SanDisk Expands Its Enterprise Solutions Portfolio with the Introduction of TrustWatch.

TrustWatch Provides Secure Management of Standard USB Flash Drives, Complementing SanDisk's mTrust For Managing High-Security Flash Drives

SAN FRANCISCO -- SanDisk([R]) Corporation (NASDAQ:SNDK) today introduced the TrustWatch([TM])integrated suite of applications that transform off-the-shelf USB flash drives from a security threat to a competitive advantage in the enterprise. The announcement was made at the RSA Conference 2007, where SanDisk is demonstrating its security products and solutions at Booth #2431 in the Moscone Center.

TrustWatch is built around a secure network appliance and a management console, through which IT administrators can easily configure and deploy secured USB flash drives (UFDs), while preventing information from being copied to unapproved devices. The TrustWatch solution allows the IT department to select from SanDisk's line of standard flash drives for issue to employees.

UFDs centrally managed by the TrustWatch suite can securely store work-related information, and support remote access to email and other applications. On the road, employees can use a TrustWatch device on a borrowed PC without leaving any trace of their activity on that PC. If the UFDs are lost or stolen, their data can be remotely destroyed.

SanDisk is also offering mTrust, a proven solution which became part of the company's product portfolio in November with the acquisition of msystems([TM]) Ltd. mTrust provides an enhanced level of security with 256-bit AES hardware-based encryption, enabling strong two factor authentication, on custom UFDs and mToken smart card-based products supplied by SanDisk.

"Enterprise IT managers have always been concerned about UFDs as enablers of information leakage, whether by accident or malicious intent," said Marc Metis, vice president, corporate marketing, at SanDisk. "TrustWatch and mTrust together change the rules. UFDs managed by TrustWatch or mTrust are secure, inside or outside the enterprise network, so knowledge workers can safely take their work anywhere."

In addition to data encryption, stealth Web browsing and Microsoft Outlook file synchronization, the TrustWatch solution's many functions include RSA SecurID([R]) dual-factor authentication technology from RSA, The Security Division of EMC, which enables the UFDs to be used as authenticators. In this two-factor authentication system, users must have something they know -- a password -- and something they possess -- the UFD itself -- to access data and applications stored within the corporate network.

"We are excited to partner with SanDisk on TrustWatch, a solution that effectively balances cost, convenience and security as businesses seek options for strongly authenticating employees," said Toffer Winslow, vice president of product management and product marketing at RSA. "Built-in support for RSA SecurID technology enables businesses to leverage unmatched interoperability, with over 350 enterprise applications and infrastructure devices."

TrustWatch was co-developed with RedCannon Security Inc., a provider of centrally-managed, secure mobile-access solutions for the enterprise.

"We're delighted that SanDisk picked RedCannon," said Vimal Vaidya, founder, chairman and CEO of RedCannon Security. "RedCannon's goal is to transform UFDs into enterprise-managed and compliant devices. As the need for remote access to enterprise information grows, TrustWatch is uniquely positioned to provide an economical solution to increase security and improve productivity anytime, anywhere."

Two other partners contributed to the TrustWatch suite: SecureWave and Safend Ltd., who are both providing endpoint information leakage protection.

"SanDisk searched long and hard for best-of-breed partners to broaden its range of enterprise solutions with an exciting and important new product," said Ron LaPedis, product marketing manager for SanDisk. "RSA, RedCannon, SecureWave and Safend are trusted names in the security field that give TrustWatch a solid technology foundation."

TrustWatch also includes a special enterprise version of SanDisk's CruzerSync([R]) technology, developed in partnership with Dmailer, for secure synchronization and back up of documents, browser favorites, computer settings such as desktop customization, email, contacts, notes and task lists from a personal computer to managed USB devices. Unlike the personal version of CruzerSync, the enterprise version can be centrally managed to allow or block specific functionality as well as synchronization of designated files.

The TrustWatch suite has three components which together establish complete life-cycle management for UFDs:

* TrustWatch Access - Provides security on the UFD, including password protection. Integrates a secure browser, email client, spyware scanner, Citrix ICA Web client, optional VPN client, and data storage. Also creates an activity log tracking all data moving to and from approved UFDs.

* TrustWatch Vault - Establishes FIPS 140-2 certified encryption on the UFD, sufficient for HIPPA, SOX and other compliance regulations.

* TrustWatch Manager - Offers a browser-based centralized console to IT administrators, allowing them to remotely deploy, update, track, and disable thousands of UFDs.

TrustWatch also works with many endpoint protection solutions, enabling management of USB ports to lock out unauthorized devices from the enterprise network.

TrustWatch is easy to integrate with existing corporate directories and authentication, and can be deployed rapidly. There's only one piece of hardware to install--a rack-mountable Linux-based network appliance, provided by SanDisk.

TrustWatch is supported by SanDisk's TrustedFlash([TM]) secure storage and TrustedSignins([TM]) one time password technologies. Every SanDisk UFD has an electronic VID/PID-Vendor Identifier/Product Identifier--along with a unique readable electronic serial number, device certificate, and an unknown random encryption key. The VID/PID and serial number ensures every device is known for what it is and to whom it is assigned. Devices can be managed individually, though group policies or a combination.

TrustWatch and mTrust are both available now, with pricing information provided on request to enterprise clients. More information can be found online at www.sandisk.com/trustwatch .

SanDisk is the original inventor of flash storage cards and is the world's largest supplier of flash data storage card products, using its patented, high-density flash memory and controller technology. SanDisk is headquartered in Milpitas, California, and has operations worldwide, with more than half of its sales outside the U.S.

SanDisk's web site/home page address: http://www.sandisk.com

SanDisk's product and executive images can be downloaded from http://www.sandisk.com/corporate/mediakit/

SanDisk, the SanDisk logo and CruzerSync are trademarks of SanDisk Corporation, registered in the U.S. and other countries. TrustWatch, TrustedFlash and TrustedSignins are trademarks of SanDisk Corporation. All trade names are either registered trademarks or trademarks of their respective holders.

RSA and SecurID are either registered trademarks or trademarks of RSA Security Inc. in the United States and/or other countries. EMC is a registered trademark of EMC Corporation.

This press release contains certain forward-looking statements, including expectations for new product introductions, specifications, applications, markets, pricing, customer acceptance and customers that are based on our current expectations and involve numerous risks and uncertainties that may cause these forward-looking statements to be inaccurate. Risks that may cause these forward-looking statements to be inaccurate include among others: market demand for our products may grow more slowly than our expectations or there may be a slower adoption rate for these products in new markets that we are targeting, and the other risks detailed from time-to-time under the caption "Risk Factors" and elsewhere in our Securities and Exchange Commission filings and reports, including, but not limited to, Form 10-K and our quarterly reports on Form 10-Q. We do not intend to update the information contained in this press release.