Array Networks Delivers World's Fastest SSL-based Secure Access Solution.

Business Editors/High-Tech Writers

CAMPBELL, Calif.--(BUSINESS WIRE)--Oct. 21, 2002

Array Security Proxy Supports Up to 5,000 SSL Transactions

Per Second and is First in Class to Receive RSA BSAFE(R)

SSL-C Certification

Array Networks, The Web Traffic Company, announced the new version of its Array SP secure Web traffic management platform with the industry's fastest SSL encryption engine. For the busiest enterprise networks, the new Array SP (Security Proxy) delivers remote access to Web applications for partners, customers, employees and remote workers based on trusted encryption, authentication, authorization and accounting (AAA). One SSL-based secure access solution from Array supports up to 5,000 SSL transactions per second and 32,000 concurrent user sessions and can be configured in high-availability "super clusters" consisting of up to 32 Array SP devices.

The Array SP provides a unified view of enterprise Web services. Whether the partner, customer, supplier, remote worker or employee is coming from the Internet or the corporate network, the view of the applications, the authentication process and even the URL remain identical. Rather than providing different access methods for different classes of users, the Array SP provides a simplified, borderless point of entry that works for all users, all the time. The Array SP handles all access requests over encrypted SSL connections from any standard Web browser, requiring authentication before granting service access, and permitting the application or user to access only authorized Web services while logging all user activity.

The Array SP is the first SSL security proxy and the Array TM is the first Web traffic management device to receive RSA BSAFE SSL-C protocol compatibility certification. The Array products received RSA Security BSAFE SSL-C certification based on 15 rigorous test scenarios. This certification ensures that Array SP and Array TM product families provide seamless SSL encryption for any Web browser or commercial Web server implementing RSA BSAFE SSL-C software. (See RSA/Array joint press release from Oct. 21, 2002 for more information.)

"The Array SP device is ideal for our situation and enables us to deploy secure Web-based services that we could not achieve prior to discovering this unique device," said Andy Sutton, manager of network services for Texas Health Resources. "Using the Array SP for HIPAA-compliant privacy, our physicians can easily and securely share information for enhanced patient care. The Array SP's unique value comes from its ability to provide a reverse proxy with the essential authentication, encryption and Web Resource Mapping capabilities required for secure access to sensitive information. Also, the willingness of the Array engineering team to work with us on further integration demonstrates the company's commitment to providing real value."

"The ever-increasing need for privacy as mandated by the Health Insurance Portability & Accountability (HIPAA) and Gramm-Leach-Bliley (GLBA) Acts and as required for inter-company deployment of Web services raises the bar for security and performance," said Donald J. Massaro, president and CEO of Array Networks. "We are proud to deliver the world's highest-performance SSL-based security proxy. Our ability to combine best-in-class functionality and performance through our Application Networking Architecture enables the Array SP to direct, accelerate and secure all internal and external Web traffic."

The Array SP's unique SSL-on-the-inside feature can decrypt SSL sessions to determine the appropriate server, then re-encrypt the access request so that clear text is never exposed even to the internal network. Its Web Resource Mapping capability provides non-disruptive remote access without the complexities and risks associated with replicating and customizing applications within a conventional extranet. Its Scalable Permission Control(TM) rules engine enables the Array SP to support thousands of access control lists with virtually no performance degradation. The Array SP also allows for remote files server access for Windows and Unix servers. Available support for Gigabit Ethernet enables the Array SP to achieve maximum throughput.

The Array SP is based on the Array Application Networking Architecture (ANA), a highly integrated, exceptionally scalable architecture for secure Web traffic management. ANA-based platforms utilize Array's SpeedStack(TM) network processing technology to provide tightly coupled integration of IP services, Web security and network performance.

"Array Networks has established itself as a leading innovator of Web traffic management products that support the real needs of enterprise applications that leverage Internet connectivity," said Peter Christy of NetsEdge Research Group. "Now, the addition of high-performance SSL and careful attention to the broader requirements for secure information access lets them extend their reach into important, performance and security demanding applications."

New in the Array SP

The Array SP is based on ArrayOS(TM) Version 5.0 and integrates many new features, including:

-- SSL subsystem: Hardware-accelerated, 128-bit SSL encryption for up to 5,000 SSL transactions per second and 32,000 concurrent sessions.

-- Enhanced file access -- Secure and transparent access to Unix and Windows servers.

-- Local database user accounts -- Local storage of user account data for authentication.

-- Client-side certificate authentication -- Authentication based on client-side certificates alone without requiring an additional AAA method.

-- Client-side certificate authentication on inside/outside -- Client-side SSL certificate authentication on both the inside and outside interface of the SP.

-- Transparent client IP -- Enables Array SP to function as a transparent proxy to backend servers.

-- Outlook Web Access Support -- OWA functionality allows secure access to Web based email.

-- Tree Structure for WebUI -- Easy-to-follow configuration system.

-- XML-RPC -- Administrators can now use XML-RPC to remotely manage the Array.

-- Notification and alerts -- Administrators can configure the Array's logging system to issue email or pager alerts based on keywords.

-- ARP management -- Administrators can manually flush and view the ARP entries for debugging and troubleshooting.

-- System administration toolkit -- Tools for showing status of upgrades, user management, password recovery, SSH and SCP tools, license key recovery, and enabling services.

-- DoS protection -- Full Denial of Service (DoS) protection for SMTP, POP and IMAP servers.

-- Availability -- The new Array SP is available in November, 2002 for $49,995. The new Array SP-C (Compact) for small and medium sized businesses with support for 800 SSL transactions per second and 500 concurrent user sessions is available for a starting price of $14,995.

About Array Networks

Array Networks, the pioneer in directing, accelerating, securing and analyzing all internal and external Web traffic, develops the industry's first fully integrated Web traffic management and security platforms. Headquartered in Campbell, Calif., with sales offices in Europe, Latin America, Asia Pacific and the U.S., Array Networks engineers and manufactures its Array products in the Silicon Valley and sells through direct and value-added channels. Array Networks has raised $31.1 million in funding, co-led by H&Q Asia Pacific and U.S. Venture Partners. For more information, visit www.arraynetworks.net or call 408/874-2420.

Array Networks is a registered trademark, and Array SP, ArrayOS, SpeedStack, Scalable Permission Control and The Web Traffic Company are trademarks of Array Networks.