Ipsolon Networks First to Fully Implement FireWall-1 from Check Point Software for High-Speed Networking

Ipsilon Integrates Industry-Leading Network Security Technology with High-Performance IP Switching

Sunnyvale, Calif., April 14, 1997 -- Ipsilon Networks, the leader in IP switching solutions, announced today a new value-added feature for its IP Switch Processor product: a complete implementation of Check Point Software Technologies Ltd.'s (NASDAQ: CHKPF) Check Point^TM FireWall-1^TM version 3.0. By integrating FireWall-1's full range of enterprise security functionality—including access control, authentication, encryption, network address translation (NAT) services, content security and connection control—with its IP switching technology, Ipsilon becomes the first internetworking vendor to offer a platform that can both secure IP transactions flowing through the network and deliver them at ATM wire speeds. EDITOR'S NOTE: Ipsilon Networks will demonstrate the FireWall-1 software option at NetWorld+Interop, Las Vegas, May 6-8, at Booth 3299, South Hall.

"Ipsilon has built its business on open systems, and this announcement underscores how an open approach really pays off," said Larry Blair, Ipsilon vice president of marketing. "Custom platforms are not well designed to integrate ‘not-invented-here' functionality. The IP Switch Processor, on the other hand, leverages industry-standard PentiumPro microprocessors, so it can easily accommodate third-party software to deliver new services at very attractive price points to Ipsilon customers. We were able to port and integrate the Check Point software to our platform within a month."

Check Point FireWall-1 is the worldwide market share leader in network security software. According to a recent Yankee Group report, Check Point FireWall-1 accounted for approximately 44% of the worldwide firewall market in the first half of 1996.

"Check Point's FireWall-1 is designed to be highly portable and extensible, enabling customers to monitor and protect the enterprise network at any access point to the network, whether it is a computer or an internetworking platform," said Dr. Deborah Triant, CEO and president of Check Point Software Technologies, Inc. "By integrating our complete FireWall-1 functionality directly into the routing infrastructure of the IP Switch Processor, Ipsilon has eliminated the need for a separate, dedicated firewall device, reduced the administrative burden of the network, and given customers a way to easily extend their enterprise security."

Fast IP Performance, Flexible Security

Ipsilon's IP Switch Processor is a flexible, high performance, affordably priced platform that provides high-performance access to an IP switch network from existing IP-based LANs. The IP Switch Processor converts incoming IP packets from Ethernet, Fast Ethernet, or FDDI into ATM cells, and then passes them to an IP Switch through an ATM interface. The FireWall-1 software option gives Ipsilon customers the ability to secure the information flow as it passes between LAN segments, without introducing more devices into the network. Today most networks employ dedicated high-end workstations to implement a firewall gateway.

"Exodus has selected Ipsilon technology for our next-generation Internet because of its Layer 3 capabilities, which make the integration of new features, such as Check Point's FireWall-1, a natural blend," said B.V. Jagadeesh, vice president of engineering at Exodus Communications, Inc. "Our current customer base includes the most Internet-savvy users, companies who rely on the Internet for their business livelihood. But we're also seeing a new demand from corporate customers, who want to co-locate their intranet Web servers on the Exodus network to improve performance. We need to assure these customers that our network offers equal levels of security as they've implemented in their own corporate backbones. If every port on the IP Switch Processor supports the FireWall-1 software, I can guarantee high performance across the network and mission-critical security, all at low port costs. And I have one less box to manage. It's a very elegant solution for our needs."

With FireWall-1, administrators can define a single enterprise-wide security policy that can be distributed across multiple IP Switch Processors and managed remotely from anywhere on the enterprise network. Using INSPECT, Check Point Software's built-in programming language, administrators can add new services to adapt to changing network security requirements and meet even the most rigorous network security demands.

Pricing and Availability

The FireWall-1 software option will be available from Ipsilon beginning May 1. Prices start at $2000 (US list) for a 50-user Inspection module for a single IP Switch Processor, and range up to $25,000 for the comprehensive Enterprise Security Center.

About Check Point Software Technologies Ltd.

Check Point Software Technologies Ltd. is the market leader in global enterprise security software and inventor of the patented "stateful inspection" technology. The company's flagship product, Check Point FireWall-1, protects internal and external network communication for thousands of organizations of all sizes. Its products are sold worldwide through OEM partners, distributors, VARs, systems and network integrators and Internet Service Providers. Listed on the NASDAQ under the symbol "CHKPF," the company has U.S. headquarters in Redwood City, Calif. and international headquarters in Ramat-Gan, Israel. For product information, please call (650) 482-4900, e-mail info@checkpoint.com or visit Check Point at http://www.checkpoint.com .

About Ipsilon Networks

Founded in October 1994 and based in Sunnyvale, Calif., Ipsilon Networks, Inc. is the premier provider of high performance IP switches, designed to accelerate today's IP networks to 21st-century throughput. Ipsilon's flagship product, the IP Switch ATM1600, won the prestigious Grand Winner Best of Show award at the spring 1996 NetWorld+Interop, was named one of the Most Important Products of 1996 by Information Week, and captured 1997 Hot Product honors from Data Communications. To date, Ipsilon's IP Switching protocols have been endorsed and implemented by more than 20 of the leading networking equipment vendors. Customers wanting more information about Ipsilon products can reach the company by phone at 1-888-IPSILON (1-408-990-2000) or visit its World Wide Web home page at http://www.ipsilon.com.

Ipsilon is a trademark of Ipsilon Networks, Inc.

Check Point, the Check Point logo, Check Point FireWall-1, FireWall-1, and Inspect are trademarks of Check Point Software Technologies Ltd.

All other trademarks and tradenames belong to their respective owners.