CyberGuard's New Webwasher Product to Thwart Day Zero Attacks; Proactive Content Filtering will Provide Frontline Protection against Unidentified Worms and Viruses

Business Wire, June 28, 2004

FORT LAUDERDALE, Fla. -- CyberGuard Corporation (Nasdaq:CGFW), the technology leader in network security, today announced that it will offer new proactive protection technology against viruses and worms as part of its Webwasher content security management. Unlike traditional anti-virus technology that must first identify new viruses and worms before developing protection and releasing it to customers, proactive content filtering identifies anomalies so that users can prevent infiltration from brand-new worms and viruses in the first place. Security researchers often refer to the initial release of a new threat as a "Day Zero" attack.

"Customers trust CyberGuard to deliver security solutions that protect their assets and keep their brand from being tarnished by a security breach," stated Dr. Horst Joepen, president of CyberGuard's Webwasher division. "With the appearance of a new virus or worm almost every day, enterprises need zero-hour solutions that mitigate unknown blended threads, viruses and worms. By the same token, solutions must be scalable, robust and high-performing. They don't want increased security to throw them back to the days when loading a Web page took several seconds."

Joepen explained that proactive content filtering technology is not intended to replace conventional anti-virus technology, but to complement it and maximize protection and performance. The proactive scanner does not need to look for a known virus that can be caught faster by a pattern-based scanner. He added that the Webwasher product delivers higher performance than companies that offer behavioral filtering using a technique that emulates actual code, referred to as "sandboxing."

"Our proactive content filtering uses a combination of unique new algorithms to achieve up to 10 times higher detection rates than those provided by behavior-based solutions, and with substantially fewer 'false positives,'" Joepen said.

"Proactive filtering is a valuable addition to Webwasher's integrated secure content management package. Preventing attacks before they occur is always preferable to working 'after the fact.' Webwasher already offers filtering of Web, e-mail, spam, instant messaging, peer-to-peer and encrypted (SSL) Internet communication along with security functionality such as malicious code and antivirus scanning, privacy and content protection. Proactive content filtering adds a new level of protection," according to Brian Burke, Research Manager at industry research firm IDC, which showed Webwasher to be the fastest growing Web filtering provider in a recent report.

How Proactive Content Filtering Works

Similar to how medical researchers protect against new viruses that spread throughout a population by first identifying the composition of the virus and then developing an anti-virus, anti-virus security vendors traditionally detect new viruses and develop protection based on patterns in those viruses. The process from detection to developing protection and making it available can take several hours. Highly publicized worms such as Blaster, MyDoom and Bagel infected computers worldwide in a just a few hours. By contrast, proactive technologies analyze Web and e-mail traffic looking for certain abnormalities, objects or combination of objects and code. Proactive filtering kicks in behind conventional scanning to block viruses whose patterns are not yet known, preventing Day Zero attacks.

Availability

The new function will be included in Webwasher AntiVirus Version 5.1 and Webwasher CSM Suite Version 5.1 at no additional cost when they become available in October. Customers purchasing either product between now and when the new versions are available will receive a free upgrade.

About CyberGuard Corporation

CyberGuard Corporation (NASDAQ: CGFW), the technology leader in network security, provides advanced Total Stream Protection(TM) solutions that protect the critical information assets of Global 2000 companies and governments worldwide. CyberGuard offers a broad line of scalable high performance firewall/VPN appliances, the Webwasher suite of enterprise-class Web and e-mail content security solutions, sophisticated security processors and accelerator products for the SSL and IPsec markets, and industry leading embedded Linux and Linux security solutions. Headquartered in Ft. Lauderdale, Florida, the company has branch offices and training centers around the world. More information about CyberGuard Corporation can be found at http://www.cyberguard.com.

Forward-Looking Statements

This press release contains forward-looking statements that involve certain risks, uncertainties and factors, including without limitation, those described in the Company's filings with the Securities and Exchange Commission that may cause the Company's future actual results to materially differ from the Company's current expectations. The Company assumes no obligation to update any forward-looking statements.

CyberGuard(R) and Webwasher(R) are registered trademarks and Total Stream Protection(TM) is a trademark of CyberGuard Corporation. All other trademarks are property of their respective owners.