Lancope^® PRESS RELEASE

Lancope Launches StealthWatch Xe and Announces StealthWatch System v 4.2 Upgrade

Support for NetFlow and New Features Extend Enterprise Protection against Zero-day Attacks, Worms and Internal Misuse to Maximize Network Integrity

ATLANTA, NOVEMBER 8, 2004 - Lancope, Inc., the leading provider of Network Behavior Analysis (NBA) and Response systems, today announced StealthWatch Xe as a key addition to the StealthWatch family of products. StealthWatch Xe combines the industry’s leading security-focused, flow-analysis technology with industry-standard NetFlow data to cost-effectively expand enterprise network protection and optimization. Along with StealthWatch Xe, StealthWatch System 4.2 introduces rich visualization and advanced behavioral detection functionality to improve organizations’ ability to defeat worms, internal misuse and other anomalies that significantly impact the availability and integrity of mission-critical networks.

"StealthWatch has clearly established itself as the leading enterprise NBAD solution for rapidly identifying, mitigating and resolving critical threats that circumvent traditional security and network management tools," said Chris Hovis, Lancope’s VP of Marketing and Business Development. "Utilizing our proven technology, StealthWatch Xe enables enterprises to fully realize the security benefits of NetFlow data as a cost-effective means of winning their fight against network security incidents, including zero-day attacks and policy violations."

According to Jim Slaby, senior analyst for the Yankee Group, "Enterprises in every industry sector are extending their networks to connect their partners, mobile employees and customers to business-critical applications. The resulting shift in network security architectures, combined with a new class of highly adaptive threats, have created a need for capabilities that neither perimeter firewalls nor signature-based antivirus, intrusion detection, and intrusion prevention systems can deliver. Lancope is addressing this emerging requirement with StealthWatch, a network integrity system that now leverages NetFlow data sources to deliver an innovative solution for flow-based anomaly detection and threat mitigation."

Hovis added, "Strategic deployment across the enterprise of StealthWatch System 4.2, which includes the StealthWatch, StealthWatch Xe and StealthWatch Management Console appliances, provides comprehensive intrusion defense and visualization of network and host-level security intelligence for easy analysis. This enables organizations to preempt, find and fix critical threats in seconds or minutes rather than hours or days.

Lancope’s StealthWatch System delivers four significant new capabilities in Version 4.2:

StealthWatch Xe - Cost-Effective Extended Enterprise Protection
StealthWatch Xe delivers unmatched enterprise-wide protection against worms, policy violations and network misuse. The remote collection and analysis of NetFlow data, which is natively available in existing network infrastructure from Cisco, Juniper and other leading vendors, significantly extends the key capabilities of StealthWatch at minimal acquisition and deployment costs. By relieving previous constraints, such as physical proximity requirements and limited span ports, staff or budget, StealthWatch Xe enables enterprises to gain broader, continuous awareness of what is happening across the network versus what should be happening.

Flow Explorer - Rapidly Assess and Analyze the Security Posture and Health of Network
Flow Explorer delivers sophisticated flow visualization of network and host activity and drill-down into underlying details to help security and network analysts quickly assess security posture and network health. Flow Explorer provides a dynamic interface to display the network utilization and intercommunications of hosts and zones. This comprehensive view enables users to further simplify the risk and incident management process, eliminating the manually-intensive process of collecting and poring over log files from disparate sources, including firewalls, routers and signature-based Intrusion Detection Systems (IDS).

Worm Tracker - Expedite Rapid Resolution of Security Incidents
Worm Tracker combines sophisticated search and filter technology with effective visualization of traffic flows to enable rapid investigation and remediation of worm outbreaks. With visual indicators and an easy-to-use workflow, Worm Tracker provides immediate understanding of worm impact and identifies point(s) of entry in order to expedite incident resolution and fortify defenses to prevent recurrence of similar incidents.

Trap Hosts - Early Warning of Emerging Threats
Trap Host functionality is a new behavioral detection method for rapidly detecting worms, misconfigured devices, network reconnaissance, and indiscriminate, low and slow directed attacks. Trap Hosts utilize otherwise idle IP addresses to catch automated worms and hackers that explore the network seeking vulnerable targets. Implemented to identify scanning methods that evade other detection methods, Trap Hosts significantly extends StealthWatch’s ability to defend networks against attacks.

Availability and Pricing
StealthWatch System Version 4.2, including the new StealthWatch Xe appliance and upgrades of StealthWatch and the StealthWatch Management Console, will be generally available in November, 2004. Introductory pricing for StealthWatch Xe begins at $19,995. For more information, contact sales@lancope.com. Customers can contact Lancope Customer Care Support Desk for upgrades at 800-838-6574 or via email at support@lancope.com.

About Lancope
Lancope is the leading provider of Network Behavior Analysis (NBA) and Response solutions for defeating worms, internal misuse and other anomalies that compromise the integrity of enterprise networks. With integrated visibility across network security, traffic characteristics and host-level activity, Lancope’s StealthWatch solutions provide unparalleled network optimization and protection from new threats. Both OPSEC and Common Criteria certified, StealthWatch was named a finalist in Network Computing Magazine’s 2004 Well Connected Awards and has received outstanding reviews from InfoWorld, eWeek and CRN magazines. Defending the networks of Global 2000 organizations, academic institutions and government entities, Lancope protects over 100 enterprise customers and 12 million hosts worldwide. Lancope is a privately held, venture-backed company headquartered in Atlanta, Georgia. For more information, visit www.lancope.com.