SafeNet Protects Data at Rest SafeNet provides the most secure and cost-effective data at rest protection for database, disk, file, and removable media. Business Issues SafeNet Solution Protect sensitive data on variety of devices Protect Data at Risk – State of the art encryption for database, file, disk and removable media Implement robust data encryption controls for compliance Comply w/ Legislation – Proven compliance w/ mandates Minimize cost of securing & managing thousands of portable devices Reduce Operational Cost – Most cost-effective FDE w/ central management via Active Directory

SafeNet Database, File and Application Layer Encryption DataSecure EdgeSecure Key Secure Connector Software High-Performance Database, File, and Application Encryption Transparently encrypts sensitive data across heterogeneous IT environments High-performance, low latency encryption offload (+100k TPS) Intuitive point-and-click administration console High-availability and scalability through clustering and load balancing FIPS, Common Criteria certified Locally encrypts sensitive data in remote locations High-availability appliance for local encryption Light, small form factor that is optimized for distributed environments Remote Management after initial setup Backed up by central DataSecure appliance in event of device failure FIPS 140-2 certified Centrally protects and manages crypto keys and security policy in hardware appliance Keys are securely stored in a single location for clear separation and definition of boundaries Centralized policy management Centralized logging, auditing and archiving Built-in Certificate Authority (CA) Separation of duties (dual control) FIPS, Common Criteria certified Enables seamless integration with database, application and file servers Load balancing health checking, connection pooling and SSL VPN Database Connectors (Oracle, IBM DB2, Windows SQL Server, Teradata, and Tandem NonStop, SAP, iSeries) File System Connectors (Windows Server, Linux) Application Connectors (.NET, CAPI, JCE, PKCS#11, z/OS, XML and support for all common application and web servers)

SafeNet DataSecure SafeNet DataSecure offers the highest level of database, file and application security available, featuring breakthrough performance, high availability, and streamlined implementation. Security Encryption in dedicated hardware appliance Secure multi-factor authentication and access control between servers and DataSecure appliance Centralized auditing and logging FIPS 140-2 and Common Criteria certified Separation of duties Performance Encryption offload to high-performance hardware appliance Clustering for linear scalability (up to 100k TPS) Low latency (300 microseconds) Batch processing for improved performance Ease of Integration & Management Pre-built connectors for seamless integration into heterogeneous environments (database, application, mainframe, and file servers) Intuitive, point-and-click administration and policy management console Centralized remote configuration, monitoring and management

SafeNet DataSecure Deployment Remote Location Data Center Databases SafeNet EdgeSecure® Application Servers z/OS Mainframes Web Servers File Servers There are several steps required to implement a solution based on the DataSecure platform: 1) First, you install the DataSecure hardware appliance in your data center. This will provide you with a secure hardware-based repository for encryption keys and will serve as the organizational hub for your solution. 2) Next, software connectors are installed as required onto the various elements in your data environment. We have a range of connectors for all common elements & technologies. The connector is a piece of light-weight client software that enables secure communication and transparent encryption functions. 3) Configuring keys and policies is next. Note that keys are stored in the hardened, Ingrian DataSecure appliance. 4) Next, migrate sensitive clear text data from the various data environment elements to the DataSecure appliance via secure SSL connection. The data is encrypted in the DataSecure and then sent back to the data elements. When a user with the appropriate authentication and authorization accesses this information, it is transparently decrypted. 5) Lastly, configure any batch processes. This is where the benefit of encryption offload is most obvious. In this example, the Ingrian DataSecure is able to encrypt 500,000 records in just 5 seconds. Note that in a distributed environment, a similar set of steps is used, whereby an Ingrian EdgeSecure device is deployed at each remote location allowing for rapid encryption of data at the remote location. All of the EdgeSecures are centrally managed by the DataSecure, which can operate as a backup in the event of an EdgeSecure failure. Backup Info: Although Ingrian does not directly touch laptop/devices or storage/tape elements at this time, we nonetheless augment the data security of systems that use these elements: users are not able to use their laptop/devices to access and/or download sensitive information from other data elements unless they have authorization. sensitive data can be encrypted before it is loaded onto storage/tape Laptop/ Device Storage/ Tape SafeNet DataSecure® 4