Guidance

Future Networks for Government (FN4G)

FN4G is the Cabinet Office programme set up to help organisations move away from the Public Services Network (PSN)

From:
Central Digital and Data Office
Published
30 June 2021
Last updated
2012 JuneJuly 2022 — See all updates

The Public Services Network (PSN) is a legacy network which is increasingly hard to secure. Organisations should migrate to modern network solutions, which offer more competitive commercial terms, greater flexibility and scalability.

When you choose modern solutions they should be appropriately secure and follow:

PhasesProgramme ofscope thefor FN4Gfinancial programmeyear 2022 to 2023

The FN4G coordinates and reports on organisations’ plans to migrate away from the PSN. The programme is nowevolving inits yearproactive 4.strategy Ourto scopeidentify forand thispromote yearmodern isnetwork architecture. These options offer improved security while also supporting public sector organisations to migrate away from the PSN.

In most cases, local authorities use on premise infrastructure to run a dedicated line directly into the PSN. Organisations have to:

  • coordinatemaintain andthat reportinfrastructure

  • pay for the line on organisations’a planscontract tobasis

  • pay migratefor offa theDNS PSNcontract

  • capturedo an annual PSN CoCo

Alternative ways to connect to the PSN ecosystem

FN4G has set out a range of technical risks,concepts commercialproviding risks4 andalternative opportunitiesways forto localconnect authorities’to the PSN migrationsecosystem:

  • Desktop as a service

  • publishShared caseaccess studiesto PSN (SAP)

  • Tunnelled access to PSN (TAP)

  • Gateway access to PSN (GAP)

1. Desktop as a service

The local authority (or other PSN users) could buy a pay-as-you-go remote desktop service, which has virtual computers linked to the PSN. This option is secure, relatively easy to deploy and technicalavoids designsvendor lock-in with inflexible, lengthy contracts.

Diagram 1

Diagram 1 shows the supplier infrastructure with a virtual desktop. This infrastructure enables traffic to provideand optionsfrom forthe migrationinternet with traffic to a local authority or other user. A secure remote desktop protocol connection with certificate and multi factor authentication is set up from the supplier to the local authority. The virtual desktop has a dedicated connection to the PSN (foras example,well byas adoptinga ‘PSN-as-a-Service’Nominet architecture)DNS connection.

    • 2. Shared access to PSN (SAP)

    helpThis organisationsoption removeis blockersgood for PSN users who already have an existing connection, for example the Health and enableSocial themCare Network (HSCN). The existing network connection is used to implementcarry securityall byPSN designtraffic inas well, which is split once it reaches the supplier.

    Diagram 2

    Diagram 2 shows the local authority connected to a supplier network via an existing HSCN link. The supplier network has a dedicated connection to the PSN as well as a connection to the HSCN.

    3. Tunnelled access to PSN (TAP)

    This option involves installing a piece of client software on each device which uses policies to route traffic to different places. TAP requires administrative overhead, but achieves zero trust. It’s a good option for PSN users who can use their servicesexisting investment in zero trust.

  • Diagram 3

    assessDiagram and3 makeshows recommendationsthe supplier has policies to ensureroute traffic to different destinations. For example, to the networklocal authority workstation via client software, to the PSN via a dedicated line or to the internet.

    4. Gateway access to PSN (GAP)

    A PSN user could pipe all of their traffic to the supplier, who would then provide a full unified threat management service. This solution is fitscalable and provides full access to users. It’s highly secure, achieves close to zero trust and provides full transparency on usage and costs.

    Diagram 4 shows that a user, for purposeexample a local authority, has piped all its traffic to a gateway supplier. That supplier manages the exchange of traffic for anyeverything, organisationsfor remainingexample onto the internet, Nominet DNS, the dedicated connection to the PSN, to HSCN, to cloud providers.

    Benefits of these alternative PSN aftersolutions

    The 2023,availability untilof theythese solutions results in more supplier choice in how organisations access the PSN. Organisations can migratetransform offtheir digital programmes and:

    • simplify their infrastructure

    • makereduce recommendationstechnical ondebt theand futurenetwork ofsprawl

    • spend assurancebudgets more effectively

    Assurance standards

    InThe yearsFN4G 1team andis 2working wewith carriedthe outrelevant astakeholders numberon validation of discoverythe exercisessuitability includingof each technical concept to meet the appropriate security requirements.

    The broader issue of a comprehensivecompliance surveystandard for central government departments, local authorities and other public sector organisations is currently beyond the scope of the FN4G programme.

    Reasons for our programme strategy in 2022 to 2023

    We have identified these alternative technical options, enabling indirect access to the PSN, while organisations andare migrating off the PSN. We believe local authorities in particular will benefit from these options while they’re waiting for central government applications onto migrate away from the PSN.

    In addition, there is a need to shift focus to data security with organisations now able to employ a range of unified threat management systems with policy-based access to the PSN.

    While it exists, it’s also vital to make sure the PSN remains fit for purpose, operationally resilient and appropriately secure.

    Earlier phases of the FN4G programme

    In 2021 our focus was to:

    • coordinate and report on organisations’ plans to migrate off the PSN
    • capture technical risks, commercial risks and opportunities for local authorities’ PSN migrations
    • help organisations remove blockers and enable them to implement security by design in their services

    Previously we carried out a number of discovery exercises. This allowed us to create a list of applications and services on the PSN and, where possible, migration dates.

    In yearWe 3also wefocussed lookedon atengagement with central government departments as the main service suppliers using the PSN. WeYou estimatedcan thatread approximatelymore 70%about ofthis allwork publicin sectorThe organisations,road mainlyto localclosing authorities,down could be off the PSN byblog 2023.post.

    Publication of migration dates

    We have published dates when organisations are planning to migrate off the PSN. This information should help local authorities and other organisations plan their own migrations.

    For more help with migration you can read about what other organisations have done in our PSN migration case studies.

    PSN exit timelines for applications and services used by local authorities

    If you’re a local authority, this table shows you when applications and services you use will be migrated off the PSN.

    The information is given by the organisations that provide the applications and services. Some applications and services in the table are dependent on other services before they can migrate off PSN and we’ve flagged these as ‘dependency’.

    We’ll update the information as necessary. All dates might change.

    For more information on the programme to exit the PSN, email FN4G@digital.cabinet-office.gov.uk.

    Organisation Application Status PSN exit date
    Cabinet Office IER Complete Removed from PSN
    Cabinet Office SOP Complete Removed from PSN
    Crown Commercial Service DNS (Nominet) Complete Removed from PSN
    Crown Commercial Service Email Relay Complete Removed from PSN
    DWP EESSI Dependency July 2022
    DWP GFTS Dependency 31 March 2023
    DWP Searchlight In progress 31 March 2023
    DWP Tell Us Once Complete Removed from PSN
    DWP Universal Credit Complete Removed from PSN (local authority)
    DWP Verify Earnings and Pensions In progress To be confirmed
    HMRC Government Gateway Complete Removed from PSN
    Home Office JARD In progress 30 April 2023
    Home Office VISOR Not progressing PSN exit plans not started
    Suppliers BBIS (Blue Badge) Complete Removed from PSN
    Suppliers ePayfact Complete Removed from PSN
    Suppliers LOCTA Complete Removed from PSN
    Suppliers NPRF and Northgate In progress 31 March 2023
    Suppliers PAM In progress To be confirmed

    Contact FN4G

    For any questions on these technical alternatives please email FN4G@digital.cabinet-office.gov.uk

    • Published 30 June 2021
    Last updated 2012 JuneJuly 2022 + show all updates

    1. We have updated this page with to: - describe the programme scope for 2022 to 2023 and the reasons for our strategy - list 4 alternative ways to connect to the PSN and the benefits of using these methods - provide information on assurance standards

    2. Cabinet Office IER now removed from PSN

    3. Migration date for DWP EESSI date changed from December 2021 to July 2022.

    4. Update to the Cabinet Office IER application exit date

    5. First published.

    Contents