Ted McKendall

Product Manager, SecureTransport

February 23rd, 2006

Secure Internet CommunicationsSafe and Automated File Transfers over the Internet

2

Today’s Agenda

Tumbleweed – Company Summary Tumbleweed – Product Suite SecureTransport – Product Overview

3

» The leader in file transfer and email security

» 12 years protecting enterprise data and email

» 1,500+ enterprise customers

» Award-winning products

» Publicly traded (Nasdaq:TMWD)

» Market Leader in Managed File Transfer (MFT)

Tumbleweed Communications

At a glance:

Founded: 1993 Global HQ: Redwood City, CAEmployees: 275+

Solutions: Email Firewall Secure Email Secure File Transfer Identity Validation

Industries served: Financial Services Government Healthcare Retail Technology Enterprise

Standards Development IETF Open Group FSTC ITAA Anti-Phishing Working Group

4

Representative Customers

At a glance:

Customer snapshot:• 9 of top 10 US Banks• 7 of top 10 Brokerages• 6 of top 10 Euro banks• 3 of top 5 Canadian banks• 6 payment/clearing networks• Several central banks:• U.S. Federal Reserve• Bank of England• Over 100 of the Fortune 500• Over 100 financial svcs. firms• Over 100 health care orgs.• Over 100 law firms• 6 of the 10 largest pharmas

Recent European Success

Enterprise Spam Defense: Prudential Telewest Adldleshaw Goddard Manches Solicitors Fila

MailGate: RoSPA

Secure Email: WCC Ernst & Young Wolverhampton City Council Secure File Transfer: Airbus GM EU Clearstream AXA

5

Tumbleweed Product Suite

Corporate EmailServers

End Users

Back-end Applications

Email

Files and Data

Identity Validation

InternetEDI & B2B Transactions

Spam & Virus Updates

Firewall

TumbleweedProductPortfolio

SecureTransport

Email Security Suite• MailGate Edge• MailGate Anti-Spam• Email Firewall• Secure Messenger

ValidationAuthority

6

Evolution of the File Transfer Market

Today’s ChallengesToday’s Challenges Evolution PathEvolution Path

Multiple, departmental file transfer point products

Multiple, departmental file transfer point products

Centralized, enterprise-wide file transfer infrastructure

Centralized, enterprise-wide file transfer infrastructure

Proprietary, single vendor file transfer solutions

Proprietary, single vendor file transfer solutions

Interoperable products based on open Internet standards

Interoperable products based on open Internet standards

Expensive private links, leased lines, VANs, modems…

Expensive private links, leased lines, VANs, modems…

Ubiquitous reach and low cost of the Internet

Ubiquitous reach and low cost of the Internet

Home-grown applications straining under the load

Home-grown applications straining under the load

Enterprise-class scalability and reliability

Enterprise-class scalability and reliability

Regulatory changes requiring secure communications (HIPAA, GLB, SOX)

Regulatory changes requiring secure communications (HIPAA, GLB, SOX)

Encrypted file transfer with signed receipts and auditability

Encrypted file transfer with signed receipts and auditability

7

Mission-Critical

• Top Ten Bank:

“File Transfer is the second most critical application in the bank – it’s more critical even than email.”

• As File Transfer becomes more critical it leads to increased exposure, and a whole new set of requirements

“FTP just ain’t good enough anymore.”

9

EnterpriseFirewall

Internet

Tumbleweed SecureTransport

SecureTransport Edge and Server

Data Management

Event-based File Processing & Routing

Rules Editor w/Web UI Application Integration Event-driven Agents Outbound Transfer

Management Signed Audit Records Repository Encryption

Secure Data Delivery

Multi-Protocol Secure File Transfer

Guaranteed Delivery Data Integrity Assurance Checkpoint/Restart Secure DMZ Streaming Enterprise Authentication Robust Access Controls Open Standards

HTTPS

HTTP

FTP/S

FTP

End Users

Back-end Applications

EnterpriseAuthentication

AS2

SCP

SFTP

10

Standards for Internet File Transfer

FTP

FTPS

SFTP

SCP

SSH

HTTP

HTTPS

FTP with PGP

SMTP

AS2

S/MIME

XCRCSSL

TLS

Plus legacy protocols: Async/Bicync, NDM, VANs, …

11

A Menu of Connectivity Options

~ Client Entrées ~

~ Lighter Fare ~

~ Client Entrées cont. ~

Other FTP/S Client……………………………. FTP/S• RFC-Compliant FTP, FTP over SSL/TLS• Windows, Unix, AS/400, z/OS, etc.

Other SSH Clients……………………………… SFTP,• SSH2 Standards-based SCP• Native on many OSes

~ Server Entrées ~

SecureTransport Connectivity MenuSecureTransport Server offers many connectivity options to meet your business partners’ needs.

Web Browser (Zero-Footprint Client)…………HTTP/S

• Ubiquitous• Easy setup for new users• Customizable UI skins

Web Browser with ActiveX…………………….HTTP/S

• Guaranteed Delivery• Restart/Resume

Other AS2 Server…….………………………….. AS2• EDI trading partners• Payload signing and encryption• Certified eBusinessReady®

SecureTransport Server…………………………. AS2,• Bidirectional Communication FTP/S,• Secure, Guaranteed Delivery HTTP/S• Data Management

SecureTransport Client…………………………..HTTP/S,

• Automated and scheduled transfers FTP/S• Guaranteed Delivery• Restart/Resume• Available on Windows and Unix

— Heart Healthy— Indicates Hot & Spicy!

12

Security

• Data Security• Transport encryption v. payload encryption• Data segregation and access control• Data integrity verification• Secure data storage

DMZ Security – No storage of sensitive data in insecure zones Encrypted data repository

• High Availability

13

Automation and Management

•Transfer Integration• File Routing• File Storage• File Processing• Notification

•User/Trading Partner Management• Authentication/Authorization• SSO, LDAP, Netegrity

•Auditability• Extensive user and administrative logging• File Tracking and Reporting• Signed transfer records – secure audit trail

•Delegated Administration• Administrative Roles

14

SecureTransport Components

Internet

Backend Processing

Audit Logs

EnterpriseFirewall

DMZ

FTP/S, HTTP/S,AS2, SFTP, SCP

Data

InternetFirewall

3rd-party FTP/S Client

ST Client

StandardWeb Browser

Web Browser w/ActiveX

AS2 Server

DatabaseEmail

Operations

Mainframe

ApplicationServer

Data

Repository Encryption

MDN Receipting

Audit Logs

Transaction Manager

Integration

Audit Logs

Application Layer Streaming

No Data

SecureTransport Edge

SecureTransportServer

SecureTransport

ST Server

3rd-party SFTP Client

15

ST Deployment: High Availability

AS2 Serveror ST Server

ST Client

Other Client

Web Browser

Firewall

ST Edge

Internet

Firewall

Load-Balancer ST Edge

ST Server

Load-Balancer ST ServerSAN

Firewall

ST Edge

Firewall

Load-Balancer ST Edge

ST Server

Load-Balancer ST ServerSAN

Primary Datacenter

Secondary Datacenter

16

Q & A

• Questions?