MOUNTAIN VIEW, Calif., January 28, 2003 - A major U.S. Department of Defense agency averted a potential security disaster from the recent "SQL Slammer" attack thanks to its SecurVantage™ automated network security management system from Securify, Inc., a pioneer and leader in network security policy solutions. Through a combination of early warning, precise information and continuous network monitoring provided by SecurVantage, the agency quickly detected the threat and was able to take proactive steps to avert any potential disruptions. The organization received ongoing confirmation their information architecture was functioning properly and adhering to their security policy.

SecurVantage's point-of-presence monitors first reported an attack in progress at 12:21a.m. EST on January 25th; well before the first public warnings from industry sources. SecurVantage provided real-time alerts that the agency's network was under heavy attack and confirmation that the agency's firewalls were properly blocking the attack. Using information provided by SecurVantage, the agency's network administrators were able to mitigate the effects of the attack by off-loading specific port blocking to exterior routers. Ongoing monitoring by SecurVantage confirmed that none of the agency's several hundred MS SQL Server platforms across 14 locations had been compromised.

"Instead of spending tens of thousands of dollars tracking down just what happened after the fact, the agency's network administrators were kept informed of the situation as it developed, and received the information they needed to take proactive protective steps to eliminate any security breaches," said Carl Wright, vice president of federal operations at Securify. "While the agency's intrusion detection system failed to recognize the attack, SecurVantage offered not only early detection but the precise information administrators needed to take appropriate action, and continuously confirmed that the network was functioning properly."

Using SecurVantage, enterprises create a formal set of requirements network traffic must comply with -- a "policy" describing the "correct" behavior of the network -- based on corporate security policy and business practices. Using these requirements, SecurVantage continuously evaluates, in real time, all packets moving across the network at all levels of the protocol stack, and makes decisions as to whether or not the traffic is consistent with the policy. This information is then clearly presented in a Web-based analysis environment in a format appropriate to the specific business.

The SecurVantage solution provides detailed information on all aspects of network security, including network topology; applications and services for logical network groups; and asset vulnerabilities. Additionally, trend reports based upon policy violations can assess specific areas of network operation. These reports include violation trends by host group; root cause analysis of recurring events; total traffic and violations by type of service; device configuration status; access procedure compliance; service status by host group; and quality of service for encryption and password strength.

Securify SecurVantage consists of Securify SecurVantage Studio, the policy development and analysis environment; Securify SecurVantage Monitor, the monitoring and evaluation system; and Securify SecurVantage Enterprise, which aggregates and analyzes data across an enterprise.

About Securify, Inc.
Securify is a pioneer and leader in network security policy solutions. The company's flagship product line, Securify SecurVantage™, is an automated security system that enables customers to rapidly generate and deploy business-driven security policies, monitor networks for compliance in real time and respond proactively. This results in greater protection of network assets and significantly reduced costs. Securify is headquartered in Mountain View, California. For more information, please call (650) 812-9400 or visit the Securify web site at www.securify.com.

Securify SecurVantage™ and associated marks are registered trademarks of Securify, Inc. All other trademarks, service marks and company names are the property of their respective owners.