IPOLICY NETWORKS AWARDED PATENT FOR UNIVERSAL APPLICATION DECODE ENGINE

Patent Enables Unparalleled Extensibility, Custom Application Support and Rapid Security Against Emerging Threats

FREMONT, Calif., November 6, 2006 –Policy Networks, provider of next-generation network security solutions, today announced that it has been granted a patent by the U.S. Patent and Trademark Office for its universal application decode engine. The breakthrough application decode technology makes iPolicy’s Single Pass Architecture application-independent, enabling customers to easily update their network security to support new applications and versions, including custom applications, and also to fix application vulnerability/behavior without requiring a software version upgrade.

This patent provides the basis for the dynamic application decode download capability featured in iPolicy 3.0 — also announced today (see related release)—which supports dynamic protocol detection, control and threat prevention for a full range of current and emerging applications including VoIP, IM and P2P.

With the explosive growth of new peer-to-peer and other applications, companies are seeing a dramatic increase in traffic flow in their networks for a variety of different applications. The rising trend of this new application traffic has led to new threats, embedded malware and viruses, with vulnerability further increased by applications using dynamic ports. Compounding the problem further, many applications update versions frequently and thus render the existing application decode algorithms ineffective.

Historically, new algorithms and implementations have been required for any application behavior update or new application support. iPolicy Networks’ patented universal application decode engine addresses these limitations, providing complete application awareness through layer 7.  The application decode engine enables transaction and command level security capabilities, and provides support for current and future applications without the need for new software program code.

Benefits to customers include:

• Extensibility—New applications can be supported by simply updating the decode database/application knowledgebase. 
• Support for Custom Applications—Customers in verticals such as manufacturing, utilities, financial services, government and the military can get support for custom applications.  Standard code-based application engines in traditional network security products cannot address these custom environments, leaving them vulnerable to exploits. 
• Rapid Security—Application knowledgebase update enables an instant “network-level patch” for newly discovered application vulnerability, without requiring complex code change or, in the interim, depending on numerous intrusion detection signatures.

”This patent award builds upon our strong base of existing patents for intrusion prevention and detection methodologies which provide the foundation of our technological leadership in the security industry,” said Pankaj Parekh, CTO of iPolicy Networks. “With the accompanying release of iPolicy version 3.0 incorporating these patent methodologies, customers can truly benefit from our innovation to secure their network now and in the future as they incorporate new applications and face constantly evolving threats.”

About iPolicy Networks – Aim for a Zero-Threat Network™
iPolicy Networks provides next-generation integrated security solutions for organizations aiming for a Zero-Threat Network. iPolicy Networks’ Intrusion Prevention Firewall appliances utilize a deep-packet inspection-based Single Pass Architecture™ that enables mid-to-large size organizations to protect against a wide range of current and emerging threats while maintaining high network performance. Its scalable policy-based management solution significantly lowers TCO of managing distributed security while providing consistent security enforcement across geographically dispersed or virtualized networks. Headquartered in Fremont, California, iPolicy Networks’ customers include some of the world's largest network service providers and leading enterprises, government, financial services and educational organizations. For more information visit www.ipolicynetworks.com or call 1.510.687.3000.
 

iPolicy Networks is a registered trademark, and Single Pass Architecture, Security Domain, Aim for a Zero-Threat Network and Intrusion Prevention Firewall are trademarks of iPolicy Networks Inc. All rights reserved. All other products or brands mentioned are trademarks and/or service marks of their respective owners.