Business Services Industry

Apani Networks Addresses Security/Segmentation Controls for PCI DSS Compliance in New White Paper; New Apani White Paper Outlines Strategies for Using New Technologies as Compensating Controls for PCI DSS Compliance

Business Wire, July 11, 2006

BREA, Calif. -- Apani Networks, the leading enterprise data protection software provider focused on securing inside the network perimeter, today released a new white paper developed to help CIOs and IT staff understand the range of PCI compliance requirements and provide strategies for using technology solutions for PCI DSS compliance. A recent Visa USA survey reported that more than 80 percent of companies surveyed still haven't achieved compliance even though the deadline for doing so has passed. The new white paper provides guidance for IT management still seeking compliance quickly.

The white paper, entitled, "Encryption and Segmentation Compensating Controls for PCI DSS Compliance," is available as a free download from Apani's web site at: http://www.apani.com/white-papers/pci-compliance.> "Achieving PCI DSS compliance is not easy. While the requirements themselves are clear, implementing them effectively can be extremely difficult. This white paper is aimed at those large organizations still wrestling with these challenges and presents a means to deal with the potentially significant barriers that may be preventing compliance," said David M. Lynch, vice president of worldwide marketing, Apani Networks. "The fact that the deadline for achieving full compliance has past isn't lost on anyone, and achieving compliance is becoming more critical with each passing day. We believe this new white paper can serve as a roadmap offering alternatives to the traditional approaches."

Elements examined in the white paper include:

--Definitions of CISP and PCI DSS

--PCI DSS applications

--The high cost of non-compliance

--Significantly reducing the scope of audits

--Reducing the time/cost of an audit

--Protecting stored data and more.

The white paper discusses how to leverage new technologies as compensating controls for PCI DSS compliance. It includes steps to dynamically segment applications touching credit card information from the rest of the network without modifying the network structure, encrypting user names and passwords without rewriting applications and protecting stored data and records without encryption.

About EpiForce(TM)

Apani EpiForce is an enterprise data protection system that secures inside the network perimeter. Managed centrally, EpiForce secures data in motion, and protects data at rest, allowing organizations to implement application-based network segmentation, without modifying the network.

Through its next generation security architecture, EpiForce dynamically segments the network creating closed user groups. Data protection is enforced through strong authentication, authorization and access control at the host level, as well as the end-to-end encryption of data in motion, as needed.

Designed for large distributed environments, EpiForce is self-provisioning and capable of securing 200,000 servers and PCs in mixed OS platform environments. Operating at the network layer, EpiForce is transparent to applications and end-users, eliminating the need for costly application revisions or end-user training. And, by automatically enforcing security relationships and reporting on attempted unauthorized activity, EpiForce can reduce the overall cost of security and compliance audits.

About Apani

Apani Networks is the leading enterprise data protection software provider focused on securing inside the network perimeter. The company's flagship product, EpiForce, provides a transparent security layer for networked applications, including dynamic application-based network segmentation.

EpiForce secures data in motion, protects data at rest and centrally manages security policy relationships, without the need to modify existing applications or the network. It enables corporate IT management to quickly, automatically and cost effectively lock down their network, while providing the security and audit trail necessary to demonstrate compliance to the wide range of regulations that affect enterprises and government agencies today. For more information, please visit www.apani.com

Apani Networks and EpiForce are trademarks of Apani Networks, Inc. All other company names and product names are trademarks of their respective organizations.