Internet Security Systems Teams with Check Point Software for Industry's First Automated Network Perimeter Defense System

Leading intrusion detection and response system, RealSecure, automatically adjusts security posture of critical networks, providing maximum security protection

ATLANTA, Ga. – November 17, 1997— Internet Security Systems, Inc. (ISS) the pioneer and world's leading supplier of adaptive security management systems, today announced the industry's first automated network perimeter defense system. By combining the capabilities of RealSecure, ISS' leading real-time intrusion detection tool, with Check Point^TM Software Technologies Ltd.'s (Nasdaq: CHKPF) FireWall-1, the industry's leading enterprise security suite, the two companies have created a premier solution that will actively eliminate security risks and provide maximum network protection from security breaches.

Through Check Point's OPSEC^TM (Open Platform for Secure Enterprise Connectivity) framework and its Suspicious Activity Monitoring Protocol (SAMP), RealSecure can now automatically reconfigure FireWall-1 in response to a network attack. While simultaneously terminating the attack, FireWall-1 is automatically reconfigured to repel further traffic from the attacking system, thereby preventing further attempts at unauthorized access. This groundbreaking response capability means that for the first time, customers will be able to ensure the safety of their network information systems and maintain the highest possible level of network perimeter protection.

"This announcement builds on our vision for adaptive, enterprise security management and furthers ISS' leadership in the intrusion detection market," said Thomas Noonan, president and CEO of ISS. "Levels of security risks are in a constant state of flux. In addition to firewalls, organizations need a trusted, independent security control system that can adapt to network vulnerability and threat conditions. For the first time, a breakthrough technology solution will be available to provide automatic, active protection measures for the most effective network security defense possible."

Dr. Deborah Triant, president and CEO of Check Point Software Technologies, Inc. added, "The combination of these best-of-breed products enables two powerful technologies to work together to enhance enterprise security management in today's organizations. We are pleased that ISS has recognized this need and has joined with Check Point through the OPSEC Alliance to deliver this solution."

The flexibility and openness of FireWall-1 and RealSecure enables customers to easily integrate this powerful technology into their existing systems and immediately reap the benefits of automated response, reconfiguration and attack blocking capabilities.

RealSecure automatically recognizes and responds to unauthorized network activities by unobtrusively monitoring network traffic. Once an attack is recognized, RealSecure responds by either sending an alarm or page and terminating the connection. With its new response capabilities, RealSecure will add another powerful means of stopping network security attacks before damage is done. For example, a firewall could be notified if a Web site sends HTML code to maliciously attack a vulnerable Web browser, creating an active implementation of security policy.

Check Point OPSEC is a single platform that integrates and manages all aspects of enterprise security through an open, extensible management framework, using a combination of published application programming interfaces (APIs), support for industry-standard protocols and a high-level scripting language. RealSecure is an integral component of ISS' SAFESuite line of adaptive security tools that also includes Internet Scanner^TM , the leading enterprise vulnerability detection system, and System Security Scanner^TM (S3), the industry's most comprehensive internal system security assessment and intrusion detection tool.

About Internet Security Systems

Internet Security Systems, Inc., (ISS) is the pioneer and world's leading supplier of adaptive security management systems, providing comprehensive software that enables maximum protection from network security risks. ISS' SAFEsuite^TM family of products allows organizations to proactively manage and eliminate security risks by monitoring, detecting, and responding to the growing number of network vulnerabilities and threats. The company delivers its leading network security vulnerability and intrusion detection solutions to organizations worldwide including the Fortune 500, 9 out of the top 10 U.S. financial institutions, government agencies and major universities. For more information, contact the company at (800) 776-2362 or (770) 395-0150 or visit the ISS Web site at http://www.iss.net.

###

Internet Security Systems, Inc., SAFEsuite and RealSecure are registered trademarks of Internet Security Systems, Inc. Check Point, the Check Point logo, Check Point FireWall-1, FireWall-1, and OPSEC are trademarks or registered trademarks of Check Point Software Technologies Ltd. All other companies and product names mentioned herein are trademarks of their respective owners.