Iternet Security Systems Unveils New Products Tailored to Simplify and Enhance Protection of Network Assets

LONDON — February 14, 2006 — Internet Security Systems (ISS) (NASDAQ: ISSX), the worldwide leader in pre-emptive, enterprise security, today announced that the company is expanding its integrated security platform with four new products specifically tailored to simplify the lives of network administrators and improve the integrity, visibility and protection of network assets. It is the company’s belief that network security must be delivered across an integrated platform versus through the isolated point products that are so prevalent in today’s security landscape. By integrating the knowledge, intelligence and capabilities of network security components, ISS believes enterprises will achieve the full benefits of pre-emptive, “ahead of the threat” protection.

“Over the last several years, the world has undergone a technology and information revolution that poses an extraordinary set of opportunities and challenges for the future,” said Thomas Noonan, president and CEO of Internet Security Systems. “At the same time, today’s cyber threats are much more complex and destructive than ever before, while becoming easier to create and launch. Networking professionals must view security as a critical consideration in delivering high-performance network services. In order to keep networks safe, we must innovate outside of today’s security paradigm.”

Today, ISS is innovating in four key technology areas:

Network Anomaly Detection

Vulnerability Management & Protection

Intrusion Prevention Systems

Security Management

Anomaly Detection – What’s in your Network?

With the new Proventia® Network Anomaly Detection System (ADS), ISS will provide customers enhanced network intelligence and security by leveraging existing infrastructure to optimise visibility, integrity and protection of critical IT resources across the network. Proventia Network ADS delivers a clear view of an organisation’s network behaviour, while automatically detecting known and unknown threats and anomalous activities such as fast propagating worms and policy breaches.

Using an integrated array of analysis engines to continually analyse flow data across the enterprise, Proventia Network ADS identifies points of failure and compromise and responds quickly to shifts in network behaviour without the need for extensive user interaction or constant fine-tuning of static policies. Critical services can be closely monitored, while unused or unauthorised ports and services can be shut down, and networks can be segmented via “virtual perimeters,” preventing the spread of worms and insuring the availability of the network.

ISS’ anomaly detection technology differs from traditional security offerings in that it provides a holistic view of anomalous behaviour originating from both inside and outside network perimeters, monitoring parts of the network that traditional technologies can’t reach. For example, ISS’ anomaly detection technology can detect employee use of unauthorised peer-to-peer applications or the propagation of malware from inside the network due to employee machines that have been compromised by hackers.

“Because Proventia Network ADS monitors the behaviour of the network 24/7, it can provide immediate notification and insight into network performance and security issues, saving us countless hours that we would normally spend sifting through event logs or troubleshooting network performance,” said Jon Allen, Information Security Officer of Baylor University. “By delivering this level of visibility into our core network, ISS is helping us with key security, regulatory compliance and network engineering functions that enable our IT department to better utilise resources, save money and keep the business running smoothly.”

Through an agreement with Arbor Networks, Proventia Network ADS has been designed as both a stand-alone ISS solution and as an integrated component of ISS’ enterprise security platform. As part of the platform, ADS delivers the network context and knowledge needed to improve security decisions and processes. It is the first network behaviour analysis system that closely integrates with intrusion prevention and vulnerability management technologies, as well as other third-party security offerings. With Proventia Network ADS, network behaviour and performance become key components of a successful security strategy.

“ISS is validating the anomaly detection market by placing the technology within the context of a comprehensive, integrated security platform,” said Rob Ayoub, Industry Analyst, Frost & Sullivan. “While anomaly detection is useful on its own for providing companies with unprecedented views into their network status, it is most beneficial when used as a key piece of technology within a multi-layered system that has been designed to automatically detect and shield against a variety of threats coming from many different origins.”

Vulnerability Management & Protection – Moving Beyond Assessment-Only Services
ISS is also announcing today the next generation of its vulnerability management and protection technology. Building on the success of its flagship, patented Internet Scanner® product, ISS is taking its product line from vulnerability assessment into complete vulnerability management and protection with the introduction of Proventia Network Enterprise Scanner. Having invented vulnerability assessment technology in 1994, ISS continues to be met with success in this market space with its recent Checkmark certification from West Coast Labs, as well as recent recognition from Frost & Sullivan as the market leader in vulnerability assessment.

Proventia Network Enterprise Scanner offers customers automatic and continuous vulnerability scanning, complemented by a full set of workflow and reporting tools. It protects valuable customer information, critical network assets and intellectual property by quickly and accurately identifying vulnerabilities on an organisation’s network, providing remediation steps and tracking and verifying that vulnerabilities are fixed.

Enterprise Scanner is now delivered as an easy-to-install appliance, which allows customers to detect and protect vital network assets while reducing OS maintenance needs. A new, simple task-oriented GUI also makes Proventia Network Enterprise Scanner easy to use, accelerating security processes and reducing operational costs. ISS is now the only company that offers “scan-and-block” vulnerability management and protection by tightly integrating vulnerability assessment and intrusion prevention technology into a single platform.

Intrusion Prevention Systems – New Design Focused on the Network
In addition to delivering these key new technologies, ISS also unveiled today a significant new hardware design for its award-winning intrusion prevention technology. ISS’ new Proventia Network Intrusion Prevention System (IPS) is designed to increase ease-of-use for networking administrators and marks the company’s transition to custom-built appliance platforms.

By leveraging the breakthrough vulnerability research conducted by ISS’ X-Force® research and development team, Proventia Network IPS works inline to pre-emptively defend networks from the perimeter to the core from malicious Internet-based attacks. Proventia Network IPS now comes in a lighter weight and includes new features such as port locations on the front of the appliance and an LCD display for use in configuring the product and monitoring its status. These network-friendly features make Proventia Network IPS much simpler to mount in data centres and incorporate with other networking equipment.

Security Management – Manage, Monitor and Measure from Network to Host
All ISS products are centrally managed through the Proventia Management SiteProtectorâ„? console, providing network administrators with a comprehensive, 24/7 view of their companies’ security assets and status, and enabling Proventia products to work together as an integrated security system. By providing companies the ability to visualise their networks with a continuous view of all security assets from the network to the server and desktop, SiteProtector plays a key role in helping organisations manage, monitor and measure their security posture and network availability. Risk management organisations will see significant benefits through this granular view, allowing them to make intelligent decisions on how to harden their security posture in the most effective way.

Today, ISS also announced a major upgrade to its SiteProtector console that will drastically simplify security management and further streamline customers’ regulatory compliance processes. The new launch of SiteProtector also marks ISS’ transition to Proventia OneTrustâ„? Licensing, which automates the process of administering product licenses to customers and dramatically decreases the amount of time it takes customers and partners to deploy and maintain ISS assets.

ISS products will be demonstrated at Booth #1022 at RSA. For more information, please go to: www.iss.net/rsa2006

About Internet Security Systems, Inc.

Internet Security Systems, Inc. (ISS) is the trusted security advisor to thousands of the world’s leading businesses and governments, providing pre-emptive protection for networks, desktops and servers. An established leader in security since 1994, ISS’ integrated security platform automatically protects against both known and unknown threats, keeping networks up and running and shielding customers from online attacks before they impact business assets. ISS products and services are based on the proactive security intelligence of its

X-Force® research and development team – the unequivocal world authority in vulnerability and threat research. ISS’ product line is also complemented by comprehensive Managed Security Services. For more information, visit the Internet Security Systems website at www.iss.net/uk or call ?(0)1753 845 100.