About Juniper

Press Releases

NetScreen-IDP 100 Achieves OSEC Verification

Rigorous IDS Testing Validates NetScreen's Attack Detection and Prevention Capabilities

Sunnyvale, CA - May 12, 2003 - NetScreen Technologies, Inc. (Nasdaq: NSCN) today announced that the NetScreen-IDP 100, the first in-line device to offer accurate attack detection and real-time intrusion prevention capabilities, has achieved Open Security Evaluation Criteria (OSEC) verification.

Independent testing facility Neohapsis, which created OSEC and the related network intrusion detection system (NIDS) testing methodology, completed OSEC testing of the NetScreen-IDP 100 and verified that it successfully met the NIDS criteria by detecting and preventing a broad range of attacks representing many "real-world" enterprise network threats. The NetScreen-IDP 100, which scored 100 percent on several critical tests, was found to provide highly effective detection and prevention functionality at a cost significantly less than other comparable high-end security products.

"We put NetScreen-IDP 100 through version 1.0 of our OSEC NIDS testing suite and it performed flawlessly. The OSEC tests verified that the product performs well within the published specifications," said Greg Shipley, CTO of Neohapsis. "We were pleased to see NetScreen push an aggressively priced 100 Mbps device through the OSEC tests. Customers can now look at the NetScreen IDP-100 with confidence, knowing that the product's performance has been verified by one of the world's most stringent independent testing laboratories."

"NetScreen is one of only a few vendors to complete Neohapsis' rigorous testing and achieve OSEC verification; this demonstrates the quality and functionality provided in our IDP products and underscores that they can be considered among the most trusted and effective offerings in the market today," said David Flynn, vice president of marketing for NetScreen.

NetScreen-IDP 100 OSEC Test Highlights

Test results indicate that the NetScreen-IDP 100 provides comprehensive attack detection; it passed both the signature baseline attack detection tests that identify well-documented attacks and those that differ from publicly available and known exploits.

The NetScreen-IDP 100 also passed its state tests, verifying that the solution was capable of detecting attacks under load, without reporting false alarms or discarding legitimate traffic. In addition, the NetScreen-IDP 100 effectively identified more than 30 attacks that used obfuscation and evasion mechanisms that try to bypass the system.

The NetScreen-IDP 100 also successfully passed all device integrity-checking tests, demonstrating that it can withstand potential attempted compromises and denial of service attacks aimed at the system itself.

The NetScreen-IDP 100's OSEC test results are displayed along with testing information, notes and observations recorded throughout the entire testing process at osec.neohapsis.com.

About NetScreen-IDP 100

The NetScreen-IDP 100 is the first intrusion detection and prevention device capable of accurately detecting attacks and stopping them from ever reaching their victims. The NetScreen-IDP 100 is a member of the NetScreen IDP product line, which also includes a NetScreen-IDP 10, optimized for smaller networking environments, and the NetScreen-IDP 500 for large enterprise network environments with high bandwidth requirements. For more information about NetScreen products, visit: http://www.netscreen.com/products/index.html.

About OSEC

Neohapsis created OSEC as a framework for the evaluation of security products to validate a vendor's claims about product capabilities and protect consumers from unknown security flaws found in popular commercial products.

OSEC defines a core set of tests for any networked security product, and then adds tests for security and performance to each product space, such as network intrusion detection systems. OSEC criteria are open to view and critique, and are formulated with input from vendors, end-users, and many representatives from the security community that actively work in the product spaces for which criteria have been developed.

About Neohapsis

Founded in 1997, Neohapsis offers unparalleled expertise and insight in next generation security development and testing services. The company strives to elevate security from short-term, stopgap measures to ongoing strategic, business assurance initiatives. By maintaining this focus, Neohapsis offers a depth of knowledge and value beyond what is available in traditional lab or consulting service offerings. Neohapsis believes that better business assurance today means less disaster recovery tomorrow. For more information, visit Neohapsis at http://www.neohapsis.com.

About NetScreen Technologies

etScreen Technologies, Inc., is a leading developer of integrated network security solutions that offer the security, performance and total cost of ownership required by enterprises and carriers. NetScreen's innovative solutions provide key security technologies, such as virtual private network, denial of service protection, firewall and intrusion prevention, in a line of easy-to-manage security appliances and systems. NetScreen is located at 805 11th Ave, Sunnyvale, CA 94089. More information on NetScreen's products can be found at http://www.netscreen.com or by calling toll free at 1-800-638-8296.

NetScreen is a trademark of NetScreen Technologies, Inc. Other trademarks are the property of their respective owners.

This press release contains forward-looking statements about events and circumstances that have not yet occurred. For example, words such as "will", "can", "allowing", "believes", "continue" and "continuing", or other statements in the future tense, are forward-looking statements. Actual outcomes and results may differ materially from expectations in this press release due to a number of risks and uncertainties. Such risks and uncertainties include whether the market for security products will grow as projected, if at all, whether demand for NetScreen products will continue, whether new products, if and when introduced, will be successful and whether products will perform as expected.