CUPERTINO and SANTA CLARA, CALIF. — October 27, 2003 (Issued by Symantec) — Symantec Corp. (Nasdaq: SYMC), the world leader in Internet security, and Sanctum, the leader in automated Web application security firewall and testing solutions, today announced that Sanctum's AppShield� solution has been certified with the Symantec Enterprise Security Architecture. AppShield's certified integration with Symantec Enterprise Security Architecture provides enterprises with a Web intrusion prevention solution which functions within Symantec's security management framework. The best-of-breed solution from Symantec and Sanctum helps users identify and track the business impact of the most threatening application layer exploits, enabling customers to rapidly respond to complex security threats in order to reduce risk and control costs.

"Sanctum is very pleased to be certified as a technology partner of Symantec. The integration of AppShield with Symantec Enterprise Security Architecture offers significant benefit to our joint customers by providing a comprehensive solution that helps enterprises reduce costs and achieve measurable efficiency improvements on responding to security breaches," said Peggy Weigle, Sanctum CEO. "This partnership once again validates Sanctum's market leadership, maturity and continued innovation in offering the industry's leading Web application security solution to its customers."

"The Symantec Enterprise Security Architecture provides a framework for Symantec security solutions and third-party products to integrate and aggregate key security incident information," said Steve Cullen, senior vice president, Symantec Enterprise Solutions. "The certification of AppShield's interoperability with the Symantec Enterprise Security Architecture provides our joint customers with an added layer of protection within a single security management system."

Sanctum joined the Symantec Technology Partner Program in June. Through the Symantec Enterprise Security Architecture Software Development Environment, a set of development tools provided by the program, Sanctum ensured comprehensive integration of its proven Web application firewall into the Symantec Enterprise Security Architecture.

Sanctum's AppShield
Sanctum's award-winning AppShield provides Web intrusion prevention for a failsafe defense against all application level breaches, including cross site scripting, SQL injection and unvalidated parameters. AppShield allows for easy application deployment in a secure environment by intelligently identifying the legitimate requests made of an e-business site and permitting only those actions to take place, enforcing the Web and business logic of the site. By preventing, logging and alerting administrators to any type of application manipulation through the browser, AppShield maintains application behavior 24/7 without the need for signatures or rules.

Symantec Enterprise Security Architecture
The Symantec Security Management System and other Symantec products are built in compliance with Symantec Enterprise Security Architecture, which provides a standards-based interoperability framework for Symantec and third-party solutions to work together to provide secure, manageable, and scalable enterprise security. Customer environments are heterogeneous and often contain security products from many vendors. Therefore, an interoperable architecture is a critical enabler to enterprises that need strong security and centralized management.

The Symantec Security Management System supports several third-party products through integration with the Symantec Enterprise Security Architecture. The following products have been certified to date: Sanctum AppShield, Top Layer Attack Mitigator and ForeScout ActiveScout. These collectors are available from their respective vendor. Symantec also provides Symantec Event Collectors for the following products to date: Cisco PIX, Check Point VPN-1/Firewall-1, Enterasys Network Dragon, ISS RealSecure, Network Associates ePO and VirusScan, Trend Micro Gateway and Groupware. In addition, the following Symantec products integrate with or use the Symantec Enterprise Security Architecture as a foundation: Symantec Client Security, Symantec Gateway Security, Symantec Host IDS, Symantec Vulnerability Assessment, Symantec Incident Manager, and Symantec Event Managers for AntiVirus, Firewall, Intrusion Detection and Client Security.

Symantec Technology Partner Program
The Symantec Technology Partner Program establishes standards for how diverse security and infrastructure products from multiple vendors can work together with Symantec technologies to simplify complex enterprise networks for joint customers. Qualified partner products can be integrated with Symantec's industry-leading security solutions and Symantec Enterprise Security Architecture. The Technology Partner Program offers comprehensive integration tools, development support, joint sales and marketing resources, and product certification. Partners whose solutions meet Symantec's established criteria for interoperability earn the use of applicable Symantec certification logos. Detailed information on the program procedures, requirements, and benefits can be found at www.symantec.com/technologypartners.

About Sanctum, Inc.
Founded in 1997 and headquartered in Santa Clara, Calif., Sanctum, Inc. is the recognized leader for Web application security solutions. Sanctum software solutions provide automatic enforcement of intended business processes, ensuring the protection of core information and data. By detecting and defending against any unauthorized behavior, Sanctum protects customers against malicious cybercriminal activity—from theft of intellectual property and customer data, to e-commerce fraud and Web site defacement—even if a site has unknown security holes or flaws. Sanctum's solutions complete a company's security infrastructure, assure regulatory compliance and create sustainable ROI. Sanctum's customers include industry leaders in finance, retailing, healthcare, government and telecommunications. Privately held, Sanctum is funded by blue-chip venture capital firms and industry leaders including Sprout Group, Dell, Gemini Israel Funds, Fidelity Ventures, Wachovia Strategic Ventures Group, Mofet Israel Technology Fund and Walden Israel. For more information, visit www.SanctumInc.com or contact the Company directly at (408) 352-2000.

About Symantec
Symantec, the world leader in Internet security technology, provides a broad range of content and network security software and appliance solutions to individuals, enterprises and service providers. The company is a leading provider of client, gateway and server security solutions for virus protection, firewall and virtual private network, vulnerability management, intrusion detection, Internet content and e-mail filtering, remote management technologies and security services to enterprises and service providers around the world. Symantec's Norton brand of consumer security products is a leader in worldwide retail sales and industry awards. Headquartered in Cupertino, Calif., Symantec has worldwide operations in 36 countries. For more information, please visit www.symantec.com.

NOTE TO EDITORS: If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's Web site. All prices noted are in US dollars and are valid only in the United States.

Symantec and the Symantec logo are trademarks or registered trademarks, in the United States and certain other countries, of Symantec Corporation. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged.

FORWARD LOOKING STATEMENT: This press release contains forward-looking statements, including forecasts of future revenue and earnings per share, expected activities, and other financial and business results that involve known and unknown risks, uncertainties and other factors that may cause our actual results, levels of activity, performance or achievements to differ materially from results expressed or implied by this press release. Such risk factors include, among others: the sustainability of recent growth rates, particularly in consumer products; the anticipation of the growth of certain market segments, particularly enterprise security; the positioning of Symantec's products in those segments; the competitive environment in the software industry; general market conditions, fluctuations in currency exchange rates, changes to operating systems and product strategy by vendors of operating systems; and whether Symantec can successfully develop new products and the degree to which these gain market acceptance. Actual results may differ materially from those contained in the forward-looking statements in this press release. Additional information concerning these and other risk factors is contained in the Risk Factors sections of Symantec's previously filed Form 10-K for the fiscal year ended March 28, 2003. Symantec assumes no obligation to update any forward-looking information contained in this press release except as otherwise required by law.

For Immediate Release

Contact:

Candace Garmoe
(310) 449-4324
Symantec Corporation
[email protected]

Diane Fraiman
Sanctum, Inc.
(408) 352-2000
[email protected]