First, another update - one shooter reported dead. That the dead shooter was the only shooter is NOT being even suggested.
Because, among other reasons it would take too long to search every employee vehicle, vehicles with base stickers are waved through, and those with stickers from other bases are stopped to determine their destination but not searched. Only vehicles without stickers are subject to search.
My logic-fu strongly suggests the shooter came through with a base sticker.
Jamis - WNY has probably fewer security/guards than most military bases in the DC area, based on my personal observations on the few times I have been there over the past 3 years. And yes, based on the fact that the civillian worker force overwhelms the numbers of active duty, the presence of a QRF on site is doubtful. Naval Investigation Service has a presence on base, but I seriously doubt if they have long arms or SWAT toys stored there. Navy/Marine Corps bases where I have had interaction with NIS revealed that for the most part they walk around in Class A uniforms with concealed sidearms - the base MPs could outgun them just by bringing a few shotguns. (This does not mean I know anything about NIS at WNY. It's just an observation by one person.)
All of which means when the balloon goes up you are on your own until someone telegraphs to Ft. Apache, Rin Tin Tin and the cavalry saddles up, and they get there - but unlike the movies/TV, not in the nick of time.
stay safe.