News Release
May 27, 1997

DHL Selects Cisco PIX Firewall for Cost-Effective, High-Performance Network Security

Enhanced Cisco PIX Firewall 4.0 delivers optimal network security for 40 worldwide DHL sites
cisco_building_corporate_002-jpg-1889882-1-0



SAN JOSE, Calif. - May 27, 1997 - Cisco Systems, Inc. today announced thatDHL, a world leader in international delivery service, will deployapproximately 60 Cisco PIX(tm) Firewalls to enable secure access to theInternet from approximately 40 worldwide DHL locations. DHL selected theCisco PIX Firewall version 4.0 as the sole firewall product within itsglobal network to ensure optimal network security and performance.

"Our customers expect reliable, high-performance delivery from DHL. That iswhy we chose the Cisco PIX Firewall. It provides outstanding security andperformance to match our transaction volume," said Derek Archer, director ofnetwork services for DHL.

"As network security becomes more business critical, network managersrequire a firewall solution that does not impair network performance," saidFrank Roys, director of marketing for Cisco's Internet Appliances andApplications Business Unit. "Unlike many competing solutions, the Cisco PIXFirewall 4.0 ensures network security while optimizing performance. It alsoprovides easier deployment and network expansion capabilities."

In addition to the performance and network security benefits of the PIXFirewall, DHL chose the Cisco firewall product for use within DHL's globalnetwork because it is a stand-alone hardware and software solution that isdesigned to function only as a firewall. This capability greatly reducesDHL's costs for global remote installation and management of the devices.

Approximately 40 DHL country organizations will locally install and manageInternet connections with Web-based applications to meet the increasingonline business needs of their customers. Based on the PIX Firewall'sstrong security features, such as secure remote management (virtual privatenetwork [VPN] support) and network address translation (NAT), as well as itsease of use and scalability, DHL will deploy the Cisco PIX Firewall 4.0 ateach Internet connection to ensure the protection of its global data networkfrom Internet-originated attacks. Using the new Central Management Utility,which allows a network manager to manage multiple PIX Firewalls from onelocation with a Windows NT version graphical user interface, the firewallswill be managed centrally by DHL's Global Network Control Center, located inBurlingame, Calif.

Because the PIX Firewall is based on stateful packet filtering technology,where data are inspected at the application level, it guarantees advancedsecurity and eliminates network performance bottlenecks. The PIX Firewallis also a scalable product - offering over 16,000 simultaneous TCP/IPsessions - that provides a price performance solution that addresses theneeds of DHL's country organizations, both large and small.

The Cisco PIX Firewall 4.0 is an integral part of Cisco's EnterpriseSecurity Solution. It works in concert with distributed Cisco routers usingCisco IOS(tm) security features and Cisco's recommended security policies toprovide a comprehensive security system. Cisco is a leader in providingintegrated security products and policies to match the growing demand fromcustomers for complete end-to-end solutions.

The PIX Firewall enables over 16,000 simultaneous TCP/IP connections throughthe use of its embedded Adaptive Security Algorithm. With Cisco Cut-ThroughProxy technology, the PIX Firewall also increases the speed of securityverification by reducing the amount of data processing cycles necessary foreach user to be authenticated. The PIX Firewall is configured andmaintained with a Windows NT/HTML-based graphical user interface, makingdeployment and network expansion easier for users.

Technical Note:

PIX Firewall 4.0 Enhanced Features
Cisco PIX Firewall 4.0 software enhancements include the following:

Port Address Translation Feature - Provides support for up to 64,000 hostswhile using only one IP address, hiding the source address of clients usinga single IP address at the firewall.

Net Aliasing Feature - Manages IP address overlap and allows seamlessaccess to destination hosts with full application support.

Mail Guard Feature - Reduces the cost of implementing e-mail servicedenial security by removing the need for an external mail relay host. Thisis one less piece of equipment to attack in a classic mail relay (DMZ).

Multimedia Support - Eliminates special proxy configuration needed onclient hosts by providing secure connections for Internet multimediaapplications, such as Microsoft's Netshow, White Pines' CuSeeME, ProgressiveNetworks' Real Audio, VDOnet's VDO Live, IRC, Vocaltech's Internet Phone,Microsoft's NetMeeting and Intel's Internet Phone based on H.323, Vxtreme'sWeb Theater 2 and Xing Technologies' Streamworks.

Java Filtering Feature - Allows or denies Java applets from enteringprivate networks.

Syn Flood Defender - Maintains network reliability by throttling maximuminbound and outbouncd connections at the firewall (on a three-tier model).

Remote Procedure Call (RPC) Feature - Provides secure support forapplications requiring Remote Procedure Call, such as SAP, and dynamicallyand selectively open/closes RPC/UDP ports only as needed.

Central Management Utility - Allows a network manager to manage multipleCisco PIX Firewalls from one location with a Windows NT version graphicaluser interface (GUI).

Cisco Systems

Cisco Systems, Inc. (NASDAQ: CSCO)is the worldwide leader in networking for the Internet. News and information areavailable at http://www.cisco.com.

# # #

Cisco IOS is a trademark, and Cisco, Cisco Systems, and the Cisco Systemslogo are registered trademarks of Cisco Systems, Inc. in the U.S. and certainother countries. All other trademarks mentioned in this document are the propertyof their respective owners.