SAN JOSE and SCOTTS VALLEY, Calif., August 6, 2007–Palo Alto Networks and SurfControl (London: SRF), a leading provider of global on-demand network and endpoint IT security solutions, today announced a partnership to integrate SurfControl’s Web Filter URL classification database into Palo Alto Network’s next-generation firewall, the PA-4000 Series.

With SurfControl, the PA-4000 Series now offers fully integrated URL filtering capabilities. In addition, SSL decryption can be invoked or bypassed based on URL category (e.g. finance sites are allowed without decryption while other sites are decrypted for inspection and policy control), and the fully integrated “on-box” database provides high performance URL filtering without redirects as required by “off-box” solutions.

The proliferation of social networking, Software-as-a-Service (SaaS), instant messaging, webmail and P2P applications enhance the user experience and improve productivity – but not without consequential IT security problems and limited application visibility and control. Based on Palo Alto Networks’ patent pending App-ID™ application classification technology, the PA-4000 Series accurately identifies both traditional and emerging applications – including those embedded in an SSL session – to facilitate total application access and usage control. Notably, this is accomplished while enabling broad, real-time threat prevention by addressing common security evasion tactics.

"With its next-generation firewall, Palo Alto Networks has reinvigorated a core security platform with the application visibility and control it sorely needs,” said Rocco Donnino, Vice President of Worldwide Business Development, SurfControl. "SurfControl’s leading URL filtering database is an ideal complement to Palo Alto’s platform and together enable the safe and appropriate use of new applications in the enterprise.”

"End users are driving the adoption of new applications in the enterprise,” said Steve Mullaney, Vice President of Marketing, Palo Alto Networks. “IT should accept and embrace this new application model, but at the same time maintain control. The PA-4000 Series provides a level visibility and control over applications that’s not available in legacy firewalls. With the integration of SurfControl’s leading URL filtering database, the PA-4000 Series is further enhanced to enable IT to re-establish responsible application controls.”

About SurfControl

SurfControl provides a portfolio of security solutions to protect our customers from Internet threats, deliver business and regulatory compliance, and enable business continuity. SurfControl believes that security should be treated as a science, delivering protection at multiple points – “in the cloud" with on-demand security services, on the network with software and appliances, and on the desktop and mobile client. All of SurfControl's solutions for Web, e-mail and endpoint security are backed by industry-leading threat detection technologies, delivered by SurfControl's Global Threat Experts who work 24/7 to provide customers with dynamic zero-day protection. The company protects more than 16 million users and over 25,000 customers worldwide, and employs more than 600 people in offices across Europe, the Americas, and Asia/Pacific. For further information and news on SurfControl, please visit www.surfcontrol.com.

About Palo Alto Networks

Palo Alto Networks™ enables visibility and policy control of applications running on enterprise networks. Based on innovative App-ID™ application classification technology, the Palo Alto Networks PA-4000 Series is a next-generation firewall that accurately identifies applications – regardless of port, protocol, evasive tactic or even SSL encryption – at 10Gbps with no performance degradation. Enterprises can now set and enforce application usage policies to meet compliance requirements, improve threat mitigation and lower operational costs. The Palo Alto Networks team includes security and networking industry veterans from Check Point, NetScreen, McAfee, Cisco, Juniper and Blue Coat. It is backed by investors Globespan Capital Partner, Greylock Partners and Sequoia Capital. For more information, visit www.paloaltonetworks.com.

# # #

Palo Alto Networks, the Palo Alto Networks Logo, App-ID, FlashMatch and PAN-OS are trademarks of Palo Alto Networks, Inc. in the United States. All other trademarks, trade names or service marks used or mentioned herein belong to their respective owners.