Application Firewalls and Gateways from NetContinuum Approved by NIAP for Conformance to Common Criteria Certification Process and Awarded ICSA Labs Certification

NetContinuum Offers the Highest Level of Web Application Security with the Only ICSA and Common Criteria Certified Product Line

May 4, 2007 — Santa Clara, CA

NetContinuum (www.netcontinuum.com), the leader in Application Security and Application Delivery, today announced that its product line of award-winning web application firewalls and application gateways has been evaluated and recognized by two prestigious organizations — ICSA Labs and National Information Assurance Partnership (NIAP) — making it the first and only application security company to be certified by both organizations.

NetContinuum�s NC-2000 AG and NC-1100 AG appliances were approved by NIAP for conformance to the Common Criteria Certification process. The appliances will be certified for Common Criteria (also known as ISO 15408), providing an independent validation of their security capabilities in meeting this worldwide standard. The information can be found at http://www.niap-ccevs.org/cc-scheme/in_evaluation.cfm. Upon completion of the conformance process, the NetContinuum products will be one of the few application security vendors to achieve Common Criteria certification. Common Criteria Certification is a requirement of hardware and software devices used by federal government on national security systems. The international community has embraced the Common Criteria through the Common Criteria Recognition Arrangement (CCRA) whereby the signers have agreed to accept the results of Common Criteria evaluations performed by other CCRA members.

ICSA Labs, an independent division of TruSecure Corporation, helps enterprises better understand and select security technologies. In March 2007, ICSA Labs completed corporate firewall certification testing for the NC-1100-AF web application firewall product. In 2006, ICSA also completed application firewall certification for the family of NetContinuum products, making NetContinuum the only vendor to have passed both network firewall and application firewall certification. The reports can be found at http://www.netcontinuum.com/resources/analystReports.cfm.

Additionally, NetContinuum is also working as part of the ICSA Web Application Firewall Product Developers Consortium to define the next generation of tests for certifying web application firewalls.

"Many customers use our application gateways as a single DMZ device for network layer, application layer and SSL security in addition to load balancing and response time acceleration services," said Varun Nagaraj, CEO of NetContinuum. "Certifications from respected organizations such as ICSA and NIAP help customers feel confident that they can rely on NetContinuum products to comprehensively protect their application environments. Additionally, Common Criteria certification will ease the adoption of NetContinuum�s award-winning web application firewalls and application gateways by government organizations around the world."

About the Common Criteria Evaluation
The National Institute of Standards and Technology (NIST) and the National Security Agency (NSA) have established a national program, the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS), for the evaluation of information technology internationally. During the course of an evaluation, the Validation Body provides technical guidance to those testing laboratories, validates the results of IT security evaluations for conformance to the Common Criteria, and serves as an interface to other nations for the recognition of such evaluations. The Validation Body assesses the results of a security evaluation conducted and when appropriate, issues a Common Criteria certificate. NetContinuum is currently in the process of receiving this assessment. The certificate, together with its associated validation report, confirms that an IT product has been evaluated at an accredited laboratory using the Common Evaluation Methodology for conformance to the Common Criteria.

About ICSA Labs
ICSA Labs, an independent division of TruSecure Corporation, offers vendor-neutral testing and certification of security products. Hundreds of the world�s top security vendors submit their products for testing and certification at ICSA Labs. The end users of security technologies rely on ICSA Labs to authoritatively set and apply objective testing and certification criteria for measuring product compliance and reliability. The organization tests products in key technology categories such as anti-virus, firewall, IPSec VPN, cryptography, intrusion detection, PC firewall, content security, SSL-VPN and Wireless LAN. For more information about ICSA Labs, please visit: www.icsalabs.com

About NetContinuum
NetContinuum application controllers efficiently deploy, secure and manage enterprise web applications. NetContinuum Application Gateways enable rapid, secure deployment of new enterprise applications. Our Web Application Firewalls enable data center teams to immediately secure existing enterprise applications. NetContinuum was the first in the industry to define and implement a comprehensive and integrated controller appliance, and continues to lead the industry with its breadth of security features, real-world performance and ease of use. The company was founded in 1999 and is headquartered in Santa Clara, California.