Caymas Systems' Access Gateways First To Pass FIPS 140-2 Level Testing For Entire Products; Only Access Products that Provide ``Bumper to Bumper'' FIPS 140-2 Compliance, Products Added to GSA Schedule 70.

PETALUMA, Calif. -- Caymas Systems, the leading provider of Identity-Driven Access Gateways, announced today that it has passed Federal Information Processing Standard (FIPS) Level 2 testing, and achieved General Services Administration (GSA) Schedule 70 listing, critical milestones in doing business with United States government agencies. The Caymas 318 and Caymas 525 Identity-Driven Access Gateways successfully completed FIPS 140-2 Level 2 testing for all hardware, software, and cryptographic algorithms, making the products the only access gateways to be "bumper to bumper" FIPS 140-2 compliant. Other access appliances support only a cryptographic sub-module that is certified to Federal government standards.

"Caymas is committed to meeting and exceeding the highest standards of compliance instituted by the U.S. government," said Joe Howard, director of Federal business for Caymas Systems. "This certification is of major importance in the government sector. Our government partners and customers can rest assured that each of our products in whole, not just a minimal number of components, meet these standards."

Caymas has passed the rigorous testing required to achieve the National Institute of Standards and Technology (NIST) Federal Information Processing Standard (FIPS) 140-2 Level 2 certification and meets the cryptographic requirements of the U.S. government's National Security Telecommunications and Information Systems Security Policy (NSTISSP) Number 11. NIST's Cryptographic Module Validation Program (CMVP) provides module and algorithm testing for FIPS 140-2, which is a standard that applies to Federal agencies using validated cryptographic modules to protect sensitive government data in computer and telecommunication systems. FIPS 140-2 compliance and certification of the entire Caymas platforms guarantees a level of fully integrated security and tamper-proofing that provides a highly robust, powerful, flexible and reliable architecture.

Caymas Identity-Driven Access Gateways support the strongest commercial encryption algorithms available, including the Triple Data Encryption Standard (3DES) and the Advanced Encryption Standard (AES) up to 256-bit, allowing secure transmission of data over public networks. As access to critical information and resources are extended to field personnel, other government agencies, communities of interest, contractors, industry and other classes of users, it is mandatory that these intranets and extranets are secured to the highest standards available, yet on a cost-effective basis. Caymas gateways also provide fine grained access control and policy enforcement, advanced authentication, detailed logging and auditing, host integrity checking, and integrated threat protection, which together offer the highest available security for end-to-end communications and information exchange.

Caymas products have also been added to the GSA IT Supply Schedule through a master schedule program with Government Channels Group. Government Channels Group specializes in the creation, management and administration of adaptive Federal Channel Programs for leading IT equipment manufacturers.

"The GCG program is designed to quickly and easily 'GSA-enable' any qualified Caymas channel partner, whether they have an existing schedule or not," said Jack Pooley, president of Government Channels Group. "We are excited about working with both Caymas and their channel partners." The GSA Schedule 70 is a highly popular contract vehicle that provides information technology to Federal, State and Local government agencies.

FIPS certification and the GSA Schedule 70 listing will extend the market for the most powerful and secure access gateways in the industry. The Caymas 318 and the Caymas 525 Identity-Driven Access Gateways are purpose built, hardware accelerated access gateways and the only solutions that support hundreds to thousands of internal and remote users, devices and resources on a single platform. Caymas uses its unique, patent pending Identity Tagging Architecture to tie all access control and security decisions to the identity of users, devices and resources. Government regulations create strict security and privacy mandates for many businesses, all of which require identity-based monitoring for audits and compliance.

Caymas gateways perform network level admission, including integrated endpoint integrity checking, and application level access control with complete identity-based monitoring of both users and resources. Full application level security is integrated specifically for authorized users and across encrypted sessions.

About Caymas Systems

Caymas Systems allows organizations to control access and control their business with the world's first Identity-Driven Access Gateways. Caymas offers the only access gateways that leverage the identities of users, devices and resources to connect the right user to the right resource every time, dramatically improving enterprise access control and security. Caymas delivers the only ASIC-based appliances that harness the power of identity to provide a universal access solution--a single platform for network admission and application access control, and for both remote and internal users, with centralized access policy. Caymas Systems is a privately held company headquartered in Petaluma, CA. For more information visit www.caymas.com.