Cryptographically Secured Patching Increases Protection Against Infiltration Attempts in Software Maintenance Processes Kirchheim, September 28, 2021. The current version 10.0 of the High Resistance Firewall genugate from German IT-security specialist genua has been certified in accordance with Common Criteria EAL4+ (CC EAL4+) since the end of June by the German Federal Office for Information Security (BSI). In doing so, the BSI for the first time accepted a safety component newly developed by genua for patch management (ALC_PAM) in the certification. This provides an especially effective protection of software updates against infiltration attempts, e.g., with malicious software. genugate is currently the only certified patch management solution worldwide. Three Measures Provide Effective Protection Against Malicious Software With patch management, development teams coordinate and test the updates of operating systems, platforms or software applications. This includes, among other things, the rectification of errors and vulnerabilities with new or updated source code, which is published in the form of software updates (patches). Patching is an essential part of the lifecycle and security management of IT systems. Patches do, however, offer attackers potential starting points for infiltration attempts, such as with malicious software. With the "ALC_PAM" extended assurance component, genua provides especially effective protection against this IT-security risk by means of three security measures. First, the software used for loading the patches for genugate 10.0 was extensively tested and checked for vulnerabilities in the context of the BSI certification procedure. The software does more than just provide a cryptographic signature: it checks the patch for correctness, loads it in a cryptographically secured manner and then updates the version database. Second, patch creation occurs on the basis of precise processes that are defined at genua. These were evaluated by an independent testing laboratory accredited by the BSI. And third, the BSI checked the used cryptographic procedures. Manage IT Systems More Effectively and Securely Users will profit from certified patch management during future maintenance procedures as well, e.g., with new hardware revisions. Because the underlying processes are already known and have been evaluated in the certification procedure, the amount of work required for such tasks is reduced for genua. As a result, the IT-security specialist can make certified versions available even more quickly. "Certified patch mechanisms allow companies to quickly and securely eliminate security gaps before attackers can exploit them," says Florian Riehm, Head of Development for Security Gateways at genua GmbH. "We therefore decided to include patch management in the Common Criteria certification. Vulnerabilities in these critical components can thereby be avoided right from the start. In the context of external quality assurance, the BSI certification also confirms that we offer an effective and future-oriented approach with this solution." CC-Certification Confirms High Level of Trustworthiness The abbreviation CC EAL4+ of the Common Criteria refers to the level of trustworthiness (Evaluation Assurance Level) of a certified product. The EAL levels defined in the CC standard describe precise requirements on a security test, on the scope of the testing, the testing depth and the testing methods. Technical Innovations in genugate 10.0 The High Resistance Firewall genugate 10.0 is based on genugate 9.6. For users who have used genugate 9.0 up to now, all further developments from genugate 9.1 to 9.6 are therefore relevant. The most important changes since genugate 9.0 are: REST-API for the automation of administration tasks Web application firewall Improved log evaluation through integration with Elastic Stack Advanced Web Categories (successor of genublock) allows websites to be blocked according to category Photo captions Infographic: The statistics show the result of a survey regarding future threats to IT security in Germany in 2021. At the time of the survey, 83 percent of the questioned industrial companies listed spyware attacks as a threat to IT security. Spyware or even backdoors can be injected into the system by means untrustworthy patches. Download RGB Download CMYK Product image: The High Resistance Firewall genugate 10.0 from BSI has been certified in accordance with Common Criteria EAL4+. In doing so, the BSI for the first time accepted a safety component newly developed by genua for patch management (ALC_PAM) in the certification. Download RGB Download CMYK © genua GmbH

ECOS Solutions for Secure Remote Access Together with the Firewall & VPN Appliance genuscreen from genua Available to Customers from a Single Source Oppenheim / Kirchheim (Germany), 17. August 2021 – ECOS Technology (www.ecos.de), the specialist for high-security remote access, is to become a sales partner of genua, a company of the Bundesdruckerei Group. As a result of the cooperation with the renowned IT security provider, customers will with immediate effect be able to acquire the ECOS product portfolio for secure remote access together with the Firewall & VPN Appliance genuscreen from a single source directly from ECOS. BSI-Approved Combination for Secure Access to Data up to Classification Level German VS-NfD The combination of ECOS SecureBootStick [SX/ZX] and the BSI-approved genuscreen appliance enables secure access to data up to classification level German VS-NfD. The ECOS Secure Boot Stick can be used with any computer, even with a private computer in a remote work environment. In turn, the Firewall & VPN Appliance genuscreen uses strongly encrypted VPNs to ensure extremely secure data communication via public networks. At the same time, the firewall function of genuscreen reliably filters the data traffic at the interfaces so that impermissible or unwanted connections are blocked. "As a result of the sales partnership with genua as one of the leading IT security companies in Germany, our customers will be able to acquire perfectly matched solutions and services from a single source in order to implement a wide variety of different application scenarios for high-security remote access," says Paul Marx, Managing Director of ECOS Technology GmbH. "This can range from connecting personnel working in the field, at home, and hybrid working, right up to application cases where, for example, federal authorities or companies with an obligation to secrecy access sensitive, classified information." "For years, we have valued ECOS Technology as a competent specialist for high-security remote access," remarks Matthias Ochs, Managing Director of genua GmbH. "The sales partnership means that, depending on their specific requirements, customers now also have the possibility of acquiring our high-security solution genuscreen directly from ECOS and using it with any PC, e.g., at home or for bring-your-own-device concepts. We look forward to continuing our partnership to meet the growing demand for reliable remote access solutions even more effectively and together to make working from home or on the move even more secure." PRESS PHOTO Photo Matthias Ochs Image Caption: Matthias Ochs, Managing Director of genua GmbH: "For years, we have valued ECOS Technology as a competent specialist for high-security remote access." Photo Paul Marx Image Caption: Paul Marx, Managing Business Director of ECOS GmbH Image Collage Image Caption: Image Collage: ECOS Technology to become sales partner of genua © genua GmbH About ECOS Technology ECOS Technology GmbH specializes in the development and sale of IT solutions for high-security remote access as well as the management of certificates and smart cards. Key products, which are used in many different industries, include the ECOS SecureBootStick and the PKI appliance ECOS Trust Management Appliance. These products allow companies, authorities and organizations to, for example, create their own certificates, extend or withdraw these certificates, connect employees working at home, quickly provide usable, cost-effective emergency workstations for crisis situations or carry out secure and protected remote maintenance on industrial installations. Moreover, the cost-optimized thin client solutions from ECOS can in many scenarios massively reduce hardware costs (lifecycle extension). ECOS first addressed the issue of IT security for network infrastructures in 1999. The German company is headquartered in Oppenheim near Mainz. PRESS CONTACT FX Kommunikation Felix Hansel / PR-Beratung Stuhlbergerstr. 3 80999 München (Germany) M +49 89 6230-3490 E hansel@fx-kommunikation.de COMPANY CONTACT ECOS Technology GmbH Paul Marx Sant‘ Ambrogio-Ring 13 a-b 55276 Oppenheim (Germany) M +49 89 6133-939-250 E paul.marx@ecos.de https://www.ecos.de/en/

Revenue of the IT Security Specialist Grows by 43.5 Percent Thanks to a Strong Market Demand Kirchheim near Munich (Germany), August 12, 2021. Following on from the success of the previous year, genua GmbH was once again able to significantly increase its growth in turnover in the last fiscal year. With a plus of 43.5 percent (2019: plus 11 percent), the German provider of highly secure IT security solutions increased its revenue for 2020 to 53.5 million euro. The workforce of the company belonging to the Bundesdruckerei Group grew by ten percent. The equity ratio stands at 40 percent. This strong growth in revenue was in part due to the significant pandemic-driven increase in demand by the state, administration and private sector for secure, scalable and high-performance solutions for remote work. genua saw a strong demand, particularly for the genucard remote solutions as high-security hardware appliance as well as the Security Laptop vs-top with hard drive encryption. In the area of secure communication to classification level German VS-NfD, genua with its range of VPN appliances, laptops and mobile work devices is the leading solution provider in Germany. Favorable Market Environment due to a Growing Awareness of Cyber Risks In addition, genua generally benefited from an increasing awareness with respect to the high relevance of IT security, combined with a growing willingness to invest. IT security too is increasingly becoming an integral component in the planning of digitization projects. In the key market segment for industrial IT security, genua GmbH was also able to expand its sales and activities. In addition to solutions for remote maintenance as well as IT and OT network security, genua is one of the first providers worldwide to offer a data diode for the Industry 4.0 protocol OPC UA. "In what has been a difficult year for the whole world, genua has proven to be a reliable, flexible and effective partner and has provided its customers with efficient support in setting up high-security solutions for mobile work and the remote monitoring of critical processes in record time," explains Marc Tesch, Managing Director of genua GmbH. "However, we have also seen a huge increase in the quality and quantity of attacks on security architectures in industry, particularly in critical infrastructure sectors as well as in the public domain. We are dealing with these attack scenarios resolutely and are focusing on the further development of our solutions as well as on their approval and certification by the most important national and international authorities. In so doing, we provide our customers with the highest possible level of technological protection and maximum legal certainty. What is more, a significant part of this strategy is the continued growth of our outstanding team." Highlights of 2020: Innovation and Cooperation Protection for the Smart Factory: cyber-diode Supports the Industrial Protocol OPC UA In November last year, genua was one of the first providers worldwide to announce support of the Industry 4.0 protocol OPC UA with an industrial software data diode. cyber-diode enables the non-reactive extraction of data for the industrial monitoring of machines and plants as well as its secure transmission via VPN to client applications by means of the same IPsec encryption used for the protection of classified information. It thus protects extremely sensitive industrial network segments against cyber attacks, tampering and production downtime. Secure State: World's First Firewall with Approval for Classification Level German VS-NfD Last year, genugate was the first firewall worldwide to be granted approval from the German Federal Office for Information Security (BSI) for use up to the classification level German VS-NfD as well as for RESTREINT UE/EU RESTRICTED and NATO RESTRICTED. The two-tier firewall with Application Level Gateway and packet filter is used to safeguard highly critical network gateways – and even today is still the only firewall with this approval. Secure Mobile Work: Approval Granted to vs-top for Classification Level German VS-NfD In April, the Security Laptop vs-top received approval for classification level German VS-NfD for a further three years. The laptop enables secure access to correspondingly classified networks from home and on the move. Game-Changing AI: Artificial Intelligence Against Cyber Attacks By taking over the Leipzig-based IT security startup cognitix in 2019, genua has positioned itself at the forefront of development of a new generation of IT security solutions. At the Leipzig site, security experts use data analytics and machine learning to develop solutions for automated attack detection and handling in complex networks. The key product is cognitix Threat Defender for comprehensive anomaly detection, network analysis, intrusion detection and asset tracking, and a dynamic policy engine all merged into a single system. In March 2020, genua began using the innovative Qosmos ixEngine from the Swedish provider Enea, in cognitix Threat Defender. The Qosmos ixEngine allows even more precise classification of the network traffic as well as deep insights into the behavior of packets and data streams, while the transmitted data remains encrypted and protected against unauthorized access. Research into Protection Against Future Cyber Risks: WINTERMUTE In research too, genua is working intensively on the further development of innovate IT security technologies. In the project WINTERMUTE funded by the German Federal Ministry of Education and Research (BMBF), the company together with partners from business and science has been researching new methods based on artificial intelligence since May 2020. The project focuses on the protection of complex communication networks against cyber attacks based on artificial-intelligence-supported situation assessment, classification of the system behavior as well as feedback about anomalies. genua thus ensures that, even as networking increases, public organizations and industrial companies will be able to react effectively to future cyber threats. Sales Partnership for Remote Access Solutions genua has also entered into a sales partnership with ECOS Technology, a specialist in high-security remote access solutions. The addition of the ECOS SecureBootStick SX has extended genua's range of approved solutions for remote access to sensitive data up to classification level German VS-NfD. PRESS PHOTOS Photo Marc Tesch Bildunterschrift: Marc Tesch, Managing Director of genua GmbH: "We have seen a huge increase in the quality and quantity of attacks on security architectures in industry, particularly in critical infrastructure sectors as well as in the public domain." Info Graphic Cybersecurity Investments Bildunterschrift: Info graphic showing global investments in cyber security: In the coming years, IT security is set to remain one of the most important areas of activity for companies and government institutions. Accordingly, the projected expenditure for protection against cyber criminality is high. © genua GmbH

High-Performance IT Security Solution Enables Highly Secure, User-Friendly Access of Data for Classification Levels German VS-NfD, NATO RESTRICTED, and RESTREINT UE/EU RESTRICTED Kirchheim, July 20, 2021. The VPN software client genuconnect from the IT security specialists genua has been approved since June 30, 2021, by the German Federal Office for Information Security (BSI) for the processing of data of classification levels German VS-NfD, NATO RESTRICTED as well as RESTREINT UE/EU RESTRICTED. As an IT security solution "Made in Germany", genuconnect enables the highly secure processing and transfer of data between laptops or tablets with Microsoft Windows 10 and the corresponding remote peer. The purely software-based solution genuconnect ensures highly secure connections of mobile devices to the IT networks of companies and public authorities – be it at home, at external locations or while on the move. With the approval, version 1.0 of genuconnect satisfies all security standards required by the BSI. It is thereby approved for the protection of data of classification levels German VS-NfD, NATO RESTRICTED, and RESTREINT UE/EU RESTRICTED. "We are very happy about the BSI approval for genuconnect," says Matthias Ochs, Managing Director of genua GmbH. "The VPN software client perfectly complements our portfolio for secure mobile work in the government and restricted data sectors, which includes additional IT security solutions such as genucard and our security laptop vs-top." Encryption According to BSI Specifications The VPN client automatically establishes an IPsec connection between the client computer with Microsoft Windows 10 and a central genuscreen VPN remote peer that satisfies the highest security requirements. End users are thereby able to safely navigate via the Internet or other potentially unsecured networks to the trustworthy internal network of their organization. One significant security performance feature of genuconnect is the provision of an authenticated, encrypted and trustworthy IPsec data transfer channel. The used cryptographic processes satisfy the BSI specifications and do not need to be configured. Scalable to More Than 100,000 VPN Clients genuconnect is a pure software product for Microsoft Windows 10 (64-bit) and is designed for installations with a large number of client computers. To set up genuconnect, only a trustworthy CA certificate and the addresses of the VPN remote peers are necessary. This does away with the need for time-consuming adaptation of the configuration for the individual users. genuconnect can be used with common smart cards that are issued by the public key infrastructure (PKI) of the organization. Authentication for use of the laptop or tablet is then performed easily by means of Windows login or as automatic login via smart card. The solution can easily be scaled for infrastructures with more than 100,000 VPN clients. PRESS PHOTO DOWNLOAD genuconnect ProduCt (RGB) genuconnect ProduCt (CMYK) Image caption: With genuconnect, mobile end devices such as Windows 10 laptops or tablets can be securely connected to internal IT networks. The VPN software client is fully integrated in Windows and is managed with Windows tools. © genua GmbH Further Information Product information on genuconnect Mobile work: Solution portfolio from genua for remote work

Kirchheim, April 26, 2021. With genuconnect, German IT security specialist genua offers a highly secure remote security solution for laptops or tablets with Microsoft Windows 10. The new VPN software client strictly shields the communication connection between the sensitive IT networks of companies or official public bodies and mobile devices – on the road, from the home office or at external locations. genuconnect does this by automatically establishing a highly secure, encrypted communication network that meets the highest security requirements. The product is currently in the approval process performed by the German Federal Office for Information Security (BSI) for use up to the German classification level "Restricted". Solutions approved for this field of use must satisfy a significantly higher level of protection than standard solutions. Maximum Security, High Usability genuconnect combines proven IPsec technology with BSI-compliant crypto algorithms. In combination with a common smart card, the VPN software client ensures reliable protection at the highest level against hacker attacks or unauthorized access. All crypto components of the VPN technology were developed in Germany by genua, a subsidiary of the Bundesdruckerei Group. genuconnect is compatible with the Microsoft ecosystem and is managed with Windows tools for installation, configuration, updates and uninstallation. Setup is performed using a configuration that is identical for all client computers and users: Only a trustworthy CA certificate and the addresses of the VPN remote peers are required. Time-consuming adaptation of the configuration for each user is eliminated. "genuconnect uses all relevant Windows mechanisms according to the principle of 'maximum security with minimum administrative effort'," says Matthias Ochs, Managing Director of genua GmbH. "As a software solution, this VPN client perfectly complements our range for highly secure mobile work, alongside the personal security device genucard and the security laptop vs-top with integrated hard disk encryption." Scalable to More Than 100,000 VPN Clients genuconnect can be used with common smart cards that are issued by the public key infrastructure (PKI) of the organization. The solution can easily be scaled for setups with more than 100,000 VPN clients. Companies and public authorities that already use approved products for hard disk encryption can easily supplement these with the new IT security solution. PRESS PHOTO DOWNLOAD genuconnect ProduCt (RGB) genuconnect ProduCt (CMYK) Image caption: With genuconnect, mobile end devices such as Windows 10 laptops or tablets can be securely connected to internal IT networks. The VPN software client is fully integrated in Windows and is managed with Windows tools. © genua GmbH Further Information Product information on genuconnect Mobile work: Solution portfolio from genua for remote work

EU Commission Includes IT Security Technologies in LACP Kirchheim, February 9, 2021. After the successful completion of a review by the EU Commission, the quality and innovativeness of genua GmbH's IT security solutions is confirmed once again. The EU Commission included the products genuscreen and genucard of the IT security application provider in the "List of Approved Cryptographic Products (LACP)" back on January 14, 2021. This makes genuscreen and genucard eligible not only for the RESTREINT UE/EU RESTRICTED classification level, but also for use in EU institutions. Intensive Review Process for Approval by EU Council Companies and authorities that process RESTREINT UE/EU RESTRICTED data require EU approval for their IT security applications. But that alone is not sufficient for use in EU institutions. This purpose of use requires the approval of the EU Council, which entails a vigorous and extensive review process. In the course of this process, the high performance and quality of genua products were confirmed by two national IT security authorities. The BSI (German Federal Office for Information Security) carried out the national evaluation and approval, while the French ANSSI (Agence nationale de la sécurité des systèmes d'information) carried out the second evaluation. The EU Council granted their approval based upon the positive results. "To receive approval at the highest level confirms the extraordinary level of maturity of our range of high security solutions," says Matthias Ochs, Managing Director of genua GmbH. "Particularly in complex, critical or regulated environments, the highest national and international security standards must be met. The decision by the EU Commission not only validates our innovative strength, it also motivates us to remain at the forefront of providing powerful applications for practical use." genuscreen: Protection for Data Transmissions and Networks The Firewall & VPN Appliance genuscreen creates strongly encrypted Virtual Private Networks (VPN) for data communication via public networks. As a powerful firewall, it reliably filters data traffic at the interfaces and only allows expressly permitted connections – genuscreen consistently blocks all other requests. With approval up to the German classification level RESTRICTED and certification according to Common Criteria (CC) EAL 4+, genuscreen meets the highest IT security requirements. genuscreen has also been approved by the EU Council for use in EU institutions. genucard: Self-Contained Device with Approval for the Restricted Data Sector The Personal Security Device genucard enables safe access to the internal networks of employers when working from home, branch locations or when travelling. genucard has the official approval of the German Federal Office for Information Security (BSI) for classification level RESTRICTED. Other approvals exist for NATO RESTRICTED, RESTREINT UE/EU RESTRICTED as well as OCCAR RESTRICTED. genucard has also been approved by the EU Council for use in EU institutions.

Software-Based VPN Client Protects Confidential Data while Working Remotely genua already offers a comprehensive RAS ecosystem for working from home or on the go. The new software-based VPN client complements the offer for secure flexible working. The VPN client creates a strongly encrypted connection to the organization’s network for all data traffic. Communication is allowed exclusively via this highly secure data connection. This means that users are never unprotected in an untrustworthy network such as the Internet. Data communication is reliably protected at all times – without additional hardware. Flexibly Scalable Since the solution is a software application, users can install any number of clients. The precondition is that the VPN gateway genuscreen is available as a remote station. Simple = Secure The complexity of the VPN software is minimal. Critical software components such as cryptographic functions or IPsec processing are "Made by genua" in order to achieve a high level of security. genua is striving for approval from the Federal Office for Information Security (BSI) for German VS-NfD, NATO RESTRICTED, and EU RESTRICTED. Interested? Contact us: sales@genua.de or +49 89 991950-902 -- Picture source: © goodluz – stock.adobe.com

Data Diode for OT/IT Security with Globally Unique Encryption Technology Available. Kirchheim, November 10, 2020. genua, German specialist for IT security and a company of the Bundesdruckerei Group, has, as one of the first suppliers worldwide, expanded its cyber-diode data diode for the Industry 4.0 protocol OPC UA. The proven security product thereby enables the highly secure export of data during the industrial monitoring of machines and plants. The cyber-diode thus protects OT and IT infrastructures against cyber attacks, tampering and production downtime even more comprehensively. This makes it an indispensable instrument for ensuring business continuity in the value chain. "Security by Design" for Industry Many machines and plants in industry are already today networked with one another via the Internet – for example, to detect and rectify faults and failures before they occur through the use of preventative maintenance and analytics. With the connection to the Internet, these Industry 4.0 networks become a target for sabotage and espionage by cyber criminals. The cyber-diode from genua protects against this danger: The data diode minimizes the risks associated with the digital networking of highly critical control systems in the automation, packaging and process industries. The IT security solution allows only one-way data transfer – it completely blocks the flow of information in the opposite direction. The transport of malicious code or other cyber risks are thereby rendered impossible. This enables a non-reactive extraction of machine and plant data in non-secure networks, such as in the cloud for data analysis. The special hardware separation on the microkernel level is based on BSI-certified products. This guarantees the integrity protection of highly secure industrial networks. A low level of complexity of the operating system ("Security by Design") ensures the functionality, protects against tampering and lowers the risk of machine failure. Integration of OPC UA For the first time, the cyber-diode now also supports OPC Unified Architecture (OPC UA). OPC UA is an open standard for the exchange of machine data. In plants in the manufacturing and process industry, for example, it is intended to ensure secure, reliable and manufacturer- and platform-independent communication. "For the EU market, the standard represents an important milestone for the evolution of OT and IIOT* in the direction of networking and software integration," says Matthias Ochs, Managing Director of genua GmbH. "With the cyber-diode, we offer the appropriate and most technologically advanced security device for the industry." The two most important advantages of the cyber-diode with OPC UA: first, the standard makes every type of information available at all times and at all locations for every authorized application and every authorized person. Second, the data is now unidirectional and, thus, cannot be tampered with and transmitted across security-critical network boundaries. With OPC UA, the cyber-diode further strengthens its security functions: the machine data that it collects, such as control variables, measurement values or parameters, is passed on to client applications in encrypted form. Encrypted Transmission with IPSec VPN The cyber-diode also makes possible encrypted transmission of the extracted data to client applications via Internet Protocol Security (IPSec) VPN encryption from the restricted data sector. This guarantees the protection of the integrity of the data more reliably than fiber optic diodes, more conveniently than air gaps and more securely than firewalls. If IPSec is activated, external clients can only communicate with the diode using encrypted communication. This is ensured by the diode-internal firewall. As a result, protection is higher than with a strictly OPC UA encryption (UA Secure Conversion), since the security is not dependent on that of the used OPC UA stack on the application level. Furthermore, IPSec is based on a BSI-certified genuscreen technology. The OPC UA cyber-diode is, thus, a significant IT security device for the process industry with its automated processing of substances and materials in which there is a high data volume with numerous security-relevant interfaces in the value chain.

genua concludes fiscal year 2019 with outstanding operating performance. Kirchheim near Munich, July 16, 2020. genua GmbH further expanded its growth-oriented market position in the 2019 fiscal year. The turnover of the German manufacturer of IT security technology rose by 11 % to 37.3 million euros during this period. With this positive result and the 12 % increase in employees, the company continued on its growth trajectory from 2018. Several events have contributed to the positive business development in fiscal year 2019. genua successfully completed the integration of technology company cognitix and started a strategic partnership with safety provider HIMA. In addition, genua’s status as the first "Qualified Manufacturer" in approval procedure of BSI (German Federal Office for Information Security) accelerated the approval process for security level RESTRICTED in customer projects. "The outstanding results from 2019 confirm our positioning as a top partner for government and commercial sectors in securing sensitive IT infrastructures," says Marc Tesch, Managing Director of genua GmbH. "We were once again able to position ourselves in the market with solutions and services that maintain a high level of quality, despite the increasingly dynamic and complex nature of the daily business of our customers. In addition, with targeted investments in R&D, we have succeeded in significantly shaping technological trends and increasing our attractiveness as an employer for highly qualified employees." Product innovations and new approvals: highlights 2019 Strategic partnership with safety provider HIMA At the start of the year, genua announced its strategic partnership with HIMA Paul Hildebrandt GmbH, a provider of smart safety solutions. The objective: provide reliable digitization for industrial companies through combined expertise. In November, the two companies jointly presented a remote maintenance solution for industrial plants at the SPS trade fair. BSI classification as the first "Qualified Manufacturer" in the new approval procedure for security level RESTRICTED In March 2019, genua was the first company to receive the manufacturer qualification for the “Qualified Approval Procedure” from the German Federal Office for Information Security (BSI). The BSI introduced the new procedure in order to be able to grant product approvals for classification level "RESTRICTED – For official use only" (restricted data) to trustworthy manufacturers faster than previously possible. genua took part in the test phase of the new procedure and benefits from quicker processes thanks to the qualification: Whereas product approvals previously took about a year, qualified manufacturers can now achieve this within one to two months. Compact solution for highly secure data communication In April 2019, genua presented the new generation of the genucard: the personal security device genucard 3 enables highly secure connectivity of home offices and small branch offices for the handling of classified information. The compact communication solution integrates a firewall and a VPN gateway with approval for restricted data from the German Federal Office for Information Security (BSI) as well as a smart card reader. Acquisition of the IT security start-up cognitix In May 2019, genua announced the acquisition of the start-up company cognitix. The Leipzig-based company is specialized in data analytics and machine learning. With cognitix’s Threat Defender, the company offers an AI-based security platform that analyzes network traffic in real time and intervenes selectively when threats are identified. First firewalls with BSI approval In August 2019, the genuscreen and genucard products from genua were approved for up to German security level RESTRICTED for both VPN and firewall functions. This makes genua the first provider of IT security systems with approved firewall functions according to the directive for classified information (Verschlusssachenanweisung, VSA) of autumn 2018 for the protection of confidential data.

genua will embed Enea’s Qosmos ixEngine® in its cognitix Threat Defender, an automatic threat analysis, detection and reaction platform for sensitive networks in industry and government Stockholm, Sweden, and Kirchheim, Germany, May 12, 2020: Enea® (NASDAQ Stockholm: ENEA), a global supplier of innovative software components for telecommunications and cybersecurity, and genua GmbH, a German specialist for IT security and a member of Bundesdruckerei Group, today announced that genua has selected the Enea Qosmos ixEngine as the embedded network traffic classification engine for its cognitix Threat Defender platform. The cognitix Threat Defender is an innovative Network Threat Detection and Response (NDR) platform that combines the best known-threat protection capabilities of Intrusion Detection and Prevention Systems (IDS/IPS) with defense against unknown threats through unique Network Traffic Analysis (NTA) capabilities. To identify unknown threats, like new malware, advanced persistent threats and zero day attacks, the cognitix Threat Defender performs inline, realtime correlation that reveals hidden behaviors, patterns and threats, by connecting security and network events across time and flows and analyzing them using models of user, device and threat behavior. This combination of reactive and proactive capabilities, and its lightweight, programmable architecture, make it an integral component of genua’s Security Defined Network solution, which uses network segmentation, managed decentralization of rules definition and enforcement, and NTA to balance the demand for high application and data availability with the need for ultra-reliable protection of critical assets. To ensure maximum performance for the IDS/IPS and NTA functions within the cognitix Threat Defender and the Security Defined Network framework it supports, genua needed an industrial-grade traffic classification and metadata engine that would provide the most comprehensive, accurate and reliable L2 to L7 packet and flow data available, along with essential insights into evasive and encrypted traffic, while transferred data remains encrypted and confidential. As genua provides endpoint, perimeter and network security for highly sensitive environments, including critical infrastructure, industrial plants and classified public authority networks, genua undertook an evaluation of available commercial classification engines that was as rigorous as the development and testing methods applied to their own products. At the end of this process, genua chose Enea’s Qosmos ixEngine. It provided the broadest and most reliable identification of protocols, applications and services in traffic streams, and it features advanced, multi-layer analytics that boost classification accuracy, deliver insights into packet and flow behavior, and provide insights into evasive and encrypted traffic, while transferred data remains encrypted and confidential. It further provides file reconstruction metadata that enables reconstruction of suspicious files without mandatory full packet and file capture and storage. In summary, ixEngine met genua’s strict requirements and offered additional features that would complement and enhance the capabilities of the cognitix Threat Defender. “As networks have evolved, it has become critical to implement intelligent network security as a second line of defense to existing endpoint- and perimeter-based threat detection and response systems. This is true for everyone, but especially so for our critical network customers, for whom the stakes of a breach are very high,” stated Arnold Krille, Head of Development for cognitix Threat Defender. “We are therefore very pleased to partner with Enea to ensure that our platform provides the most effective and reliable network defense possible. And we are happy to have found a partner whose focus, rigor and commitment to quality matches that of our own development team.” Jean-Philippe Lion, Senior Vice President of the DPI Business Unit at Enea, similarly appreciates the shared values of the teams, and is looking forward to evolving together to meet future challenges: “For the past twenty years, we have dedicated ourselves exclusively to delivering the most accurate, comprehensive traffic visibility possible so that our telecommunications, networking and cybersecurity vendors could continuously innovate and thrive in competitive, constantly-evolving markets. We look forward to supporting genua through its innovation journey as it continues to develop the unique blend of data analytics, threat intelligence and artificial intelligence that make cognitix Threat Defender such an exceptional product.” Media Contact Enea Erik Larsson SVP Marketing & Communication tel.: +46 8 50 714 000 erik.larsson@enea.com About Enea Enea is the world-leading supplier of innovative software components for telecommunications, networking and cybersecurity. Focus areas are cloud-native, 5G-ready products for mobile core, network virtualization, and traffic intelligence. More than 3 billion people rely on Enea technologies in their daily lives. Enea is listed on Nasdaq Stockholm. For more information: www.enea.com

genua continues to be there for you With some restrictions, our business continues to operate during the crisis situation. The majority of our employees are currently working from home. Even before the pandemic, working remotely was a popular option for us – one for which our infrastructure is appropriately equipped. For employees who work at our branch offices, we have devised a coordinated hygiene concept that is implemented systematically. We therefore recommend that you contact us by e-mail at info@genua.de or at the address or mobile phone number that you usually use to contact us. In urgent cases, you can also reach us by telephone at +49 (0)89-99 19 50-0 during the shortened hours of operation Monday through Thursday from 8:00 am to 4:00 pm and Fridays from 8:00 am to 2:00 pm. Delivery capability Our delivery capability remains fully ensured at the current time. Consulting projects continue to be performed through mobile work and the use of digital meetings. We are engaged in continuous exchange with our partners and are building up stock to prevent future bottlenecks. We are aware that that can change quickly. Due to the dynamic spread of corona, we cannot eliminate the possibility that deliveries may be delayed on short notice. We will inform you proactively here. Recruiting We continue to search intensively for new colleagues (d/m/f). For the most part, we are conducting job interviews via video and teleconferences. However, we are also conducting limited in-person interviews at our branch offices under strict adherence to our hygiene concept. Simply visit our job portal. If you have questions regarding your application, please send an e-mail to jobs@genua.de. We’ll get back to you right away. Customer visits and meetings We have greatly limited our travel activities. For customer meetings, we work in close cooperation with our partners with digital meeting formats. We use exclusively video- and teleconferences for our in-house meetings. If in-person meetings are required, this is organized and carried out in compliance with our hygiene rules. genua at trade fairs & events The providers of events are approaching the situation in different ways: Trade fairs and events are being cancelled. There are postponements as well as changes to digital events. We are constantly reviewing and updating or own events. In our event overview, you can find the latest status quo of our trade shows and events. genukids Our in-house day care center has been open again since July 1, 2020 with limited business hours.

Kirchheim near Munich, February 6, 2020. As of January 1, 2020, genua GmbH is a wholly-owned subsidiary of Bundesdruckerei GmbH. Both companies thereby further build upon their long-standing, successful cooperation as a supplier of IT security products and services "Made in Germany". After its founding in 1992, genua GmbH established itself as a German specialist for IT security. genua has been a subsidiary of Bundesdruckerei since 2015: Bundesdruckerei initially purchased a 52 % share, increased its holdings in 2018 and, following approval by the antitrust authorities, has held 100 % of shares since January 1, 2020. This step completed the full integration of genua in the Bundesdruckerei Group, which also includes Maurer Electronics, D-Trust and iNCo as subsidiaries. Strong positioning with IT security "Made in Germany" The successful cooperation of both companies is to be further expanded in the future to allow customers and partners to continue to benefit from a unique portfolio of state-of-the-art security technologies. Bundesdruckerei offers digitization solutions for all aspects of highly-secure data and identities, which genua ideally complements with its expertise in the design of secure infrastructures for public authorities and businesses. "The completion of the integration in the Bundesdruckerei family is an important milestone for genua on a journey that has been shaped by mutual trust and joint benefit. In particular, the positioning, the extensive know-how and the market access of Bundesdruckerei have proven to be valuable," says Matthias Ochs, Managing Director of genua. On the German-speaking market, this ideally strengthens the positioning of genua. “The complete acquisition of genua GmbH is part of our strategy to be the preferred supplier of complete and forward-thinking IT security solutions for public authorities and businesses,“ says Dr. Stefan Hofschen, CEO of Bundesdruckerei. “As an IT security company, Bundesdruckerei combines services and products ‘Made in Germany’ for all all aspects of secure data and identities. With genua GmbH, we expand our digital portfolio with their great expertise in the field of secure infrastructure.”

Kirchheim near Munich, May 8, 2019. The German IT security company genua has acquired the start-up cognitix. cognitix is based in Leipzig, and specialized in data analytics and machine learning. The company offers the security platform Threat Defender, which analyses network traffic in real time and intervenes in appropriate ways when threats are detected. Matthias Ochs, managing director of genua GmbH, says: "cognitix is closing a gap in IT security within networks by way of future-oriented technology. Threat Defender extends our portfolio of top-quality IT security solutions, and we look forward to collaborating with our new colleagues." cognitix will be completely integrated into genua GmbH, and the Leipzig office will continue to function with all its staff. The Threat Defender security platform combines machine learning with current threat intelligence from a number of external sources to track down threats in networks in real time. Using this technology, the security platform can respond immediately to new threats. It is superior to signature-based systems that work with statical rules. Threat Defender ensures security within networks and delivers a second line of defense in addition to genua solutions that are used at network interfaces for data traffic control and for encrypted data transmission via the internet. IT security specialist with years of experience genua is an IT security specialist based in Kirchheim near Munich. The company was founded in 1992, and develops and distributes IT security solutions for public authorities and companies. These include firewalls for protection of sensitive interfaces, gateways for secure cloud computing, systems for encrypted data transmission and remote maintenance of machines via the internet, security solutions for connecting mobile users, as well as a behavior-based network security platform. Regular certifications and approvals by the Federal Office for Information Security (BSI) are testament to the high quality of its products. genua employs over 400 staff in Kirchheim near Munich as well as in Berlin, Cologne, Stuttgart, and Leipzig, and has been a member of the Bundesdruckerei Group since 2015.

AFCEA 2019 Bonn, April 10 - 11 Booth M24 Maritim Hall Kirchheim near Munich, March 4th, 2019. At the AFCEA trade exhibition, the German IT security company genua will present the new genucard 3, a compact device that enables mobile employees and home offices to connect to classified networks. The device can be easily connected via USB to any laptop or desktop PC and enables access to sensitive data in classified networks via a Virtual Private Network (VPN). Compared with the previous version, genucard 3 offers several advantages: dual-band Wi-Fi for high-performance WLAN connection, authentication via PIN entry directly on the device, and a compact cell phone format. The approval process is currently in progress at the German Federal Office for Information Security (BSI) for the classification level RESTRICTED. High-performance WLAN connection with dual-band Wi-Fi With genucard 3, employees can easily access government or company networks from their home office or while travelling: genucard can be connected to any laptop or PC and creates an encrypted connection (VPN) to the remote station configured in the network. Possible connection routes to choose from are WLAN including public hot spots, mobile telephony, and Ethernet. If multiple overlapping WLANs threaten to interfere with data transmission, genucard 3 uses dual-band Wi-Fi to switch to other frequency ranges. In the near future, public authorities, the German armed forces, and companies operating in the field of classified information will be able to use genucard 3 to ensure that employees have secure access to sensitive classified data even when working remotely: Approval from the BSI for classification level RESTRICTED is pending. User-friendly two-factor authentication in accordance with BSI standards Users authenticate themselves for access to sensitive networks on the convenient compact device (approximately 86 x 15 x 161 mm) by using a smart card and entering a PIN via PIN pad. This makes two-factor authentication – a security requirement of the BSI – a user-friendly solution. An additional security feature of genucard is its stand-alone capability, since the solution runs on autonomous hardware with its own operating system. This way, genucard retains its functionality and protects the classified network, even in the event that the connected computer is compromised as a result of careless handling. Central management means low administration outlay Administration of genucards in use is carried out by a central management station. As a result, a large number of employees can be connected to classified networks with minimal effort. The German armed forces, government agencies, and security authorities, as well as companies operating in the security sector have been using the previous version of genucard 3 on a large scale for several years.

Hanover Trade Fair Hanover, April 1 - 5, 2019 Booth F24 in Hall 6 Full control: remote maintenance solution for machines with extended monitoring Kirchheim bei München, 20th February 2019. The German IT security manufacturer genua GmbH presents the rendezvous solution for the remote maintenance of machines and systems with extended monitoring features at the Hanover Trade Fair. Remote maintenance helps industrial companies to avoid downtime and save costs. Machine manufacturers can also offer additional services using the solution. With extended monitoring, all maintenance actions are documented by video recording of the user interface and the recordings are made available on a server. With a user-friendly tool, a large number of videos can be centrally managed, archived and watched. Companies can keep track of the type and date of remote maintenance carried out by the service provider in their network. The advanced monitoring features complement the numerous security features of the genua remote maintenance solution, which prevent malware from getting into sensitive production areas. In keeping with the trade fair theme “Integrated Industry”, genua will be presenting further solutions for secure digitization: the Cloud Edge Gateway GS.Gate for cloud connection of machines for industrial analytics to increase efficiency, the Data Diode cyber-diode for monitoring and smooth operation of highly critical systems and the Industrial Firewall genuwall for the protection of sensitive production networks. The Bundesdruckerei, the parent company of genua, completes the offering at the joint booth, including the Bdrive solution for secure data storage in the cloud and a platform for managing the digital identities of humans and machines. The remote maintenance of machines and plants offers numerous advantages: Machine operators can avoid downtime due to predictive maintenance, and machine builders and service providers can offer additional services. To ensure remote maintenance via the Internet, the service staff require access to the machine operator's production network. genua offers a remote maintenance solution, which has numerous security features to prevent the intrusion of unauthorized persons or malware through the service access. secure remote maintenance with rendezvous in the DMZ The core of the solution is a rendezvous server, which is installed in the demilitarized zone (DMZ) next to the firewall. Here, both the maintenance service staff and the machine operator set up encrypted connections at the agreed time. It is the rendezvous on the central server that ensures continuous maintenance connection to the target system. By this, Machine operators avoid uncontrolled external maintenance connections in their sensitive production network. The competent maintenance service staff has to authenticate itself and all actions can be followed live by the machine operator via the user interface. In addition, a video recording is created and stored on a server. The machine operator can view, manage and archive videos by means of a user-friendly tool. Due to the rendezvous solution and the monitoring features, the machine operator can control the entire remote maintenance access at all times and can also clarify and prove responsibilities with retroactive effect. Cloud Edge Gateway GS.Gate for secure cloud condectivity The Cloud Edge Gateway GS.Gate can be connected to machines independent of the manufacturer, in order to record operating data, analyze and forward it to the cloud via secure connections. This can be used with industrial analytics data to further increase efficiency. The Security by Design is a key feature of the GS.Gate. A microkernel operating system creates strictly separate areas for analysis applications and security systems. The security advantage: Only specially hardened security systems armed with updates against current threats are exposed to the external network. The data analysis applications can be safely used behind this protective shield without constant interruptions by updates and patches, thus avoiding disruptions. Security by Design guarantees a high level of security and smooth processes. The GS.Gate is a joint development by Schubert System Elektronik GmbH (SSE) and genua GmbH. Data Diode cyber-diode for connecting highly critical systems The Data Diode cyber-diode allows the monitoring of gas turbines or chemical plants to prevent downtimes through predictive maintenance without exposing the connected systems to cyber attacks. However, the diode allows only one-way data transfers to interfaces: from the critical system towards the control room of the operator or service provider. Any information flow in the other direction is blocked. In contrast to conventional fiber optic diodes, genua's solution supports not only UDP but also TCP, FTP and SMTP protocols, which guarantee high-performance and reliable data transmission. Industrial Firewall genuwall creates internal security zones The Industrial Firewall genuwall allows companies to create internal security zones in their production networks and thus implement barriers against malware attacks: The genuwall organizes the separation, with the connected machines placed in one zone and the systems that are not externally connected placed in another. Separate high-security areas are set up for particularly sensitive systems. The firewall is equipped with a special test software for the industrial standard protocol OPC UA, which allows only the explicitly permitted communication between the zones.

Kirchheim near Munich, 23rd January 2019. HIMA Paul Hildebrandt GmbH, world's leading independent provider of smart safety solutions for industrial applications, and genua GmbH, a specialist in IT security, have agreed a strategic partnership for automation security. Together they offer IT security solutions for the process and railway industries that fulfill the highest safety and security standards. The key aspects are secure remote maintenance of plants and machines, encrypted communications over the Internet, and monitoring of industry protocols at critical network interfaces. Safety and security are becoming more and more intertwined in the course of digitization. Combining the expertise of the best-in-class vendors HIMA and genua creates numerous advantages for industrial customers. Over 35,000 TÜV-certified safety systems from HIMA have been deployed worldwide, while various solutions from genua provide industrial and public-sector customers with reliable IT security in sensitive areas. The hardware and software solutions from genua effectively and meaningfully complement HIMA’s portfolio in the security domain. The partnership focuses on secure connectivity for mobile employees, encrypted communications over the Internet, interface monitoring, internal network segmentation with firewalls, and networking of highly critical facilities using data diodes. “Our customers will benefit from cutting-edge solutions meeting the highest demands for safety and security”, says Dr. Alexander Horch, Vice President Research, Development & Product Management at HIMA. As a specialist in IT security, genua has been part of the Bundesdruckerei Group since 2015. The company develops and produces IT security solutions in Germany. Frequent certifications and approvals by the German Federal Office for Information Security (BSI) testify to the high quality of genua’s products. Matthias Ochs, Managing Director of genua: “The combined expertise of HIMA and genua enables us to offer precisely tailored IT security solutions and comprehensive services for the process and railway industries as well as the energy generation sector. We see large potential here and are pleased with this cooperation.” The genubox solution, for example, enables highly secure remote maintenance access to plants and machines in virtually any location. The robust appliance is simply installed on the systems that need to be remotely monitored and supported by the manufacturer or service provider. If maintenance is needed, the genubox ensures security: It establishes an encrypted and authenticated connection for data transmission, and its firewall function limits external access exclusively to the supported system so that other sensitive network areas of the customer cannot be reached through the maintenance access point. About HIMA The HIMA Group is the world's leading independent provider of smart safety solutions for industrial applications. With more than 35,000 installed TÜV-certified safety systems worldwide, HIMA qualifies as the technology leader in this sector. Its expert engineers develop customized solutions that help increase safety, cyber security and profitability of plants and factories in the digital age. For over 45 years, HIMA has been a trusted partner to the world's largest oil, gas, chemical, and energy-producing companies. These rely on HIMA solutions, services and consultancy for uninterrupted plant operation and protection of assets, people and the environment. HIMA’s offering includes smart safety solutions that help increase safety and uptime by turning data into business-relevant information. HIMA also provides comprehensive solutions for the efficient control and monitoring of turbomachinery (TMC), burners and boilers (BMC) and pipelines (PMC). In the global rail industry, HIMA’s CENELEC-certified SIL4 COTS safety controllers are leading the way to increased safety, security and profitability. Founded in 1908, the family-owned company operates from over 50 locations worldwide with its headquarters in Bruehl, Germany. With a workforce of approximately 800 employees, HIMA generated a turnover of approximately €123 million in 2017.