SSH Communications Security Achieves OPSEC Certification from Check Point Software

SSH Certifier Integrates with Industry's Most Recognized Security Framework

HELSINKI, FINLAND and PALO ALTO, Calif. - September 10, 2002 - SSH Communications Security today announced that it has achieved OPSEC™ (Open Platform for Security) certification for the SSH Certifier™ PKI (Public Key Infrastructure) product, from Check Point Software Technologies Ltd., the worldwide leader in securing the Internet. Through OPSEC certification, SSH Certifier seamlessly integrates with Check Point's VPN-1®/FireWall-1® Next Generation software, providing customers with a centralized authentication key management solution for large-scale multi-vendor virtual private networks.

OPSEC certification enables Check Point users to utilize SSH Certifier as a PKI platform for issuing digital certificates and certificate revocation lists to both firewalls and remote clients. SSH Certifier has been especially designed for scalability in large multi-vendor IPSec VPN deployments. OPSEC certification proves that devices with VPN-1/FireWall-1 NG software and VPN-1® SecureClient ® remote access clients can be part of the network managed with SSH Certifier.

"By combining the Check Point NG infrastructure with our PKI platform, service providers and enterprises can now deploy the most reliable and manageable network security solution available," said Tatu Ylönen, President and CTO of SSH. "The OPSEC
certification achieved by SSH brings the customers new opportunities, as large IPSec networks work together with other applications that require strong authentication can now be managed with a single authentication platform, SSH Certifier."

"Scaleable trusted authentication is an important component of a secured extranet," said Sean Leonard, OPSEC Alliance Manager for Check Point Software. "Through the OPSEC PKI integration, the SSH Certifier provides Check Point NG customers with scaleable, trusted extranet authentication solution."

SSH Certifier is a complete Public Key Infrastructure (PKI) platform for issuing and managing digital certificates in a service provider and enterprise environment. The modular architecture of SSH Certifier adds more scalability to the PKI and allows the deployment of hundreds of virtual certification authorities within a single installation. SSH Certifier provides ease of use with its intuitive Web-based graphical user interfaces both for PKI management and for end-entity certificate enrollment.

About Check Point's OPSEC
OPSEC (Open Platform for Security) is the industry's open, multi-vendor security framework. With over 300 partners, OPSEC guarantees customers the broadest choice of best-of-breed integrated applications and deployment platforms that support Check Point's Secure Virtual Network Architecture. Products that carry the OPSEC Certified seal have been tested to guarantee integration and interoperability. For complete OPSEC Alliance program information, including partner and product listings, the freely available OPSEC SDK (software development kit) and evaluation versions of OPSEC Certified products, visit http://www.opsec.com.

About SSH Communications Security
SSH Communications Security, a world-leading supplier of Internet security solutions, offers a broad range of award-winning products designed to address the most critical security issues for businesses, financial institutions and governments worldwide. SSH Sentinel™, a feature-rich remote access VPN "smart" client; and SSH Secure Shell, the award-winning product family, ensure secure remote access and data transfer. The SSH Certifier™ product family provides a robust certification authority for flexible and strong authentication through digital certificates and tokens. The market-leading, award-winning SSH IPSEC Express™ (Internet Protocol Security) family of toolkits for OEMs and software developers enables fast time-to-market and reduced in-house development costs. SSH is traded publicly on the Helsinki Exchanges under HEX:SSH1V. For more information, please visit www.ssh.com.