We originally thought there were only 16 or 17, but we looked around and found a few more. Some of those switches are at maximum capacity - although four of the newer switches could accommodate the entire area. Other things also need to be fixed. In a few areas, you can pick up the phone, but you can't determine the location of the call. If someone were calling 911, the location of the call would be blocked because of the kludged architecture.
Information assurance is a hot topic for DoD and industry.
The penetrations into our systems are becoming increasingly sophisticated, and we're noticing more and more collaborative attacks. The problem is challenging. But, we're looking at a variety of methods from within our CIO office that should help. We're also moving towards more active monitoring. Right now all the services use firewalls.