Tumbleweed Introduces Tumbleweed Secure Internal Mail

Secure Internal Mail easily integrates with Microsoft Exchange 2000 to extend content security to internal mail within an enterprise

REDWOOD CITY, CA - November 14, 2001 - Tumbleweed® Communications Corp. (Nasdaq:TMWD),a leading provider of secure content management solutions for enabling the business Internet, announced today Tumbleweed Secure Internal Mail, a new enterprise-wide internal mail filter that can be used to apply content security and policies to mail exchanged within a company's network. Secure Internal Mail works in concert with Tumbleweed Secure Mail, a content security and policy management solution for Internet email and groupware applications. Secure Mail and Secure Internal Mail are key components of Tumbleweed Secure Guardian, the first policy-based framework providing centralized security for both incoming and outgoing communications.

"We're pleased to offer customers another solution as part of the Secure Guardian framework we launched in early October," said Jeffrey C. Smith, Chairman and CEO of Tumbleweed Communications. "Secure Internal Mail complements and leverages the proven and scalable Secure Guardian framework and extends our offering of solutions to protect the enterprise by effectively securing and applying policy to all email communications within an enterprise."

Tumbleweed Secure Internal Mail easily integrates with an enterprise's existing Microsoft Exchange 2000 infrastructure to secure internal communications within the enterprise and protect against viruses, inappropriate content, and/or internal access violations. In addition, Secure Internal Mail allows enterprises to use and leverage Tumbleweed Secure Redirect to capture internal confidential mail requiring secure delivery with an audit trail and specific time expirations. Secure Redirect allows businesses to establish centralized policies for secure delivery of information to partners and customers. Messages are redirected from the SMTP email stream to a secure Web server that allows recipients to retrieve messages securely using their Web browser.

"A critical component of an effective enterprise-wide content monitoring program is the ability to apply policies evenly and consistently to mail exchange internally as well as externally, "said Joyce Graff, Vice President at Gartner Group. "Content monitoring has become increasingly important as enterprises seek to implement the most comprehensive information security programs across their entire network environment."

Pricing and Availability
Tumbleweed Secure Internal Mail is available immediately and pricing is CPU-based, providing flexibility for each customer's unique requirements. For more information, contact your Tumbleweed business development representative, a certified Tumbleweed Channel Alliance Partner or visit www.tumbleweed.com.

About Tumbleweed
Tumbleweed is a leading provider of solutions for managing secure communication and collaboration to enable the business Internet. Tumbleweed's robust policy-based framework empowers organizations to safely share and protect critical information, increase customer loyalty and privacy and dramatically reduce costs. Tumbleweed is trusted by 1,000 blue-chip customers including American Express, JP Morgan Chase & Co., Chevron, Datek Online, the European Union's Joint Research Council, US Food and Drug Administration, John Deere, Merrill Lynch, Nike, Northern Trust, NTT, Salomon Smith Barney, Travelers, United Parcel Service, and seven of the world's largest postal services. Eight of the Fortune 10 and 100 of the Fortune 500 are Tumbleweed customers. Tumbleweed Communications was founded in 1993 and is headquartered in Redwood City, CA with offices around the world.

Except for the historical information contained herein, the matters discussed in this press release may constitute forward-looking statements that involve risks and uncertainties that could cause actual results to differ materially from those projected, particularly with respect to the security features of Tumbleweed's products and the activities of any third party. In some cases, forward-looking statements can be identified by terminology such as "may," "will," "should," "potential," "continue," "expects," "anticipates," "intends," "plans," "believes," "estimates," and similar expressions. For further cautions about the risks of investing in Tumbleweed, we refer you to the documents Tumbleweed files from time to time with the Securities and Exchange Commission, particularly Tumbleweed's Form 10-K filed March 30, 2001 and Form 10-Q filed November 13, 2001. Tumbleweed assumes no obligation to update information contained in this press release.