NEWS & EVENTS

Press Releases

NEWS & EVENTS

Mazu Networks Secures Common Criteria Certification

Certification Validates the Ability of Mazu Profiler™ to Address Critical Security Issues Specific to the Government Sector

CAMBRIDGE, MASS. - January 9, 2006 - Mazu Networks, the leading provider of behavior-based network security solutions, today announced that it completed Common Criteria certification. This certification confirms that Mazu Profiler™, a Network Behavior Analysis (NBA) system, meets a strict set of predefined requirements, as stated in the Security Target document.

Mazu Profiler was evaluated by Booz Allen Hamilton CCTL, an accredited testing laboratory, using the Common Methodology for IT Security Evaluation for conformance to the Common Criteria for IT Security Evaluation ISO/IEC 15408. The evaluation was conducted in accordance with the provisions of the National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme. NIAP is a collaboration between the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA).

"Despite significant investments in security technology, government organizations are still plagued by worms, insider breaches and other security threats," said Glenn Brewer, vice president of engineering, Mazu Networks, Inc. "As government agencies continue to increase their use of mobile devices and extend broader access of internal resources to contractors, partners and remote employees, they dramatically increase their level of risk. The Common Criteria certification of Mazu Profiler provides government agencies with a solution that can effectively secure their critical infrastructures regardless of how open their networks have become."

Mazu Profiler analyzes network traffic and behavior to provide enterprises with the intelligence required to operate internal networks more securely. By examining all internal traffic and analyzing anomalous behavior, Mazu Profiler provides security and network teams with: visibility into how the network is used; protection from worms and insider breaches and the ability to audit and enforce internal controls.

Common Criteria, the first international standard for IT security evaluation, opens the way to worldwide mutual recognition of evaluation results. NIAP, a joint program sponsored by the NSA and the NIST, is the program that implements Common Criteria in the United States. This partnership between the public and private sectors helps organizations select commercial off-the-shelf information technology (IT) products that meet their security requirements and helps manufacturers of those products gain acceptance in the global marketplace. Twenty-two countries now recognize the Common Criteria as the official third-party evaluation standard for IT security procedures.

Federal agencies have always been a prime target for attacks by hackers, foreign governments and terrorists. These organizations continue to face a growing number of new operational and security threats as a result of their large and expansive contractor base, rich source of online data for the taking and highly interconnected, complex and critical network. The increase in demand for Mazu Networks' solutions within the federal government demonstrates its ability to address these very issues.

"The Common Criteria certification is one of a series of steps Mazu Networks has made in bringing NBA systems to the government sector," said Joe Gately, vice president of channels and alliances. "Further, we have recently bolstered our government presence with the addition of a dedicated team led by Ed Wimbish, who has 24-years of experience in servicing agencies within the federal and private sector. Our steadfast focus on helping local, state and federal U.S. agencies secure their critical infrastructures will contribute greatly to the protection of the sensitive data stored on the networks of key government organizations across the country."

Mazu Networks' products are available through the Federal Supply Schedule contract by the General Services Administration (GSA). This contract, under the GSA Schedule 70 (Information Technology), covers advanced information security products that will enable federal information security professionals to meet their challenging regulatory requirements and improve the protection of critical federal information assets.

"The GSA contract award enables Conquest Security to offer the most advanced and market leading information security solutions to the federal government," said Juana M. Williamson, president and CEO of Conquest Security. "Government agencies will now be able to choose Mazu Profiler as a source for their information security needs."

The GSA contract will enable government agencies to more easily purchase Mazu Profiler from contract holders like Conquest Security, by simplifying procurement procedures, eliminating the need for RFPs, reducing lead times and lowering administrative costs. Conquest Security's GSA contract number is GS-35F-0842R (Schedule 70).

For more information on Mazu Networks' Common Criteria certification, visit: http://niap.nist.gov/cc-scheme/st/ST_VID10016.html. To learn more about Mazu Networks' capabilities in the government sector, visit: http://www.mazunetworks.com/fedgov.

About Mazu Networks, Inc.

Mazu Networks provides behavior-based network security solutions that analyze network traffic and behavior to operate enterprise networks more securely. Mazu Networks' offerings include Mazu Profiler™ - an internal network-wide solution for detecting and mitigating worms and internal threats, providing network-wide visibility, and easing the burden of regulatory compliance efforts and Mazu Enforcer™ - a perimeter security solution for detecting and mitigating denial-of-service attacks. Mazu Networks is backed by premier venture capital firms, including Greylock, Matrix Partners, Pilot House Ventures Group and StarVest Partners. Symantec Corporation also is an investor in the company. Mazu is an IBM Business Partner. Headquartered in Cambridge, Mass., Mazu also has locations in New York, San Francisco and Washington, D.C. For more information, please visit www.mazunetworks.com.