Leading Analyst Firm Cites Complementary Role of Lumeta’s Network Intelligence Solution to Enterprise Vulnerability Management and Admission Control Initiatives

Somerset, NJ- July 24, 2006 - Lumeta, the leading provider of network intelligence solutions for enterprises and government agencies, is enabling its global customer base to achieve compliance, and unprecedented knowledge and control over their enterprise networks. Lumeta’s IPsonar technology enables organizations to mitigate insider threat by prioritizing vulnerability management efforts and enforcing security zone policies as part of a network admission control strategy. By arming customers with tools to focus on increased vulnerabilities and threats that originate internally—both inadvertent and malicious—Lumeta is empowering security conscious organizations to ensure both network and data integrity meet stringent business and compliance goals.

Research analyst firm IDC recently published a report titled “Why Enterprises Need a Formal Network Security-Risk Program,” underscoring the critical need for organizations to take a more proactive approach to mitigating internal threats. According to the report, “Security monitoring used to be geared mainly toward protecting the perimeter, guarding against malicious hacking or code coming in. . . .but now managers must also look internally, where they’ll need as much information about the workings of their networks and potential vulnerabilities to make the best security and networking decisions possible.”

The IDC report highlights the growing need for enterprises to reach beyond perimeter security solutions— such as intrusion detection, firewalls and antivirus, implement targeted network security risk management programs, and optimize the deployment of security and vulnerability risk management (SVM) technology to thoroughly assess and determine what unknown threats exist and are affecting exposed network assets.

“Lumeta complements leading security and vulnerability management technologies by identifying potentially vulnerable areas of the network,” said Charles Kolodgy, an analyst at IDC. “In addition, Lumeta addresses one of the key challenges of enforcing insider threat policies at the device level as part of a network admission control strategy by identifying connectivity between security zones that may have resulted from an erroneous configuration change.”

As an attempt to bridge the gap between security policy and infrastructure, organizations are embracing admission control initiatives like Cisco’s NAC and Microsoft’s NAP that build security into the fabric of the infrastructure. As a result, organizations must close new security gaps in the form of unwanted connectivity between network segments.

Regulatory and internal security policy compliance is an added and largely overlooked component that network mangers and CXOs must consider when assessing the need for a more comprehensive Security Risk Management program that includes insider threat management.Obtaining visibility into insider threat and focusing mitigation activity requires mapping every device and asset, and monitoring leakage and rogue connectivity that constitutes a policy violation—as these are the likely sources of vulnerability. Lumeta’s IPsonar solution helps organizations mitigate insider threat and achieve compliance by:

• Creating security visibility at the network level and ensuring intelligent deployment of vulnerabilities against high risk assets based on a global view of risk.
• Enabling organizations to pinpoint unknown connectivity or leaks from internal sources across “secure zones” that might constitute policy or regulatory compliance violations.
• Benchmark the network with metrics that measure changes in the network baseline, so constant changes don’t result in the introduction of new vulnerabilities and increased risk at the core.

“Lumeta has long been a champion of helping customers discover and truly understand network vulnerabilities-- specifically, how the things they are unaware of are typically most dangerous,” said Chief Technology Officer, David Arbeitel of Lumeta. “Our technology not only helps proactively reduce risk by better leveraging their investment in vulnerability management tools, it also allows them to stop insider threat at the source by eliminating data leaks across network zones.”

About Lumeta Corporation
Lumeta provides large enterprises and government agencies with the global visibility needed to quantify network risk and measure the impact of network change. Our network assurance solutions enable IT organizations to deploy new business services, maintain existing service levels and minimize network security risk to ensure compliant operations.

Lumeta's flagship product, IPsonar, is the industry's only solution that allows organizations to measure risk from a global network perspective. IPsonar maps every asset on a network--including assets not currently under management--visualizes the connectivity between assets and networks to uncover risk patterns and policy weaknesses, and enables network and security teams to bring unknown assets under management while deploying security technology more effectively to mitigate risk.

Note: Lumeta, the Lumeta logo, IPsonar and the IPsonar logo are trademarks and service marks of the Lumeta Corporation. Other product and company names appearing in this document may be trademarks of their respective owners.