Applied Identity Demonstrates Integration With Microsoft Network Access Protection.

Applied Identity's Identiforce Combined With Network Access Protection Protects Networks, Assuring Only "Clean" Endpoints Can Access Network Resources

SAN FRANCISCO -- Applied Identity, a developer of identity-based network access control and policy management solutions, today announced that it has successfully demonstrated integration of Microsoft Network Access Protection (NAP) with Identiforce[TM], the company's policy-based network access enforcement appliance. This integration provides users with a way to add an additional layer of security protection into their network with an approach that is transparent to the user.

Microsoft Network Access Protection and Identiforce interoperability enables organizations to easily deploy an enterprise-wide solution that ensures that only endpoints that pass a system "health check" are allowed access to specific network resources based upon a user's identity. The Identiforce product is designed to be easily integrated into existing Microsoft Network Access Protection infrastructure, with no change in network architecture required. Applied Identity's solution fortifies the Network Access Protection entry point by tying session log-in to the identity in an organization's directory.

Network Access Protection is a policy enforcement platform built into the Windows Vista and Windows Server (code-named "Longhorn") operating system that allows you to better protect network assets by enforcing compliance with system health requirements. With Network Access Protection, you can create customized health policies to validate computer health before allowing access or communication, automatically update compliant computers to ensure ongoing compliance, and optionally confine noncompliant computers to a restricted network until they become compliant.

With Microsoft Network Policy Server (NPS) and Identiforce together, mutual customers can validate computer health, update non-compliant computers, and quarantine others to a restricted network until they become compliant. Using this authoritative Network Access Protection derived statement of health, Identiforce then enables user-based routing giving customers even greater control of what, who and where a user goes on the network.

"With the dissolving corporate network perimeter and growing risks from insider threats, customers are seeking ways to layer security to better protect network assets," said Jon Shalowitz, Vice President of Products for Applied Identity. "Microsoft's core Network Access Protection platform has the ability to scale with this increased risk and the Identiforce integration provides for more granular controls, resulting in a more comprehensive and robust security solution."

"Applied Identity's solution provides a valuable and natural extension to the Network Access Protection platform," said Mike Schutz, Group Product Manager of Security and Access Products at Microsoft Corp. "Organizations using the combination of Network Access Protection and the Identiforce appliance are provided with added protection for their network resources from unauthorized access. Applied Identity's approach is compelling for existing Microsoft customers in that it not only enforces Network Access Protection health check policies, but takes advantage of Microsoft Active Directory and extends its use for the creation and enforcement of identity-based access policies."

"A key aspect of Applied Identity's strategy is to provide customers with an identity-based access control and management solution that easily integrates into their existing networks and leverages existing resources," said Dean Weber, Applied Identity's Chief Security Architect. "Our joint solution with NAP provides organizations with the layered security they need to reduce the risk of inappropriate access to critical network resources which could result in serious repercussions to business productivity and profitability."

Applied Identity is participating in the Microsoft Network Access Protection Partner Pavilion #2325 at RSA Conference 2007 February 5-8 in San Francisco, California, where the company will demonstrate how its identity-based access control solution integrates with both Microsoft's Network Access Protection and Active Directory. The demo will show scenarios using Windows Vista and the Network Access Protection client on Windows XP SP2 with a Windows Server "Longhorn" and Microsoft Active Directory for user credentials.

Applied Identity also has demonstrations running in two other locations at the exhibition: Applied Identity Booth #218, and the RSA Partner Pavilion #1324. To learn more about Applied Identity's presence at the RSA Conference, visit http://www.appliedidentity.com/RSAConference2007.

About Applied Identity's Identiforce(TM)

Applied Identity's Identiforce leverages existing network and identity management infrastructures to bind user identity with access policies, ensuring that critical network assets are protected from unauthorized access. In addition, its real-time audit trail of each individual's network activity meets the mandates of many of today's compliance regulations.

About Applied Identity

Applied Identity reduces the cost and complexity of ensuring that only the right people have access to the right resources on the network. The company provides identity-based access control and policy management solutions that enable organizations to protect their intellectual property and other high value corporate assets, to control third party access, and to achieve secure network segmentation. The company's Identiforce[TM] and Identisphere[TM] solutions enable and enforce user-level privileges within the network, help to simplify and consolidate policy development, and provide for the detailed auditing of user network activity for risk management forensics and compliance. The company's solutions integrate seamlessly with existing identity and security infrastructures, resulting in rapid deployment for internal auditing needs and compliance with regulations such as NASD 3010/3012, HIPAA, Sarbanes-Oxley (SOX), SAS-70, J-SOX, PCI, and the EU Market Abuse Directive. For more information, visit www.appliedidentity.com.

Product and company names and design marks herein are trademarks of their respective owners.