AXENT's 'Prowler IDS Series' Delivers Unrivaled E-Business Intrusion Detection Defenses and Manageability.

Business/Technology Editors

ROCKVILLE, Md.--(BUSINESS WIRE)--June 12, 2000

Complete NetProwler 3.5 and Intruder Alert 3.5 IDS Solution

Combines Flexible Deployment, Enhanced Scalability, and Streamlined

Administration

AXENT Technologies, Inc. (NASDAQ:AXNT), one of the world's leading information security solution providers, today unveiled its new Prowler IDS Series intrusion detection solution (IDS). The Prowler IDS Series, which includes NetProwler(TM) 3.5 and Intruder Alert(TM) 3.5, delivers unmatched enterprise-class protection, combined with intuitive administrative controls and a three-tier architecture that automates much of the routine configuration, reporting and maintenance of IDS systems required in dynamic e-business environments.

The new Prowler IDS Series release provides the most powerful, combined host- and network-based IDS, delivering the industry's first and only IDS solution with scalable three-tier architecture. The system leverages agents that protect and react locally to threats, managers to efficiently automate configuration and intelligently report events, and an intuitive administrative console. The Prowler IDS administrative consoles are the industry's first to let administrators easily drag and drop specific security policies and attack signatures into pre-defined, logical groups of systems within specific business functions like critical e-commerce transactions and Intranet servers. This customizable and automated grouping quickly and precisely delivers the right level of security that meets organizations' specific e-business needs.

In addition, the Prowler IDS Series 3.5 introduces the first rapid response and real-time deployment of the latest attack signatures--providing instant, non-disruptive protection against emerging attacks with minimal administrator intervention. Unlike most IDS providers, AXENT(R) provides monthly and emergency Rapid Response updates to customers, who can easily download protection without waiting weeks or, in some cases, months for the next software release. Other IDS products force users to take the IDS offline to activate updates or force the administrator to determine if the updates are applicable to their environment.

"Following the recent barrage of attacks on popular e-commerce sites, it's become painfully clear that any organization conducting e-business needs the most powerful, enterprise-wide protection available," said Scott Gordon, director of product management at AXENT. "At the same time, these companies have limited security expertise or resources to adequately protect their Internet investments. AXENT's Prowler IDS Series combines superior IDS functionality with highly automated configuration and streamlined maintenance. It's the most convenient and comprehensive way to protect today's e-business."

NetProwler 3.5--Dynamic Enterprise Network IDS

NetProwler is the only network-based IDS to automatically discover popular systems and applications and then apply the appropriate protection with minimal administrator intervention. Its patent-pending Stateful Dynamic Signature Inspection(TM) (SDSI) engine also lets organizations quickly build and deploy both new and custom attack definitions on the fly to easily defend both common and company-specific applications.

Version 3.5 builds upon this unique automation and flexibility with:

-- A New SQL Database Backend yields increased scalability and a central repository of intrusion activity for reporting, data mining and law enforcement assistance. Other IDS solutions use Microsoft(R) Access or flat-file databases incapable of handling large-scale IDS deployments and reporting. Some IDS's even require users to purchase, integrate and manage a separate SQL database.

-- New Web Auto Download lets administrators immediately download new attack signature updates and intelligently push them out to managers and agents in real time. Unlike some other IDS's, which require administrators to determine if an update applies to parts of their environment, NetProwler 3.5 seamlessly automates this critical maintenance enterprise wide.

-- Enterprise Manageability is based on the same proven three-tier architecture employed by Intruder Alert, which delivers true enterprise-class scalability. Components securely communicate with Blowfish encryption, MD5 digital signatures and Authenticated Diffie-Hellman key exchange to ensure privacy and integrity.

-- Repetitive Alert Suppression Option can instantly reduce continuous reception of multiple security alerts initiated by a single, repetitive event.

-- Attack Dictionary provides detailed descriptions of attack signatures with appropriate CVE (the security industry's Common Vulnerability and Exposures initiative) references and links to relevant areas at the AXENT InfoSecurity SWAT Web site to better inform security administrators and help expedite threat response.

-- Symmetrical Multiple Processor (SMP) and Dual NIC Support enable agents to leverage multiple processor hardware to improve performance, as well as dual NIC to run in stealth mode and avoid detection in DMZ environments.

"The new NetProwler 3.5 release provides a dramatic increase in functionality and manageability," said Gary Cannon, president of Advanced Internet Security, Inc. "The three-tiered architecture with the NetProwler Console capability allows the user to monitor and manage multiple NetProwler Managers and the underlying Agents much more efficiently and effectively."

Intruder Alert 3.5: Powerful, Scalable Host-based IDS

Intruder Alert is the most scalable host intrusion detection solution on the market, offering cross-platform monitoring, alerting and automated countermeasures. Intruder Alert continuously watches critical systems for patterns of misuse or abuse and responds in real-time to prevent information theft or loss.

Version 3.5 builds upon this with:

-- Improved Scalability & Availability. Many enhancements improve Intruder Alert's already unmatched scalability, including optimized network communications, name resolution and error logging. In addition, a new "heartbeat" monitor maintains reliable manager/agent communications to ensure maximum uptime.

-- Integrated Event Reporting. Intruder Alert is capable of consolidating security events from both distributed host and network agents. Information is presented through Crystal Reports(R), which support pre-defined and custom templates.

-- New UNIX(R) GUI. Expands upon the existing intuitive NT administrative console, enabling administrators to perform drag-and-drop policy management work from HP-UX and Solaris(R) workstations. Intruder Alert also uniquely offers administrative task delegation.

-- Improved IDS Signatures. More than 400 pre-defined IDS signatures out-of-the-box detect changes to system configuration, use of administrator privileges, failed logins, changes to critical files, etc. in major operating systems.

-- Event Context Passing lets administrators assign a threshold to trigger actions based on a pre-set number of similar security events, further automating incident response and reducing noise in large deployments.

-- New Incident Response Guidelines communicate security events in real-time and immediately make recommendations on how to counter the vulnerability from re-occurring and causing loss.

The Prowler IDS Series continues integration under AXENT's Smart Security Architecture. NetProwler can be fully integrated within the Intruder Alert event log and reporting to provide a single IDS security vantage point for networks, servers and applications. For example, the Prowler IDS Series introduces a common report writer, out-of-the-box canned reports and a report wizard. With just a few clicks, users can gather and report information from either solution, and use predefined or custom Crystal Reports that can be e-mailed to security administrators, business managers or executives. In addition, the Prowler IDS Series supports native event forwarding to BMC Software, Inc.'s Patrol(R) and Tivoli(R) TME for complete systems/security management. HP(R) Network Node Manager support is planned.

Widespread Praise for the IDS Market Leader

According to International Data Corporation (IDC), a leading industry analyst firm, AXENT is the undisputed market leader in intrusion detection and assessment solutions (IDnA), with 40 percent of the rapidly-growing market--more than the combined market share of both its nearest competitors.

"Based on a thorough evaluation of IDS features, we found AXENT's Prowler IDS Series to provide more mature manageability, scalability, customization and automation than that of its peers," said Jayne Parkhouse of West Coast Labs. "While AXENT has always enjoyed a respectable lead in host-IDS capabilities, the enhancements to Intruder Alert and recent significant update to NetProwler surpass current competitive offerings."

Pricing, Availability and New Smart Bundle

The Prowler IDS Series is immediately available from AXENT and through its worldwide network of authorized distributors and resellers. Pricing is based on the number of managers and agents deployed, with quantity discounts.

The Prowler IDS Series intuitive administrative console is included, except for the Intruder Alert UNIX GUI, which costs $495 per seat. Intruder Alert managers have a suggested price of $1,995 and agents priced at $995. NetProwler managers have a suggested price of $2,995 and agents priced at $7,995. NetProwler Enterprise, which includes a license for NetProwler and Intruder Alert has a suggested price of $10,995.

For a limited time only, AXENT is offering an IDS Prowler SmartBundle, available through AXENT authorized resellers for a suggested price of $12,675. It features both the complete Prowler IDS Series, as well as AXENT's award-winning NetRecon(TM) network vulnerability scanner.

About AXENT(R)

AXENT Technologies, Inc., a global leader in information security, provides e-security solutions that maximize its customers' business advantage. AXENT delivers integrated products and expert services to assess, protect, enable and manage business processes and information assets, as well as to facilitate trust level management(TM) within its customers' environments. Through its unique Lifecycle Security(TM) Methodology, combined with Smart Security Architecture, AXENT delivers the `right' level of trusted e-security for customers. Award-winning solutions offer assessment and policy compliance, firewall, intrusion detection, authentication and authorization technology, virtual private networking, Web access and single sign-on for enterprises and e-businesses.

Headquartered in Rockville, MD, AXENT's customer-proven information security solutions are used by 45 of the Fortune 50 and governments worldwide. Contact AXENT via e-mail at [e-mail], or visit AXENT's World Wide Web site at www.axent.com.

AXENT, AXENT Technologies, the AXENT logo, Intruder Alert, NetProwler, Prowler IDS, IDS SmartBundle, Stateful Dynamic Signature Inspection, trust level management and Lifecycle Security are trademarks or registered trademarks, in the United States and certain other countries, of AXENT Technologies, Inc. or its subsidiaries. Microsoft and Windows NT are registered trademarks of Microsoft Corporation; Crystal Reports is a registered trademark of Seagate Corporation; UNIX is a registered trademark licensed exclusively by X/Open Company; HP is a registered trademark of Hewlett Packard Company; Tivoli is a registered trademark of Tivoli Systems, Inc.; Patrol is a registered trademark of BMC Software, Inc.; Solaris is a registered trademark of Sun Microsystems, Inc.; and other product names and trademarks are the property of their respective owners.