Array Networks Delivers Security-Hardened Platform to Protect and Police Web Services.

Business Editors/High-Tech Writers

NOTE TO MEDIA: Photos are available in a Smart News Release(TM) on

Business Wire's Home Page at www.businesswire.com

and at www.newstream.com

CAMPBELL, Calif.--(BUSINESS WIRE)--April 22, 2002

New Array SP Secure Web Traffic Manager Offers End-to-End

Security for Web Services and Web-Based Networks

Array Networks announced its new Array SP (Security Proxy) secure Web traffic manager for the enterprise. The Array SP platform delivers secure, SSL-accelerated, anytime-anywhere Web access, enabling enterprises to defend and police Web services and applications with trusted encryption, authentication, authorization, and accounting. Based on a security-hardened reverse proxy, the Array SP's rich set of features, intuitive graphical user interface (GUI), and plug-and-play installation ensure painless Web security. Leveraging Array Networks' expertise as a leading developer of integrated Web traffic management systems, the Array SP is the first security-hardened, end-to-end Web traffic management platform that protects Web services and applications.

"The Array SP provides the carrier-grade scalability and end-to-end security that will enable the Xora solution to deliver enterprise data to mobile users," said Patrick Pittier, director of IT and Wireless Security for Xora, a Silicon Valley-based, leading provider of wireless, voice, and notification solutions. "We have been impressed with the performance and rapid implementation of the Array platform."

The new Array SP platform provides a unified view of enterprise Web services. Whether the partner, customer, remote worker, or employee is coming from the Internet or the corporate network, the view of the applications, the authentication process, and even the URL remain identical. Rather than providing different access methods for different classes of users, the Array SP provides a simplified, borderless point of entry that works for all users, all the time.

Using the Array SP, multiple Web services can be accessed with single sign-on to a secure Web site, which enables maximum security, easy administration and streamlined deployment. The Array SP secures Web services and other Web applications by handling all access requests over encrypted SSL connections from any standard Web browser, requiring authentication before granting service access, and permitting the application or user to access only authorized Web services. The Array SP's unique SSL-on-the-inside feature can decrypt SSL sessions to determine the appropriate server, then re-encrypt the access request so that clear text is never exposed even to the internal network. A forthcoming release of the Array SP will support the Simple Object Access Request (SOAP) protocol for intelligent content routing for Web services.

"The Array SP provides the end-to-end security infrastructure required to efficiently and securely manage the exploding quantity of business-critical data surging through the Internet as enterprises embrace Web services," said Donald J. Massaro, president and chief executive officer of Array Networks. "Our Array 1000 and Array 500 products direct Web traffic. Now, our Array Security Proxy polices it."

The powerful Web Resource Mapping capability provides non-disruptive remote access without the complexities and risks associated with replicating and customizing applications within a conventional extranet. It tackles the problem of enabling applications and content for secure access via the Internet without the need to change anything on the servers themselves. Instead, this new technology transparently maps the embedded content references (hyperlinks, inline images, etc.) to names that can be used not only by corporate users but also by remote users from the Internet. Using the Array SP's one-time URL feature, administrators need not worry about users logging in from airports or even cyber-cafes since URLs are not reusable and automatically time out.

The Array SP's built-in SSL acceleration is important because secure traffic would otherwise place a heavy demand on Web servers as they handle the compute-intensive encryption, decryption, and authentication processes associated with SSL connections. The Array SP integrates accelerated 128-bit SSL (Secure Sockets Layer) encryption for up to 800 transactions per second. Scalable clustering for up to 32 Array SP platforms enables the Array system to provide secure access for the largest extranet or intranet environments. The Array system can be set up in less than 30 minutes and does not require client-side software or router reconfiguration.

"Array Networks is leveraging its content networking expertise to provide enterprise customers with the ability to take a coherent, unified approach to securing the extended enterprise," said Lucinda Borovick, director of Datacenter Networks for IDC.

The intuitive Array user interface provides Wizard-based set up and comprehensive security auditing. The Array Pilot's Flight Deck provides network administrators an at-a-glance view of Array SP's status and activities. An LCD panel on the front panel of the system displays a variety of status indicators necessary for troubleshooting by network operations center personnel.

Array SP Feature Overview:

-- SSL Acceleration and Encryption: Hardware-accelerated, 128-bit SSL
encryption for seamless operation with HTTP 1.0, HTTP 1.1, host-based telnet
applications, and SMTP, POP3, and IMAP e-mail (available in 2H02). SSL-on-the
inside network -- true end-to-end security for Web-based networks.

-- Authentication: Single-point authentication using SecurID, LDAP, RADIUS,
Active Directory, or local user database.

-- Authorization: Authorization is based on user, group, URL, or source IP.

-- Accounting: Client-side security certificates, certificate revocation lists,
secure SSH administration, and comprehensive security auditing exportable to
log analysis tools.

-- Webwall Security: For protection against syn-flood, fragmentation, and DoS
attacks; stateful packet inspection; and single packet attack prevention.
Array's Scalable Permission Control(TM) rules engine supports thousands of
access control lists (ACLs) while never consuming more than one percent of the
Array SP's capacity.

-- Array Clustering Technology(TM): Scalable clustering for up to 32 Array SP
platforms enables the Array system to provide secure access for the largest
extranet or intranet environments.

-- Web Resource Mapping: Provides non-disruptive remote access without the
complexities and risks associated with replicating and customizing applications
within a conventional extranet.

-- One-time URLs: Using its One-Time URL feature, administrators don't need to
worry about users logging in from airports or even cyber-cafes since URLs are
not reusable and automatically time out.

-- Performance: 10/100/1000 Copper Ethernet, Gigabit Fiber Ethernet, 4 ports;
800 SSL transactions per second, 100,000 maximum users.

-- User Interface: The Array Pilot delivers a flight deck full of controls and
monitors in the form of an ultra-friendly GUI. The Flight Deck displays
real-time server metrics much like a dashboard.

-- Casing: Impregnable housing and cable management system for top physical
security. Front-panel LCD for real-time status tracking.

-- Availability: The Array SP will be available in Q2 2002.

About Array Networks

Array Networks, developer of the industry's first fully integrated Web traffic management and security platforms, offers "Power tools for the Web" that dramatically reduce the complexity and risk of secure Web traffic management. Headquartered in Campbell, Calif., with sales offices in Germany, Great Britain, France, Japan, Korea, Singapore and the U.S., Array Networks engineers and manufactures its Array products in the Silicon Valley and sells through direct and value-added channels. For more information, visit or call 408/874-2420.

Note to Editors: Array Networks is a registered trademark, and Array SP, Array Clustering Technology, and Scalable Permission Control are trademarks of Array Networks.

Note: Photos are available at these URLs:

http://www.businesswire.com/cgi-bin/photo.cgi?pw.042202/bb4

http://www.businesswire.com/cgi-bin/photo.cgi?pw.042202/bb4a