1. © Softmark www.softmark.com www.softmark.com - 1 - Continuous Availability Operational Simplicity Financial Advantage Secure Your Stratus Systems VOS Auditor Capabilities

2. © Softmark www.softmark.com www.softmark.com - 2 - Provide comprehensive, cost effective security program Satisfy internal audit requirements Satisfy corporate governance, regulatory and industry standards (PCI) Eliminate security threats and vulnerabilities Reduce cost by automation Protect your most important asset – your data Objectives

3. © Softmark www.softmark.com www.softmark.com - 3 - A complete suite of solutions designed to facilitate administration and management of Stratus/VOS security The only solution that meets the latest PCI standards Modular solutions tailored to specific customer ’ s requirements What is VOS Auditor?

4. © Softmark www.softmark.com www.softmark.com - 4 - Auditor’s Layered Design Configuration - definitions of all regulated data files, monitored objects, directories and user's access profiles. 24x7 Monitoring - real time monitoring of configured objects, with automated responses, blocks and alarms. Reporting - periodic or on-demand auditing reports of all security-related events.

5. © Softmark www.softmark.com www.softmark.com - 5 - VOS Command Shells Designed to be used by system operators, developers and administrators Shields the system from unauthorized use - eliminates direct command line access Offers secure, comprehensive audit trail reports of all commands executed, user's identity and time of activities Authorizes command execution based on user's security profile Manages developers and system-administrators privileges without affecting their day-to-day activities. Monitors and terminates inactive sessions Incorporates comprehensive password protection

6. © Softmark www.softmark.com www.softmark.com - 6 - VOS Command Shells

7. © Softmark www.softmark.com www.softmark.com - 7 - Maintains access rights in a centralized configuration database for the entire system Assures that access rights are always up-to-date Incorporates simple scripts into powerful command macros Allows the system administrator to classify detailed security levels and easily promote or demote users from one level to another Scans all system directories reports and clears any deviation from standard configuration Works with standard VOS access-control-lists (acl/dcl) Access Control Manager

8. © Softmark www.softmark.com www.softmark.com - 8 - Access Control Manager

9. © Softmark www.softmark.com www.softmark.com - 9 - Security Alert Manager Offers real-time background and non intrusive operation Monitors of all security related activities Handles security breaches based on system controls & configuration Eliminates risk by automatically executing user-defined procedures Sends critical alerts to selected – terminals – pagers (numeric, text, SMS) – e-mail boxes – other systems Offers Operator’s Console and a Secure Privileged Shell Distributes detailed reports to any key personnel based on defined schedule

10. © Softmark www.softmark.com www.softmark.com - 10 - Putting it all together

11. © Softmark www.softmark.com www.softmark.com - 11 - Reporting User Registration report Activities and critical commands Incident and security events System Configuration changes VOS-Audit Admin VOS Security and System report Delivery: – By email to any selected personnel – On-demand or by predefined schedules – WEB/HTTP based, easy to read reports

12. © Softmark www.softmark.com www.softmark.com - 12 - Reports

13. © Softmark www.softmark.com www.softmark.com - 13 - Registration report

14. © Softmark www.softmark.com www.softmark.com - 14 - Activity report

15. © Softmark www.softmark.com www.softmark.com - 15 - Incident report

16. © Softmark www.softmark.com www.softmark.com - 16 - “Its extensive security features allowed us to reduce the risk of human error as well as audit our operators and end-user activities” Erick Mazariegos, DTCC, Director Application Development “It has also put us in good shape for our upcoming security audit. We can track everything that each operator does …there is no concern that someone can go into the application and damage the system. We now have the individual accountability and auditing which were lacking before.” Rob Aronson, Lead Design Analyst “The product assisted us in managing our production network. Job scheduling, nightly batch cycles and process management are now fully automated ” Alex Tulchinsky, Director AOL Corporate Business Systems Operations VOS-Auditor

17. © Softmark www.softmark.com www.softmark.com - 17 - SoftMark solutions are exclusively distributed worldwide by Contact: Mr. Eran Mertens E-mail: em@stratusoft.comem@stratusoft.com Telephone: 516-536-6200 ARI: http://www.stratusoft.com/http://www.stratusoft.com/ SoftMark: http://www.softmark.com/http://www.softmark.com/