Secure Internet Communications Safe and Automated File Transfers over the Internet

1. Ted McKendall Product Manager, SecureTransport February 23rd, 2006 Secure Internet CommunicationsSafe and Automated File Transfers over the Internet

2. Today’s Agenda • Tumbleweed – Company Summary • Tumbleweed – Product Suite • SecureTransport – Product Overview

3. Tumbleweed Communications At a glance: • The leader in file transfer and email security • 12 years protecting enterprise data and email • 1,500+ enterprise customers • Award-winning products • Publicly traded (Nasdaq:TMWD) • Market Leader in Managed File Transfer (MFT) Founded: 1993 Global HQ: Redwood City, CA Employees: 275+ Solutions: Email Firewall Secure Email Secure File Transfer Identity Validation Industries served: Financial Services Government Healthcare Retail Technology Enterprise Standards Development IETF Open Group FSTC ITAA Anti-Phishing Working Group

4. Representative Customers At a glance: • Customer snapshot: • 9 of top 10 US Banks • 7 of top 10 Brokerages • 6 of top 10 Euro banks • 3 of top 5 Canadian banks • 6 payment/clearing networks • Several central banks: • U.S. Federal Reserve • Bank of England • Over 100 of the Fortune 500 • Over 100 financial svcs. firms • Over 100 health care orgs. • Over 100 law firms • 6 of the 10 largest pharmas Recent European Success Enterprise Spam Defense: Prudential Telewest Adldleshaw Goddard Manches Solicitors Fila MailGate: RoSPA Secure Email: WCC Ernst & Young Wolverhampton City Council Secure File Transfer: Airbus GM EU Clearstream AXA

5. Spam & Virus Updates Back-end Applications Email Internet End Users Corporate Email Servers Files and Data EDI & B2B Transactions Identity Validation Firewall Tumbleweed Product Suite Tumbleweed Product Portfolio • Email Security Suite • MailGate Edge • MailGate Anti-Spam • Email Firewall • Secure Messenger SecureTransport ValidationAuthority

6. Evolution of the File Transfer Market Today’s Challenges Evolution Path Multiple, departmental file transfer point products Centralized, enterprise-wide file transfer infrastructure Proprietary, single vendor file transfer solutions Interoperable products based on open Internet standards Expensive private links, leased lines, VANs, modems… Ubiquitous reach and low cost of the Internet Home-grown applications straining under the load Enterprise-class scalability and reliability Regulatory changes requiring secure communications (HIPAA, GLB, SOX) Encrypted file transfer with signed receipts and auditability

7. Mission-Critical • Top Ten Bank: “File Transfer is the second most critical application in the bank – it’s more critical even than email.” • As File Transfer becomes more critical it leads to increased exposure, and a whole new set of requirements “FTP just ain’t good enough anymore.”

8. Back-end Applications Enterprise Authentication Internet Tumbleweed SecureTransport Enterprise Firewall SecureTransport Edge and Server • Secure Data Delivery • Multi-Protocol Secure File Transfer • Guaranteed Delivery • Data Integrity Assurance • Checkpoint/Restart • Secure DMZ Streaming • Enterprise Authentication • Robust Access Controls • Open Standards • Data Management • Event-based File Processing & Routing • Rules Editor w/Web UI • Application Integration • Event-driven Agents • Outbound Transfer Management • Signed Audit Records • Repository Encryption HTTP HTTPS FTP End Users FTP/S SFTP SCP AS2

9. Standards for Internet File Transfer SSL HTTPS XCRC FTP AS2 SCP FTP with PGP SFTP S/MIME FTPS SSH SMTP TLS HTTP Plus legacy protocols: Async/Bicync, NDM, VANs, …

10. A Menu of Connectivity Options SecureTransport Connectivity Menu ~ Client Entrées cont. ~ SecureTransport Server offers many connectivity options to meet your business partners’ needs. • Other FTP/S Client……………………………. FTP/S • RFC-Compliant FTP, FTP over SSL/TLS • Windows, Unix, AS/400, z/OS, etc. • Other SSH Clients……………………………… SFTP, • SSH2 Standards-based SCP • Native on many OSes ~ Lighter Fare ~ • Web Browser (Zero-Footprint Client)………… HTTP/S • Ubiquitous • Easy setup for new users • Customizable UI skins • Web Browser with ActiveX……………………. HTTP/S • Guaranteed Delivery • Restart/Resume ~ Server Entrées ~ • Other AS2 Server…….………………………….. AS2 • EDI trading partners • Payload signing and encryption • Certified eBusinessReady® • SecureTransport Server…………………………. AS2, • Bidirectional Communication FTP/S, • Secure, Guaranteed Delivery HTTP/S • Data Management ~ Client Entrées ~ • SecureTransport Client………………………….. HTTP/S, • Automated and scheduled transfers FTP/S • Guaranteed Delivery • Restart/Resume • Available on Windows and Unix • Heart Healthy • Indicates Hot & Spicy!

11. Security • Data Security • Transport encryption v. payload encryption • Data segregation and access control • Data integrity verification • Secure data storage • DMZ Security – No storage of sensitive data in insecure zones • Encrypted data repository • High Availability

12. Automation and Management • Transfer Integration • File Routing • File Storage • File Processing • Notification • User/Trading Partner Management • Authentication/Authorization • SSO, LDAP, Netegrity • Auditability • Extensive user and administrative logging • File Tracking and Reporting • Signed transfer records – secure audit trail • Delegated Administration • Administrative Roles

13. ALERT! Operations Application Server Internet Database Data Audit Logs SecureTransport Components Internet Firewall Enterprise Firewall Backend Processing Standard Web Browser DMZ Email Mainframe ST Client Web Browser w/ActiveX Transaction Manager Integration FTP/S, HTTP/S, AS2, SFTP, SCP 3rd-party FTP/S Client SecureTransport Application Layer Streaming 3rd-party SFTP Client  SecureTransport Server No Data Data AS2 Server Audit Logs Audit Logs SecureTransport Edge ST Server Repository Encryption MDN Receipting

14. ST Deployment: High Availability

15. Q & A • Questions?