Clearswift Delivers World's Only EAL4 Certified Boundary Security Solution for Military Messaging.

Clearswift's DeepSecure 2.1 completes common criteria EAL4 evaluation

REDWOOD CITY, Calif. -- Clearswift announced today that its DeepSecure 2.1 message security software has passed common criteria Evaluation Assurance Level 4 (EAL4); making it the world's only EAL4 certified ACP 145 compliant security solution. DeepSecure is specifically designed to meet the needs of organizations where security is paramount, such as in the military, government and defense industries.

ACP 145 (Allied Communications Protocol 145) is a messaging interoperability standard designed to support communication between military messaging systems. Currently, most systems operate under their own standards, making interoperability between organizations difficult. ACP145 has been designed as an 'Esperanto' standard that will allow nations to interoperate both syntactically and semantically.

"Clearswift's DeepSecure, which counts NATO among its customers, is the only boundary security solution for military messaging on the planet that has been evaluated to EAL4. It is vital that military organizations are able to communicate securely with each other and we are delighted that DeepSecure 2.1 has been certified to fulfill such a critical role in enabling that communication," VP Sales EMEA, Michael Paterson, said.

"The EAL4 Certificate was formally presented to Clearswift on Wednesday 20th of Sep at the 7th International Common Criteria Conference in Lanzarote, Spain. Achieving the common criteria EAL4 certification demonstrates that DeepSecure has complied to a stringent set of quality assurance requirements, which customers working with sensitive information demand," Mr. Paterson said.

The previous version of DeepSecure provided exceptional standards of security and was also compliant with ACP 145. However, with DeepSecure 2.1 there is no longer a requirement for messages to be converted from the X.400 messaging standard into a MIME (Multi-Purpose Internet Mail Extensions) format before the content can be examined and policies applied.

"When selecting security products, it is critical that the security product not become an avenue for exploitation itself," said Charles Kolodgy, Research Director, Security Products at IDC. "To validate that level of trust, many more companies are turning to the international Common Criteria evaluation program. By gaining Common Criteria certification, especially at EAL 4, Clearswift is demonstrating a commitment to building secure products."

"We are also pleased to announce other improvements to DeepSecure including simplified policy capabilities which can be easily enforced and altered by email administrators through the highly intuitive GUI," Mr. Paterson said.

DeepSecure 2.1 continues to deliver an enhanced security solution that enables secure and encrypted messages, as well as standard emails, to be audited at the gateway, whilst preventing eaves-dropping attacks.

Key Feature Updates:

* Security Label support with X.841 SPIFs making DeepSecure 2.1 the only EAL4 evaluated ACP 145 compliant product, and providing the only EAL4 evaluated X.841 SPIF Editor.

* Inclusion of both SMTP/MIME and X.400 message protocol conformance validation within the EAL4 evaluation - again making DeepSecure the only mail guard product to include this protocol conformance validation within EAL4 evaluation.

* Inclusion of the intuitive ClearPoint Management Interface within the scope of EAL4 evaluation, providing easily understood yet EAL4 assured visual representation of complex policies, and monitoring and control of gateway operation

* Conditional policies allow any policy option to be made dependent on the outcome of any other policy check, nested to any depth, to allow creation of policies to meet any requirement, however complex.

* EAL4 evaluated plug-in APIs provide clear separation between evaluated and other functions, allowing the functions beyond evaluation (such as virus scanners) to be updated without affecting the evaluated state of the core product.

About DeepSecure 2.1

DeepSecure is a messaging security solution that enables organizations to safely transmit highly sensitive information via electronic communications whilst maintaining network integrity. As well as providing virus scanning, DeepSecure also enables file type fingerprinting and word search on messages that may be signed or encrypted.

DeepSecure provides assured network separation: messages are stored, and then forwarded through an intermediary rather than through a data stream. This prevents messaging protocols being subverted and being used for external network attacks or unauthorized transfer of confidential data. DeepSecure maintains separate channels for message flow between networks, thus allowing different security policies to be applied in each direction.

About Clearswift

Clearswift simplifies content security.

Our products help organizations enforce best-practice email and web use, ensuring all traffic complies with internal policy and external regulations.

Our range of content filtering solutions makes it easy to deploy, manage and maintain no-compromise email and web security for both inbound and outbound traffic.

Clearswift is the only vendor to offer comprehensive, policy-based content security in all three deployment methods: as software, as an appliance and as a managed service.

All three platforms are designed to take the hassle out of securing internet traffic, with a clear, intuitive management interface; automatic, 'zero-touch' updates; powerful reporting and common-sense policy management.

Twenty years of experience across 15,000 organizations has helped us raise security standards while simplifying security management at the same time.

We've helped many of the world's most successful organizations use the internet with confidence and are committed to staying ahead of the market and helping our customers defend against all emerging threats. www.clearswift.com