Archiving with the Barracuda Message Archiver Preserve and

Archiving with the Barracuda Message Archiver Preserve and Index All Email Communications Barracuda Networks Confidential 1

What is Message Archiving? • Extract emails – Capture current emails in near real-time – Import historical emails • Store emails – Store securely for later retrieval – Storage time period can be years • Retrieve emails – Able to search for needed emails with minimal effort Barracuda Networks Confidential 2

What is an Archiver? Email server Purge rules periodically delete emails (Deleted emails can be found on the BMA) Transactional email storage High performance/High cost Continuous transfer ensures all emails are archived Barracuda Message Archiver Barracuda Networks Confidential Archival storage (inexpensive) Search Analyze Retrieve Disclose Manage 3

Barracuda Message Archiver • • • Comprehensive Archiving Search and Retrieval Reporting and Statistics Policy Management Intelligent Storage Manager Role-Based Interface Barracuda Networks Confidential 4

Why should YOU care? • Archiving Market is Growing – Recent changes have made this a big market (e. g. FRCP) – Gartner predicts market size to be $1 billion by 2011 • Strong Market Drivers – Operational importance of email – Litigation and regulatory compliance • Same Selling Dynamics as Barracuda Spam Firewall – Same decision maker and 30 -day demo dynamics – Cross-sell opportunities – Need to retain messages is immediate: quick sale Barracuda Networks Confidential 5

Demand Drivers Barracuda Networks Confidential 6

Top Business Needs for Archiving • • Comply with various regulations Satisfy discovery requests (e. g. HR/legal) Import PST files for centralized storage and retrieval Eliminate Exchange quotas and improve storage management • Enforce legal holds and help with legal case preparation • Monitor information leakage via email Barracuda Networks Confidential 7

Messaging and E-Discovery • Patchwork of rules and regulations govern discovery of electronic records • Federal Rules of Civil Procedure (FRCP) 26(b)(1) – – Passed by Congress on Dec. 1, 2006; effective Dec. 1, 2007 Courts may order discovery of any material relevant to a pending legal case Amendments changed allowance for discovery to include emails and instant messages Similar changes appearing in various state justice systems • Right to Information – Various state and federal laws governing private citizens’ right to obtain public records, including electronic records – Other examples: Freedom of Information Act (FOIA), Open Public Records Act (OPRA) and Public Records Act (CA PRA) Barracuda Networks Confidential 8

Managing Electronically Stored Information • Procedures for managing paper records aren’t effective • Volume is exponentially larger – An average employee sends/receives 50 emails per day • Multiple copies of messages stored in various places – Final version might differ from draft version • ESI is more dynamic and mutable than paper documents • Traditional media does not have metadata (headers) • Dynamic nature of ESI makes it necessary to institute “litigation/legal holds” – During discovery prior to filing a lawsuit Barracuda Networks Confidential 9

Compliance Regulations • Various statues or regulations require archival of electronic records (email and instant messages) Industry Statues or Regulations Banking Gramm-Leach-Bliley Financial Modernization Act of 1998 and USA Patriot Act of 2001 Healthcare Health Insurance Portability and Accountability Act (HIPAA) (1996) Financial Securities Various SEC and NASD rules (e. g. SEC Rule 17 a-4 and Conduct Rule 3010) Insurance HIPAA, GLBA; USA Patriot Act of 2001 Publicly Traded Companies Sarbanes-Oxley Act of 2002 (SOX) (under Securities Exchange Act) Companies trading in California Security Breach Information Act (SB 1386) Barracuda Networks Confidential 10

Why Not Just Backup? • Backups are not compliant – Emails can be deleted before being backed up • Doing discovery requests from backup is difficult – – Might need to recreate Exchange environment Time consuming and labor intensive No comprehensive searching No tiered administration • No operational benefits for storage management – Can’t migrate emails from server to backup – Retrieval is not instant for users Barracuda Networks Confidential 11

Why Not Just Keep It On the Email Server? • Not very different from relying on backups • No way to be compliant – Emails can be deleted at anytime • Complicates discovery requests – Time consuming and labor intensive – No comprehensive searching • Performance drag on email server • Extensive backup window for email server Barracuda Networks Confidential 12

Not Archiving Has Serious Implications • Morgan Stanley fined $604 M in 2005 – Fined for not producing emails relevant to pending litigation • Merrill Lynch fined $2. 5 M in 2006 – Fined by SEC for not producing emails in a timely manner • Phillip Morris fined $2. 9 M in 2007 – Failed to meet their own document retention policy • Medtronic Responds to E-Discovery Request in 2007 – Estimated costs of restoring from backup at $20 M • Toussie v. County of Suffolk in 2007 – Cost of discovery estimated at $1 M for county Barracuda Networks Confidential 13

Morgan Stanley Fined $604 M • Case involved Ronald Perelman, chairman of Revlon • Morgan Stanley failed to produce emails offering fraudulent investment advice • Judge instructs jury to assume the worst about the missing emails • Jury free to presume that Morgan Stanley had provided Mr. Perelman with incorrect information • Morgan Stanley penalized with a $604 M fine • Absence of evidence is NOT innocence Barracuda Networks Confidential 14

Merrill Lynch Fined $2. 5 M • SEC investigated Merrill Lynch between Oct. 2003 and Feb. 2005 • Requested emails from Merrill Lynch in its role as a broker, dealer and member of the stock exchange • Merrill Lynch unable to produce all requested emails – One request took 7 months! • Merrill Lynch fined $2. 5 M Barracuda Networks Confidential 15

Toussie v. County of Suffolk 2007 • Allegedly denied option to buy real estate – Violation of civil rights • County (defendant) requested to provide relevant emails – County could only provide two emails! • Court ordered IT department to search county’s email servers for all communications • County claims lack of resources – Estimated cost for discovery is $934, 000 and 960 man hours Barracuda Networks Confidential 16

Barracuda Message Archiver Product Overview and Pricing Barracuda Networks Confidential 17

Barracuda Message Archiver Major Features • Complete and affordable email archiving solution – Archives live and historical email – Stores and indexes all email messages in real time – Provides immediate legal and regulatory compliance • Ease of use – Plug-and-play – Cost-effective maintenance • Enterprise Features – Reliable and robust – Roles-based interface • Aggressively Priced – No per user licensing fees Barracuda Networks Confidential 18

Barracuda Message Archiver Web Interface • • • Easy Intuitive Consistent Multiple Languages LDAP Integration – Configurable access control • Retention Policies Barracuda Networks Confidential 19

Barracuda Message Archiver Detailed Features • Comprehensive Archiving – – – – • – – – Search on metadata and message contents Attachment, compound searches Message tagging Export of search results Intelligent Storage Manager – – Manage of internal RAID array Mirroring to external storage Expandable external storage Supports CIFS standards Barracuda Networks Confidential Reporting and Statistics – – • Email volume, storage utilization, policy violations Hourly and daily statistics on traffic and policy violations Policy Management – Search and Retrieval – • Retrieval from Exchange (MAPI) Retrieval via IMAP and POP 3 Novell Group. Wise integration PST file format Single-instance storage Message compression Tamper-resistant storage • Standard policies: foul language, personal email use, personally identifiable info Custom policies Email alerts for policy violations Time-based retention policy Virus, spyware and malware scanning Roles-based Interface – – Predefined admin and auditor roles Granular controls for access and policy End user access Integration with LDAP directory servers 20

Barracuda Message Archiver Architecture Barracuda Networks Confidential 21

Barracuda Message Archiver Installation • Journaling – – Also called “Sidelining” or “Copy All” Exchange (2003, 2007), Kerio, i. Mail, Lotus Domino Group. Wise (as Trusted Application) Sendmail or Postfix (by doing bcc journaling) • SMTP Relay with Barracuda Spam Firewall – For other types of email servers • Other Configurations – External storage with any NAS device Barracuda Networks Confidential 22

Barracuda Message Archiver Model Comparison Barracuda Networks Confidential 23

Barracuda Message Archiver Pricing • Barracuda Message Archiver 350 ($4, 999) – 500 maximum users –. 5 TB of virtual storage capacity • Barracuda Message Archiver 450 ($8, 999) – 1, 000 maximum users – 1 TB of virtual storage capacity • Barracuda Message Archiver 650 ($14, 999) – 2, 000 maximum users – 2 TB of virtual storage capacity • Barracuda Message Archiver 850 ($27, 999) – 4, 000 -5, 000 maximum users – 4 TB of virtual storage capacity Barracuda Networks Confidential 24

IMs Integrate with Barracuda Message Archiver • Compliance regulations and discovery motions treat instant messaging on par with email – For instance, SEC Rule 17 a-4 requires securities firms to keep copies of any communications between brokers and customers, including emails and instant messages. These can be audited at a later date. • Barracuda IM Firewall integrates with Barracuda Message Archiver – Set Barracuda IM Firewall to send complete chats to Barracuda Message Archiver – Barracuda Message Archiver provides extensive searching and auditing capabilities – Instant Messages and emails can be exported for review by third party Barracuda Networks Confidential 25

What is the Value of EU and IR? • Energize Updates – – – – Policy Definition updates Virus Definition updates Document Format updates Security updates Basic Technical Support Firmware updates Optional participation in early firmware updates Barracuda Networks Confidential • Instant Replacement – Email is a mission critical application – Prevents losing ‘archiving’ capability for extended periods of time – Hard disk replacement – Enhanced Technical Support 26

Customer Stories Highlights of Successful Implementations Barracuda Networks Confidential 27

Spokane Public Schools • • • Implemented to satisfy E-Discovery requests from various agencies Deployed Barracuda Message Archiver 850 Increased productivity in searching email archives Reduced time required to respond to Right to Information requests Eliminated overhead in email auditing procedures Barracuda Networks Confidential 28

Sentient Flight Group • Implemented to satisfy future regulations and enable quick, easy email search and retrieval • Deployed Barracuda Message Archiver 650 “I can tell you in the last 2 months, we have been asked several times to track certain emails. This Barracuda (Message Archiver) offers a much easier, faster and reliable way to do this, as opposed to built-in tools of Exchange or other tracking methods. It saves us time and even allows us to pass some of this tracking responsibility off to other managers. ” – Systems Administrator Barracuda Networks Confidential 29

Specific Systems • Used Exchange import to offload all email from their server into Barracuda Message Archiver • Deployed Barracuda Message Archiver 350 “I just wanted to thank you all for your help with our Barracuda Spam Firewall and Message Archiver. The appliances have worked very well and with each firmware update their performance keeps getting better. I am a very satisfied customer and will return to your Web site frequently to stay up with what you have to offer. If we need a solution that you provide, you better believe that we will buy it. . . the support and products have been amazing. ” – Operations/Project Engineer, Specific Systems Barracuda Networks Confidential 30

Fairfax County Public School • 13 th largest school district in U. S. needed to comply with Federal and State rules for email archiving (e. g. FRCP) • Received frequent requests to produce emails of School Board members and student-teacher interaction • Deployed Barracuda Message Archiver 450 • Selectively import emails with Exchange import feature • Regularly backup archived emails to their EMC backup solution Barracuda Networks Confidential 31

Hotset Corporation • Industrial heating element manufacturer with remote sales team needed to archive emails for E-Discovery requests • Implemented Barracuda Message Archiver 350 • Used PST import feature of Barracuda Message Archiver • Centralized email searches from messages saved in PST files Barracuda Networks Confidential 32

Documentation, Information and More… • Barracuda Networks Web site – Barracuda Message Archiver Product Information http: //www. barracuda. com/archiver – Online Documentation http: //www. barracuda. com/documentation – Data Sheets http: //www. barracuda. com/ns/product_datasheets. php – Whitepapers http: //www. barracuda. com/ns/support/white_papers. php – Customer Support Solutions http: //www. barracuda. com/support-solutions – Tech Forum http: //forum. barracuda. com/bb/ – Support http: //www. barracuda. com/support • If you cannot find it online, contact your local Barracuda Networks sales representative for assistance. 33

Thank You! Questions? Barracuda Networks Confidential 34