PRESS RELEASE

ArcSight, Inc. (NASDAQ: ARST), a leading provider of compliance and security management solutions that protect enterprises and government agencies, today announced the integration of the ArcSight SIEM Platform for collecting, analyzing and correlating enterprise event information with ePolicy Orchestrator(r) (ePO(tm)) software, McAfee's unified security and compliance management system. By integrating and displaying critical security and compliance data from ArcSight in the McAfee ePO console, the time it typically takes from incident detection to remediation can be dramatically shortened.

Compatibility Underscores Success of New Technology ArcSight, a member of the McAfee(r) Security Innovation Alliance(tm), also announced today that it has achieved McAfee Compatible status for successfully completing integration testing of the ArcSight SIEM Platform with McAfee ePO 4.0 software. ArcSight developed an out-of-the-box integration to enable ArcSight alerts to populate the McAfee ePO dashboard on urgent issues regarding assets managed by ePO software. By integrating the alerts generated by the ArcSight SIEM Platform, which analyzes millions of logs per day across 275 plus IT products and applications, McAfee ePO software can quickly remediate any adverse impact to assets managed by ePO software.

"By seamlessly integrating the flagship security monitoring, reporting and event correlation capabilities of ArcSight with the security enforcement, audit and compliance management capabilities of McAfee, we can now provide our joint customers with next-generation IT security event detection and remediation workflow that automates the lifecycle of important security and compliance activities," said Jeff Scheel, senior vice president of business development at ArcSight. "Corporate networks face new threats every day, and by automating these otherwise disparate processes we can bolster security, improve compliance and ultimately reduce costs for our customers who deploy both platforms."

"In addition to reducing the time between incident detection and remediation for security, the integration helps our joint customers manage their security and compliance objectives," said Joe Gottlieb, vice president of corporate strategy and technology alliances at McAfee. "By combining the industry leading event monitoring and log management capabilities from the ArcSight SIEM Platform with McAfee ePO, our joint customers can now manage multiple security endpoints, and optimally respond to policy violations and meet regulatory compliance audit, verification and reporting requirements."

The ArcSight SIEM Platform and McAfee ePolicy Orchestrator software integration brings together two leaders in security and compliance monitoring and management. From 2005 through 2008, ArcSight placed in the leaders' quadrant of the Gartner Magic Quadrant for SIEM and McAfee placed in the leaders' quadrant of Gartner's Magic Quadrant for Endpoint Protection Platforms in 2007. The two companies continue to work together within the McAfee Security Innovation Alliance, joined by ArcSight in August 2008, to develop new integrated security and compliance products.

About ArcSight ArcSight (NASDAQ: ARST) is a leading global provider of compliance and security management solutions that protect enterprises and government agencies. ArcSight helps customers comply with corporate and regulatory policy, safeguard their assets and processes, and control risk. The ArcSight platform collects and correlates user activity and event data across the enterprise so that businesses can rapidly identify, prioritize, and respond to compliance violations, policy breaches, cybersecurity attacks, and insider threats. For more information, visit www.arcsight.com. ArcSight and the ArcSight logo are trademarks of ArcSight, Inc. (c) 2008 ArcSight, Inc. All rights reserved.