General FAQ

This acquisition is expected to improve Sun's overall competitive position in the identity audit and compliance space by providing Sun with the opportunity to strengthen its foothold in the increasingly important category of Governance Risk & Compliance (GRC). With the acquisition of Vaau, Sun will be able to extend its capabilities to address more robust customer requirements including automation, simplification and business alignment.

The acquisition of Vaau is expected to improve Sun's overall competitive position in the identity audit and compliance space by providing Sun with the opportunity to strengthen its foothold in the increasingly important category of Governance Risk & Compliance (GRC). We believe this acquisition will allow Sun to grow its software business by further strengthening its market-leading Identity Management software portfolio. Moving forward, Sun is actively planning its go-to-market strategy for Vaau and we look forward to offering Vaau products as part of our Identity Management portfolio shortly after close.

Companies are increasingly looking for ways to address GRC in a sustainable and cost-effective way across their entire organizations, and because of this, GRC/access control is no longer just an IT issue, now it is a boardroom issue. Meeting these GRC requirements is becoming an increasingly important focus of business and IT today, and it is estimated that by 2008, worldwide software spending for compliance and governance will be $9.2 Billion (Gartner, 2005).

According to Forrester, the overall size of the worldwide IAM (Identity and Access Management) market - based on software license (including maintenance) and related implementation service revenues - reached approximately $2.6 billion in 2006, with 48% of revenues going to software and 52% going to the services that IAM product vendors and system integrators (SIs) delivered. By 2014, total revenues will reach $12.3 billion, with 57% going to software and 43% going to services. The compound annual growth rate (CAGR) of the entire IAM market during the 2006 to 2014 period will be 21.6%. (Forrester: Identity Management Market Forecast: 2007 To 2014, Provisioning Will Extend Its Dominance Of Market Revenues, by Andras Cser, Jonathan Penn, February 6, 2008)

The payment terms of the agreement were not disclosed, as the transaction is immaterial with respect to Sun's earnings per share.

The payment terms of the agreement were not disclosed, as the transaction is immaterial with respect to Sun's earnings per share.

Yes, with the close of the acquisition, most of Vaau's team will join Sun, bringing together Sun's Identity Management experts with Vaau's Enterprise Role Management experts, enhancing Sun's overall competitive advantage in the identity audit and compliance space.

Yes, Vaau's RBACx product will be called the Sun Java System Role Manager.

Sun is actively planning its go-to-market strategy and is not commenting on expected benefits at this time. However, we look forward to sharing more on this front in the near future.

Vaau's product portfolio is scheduled to become part of Sun's Identity Management product portfolio, and will become price listed shortly thereafter. We expect to see product availability for resale in Q1 of the 2008 calendar year (Sun's fiscal Q3 2008).

Sun does not comment on future plans or speculation concerning potential acquisitions. What we can tell you is that Sun is better positioned than at any point in its 25 year history to service the needs of customers and Sun will continue to look for acquisitions and other strategic investments that complement Sun's strategic and financial objectives.

The acquisition of Vaau is expected to improve Sun's overall competitive position in the identity audit and compliance space by providing Sun with the opportunity to strengthen its foothold in the increasingly important category of Governance Risk & Compliance (GRC). We believe this acquisition will allow Sun to grow its software business by further strengthening its market-leading Identity Management software portfolio, and help to re-establish Sun as the leader in Identity Audit and Compliance.

es. Just like Sun's identity management portfolio, Vaau's product portfolio is scheduled to become part of the mid level software platform within the Sun Partner Advantage program. These products will become price listed shortly after close.

Sun is actively planning the integration of Vaau's products into its Identity Management portfolio, and we expect these products to become price listed shortly after close.

Sun and Vaau are working together to migrate most of Vaau's existing customer agreements to Sun. Sun intends to honor all existing Vaau support contracts.

Sun is actively planning the integration of RBAC v4 into its Identity Management portfolio, and we expect the product to become price listed shortly after close.

The following list of features outlines the enhancements of the new product version, RBACx, v4:

Enhanced Graphical User Interface

• New user interface is more intuitive and greatly improves the usability of the application
• Graphical dashboards for all the modules - Identity Warehouse, Identity Audit, Identity Certification and Role Management
• One single web based GUI for both the end user and administrator functions

Enhanced Role Management Features

• Enhanced workflow engine to manage the lifecycle of role. The new workflow engine provides the ability to design various workflows processes and also allows calling external functions from the workflow
• Introducing role versioning capability which creates a complete snapshot of the role when a major change is made to the role or can be triggered on demand
• Enhanced role history functionality. For every action on a role including new role request, role modification or role status changes, an entry is added to the role history section. The history provides details on the previous state and the new state of the role

Enhanced Glossary

• Introducing glossary lookup across the application. The glossary functionality of RBACx has been extended across all Identity Warehouse and Role Engineering views. This helps administrators, business users and role analysts to view the data in business friendly terms

Enhanced APIs

• Comprehensive set of Web Services are being exposed to cover major functionality of RBACx. This will provide the ability for our clients and partners to have robust integration of RBACx with other applications in their IT infrastructure