Protego Networks' Appliance Release 2.1 Delivers Next Generation Event Viewer; High-Speed Session Viewer Simplifies Troubleshooting Network Security and Connectivity.

Business Editors/High-Tech Writers

MILPITAS, Calif.--(BUSINESS WIRE)--Feb. 5, 2004

Protego Networks Inc., the leader in security threat management appliances, announced today availability of version 2.1 of its Mitigation and Response System (MARS) appliance. Embedded next generation reporting tools, extended device support and correlation capabilities give network and security operators unprecedented insight into their networks.

MARS' Session Viewer takes SIM Event Viewers to the next level, displaying entire sessions of correlated security and network events as they occur. This rich contextual information and dynamic behavioral query-based view allows operators to monitor and analyze specific traffic and events in real time. Operators can use Session Viewer to troubleshoot network connectivity and security events; for example, monitor network traffic between a user on a specific network segment behind a NAT (Network Address Translation) boundary and a particular port on a specified server.

"Session Viewer gives operators the level of granularity they need to analyze network activity as it occurs," says Partha Bhattacharya, CTO and co-founder. "The old Event Viewers are little more than rough filters that slow down the flood of real-time events to a 'mere' fire-hose operators have to deal with, still requiring enormous manual effort. Protego's Session Viewer allows operators to drill down into complex multi-event attributes in an infinitely more manageable fashion. And MARS' mitigation capabilities enable immediate actions to be taken to stop any type of unwanted traffic by leveraging capabilities already built into the network."

Additionally, MARS Version 2.1 features include:

-- User-Based Queries. User activity can be tracked using all of

the metrics available for MAC, port or IP queries.

-- Ranked Reporting: By bandwidth and number of sessions for

specified requests. Networks and Network Groups can also now

be ranked according to the number of sessions or byte-count of

traffic.

-- TACACS+ support has been added for advanced device

authentication.

-- Full CVE compliance. The Common Vulnerability and Exposures

standard is a US Department of Homeland Defense funded project

of the security community and the Mitre corporation and

provides standardization of vulnerability types, assisting

with normalization of event information from unrelated product

vendors.

Protego Networks' Mitigation and Response System (MARS) provides all the benefits of Security Information Management (SIM), plus the ability to prevent intrusions and policy violations. The MARS Appliance reduces the burden on critical security personnel, enabling them to respond quickly and decisively to incidents.

About Protego Networks

Protego Networks Inc., the leader in security threat management appliances, enables organizations to quickly identify, analyze and respond to security threats by leveraging their existing infrastructure. Protego allows critical security and network organizations to be more productive, respond to security incidents more rapidly, and maximize the ROI from their existing network security infrastructure. Protego Networks Inc. is a privately held company, founded in 2002, and headquartered in Milpitas, Calif. with offices in Boston and Toronto. For more information on Protego Networks and its products and services, visit www.protegonetworks.com or call 408-262-5220.