Netegrity Publishes Reference Architecture to Help Organizations Simplify Web Services Security and Management.

Business Editors/High-Tech Writers

WALTHAM, Mass.--(BUSINESS WIRE)--Sept. 22, 2003

Leading Web Services Vendors Collaborate to Define the Critical

Components and Standards for a Secure Web Services Architecture

Netegrity, Inc. (Nasdaq: NETE), a leading provider of identity and access management solutions, today released a Web Services Reference Architecture designed to alleviate the confusion created by overlapping components of Web services security and management. The Web Services Reference Architecture contains guidelines for implementing Web services security including high-level requirements for scalable security architectures, deployment templates that meet a range of business requirements for enterprise Web services security architectures, and clarification on the relationship between existing enterprise security architectures and those required for Web services. Using the Web Services Reference Architecture as a guideline, organizations can develop a road map to ensure that security is consistently enforced across multiple Web services and across the larger enterprise security infrastructure. The Web Services Reference Architecture diagram and white paper can be downloaded at www.netegrity.com.

"There is tremendous confusion over the necessary components required to develop, deploy, manage, and especially secure an enterprise Web services infrastructure and how overlapping components with overlapping functionality should work together," said Prateek Mishra, Director of Technology and Architecture at Netegrity and co-chair of the OASIS Security Services Technical Committee. "Our intent with the Reference Architecture is to draw upon the expertise of Netegrity and our partners to enable organizations to create a Web services architecture that is secure, manageable, and scalable."

With a focus on security and management, the Web Services Reference Architecture explains how the prevention (network security), enablement (identity and access management), and enforcement (management) layers of a Web services architecture fit together. Netegrity has been working with leading Web services vendors to help define and validate the components necessary to manage and secure a Web services based infrastructure. Actional Corporation, AmberPoint, Confluent Software, DataPower Technology, Digital Evolution, Forum Systems, Service Integrity, and Swingtide have all demonstrated their support for the Web Services Reference Architecture.

Netegrity today unveiled the next version of its TransactionMinder(R) product (see announcement "Netegrity Releases Next Version of TransactionMinder to Enable Companies to Securely Deploy Web Services"). The Netegrity TransactionMinder solution provides the enablement layer of the Web Services Reference Architecture with a centralized, policy-based Web services security solution that enables organizations to administer identity-based Web services. With the new release of TransactionMinder, Netegrity adds support for the WS-Security specification and the Microsoft(R) .NET platform, while offering improved performance and scalability for high transaction Web service deployments.

"As a long-time Netegrity partner, Actional consistently encounters customers that rely on Netegrity's leading identity and access management products as a part of an overarching Web services architecture," said James Phillips, Actional Chief Strategist and Senior Vice President of Products and Marketing. "Together, Actional and Netegrity provide the industry's leading solution for end-to-end security and management of Web services, combining Netegrity TransactionMinder capabilities with Actional's powerful in-network components that actively enforce Netegrity-defined policy across the entire service network."

"With its reference architecture, Netegrity has addressed much of the confusion around the coexistence of network appliances, security and management products," said John Hubinger, president and CEO of AmberPoint. "It has helped to define the combined value of our companies' solutions, benefiting our shared customers by better enabling them to deploy Web services-based systems that are trustworthy, production-ready and easily manageable."

"The integration of Confluent's Web-service-management products with Netegrity TransactionMinder 5.6 allows customers to quickly deploy standards-compliant production Web-service solutions today," said Rajiv Gupta, CTO, Chairman, and Co-Founder of Confluent Software. "Moreover, for customers looking to deploy applications in conformance with the Web Services Reference Architecture, the combined-solution from Confluent and Netegrity provide the most comprehensive and easy-to-use solution available in the market."

Eugene Kuznetsov, chairman and CTO at DataPower Technology, Inc., stated, "Companies are rolling out simple, pragmatic Web services and want to leverage their existing security solutions for their Web service infrastructures. Netegrity has provided helpful guidance to these customers with its Reference Architecture. By augmenting enterprises' existing systems with Netegrity TransactionMinder, XML Web services security gateways, and other components of the XML security ecosystem, corporations can immediately begin to secure XML applications enterprise-wide."

"Through this partnership, Digital Evolution and Netegrity provide a very powerful and comprehensive solution set to customers building policy-based systems for Internet, Extranet, and intranet environments," said Eric Pulier, CEO of Digital Evolution. "Digital Evolution's XML and Web services management, security, and UDDI-based registry products fit perfectly within Netegrity's Reference Architecture."

"The Netegrity and Forum solutions bring together the cornerstones of security, identity management, and access control, with unique intrusion detection and prevention capabilities against the new breed of blended XML-related threats," said Mamoon Yunus, CTO for Forum Systems. "Forum's technology integration partnership with Netegrity assures our customers they are deploying an XML Web services security architecture that is scalable at the edge of the network as well as closer to the enterprise applications."

"The Netegrity Reference Architecture helps to describe for customers the elements necessary to secure and manage Web services," said Joe Maloney, Senior Vice President of Marketing for Service Integrity. "Service Integrity has worked closely with Netegrity in providing a secure monitoring and analysis solution for Web services."

"The reference architecture that Netegrity has championed will help ensure more successful implementations of XML and Service-Oriented Architectures. Swingtide is excited to contribute its work and experiences in the area of the analytical requirements needed to gain visibility into how the overall XML Network is forming and its research into how to perform the type of deep payload analysis required for Business Activity Monitoring across a diverse range of systems, data specifications, and industry-standards," said Kirk Fallbacher, CTO of Swingtide, Inc.

Web Seminar

As part of its Web services seminar series, Netegrity will be holding a Web seminar on Tuesday, September 23 at 1 pm ET to discuss the Web Services Reference Architecture. To register for this seminar, please go to www.netegrity.com.

About Netegrity

Netegrity, Inc. is a leading provider of security software solutions that securely manage identities and their access to enterprise information assets, letting business in while keeping risk out. Netegrity provides a comprehensive identity and access management product line for continuously evolving computing environments, including legacy, Web, and service-oriented architectures. Netegrity's flexible, standards-based offerings increase security, reduce administrative costs and enable revenue enhancement. Supported by a network of over 1100 trained integration consultants and 200 technology partners, Netegrity solutions are licensed to more than 300 million users at over 700 organizations worldwide, including more than half of the Fortune 100. For more information, visit www.netegrity.com.

Netegrity and TransactionMinder are registered trademarks of Netegrity, Inc. All other product names, service marks, and trademarks mentioned herein are trademarks of their respective owners.

Various statements in this release concerning Netegrity's future expectations, plans, and prospects constitute forward-looking statements for the purposes of the safe harbor provisions under The Private Securities Litigation Reform Act of 1995. Actual results may differ materially from those indicated by these forward-looking statements as a result of various important factors such as, but not limited to, general economic conditions, weakness in the global economy, increased operating expenses, our ability to develop and enhance our products and services or remain competitive in product pricing, competition in the marketplace, including competitors' sales strategies, development and performance of our direct and indirect sales channels, delays in product development, changes in customer and market requirements and standards, market acceptance of new products and technologies, and technological changes in the computer industry, as well as those risks more fully discussed in the Company's reports on file with the Securities and Exchange Commission including the Company's latest Form 10-K/A, Form 10-Q and any subsequent filings. In addition, any forward-looking statements represent the Company's views only as of today and should not be relied upon as representing its views as of any subsequent date. While we may elect to update forward looking statements at some point in the future, we specifically disclaim any obligation to do so, even if our estimates change and, therefore, you should not rely on any of these forward-looking statements as representing the Company's views as of any date subsequent to today.