Proofpoint News Desk

Proofpoint’s Email Security and Data Loss Prevention Solution Earns Internationally Recognized Common Criteria Certification to Meet Stringent Government Standards

Proofpoint Protection Server Achieves EAL 2+ Common Criteria Certification

SUNNYVALE, Calif. - October 29, 2008

Proofpoint, Inc., the leading provider of unified email security, archiving and data loss prevention solutions, today announced that the Proofpoint Protection Server® version 5 has completed evaluation for a Common Criteria EAL2+ certification under the Canadian Communications Security Establishment Canada’s (CSEC) Common Criteria Evaluation and Certification Scheme (CCS). Proofpoint’s active participation in IT government security validations signifies its commitment to providing users with solid product security.

Proofpoint Protection Server software powers the Proofpoint Messaging Security Gateway™ and Proofpoint on Demand™ email security solutions, providing protection against inbound spam, viruses and connection-level attacks while also scanning outbound email to ensure compliance with regulations, protect the privacy and security of data and prevent leakage of intellectual property and trade secrets.

Proofpoint partnered with Corsec Security, Inc., a consulting firm with over ten years of validation experience, in order to facilitate the prompt completion of the Common Criteria evaluation process.

Common Criteria is an internationally recognized set of guidelines (ISO 15408), which define a common framework for evaluating security features and capabilities of Information Technology security products. The standard consists of several predetermined evaluation assurance levels, each one more stringent than the last. Common Criteria allows vendors to have their products tested against a chosen level by an independent third-party testing laboratory. Once completed, Common Criteria certifications are mutually accepted by 25 countries through the CCRA (Common Criteria Recognition Agreement), including the United States and Canadian governments.

The certificate of evaluation for Proofpoint Protection Server can be downloaded from the Communications Security Establishment Canada site at:

http://www.cse-cst.gc.ca/services/ccs/proofpoint-e.html.

Common Criteria certification of security products is mandated by the U.S. government for federal purchases. The National Information Assurance Acquisition Policy, NSTISSP No. 11, requires agencies to purchase only those commercial security products which have met specified third-party assurance requirements and have been tested by an accredited national laboratory.

Proofpoint secures and improves enterprise email infrastructure with solutions for email security, archiving, encryption and data loss prevention. Proofpoint solutions defend against spam and viruses, prevent leaks of confidential and private information, encrypt sensitive emails and archive messages for retention, e-discovery and easier mailbox management. Proofpoint solutions can be deployed on-premises (appliance), on-demand (SaaS) or in a hybrid architecture for maximum flexibility and scalability.

To download complete case studies about leading government agencies and enterprises that have deployed Proofpoint’s email security and data loss prevention solutions, please visit Proofpoint’s online Resource Center at:

http://www.proofpoint.com/resources

Executive quote

“Email security and data loss prevention are mission-critical applications for many government organizations that need to protect confidential data while also defending against spam, viruses and other email-borne threats,” said Sandra Vaughan, senior vice president of products and marketing for Proofpoint. “Common Criteria certification of our solution assures federal and other government customers that Proofpoint delivers a secure, trusted solution for reducing the risks associated with both inbound and outbound email.”

About the company

About Corsec Security, Inc.
Corsec Security, Inc. specializes in helping companies navigate through the complex process of receiving FIPS 140 and Common Criteria (CC) certifications. Corsec’s consulting, document creation, and project management services deliver unmatched expertise in achieving government validation efforts at a firm, fixed price. Corsec partners with companies around the world to achieve local and international certification and to add security functionality to a wide range of products. Corsec minimizes the time, effort and money a vendor needs to invest in validation while ultimately maximizing the return on that investment. For further information, please visit www.corsec.com.

About EWA-Canada
EWA-Canada is a premier provider of advanced security services, having established itself as a vendor-neutral, independent centre of excellence in professional IT Security Services, Critical Infrastructure Protection, and testing of products in its IT Security Evaluation and Test Lab. EWA-Canada's solutions, experience and expertise are benefiting businesses in over 25 countries world-wide. EWA-Canada's Lab is recognized as a world leader for its comprehensive experience with Common Criteria (ISO/IEC 15408) evaluations, conformance testing to FIPS 140 and related cryptographic standards, Security Content Automation Protocol (SCAP) validation testing, and certification of point-of-sale devices and PIN Pads to Payment Card Industry and Interac® Association standards. EWA-Canada enables companies to efficiently and cost-effectively manage the evaluation and testing process and to ensure their products meet important certification requirements. For more information, please visit www.ewa-canada.com.

About Proofpoint, Inc.
Proofpoint secures and improves enterprise email infrastructure with solutions for email security, archiving, encryption and data loss prevention. Proofpoint solutions defend against spam and viruses, prevent leaks of confidential and private information, encrypt sensitive emails and archive messages for retention, e-discovery and easier mailbox management. Proofpoint solutions can be deployed on-premises (appliance), on-demand (SaaS) or in a hybrid architecture for maximum flexibility and scalability. For more information, please visit http://www.proofpoint.com.