Tumbleweed Debuts FTP Analyzer at RSA

Tumbleweed® Communications Corp. (NASDAQ:TMWD), an industry leader in managed file transfer and email security, today announced the availability of FTP Analyzer™, a tool providing organizations visibility into their File Transfer Protocol (FTP) traffic. FTP has emerged as a new security attack vector, resulting in a wave of high-profile data breaches, as well as organized criminal activity, stemming from vulnerabilities in susceptible FTP servers. Organizations including Sega, Los Alamos Labs, FOX News and Lexmark, among many others, have all been victims of publicized FTP breaches. Yet numerous other FTP breaches have likely occurred and simply gone unnoticed. Recently, an underground hacker database was discovered containing more than 8,700 harvested FTP accounts, compromising FTP servers and the data housed on them. Unfortunately, many organizations are unaware of their unsecured FTP traffic, leaving them vulnerable to these types of data breaches. Created in the 1970s, the FTP protocol was designed primarily to communicate and share files, with no provisions for data security; and it’s a technology that is frequently overlooked when it comes to security and management risks. Since FTP is free, servers and software can be deployed without the knowledge or consent of IT departments. In fact, many organizations are unaware that substantial amounts of business-critical data are entering and leaving their networks via unsecured or rogue FTP. Tumbleweed’s FTP Analyzer provides IT departments with the ability to monitor FTP activity on their networks, in order to assess and address the exposure of sensitive data via FTP. Additionally, this tool generates a two-page executive-level report detailing: Overall volume of secured and unsecured file transfer traffic Secured and unsecured file transfer traffic over time Top 10 largest unsecured file transfers Top 10 busiest FTP servers by number and volume of unsecured files transferred Once an organization has identified its disparate and rogue FTP exchanges and determined the scope and risk of unsecured transactions, they need a single-source solution for managing and securing FTP communications. A leader in managed file transfer, Tumbleweed’s award-winning SecureTransport™ product helps enterprises effectively secure, automate and manage mission-critical file transfers with a flexible, easy to use solution that ensures both data integrity and compliance. "Regulatory compliance mandates, such as the Sarbanes-Oxley Act and the Health Insurance Portability and Accountability Act (HIPAA), require companies to document business processes,” said L. Frank Kenney, Research Director for Gartner. "One frequently overlooked process is data movement – specifically data movement using the File Transfer Protocol (FTP). FTP by itself does not provide mechanisms for management, monitoring, security or process control. Any device that can detect, monitor and analyze FTP usage can help organizations identify their unmanaged FTP – an important first step in securing and managing file transmissions.” A 2007 Hilty, Moore & Associates survey of IT managers and CIOs at 100 companies spanning the financial services, healthcare, retail, manufacturing, and government sectors revealed that FTP use is growing, making insight into FTP traffic more crucial than ever. Respondents utilized the same or higher numbers of file transfers compared to the previous year, with approximately one-third of respondents reporting use of FTP for as much as 80 percent of their file transfer needs. This use of unmanaged FTP to share sensitive data has been the impetus behind Tumbleweed’s development of the FTP Analyzer, as corporate data has become increasingly vulnerable to high-profile data breaches. "Many organizations are still largely unaware, or simply do not want to acknowledge, the risks involved with using an aging technology like FTP to transport sensitive data in and out of a company,” said Dr. Taher Elgamal, chief technology officer of Tumbleweed Communications. "Organizations must take responsibility for their data, including visibility of all FTP activity. FTP Analyzer will assist in understanding FTP activity, to ultimately stay ahead of the threat of FTP data breaches.” The unveiling of FTP Analyzer will take place at RSA Conference on April 7 - 11, 2008 at The Moscone Center in San Francisco, California. Tumbleweed will be providing a demo of the FTP Analyzer tool at their booth # 2232. Others may sign-up to receive the tool by going to www.tumbleweed.com. SAFE HARBOR STATEMENT Tumbleweed cautions that forward-looking statements contained in this press release are based on plans and expectations as of the date of the press release, and that a number of factors could cause the actual results to differ materially from the guidance given at this time. These factors are described in the Safe Harbor statement below. Except for the historical information contained herein, the matters discussed in this press release may constitute forward-looking statements that involve risks and uncertainties that could cause actual results to differ materially from those projected, particularly with respect to the demonstration, functionality, and features of FTP Analyzer. In some cases, forward-looking statements can be identified by terminology such as "may,” "will,” "should,” "potential,” "continue,” "expects,” "anticipates,” "intends,” "plans,” "believes,” "estimates,” and similar expressions. For further cautions about the risks of investing in Tumbleweed, we refer you to the documents Tumbleweed files from time to time with the Securities and Exchange Commission, particularly Tumbleweed’s Form 10-K filed March 17, 2008. Tumbleweed assumes no obligation to update information contained in this press release. Although this release may remain available on Tumbleweed’s website or elsewhere, its continued availability does not indicate that Tumbleweed is reaffirming or confirming any of the information contained herein. About Tumbleweed Tumbleweed Communications Corp. (NASDAQ:TMWD), an industry leader in managed file transfer and email security, provides enterprise-class solutions to organizations of all sizes. Tumbleweed’s innovative products enable organizations to effectively manage and protect business-critical Internet communications, with capabilities that span secure file transfer, encryption, data loss prevention, and email security. Tumbleweed has more than 3,200 customers worldwide, including blue-chip companies across an array of industries such as Technology, Retail, Finance, Healthcare, Manufacturing, Consumer Packaged Goods, Telecom, Energy, and the U.S. Government. The world’s most security conscious organizations rely upon Tumbleweed technology including Bank of America Securities, JP Morgan Chase & Co., the U.S. Food and Drug Administration, and the U.S. Department of Defense. Our award-winning products build on 15 years of R&D and 27 security patents in the U.S. alone – many of which are licensed by other security vendors. More information can be found at www.tumbleweed.com. Tumbleweed, FTP Analyzer and SecureTransport are either registered trademarks or trademarks of Tumbleweed Communications Corp. in the United States and/or other countries. All other trademarks are the property of their respective owners.