

Milestone in NIAP certification of Mazu Networks' internal network security solution Enables purchases by Federal Government agencies
CAMBRIDGE, Mass. (September 28, 2004) - Mazu Networks, a leading provider of behavioral network security solutions for the enterprise, today announced that its Mazu Profiler solution has entered "In Evaluation" status in the Common Criteria EAL2 certification process. This milestone for Profiler, which uses real-time traffic-profiling technology to protect internal networks, is listed on the National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme web site.
Booz Allen Hamilton, a global leader in management and technology consulting, is performing the Mazu Profiler evaluation effort. Booz Allen, which operates one of only eight NIAP-approved Common Criteria Testing Labs (CCTLs), will conduct the independent documentation review and product testing in accordance with ISO 15408 (International Common Criteria) leading to government certification of Mazu's products.
"Our pursuit of Common Criteria certification for Mazu Profiler underscores our firm commitment to making our enterprise-class behavioral network security technology available to information security professionals in the U.S. Government," said Tom Corn, Mazu Networks' vice president of marketing and business development. "The Mazu Profiler has proven itself in large and dynamic enterprise networks. Government agency networks, many of which are similar in size and complexity to those in large companies, can clearly benefit from this exciting new technology."
The Common Criteria standard was developed through an international collaboration that included the National Information Assurance Partnership (NIAP), a U.S. government partnership between the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA). The Common Criteria testing scheme provides a comprehensive framework for specifying functionality and assurance requirements for network security products. It is an internationally recognized standard (ISO 15408) for testing and evaluating a wide range of security technologies. Compliance is a requirement for purchases of security products by U.S. Government agencies.
Mazu Profiler, now in its fourth generation, is a behavioral network security solution. It protects critical services inside enterprise networks against worms and insider attacks, reducing downtime, disruption and drain on resources. It enables organizations to monitor how their network is being used and by whom. It accurately detects worms, zero-day attacks, and insider threats. The Profiler also hardens the internal network against future attacks by helping eliminate rogue activity, enforce usage policy and optimize access policy and segmentation.
Mazu Networks is a leading developer of behavioral network security solutions. Mazu's products provide real-time insight into enterprise network behavior, reducing the risk, cost and complexity of securing critical network assets and services. The company's real-time traffic modeling technology enables enterprises to profile, plan, and protect networks with unmatched accuracy, efficiency, and scalability. The Mazu Profiler protects critical applications and services inside the network. Mazu's Enforcer solution protects networks at the perimeter from denial-of-service and other bandwidth-based attacks. These solutions eliminate the tradeoffs between security and accessibility, enabling organizations to broaden access to critical applications with less downtime and using fewer resources. Mazu is backed by premier venture capital firms, including Greylock, Matrix Partners, Pilot House Ventures Group, Benchmark Capital, and StarVest Partners. Mazu is an IBM Business Partner. Headquartered in Cambridge, Mass., Mazu also has locations in New York, San Francisco, and Washington, D.C. For more information, please visit www.mazunetworks.com.