQ Client in conjunction with the use of Cisco Easy VPN Client (EzVPN) software. Trade partners using EzVPN installed on a Cisco router or installed locally within their application environment are impacted by this change and must take action. The current Cisco EzVPN solution is being retired and, effective December 31, 2019, will no longer be available for messaging with CBP. Your organization is exempt if you are using a Lan to Lan (L2L) or MPLS solution in conjunction with IBM MQ Server for connectivity to CBP systems.

The modernized solution for MQ Client connectivity involves a PKI certificate based connection methodology using IBM MQ Internet Pass-Thru (MQIPT). There is no need for a Cisco router as this solution simply uses an internet connection. The infrastructure needed to support MQIPT communication is in place at CBP and many trade partners have fully transitioned to the use of MQIPT.

Affected trade partners will be required to upgrade their MQ Client software to version MQ V9+. At this time, trade partners are being asked to complete the VPN Information Questionnaire (below) and return it to the CBP MQ Support Staff (MQSTAFFOPS@cbp.dhs.gov). Once this information is received, a CBP MQ Technician will be assigned to your organization and additional documentation regarding this transition will be provided. Following this initial contact, the assigned CBP MQ Technician will assemble and send an MQIPT “package” containing encrypted public key certificates and package installation information. IF your organization uses the services of a software vendor to support your business needs, they are likely aware of this effort. CBP asks that you alert them to this updated CSMS message.

If your organization uses the CBP supplied sample program "CBPPTGT" as a part of your implementation, an updated version of this program supporting MQIPT will be provided. The existing settings utilized by this program will continue to work with the updated version.

Table of Questions and Change sample responses for further details

Update your subscriptions, modify your password or e-mail address, or stop subscriptions at any time on your Subscriber Preferences Page. You will need to use your e-mail address to log in. If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com.

This service is provided to you at no charge by U.S. Customs and Border Protection.

Privacy Policy | GovDelivery is providing this information on behalf of U.S. Department of Homeland Security, and may not use the information for any other purposes.