Tumbleweed Introduces First Policy-Based Enterprise Security Framework

Tumbleweed Secure Guardian offers customers the next generation of Internet Security solutions that both protect their enterprise and safely extend their network

REDWOOD CITY, CA - October 1, 2001 - Tumbleweed® Communications Corp. (Nasdaq:TMWD), a leading provider of secure content management solutions for enabling the business Internet, introduced today Tumbleweed Secure GuardianT, the first enterprise-wide policy-based security framework that offers solutions to both protect and extend enterprise networks, and enable secure communications with customers, partners and suppliers over the Internet.

"Tumbleweed Secure Guardian is the next generation of Internet security that companies need in order to conduct business and communicate securely over the Internet. We listened closely to our enterprise customers and Secure Guardian meets their requirements for a holistic framework-based approach to enterprise-wide content security and information exchange," said Jeff Smith, Chairman and CEO of Tumbleweed. "Secure Guardian uniquely addresses customer needs by proactively applying security to information based on three critical factors - the content flowing across the firewall, the identity of the sender and recipient, and the business processes involved. Since Secure Guardian is a combination of best-of-breed solutions, and can be deployed enterprise-wide, it has a significantly lower total cost of ownership and is more manageable, scalable and extensible than alternative point products."

As organizations increasingly move their communications online and leverage the business Internet to boost productivity, reduce costs and increase customer service and loyalty, Secure Guardian provides centralized security for both incoming and outgoing communications and integrates various enterprise applications for safe delivery of all forms of enterprise content.

"Tumbleweed's solutions are critical in helping us secure the flow of information into and out of our company," said Mark Sunday, Chief Information Officer, Siebel Systems, Inc. "We are excited about the new Secure Guardian, because its centralized architecture, deployed at the gateway will allow us to apply the same sophisticated policy-based security across additional open communications channels."

Secure Guardian is based on a platform consisting of the Tumbleweed Secure Policy Gateway™ and a series of protocol enablers that allow virtually any application to connect to it. The Secure Policy Gateway enables the enterprise to apply security to and manage content policies for bi-directional communications traffic, web content and Internet usage. Policies include protection from viruses, malicious mobile code or SPAM attacks, as well as protection from dangerous exposure of company, partner or customer confidential information. Tumbleweed protocol enablers allow a wide range of protocols and enterprise systems to be centrally managed from the Secure Policy Gateway to allow organizations to safely extend communications from enterprise applications, groupware and legacy systems.

"Businesses have found it daunting to implement content scanning," says Joyce Graff, Vice President with the Gartner Group. "Few products check more than one or two of the channels or protocols by which information can be sent into and out of the company, and each one has its own rule-crafting language. What the industry needs are products that analyze the content of email, http, and instant messaging traffic, applying the same consistent set of rules, and managing the flow of information, both internally and externally."

Additionally, Tumbleweed Secure Guardian enables a broad spectrum of network extension solutions that help companies leverage the business efficiencies and benefits of the business Internet, including secure communications between trading partners, moving paper-based processes - such as statement presentment - online, and delivery and storage of aggregated enterprise communications into a single, branded secure inbox.

"Companies are looking for a solution that leverages existing email and web-based communication systems to reach customers online while generating a notable return on investment," said Avivah Litan, Vice President and Research Director at Gartner Group. "By using a secure platform for online business processes and communications, businesses can protect their internal network environment and corporate information, while they simultaneously improve the quality, security and privacy of customer services."

Secure Content Management is a fast growing segment of the overall security market. According to IDC, the total SCM market is expected to grow to $4.2 billion by 2005. Tumbleweed Secure Guardian includes a broad range of solutions that address all of the segments within the secure content management market.

Pricing and Availability
Tumbleweed Secure Guardian is available immediately and pricing is CPU-based, providing flexibility for each customer's unique requirements. For more information, contact your Tumbleweed business development representative, a certified Tumbleweed Channel Alliance Partner or visit http://www.tumbleweed.com/.

About Tumbleweed
Tumbleweed is a leading provider of solutions for managing secure communication and collaboration to enable the business Internet. Tumbleweed's robust policy-based framework empowers organizations to safely share and protect critical information, increase customer loyalty and privacy and dramatically reduce costs. Tumbleweed is trusted by 1,000 blue-chip customers including American Express, JP Morgan Chase & Co., Chevron, Datek Online, the European Union's Joint Research Council, US Food and Drug Administration, John Deere, Merrill Lynch, Nike, Northern Trust, NTT, Salomon Smith Barney, Travelers, United Parcel Service, and seven of the world's largest postal services. Tumbleweed Communications was founded in 1993 and is headquartered in Redwood City, CA with offices around the world.

Except for the historical information contained herein, the matters discussed in this press release may constitute forward-looking statements that involve risks and uncertainties that could cause actual results to differ materially from those projected, particularly with respect to the security features of Tumbleweed's products and the activities of any third party. In some cases, forward-looking statements can be identified by terminology such as "may," "will," "should," "potential," "continue," "expects," "anticipates," "intends," "plans," "believes," "estimates," and similar expressions. For further cautions about the risks of investing in Tumbleweed, we refer you to the documents Tumbleweed files from time to time with the Securities and Exchange Commission, particularly Tumbleweed's Form 10-K filed March 30, 2001 and Form 10-Q filed November 13, 2001. Tumbleweed assumes no obligation to update information contained in this press release.