Persistent Systems has achieved a major milestone: its Wave Relay® devices are now approved by the National Security Agency (NSA) for Commercial Solutions for Classified (CSfC) applications. This approval positions Persistent as the first and only MANET (mobile ad hoc networking) solution provider on the NSA’s CSfC Components List, giving defense and government customers a secure commercial alternative to legacy classified communication systems.
Dual Approval: IPsec VPN and MACsec Security #
The NSA has cleared Wave Relay® devices for use as both:
- IPsec Virtual Private Network (VPN) gateway
- Media Access Control Security (MACsec) component
This dual-layer encryption simplifies the authorization process for classified networks. When deployed according to the NSA-approved capability package, the system can securely handle classified data, serving as a validated alternative to traditional NSA Type 1 solutions.
Persistent’s approved protocols—MACsec and IPsec—are also listed on the NIAP Product Compliant List (PCL), meeting the requirements of CSfC Multi-Site Connectivity and Tactical Capability Packages. Integrated into the company’s Cloud Relay solution, these security layers allow secure global connectivity over third-party transport technologies like 5G networks, Starlink, and SATCOM.
Security for Modern Military Communications #
James Harrison, Chief Product Security Engineer at Persistent, emphasized the importance of the achievement:
“The attack surface of SATCOM and host-nation cellular is vast and is the most vulnerable area of modern military communications. Now, our NSA CSfC-approved two-layer encryption allows users to communicate with confidence over these transport methods, directly integrated into MPU5 handheld MANET devices. This reduces size, weight, power, cost, and complexity for the end user.”
By embedding CSfC-approved security directly into its devices, Persistent enables warfighters and defense teams to operate securely across varied environments without relying solely on heavy, costly Type 1 systems.
DoD’s Shift Toward Commercial Technology #
The Department of Defense (DoD) is gradually shifting from traditional Type 1 high-assurance devices, first developed in the 1950s, toward commercial CSfC solutions. This reflects broader trends in military technology:
- Legacy Type 1 drawbacks: Expensive, complex, export-restricted, and slow to evolve.
- CSfC advantages: Flexible, cost-effective, and compatible with multinational operations.
- NIAP certifications: Recognized across 33 countries, enabling standardized global adoption.
Leslie Hulser, Executive Vice President at Persistent, highlighted the international value:
“Our NSA CSfC approval for our non-ITAR commercial networking solution ensures warfighters can securely access classified data when collaborating with foreign partners. Flexible deployment will be critical in potential theaters like the Indo-Pacific region. The NIAP certification provides confidence for international customers seeking validated secure products.”
The End of the High-Assurance Era #
At the 2023 CSfC Conference, Patrick Schneider, Deputy Director of Cryptographic Production and Solutions for the NSA’s Cybersecurity Directorate, noted:
“The high-assurance product era is coming to a close. These products are difficult to manage, hard to upgrade, and technologically stagnant. It doesn’t make sense for us to continue down this road.”
His remarks underline the growing importance of CSfC-approved commercial solutions for defense and government networks.
What This Means for the Future #
With its inclusion on the NSA CSfC Components List, Persistent Systems now enables:
- Trusted solution building for end users and CSfC integrators.
- Global secure networking with validated commercial products.
- Faster adoption of modern secure communication tools.
Additionally, Wave Relay Firmware 19.7.5.1 now includes the Cloud Relay capability with CSfC-approved and NIAP-certified modules—available at no extra cost.
Key Takeaways #
- Persistent Systems is the first MANET provider approved for NSA CSfC.
- Wave Relay devices support both IPsec VPN and MACsec encryption.
- The approval aligns with the DoD’s strategy to adopt commercial secure solutions.
- Persistent’s innovation strengthens warfighter communications while reducing cost, size, and complexity.
Persistent’s achievement is more than a company milestone—it marks a turning point in secure military communications, where commercial innovation is reshaping the future of classified networks.