To: pat mudge who wrote (11864 ) 6/14/1999 12:27:00 PM From: Claude Robitaille Respond to of 18016
TimeStep's PERMIT/Gate 2520 and 4520 validated to FIPS 140-1 level Newbridge Networks Corp NNC Shares issued 176,877,357 Jun 11 close $40.45 Mon 14 Jun 99 News Release Mr. Tim Hember reports The PERMIT/Gate 2520 and 4520, components of the PERMIT Enterprise product suite, have been validated to the FIPS 140-1, level 2 standard. TimeStep's PERMIT/Gates are the first IPSec-compliant hardware-based VPN gateways with full public key infrastructure (PKI) integration to comply with the U.S. and Canadian Government standard. This standard is required of all cryptographic products before federal clients are allowed to buy them. "FIPS 140-1 level 2 certification is a vital component in selling into U.S. government installations," explained Nicky Itkin, director of sales, of Onix Networking of Westlake, Ohio, a value-added reseller to the U.S. government. "By providing TimeStep's IPSec-compliant VPN solution with full PKI integration among our line of available solutions, we enhance our ability to better serve our customers while also providing the users with the certified security that they require. This certification has widened the chasm between other solutions and this is good news for both the government customers and Onix Networking." Compliance with the FIPS 140-1 level 2 standard also provides a third-party endorsement for other market sectors such as financial services and Network Service Providers, which cannot afford to have their networks compromised. These industries recognize the investment in dollars and years the U.S. and Canadian governments have made in developing this standard. "The federal government is one of the largest consumers of data processing and IT products in the world," said Tim Hember, president of TimeStep Corporation. "With FIPS 140-1, level 2 validation we're now qualified to compete in that arena and offer a security product that has a proven track record for excellence. No other VPN vendor can do that. This accreditation is a major milestone for TimeStep." Under the FIPS 140-1, level 2 standard, the National Institute of Standards and Technology (NIST) validates that the PERMIT/Gate 2520 and 4520 have been designed to meet the most stringent requirements for encryption algorithm compliance. The PERMIT/Gate 2520 and 4520 also contain a tamper resistant switch, which means that if the product is opened or interfered with in any manner the sensitive keys are destroyed. "Without tamper resistance built into security products, an inside attacker could compromise a network simply by opening the box (that is routers and firewalls that implement security), steal private keys and close the box. The worst part is that no one will ever know that the network is compromised," said Tony Rosati, vice-president marketing and business development, TimeStep Corporation. By ensuring that it is virtually impossible for an intruder to tamper with the module, FIPS 140 standard compliance makes encryption products better equipped to protect sensitive, non-classified communications, especially within the government.