Press Release

Securant Technologies Secures Wireless Access to eBusiness Transactions, Applications and Content

ClearTrust SecureControl Provides Automated Access Management for WAP Applications and Gateways

SAN FRANCISCO, June 27, 2000 -- Securant Technologies, the access management company that secures eBusiness, today announced the enhancement of ClearTrust SecureControl to secure, manage and provide personalized user access to Wireless Application Protocol (WAP)-based eBusiness resources including applications, content and transactions. With support for WAP, ClearTrust SecureControl is allowing enterprises and service providers to centrally manage and seamlessly extend their eBusiness infrastructures from the Web to wireless devices including mobile phones, pagers and Personal Digital Assistants (PDAs). In addition, the company is conducting integration work with wireless industry leaders Motorola, Ericcson, Nokia, and Blackberry.
Securant also announced that it has joined the WAP Forum to help define this new standard and address security concerns associated with the wireless delivery of data and services. A consortium of more than 500 service providers, handset manufacturers and applications developers, the forum works to foster the growth of the de-facto global standard for allowing consumers to access and interact with the Internet on hand-held devices, such as wireless phones, PDAs and pagers.
Securants collaboration with the other WAP Forum members will ensure that WAP-enabled devices, services and applications are not only interoperable but also offer reliable and secure access to the wireless Net, said Scott Goldman, WAP Forum CEO.
To enable the rapid deployment of wireless applications, reduce user profile and system administration costs, and provide a central point for setting and enforcing security permissions, ClearTrust SecureControl manages both wired and wireless user access to eBusiness systems regardless of a users access device. Through integration with WAP gateways and WAP application servers, and support for industry standard and custom authentication methods including passwords, Personal Identification Numbers (PIN), WTLS mini certificates and Public Key Infrastructure (PKI), ClearTrust SecureControl can secure virtually any application for wireless access.
Providing Web access to transactions, applications and content from any user platform wired or wireless is the next evolutionary stage for eBusiness, said Eric Olden, chief technology officer, Securant Technologies. ClearTrust SecureControl provides a single, integrated and rules-based infrastructure that dynamically manages user access permissions to Web-enabled resources regardless of the access device, so enterprises can focus on solving business problems, not security problems.
ClearTrust SecureControl allows enterprises and service providers to enable customers, partners and employees to gain secure wireless access to business applications while it monitors, audits and protects transactions executed on WAP-based systems. By providing a centralized security infrastructure, ClearTrust SecureControl can manage the security policies that govern user authentication, authorization and single sign-on for all WAP and non-WAP Web applications running in an enterprise or application service provider environment. In addition, ClearTrust SecureControls unique Detector functionality can proactively monitor, identify and take countermeasures against suspicious activity on WAP-based systems to prevent fraudulent wireless transactions and access.
ClearTrust SecureControls end-to-end infrastructure for securing both WAP and non-WAP Web platforms includes:

� Single sign-on across multi-domains for both wired and wireless access to applications within one company, between trading partners and in Application Service Provider (ASP) environments.

� Smart Rules-based authorization, which allows customers to use natural language business rules to centralize, automatically assign and dynamically adjust wired and wireless access permissions based on a users profile (role, account balance, subscription level, etc.).

� Virtual Business Units, which allow time-consuming user administration workloads to be delegated on three levels: within a company (across departments, divisions, etc.); externally to Extranet partners and customers; and to individual users/subscribers via a self-service function.

� Fraud/threat detection that provides integrated application level behavior monitoring and countermeasures to proactively prevent wired and wireless application misuse and fraud.

Availability
ClearTrust SecureControl with WAP support will be available in the second half of 2000.
About WAP Forum
The WAP Forum is the industry association that is responsible for developing and fostering the growth of the Wireless Application Protocol (WAP) � an open, global standard that allows mobile users of wireless hand-held devices to easily and instantly access and interact with the Internet. The forum is comprised of more than 500 members, representing 95 percent of the handsets sold worldwide and more than 200 million global subscribers. Members include worldwide handset manufacturers, carriers, infrastructure providers, software developers and other wireless solution providers. For more information about WAP Forum, including a current listing of its members, visit www.wapforum.org.
About Securant Technologies
Securant Technologies, the access management company that secures eBusiness, is a leading developer of Internet security software that provides a secure infrastructure for controlling user access to Web-based resources including applications, content and transactions. The companys flagship product, ClearTrust SecureControl, uses business rules to centralize, unify and automate every facet of access management including user authentication, authorization, access control, single sign-on, delegated administration, application-level threat detection, policy assessment and auditing. Securant customers include Chase Hambrecht & Quist, First Union/The Money Store, Lehman Brothers and Thomson Financial. The companys partners include BEA / WebLogic (NASDAQ: BEAS), Check Point (NASDAQ: CHKP), Entrust Technologies (NASDAQ: ENTU), Fujitsu, Netscape Communications, Oracle (NASDAQ: ORCL), Sun Microsystems (NASDAQ:SUNW), Sybase (NASDAQ: SYBS) and Verisign (NASDAQ: VRSN). Securant is privately held and headquartered in San Francisco. To contact Securant call 415.315.1500, visit us on the Web at http://www.securant.com, or write to [email protected].

Unified Access Management, 24/7 Security, ClearTrust, ClearTrust SecureControl, ClearTrust Virtual Business Units and SpeedSecure are trademarks of Securant Technologies Inc. Product names mentioned herein may be trademarks and/or registered trademarks of their respective companies.