Acknowledgment of Third-party Software

Acknowledgment | Forcepoint Email Security | Version 8.5.x | 08-Jun-2020 Portions of this Forcepoint product include or may include the following components: ● ANTLR, Version 2.7.6, © 2012 Terence Parr and Sam Harwell, is distributed under the BSD 3-Clause License (opensource.org/licenses/BSD-3-Clause). ● APACHE APR, © 2008–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/ LICENSE-2.0). ● APACHE BATIK, Version 1.6.1, © 2004–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS BEANUTILS, Version 1.8.3, © 2000–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS CODEC, Version 1.4, © 2002–2014 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS COLLECTIONS, Version 3.2.2, © 2001–2015 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS COMPRESS, Version 1.0, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS DBCP, Version 1.2.2, © 2001–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS DIGESTER, Version 1.7, © 2001–2013 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS DISCOVERY, Version 0.2, © 2002-2011 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS EL, Version 1.0, © 2003–2013 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0).

© 2020 Forcepoint ● APACHE COMMONS FILEUPLOAD, Version 1.2.1, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS HTTPCLIENT, Version 3.1, © 2001–2011 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS IO, Version 2.0.1, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS LANG, Version 2.5, © 2001–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS LOGGING, Version 1.1.1, © 2001–2014 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS POOL, Version 1.6, © 2001–2015 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● APACHE COMMONS VALIDATOR, Version 1.3.1, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● APACHE DERBY, Version 10.2.2.0, © 2004–2015 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● APACHE IBATIS, Version 2.3.4, © 2009–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● APACHE LOG4CXX, Version 0.10.0-16, © 2015 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● APACHE LOG4J, Version 1.2.14, © 1999–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● APACHE MAVEN, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/ licenses/LICENSE-2.0). ● APACHE POI, Version 3.2, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/ licenses/LICENSE-2.0). ● APACHE TOMCAT, Version 7.0.54, Version 7.0.62, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.0). ● APACHE TOMCAT, Version 7.0.90, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.3).

Acknowledgment of Third-party Software  2 ● APACHE TOMCAT, Version 7.0.100, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.4). ● APACHE XERCES, Version 2.7.0-1, © 2004–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.0). ● APACHE XERCES, Version 3.2.2-1, © 2004–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.4). ● APACHE XML-COMMONS, Version 1.0.b2, © 2001–2009 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0). ● ASM, Version 1.5.3, © 2000–2011 INRIA, France Telecom, is distributed under the BSD 3-Clause License (opensource.org/licenses/BSD-3-Clause). ● ASPECTJ, Version 1.7.0, is distributed under the Eclipse Public License version 1.0 (https://www.eclipse.org/legal/epl-v10.html). ● BASH, Version 4.1.2–15, is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.0). ● BASH, Version 4.2.46-30.el7, is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.3). ● BASH, Version 4.2.46-33.el7, is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.4). ● BIND, Version 9.9.4-29.e17_2.3, © 2004–2013 by Internet Systems Consortium, Inc. (“ISC”), © 1995–2003 by Internet Software Consortium, is distributed under the ISC License (https://www.isc.org/downloads/software-support-policy/isc- license/) (Forcepoint Email Security v8.5.0). ● BIND, Version 9.9.4-61.el7_5.1, © 2004–2013 by Internet Systems Consortium, Inc. (“ISC”), © 1995–2003 by Internet Software Consortium, is distributed under the ISC License (https://www.isc.org/downloads/software-support-policy/isc- license/) (Forcepoint Email Security v8.5.3). ● BIND, Version 9.11.4-9.P2.el7, © 2004–2013 by Internet Systems Consortium, Inc. (“ISC”), © 1995–2003 by Internet Software Consortium, is distributed under the ISC License (https://www.isc.org/downloads/software-support-policy/isc- license/) (Forcepoint Email Security v8.5.4). ● BOOST, Version 1.53, © Beman Dawes, Daniel Frey, David Abrahams, 2003– 2004, © Rene Rivera 2004–2005, is distributed under the Boost Software License (http://www.boost.org/users/license.html). ● BOUNCY CASTLE, Version 1.3.8, © 2000–2016 The Legion Of The Bouncy Castle Inc., is distributed under the MIT License (https://opensource.org/licenses/ mit-license).

Acknowledgment of Third-party Software  3 ● C3P0, Version 0.9.1, © 2015 Machinery For Change, Inc., is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/ lgpl-2.1). ● CGLIB, Version 2.1.3, © 2004–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/ licenses/LICENSE-2.0). ● CKEDITOR FOR JAVA, Version 3.5.3, © 2003–2016 CKSource - Frederico Knabben, is distributed under the GNU General Public License, version 3 (http:// www.gnu.org/licenses/gpl-3.0). ● CLEARSILVER, Version 0.10.5-15, © 2001–2009 Brandon Long, is distributed under the BSD 2-Clause License (https://opensource.org/licenses/BSD-2- Clause). ● COMPAT-LIBSTDC++, Version 33-3.2.3-61, © 2008–2016 Free Software Foundation, Inc., is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.0). ● COMPAT-LIBSTDC++, Version 33-3.2.3-69, © 2008–2016 Free Software Foundation, Inc., is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.3). ● COMPAT-LIBSTDC++, Version 33-3.2.3-72, © 2008–2016 Free Software Foundation, Inc., is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.4). ● CURL, Version 7.29.0-25.e17.centos, © 1996–2016 Daniel Stenberg and many contributors, is distributed under the curl license (https://curl.haxx.se/docs/ copyright.html) (Forcepoint Email Security v8.5.0). ● CURL, Version 7.29.0-46.e17, © 1996–2016 Daniel Stenberg and many contributors, is distributed under the curl license (https://curl.haxx.se/docs/ copyright.html) (Forcepoint Email Security v8.5.3). ● CURL, Version 7.29.0-57.e17, © 1996–2016 Daniel Stenberg and many contributors, is distributed under the curl license (https://curl.haxx.se/docs/ copyright.html) (Forcepoint Email Security v8.5.4). ● DBUNIT, Version 2.2, © 2002–2008, DbUnit.org, is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl- 2.1). ● DOM4J, Version 1.6.1, © 2001–2005 MetaStuff, Ltd., is distributed under the dom4j license (http://www.yq1012.com/dom4j/license.html). ● EASYMOCK, Version 3.2, © 2001–2015 EasyMock contributors, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/ LICENSE-2.0). ● EHCACHE, Version 2.6.1, © Terracotta, Inc., a wholly-owned subsidiary of Software AG USA, Inc., is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● EZMORPH, Version 1.0.6, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● FREETDS, Version 0.95.81-1.e17, © 2001–2011 Brian Bruns and James K. Lowden, © 2015 Frediano Ziglio, is distributed under the GNU Lesser General

Acknowledgment of Third-party Software  4 Public License, version 2.1 (http://www.gnu.org/licenses/lgpl-2.1) (Forcepoint Email Security v8.5.0). ● FREETDS, Version 1.00.365-1, © 2001–2011 Brian Bruns and James K. Lowden, © 2015 Frediano Ziglio, is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl-2.1) (Forcepoint Email Security v8.5.3). ● FREETDS, Version 1.1.6.1, © 2001–2011 Brian Bruns and James K. Lowden, © 2015 Frediano Ziglio, is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl-2.1) (Forcepoint Email Security v8.5.4). ● FUSIONCHARTS, Version 3.11.2, © 2016 InfoSoft Global Private Limited. ● GABIME/SPDLOG, © 2016 Gabi Melman, is distributed under the MIT license (https://opensource.org/licenses/mit-license). ● GNU DBM, Version 1.8.0-38.el6.x86_64, © 2016 Sergey Poznyakoff, is distributed under the GNU General Public License, version 3 (http:// www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.0). ● GNU DBM, Version 1.10-8.el7, © 2016 Sergey Poznyakoff, is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl- 3.0) (Forcepoint Email Security v8.5.3). ● GUAVA, Version 19.0, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● HAPROXY, Version 1.4.8, © 2000–2016 Willy Tarreau, is distributed under the HAPROXY license (https://www.haproxy.org/download/1.3/doc/LICENSE). ● HIBERNATE, Version 3.5.6, is distributed under the GNU Lesser General Public License version 2.1 (http://www.gnu.org/licenses/lgpl-2.1). ● IOSTAT, Version 2.2-1, is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0). ● ITEXT, Version 2.1.7, © 2016 iText Group NV, is distributed under the Mozilla Public License Version 1.1 (https://www.mozilla.org/en-US/MPL/1.1/). ● JASPERREPORTS, © 2001–2016 TIBCO Software, Inc., is distributed under the GNU Lesser General Public License, version 3 (http://www.gnu.org/licenses/ lgpl-3.0). ● JAVA AND JAVA RUNTIME ENVIRONMENT, © 1995–2016 Oracle and/or its affiliates, is distributed under the Oracle Binary Code License (http:// www.oracle.com/technetwork/java/javase/terms/license/index.html). ● JAVASSI ST, Version 3.17.1, © 1999–2015 by Shigeru Chiba, is distributed under the Mozilla Public License, v. 2.0 (https://www.mozilla.org/en-US/MPL/2.0/). ● JAX-RPC, Version 1.1, is distributed under the Common Development and Distribution License (CDDL) Version 1.0 (https://opensource.org/licenses/ CDDL-1.0). ● JBOSS LOGGING, Version 3.1.0, is distributed under the GNU Lesser General Public License version 2.1 (http://www.gnu.org/licenses/lgpl-2.1). ● JCHARDET, Version 1.0, is distributed under the Mozilla Public License Version 1.1 (https://www.mozilla.org/en-US/MPL/1.1/).

Acknowledgment of Third-party Software  5 ● JCOMMON, Version 1.0.13, © 2007–2014 Object Refinery Limited, is distributed under the GNU Lesser General Public License, version 2.1 (http:// www.gnu.org/licenses/lgpl-2.1). ● JDOM, Version 1.1, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/ licenses/LICENSE-2.0). ● JDT CORE, Version 3.1.0, is distributed under the Eclipse Public License, version 1.0 (https://www.eclipse.org/legal/epl-v10.html). ● JFREECHART, Version 1.0.13, © 2005–2014 Object Refinery Limited, is distributed under the GNU Lesser General Public License, version 2.1 (http:// www.gnu.org/licenses/lgpl-2.1). ● JMOCKIT, Version 1.18, © 2016 JMockit contributors, is distributed under the MIT License (https://opensource.org/licenses/mit-license). ● JODA-TIME, Version 2.1, © 2002–2016 Joda.org, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● JSON-LIB, Version 2.4, Copyright © 2002–2010 Json-lib, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE- 2.0). ● JSP, Version 2.1, is distributed under the Common Development and Distribution License (CDDL) Version 1.1 (http://docs.oracle.com/cd/E70265_01/ common.11-3/License/html/ cl_cddl_1.1.xmlconcept_01FC5849F8D44A3CB4DC1ADD32F0BEFD.html). ● JSP STANDARD TAG LIBRARY, Version 1.1.0, © 2013 Oracle Corporation, is distributed under the Common Development and Distribution License (CDDL) Version 1.1 (http://docs.oracle.com/cd/E70265_01/common.11-3/License/html/ cl_cddl_1.1.xmlconcept_01FC5849F8D44A3CB4DC1ADD32F0BEFD.html). and the GNU General Public License version 2, June 1991) with the Classpath Exception (http://www.gnu.org/licenses/gpl-2.0). ● JTDS, Version 1.3.1, is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl-2.1). ● JUNIT, Version 4.12, © 2002–2016 JUnit, is distributed under the Eclipse Public License version 1.0 (https://www.eclipse.org/legal/epl-v10.html). ● JXL, Version 2.6, is distributed under the GNU General Public License, version 2 (http://www.gnu.org/licenses/gpl-2.0). ● KEYVIEW, Version 10.11.0.0, © 2014, 2016 Hewlett Packard Enterprise Development LP. ● LIBEVENT, Version 2.0.21-4, © 2000–2007 Niels Provos, is distributed under the BSD 3-Clause License (opensource.org/licenses/BSD-3-Clause). ● LIBICONV, Version 1.14-1, © 1998, 2010 Free Software Foundation, Inc., is distributed under the GNU Lesser General Public License, version 2.1 (http:// www.gnu.org/licenses/lgpl-2.1) (Forcepoint Email Security v8.5.0). ● LIBICONV, Version 1.14-3, © 1998, 2010 Free Software Foundation, Inc., is distributed under the GNU Lesser General Public License, version 2.1 (http:// www.gnu.org/licenses/lgpl-2.1) (Forcepoint Email Security v8.5.3, Forcepoint Email Security v8.5.4).

Acknowledgment of Third-party Software  6 ● LIBNET, Version 1.1.5-1, © 1997–1999 Chad Catlett and George Foot, is distributed under the BSD 3-Clause License (opensource.org/licenses/BSD-3- Clause). ● LIBSPF2, Version 1.2.9-2, © 2004, Wayne Schlitt, Shevek, © 1998, 2010 Free Software Foundation, Inc., is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl-2.1) (Forcepoint Email Security v8.5.0). ● LIBSPF2, Version 1.2.10-5, © 2004, Wayne Schlitt, Shevek, © 1998, 2010 Free Software Foundation, Inc., is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl-2.1) (Forcepoint Email Security v8.5.3, Forcepoint Email Security v8.5.4). ● LIBSTRL, Version 0.5.1, is distributed under the GNU Lesser General Public License, version 3 (http://www.gnu.org/licenses/lgpl-3.0). ● LIBXML2, Version 2.9.1-6, is distributed under the MIT License (https:// opensource.org/licenses/mit-license). ● LIBZIP, Version 0.10.1-8, © 1999–2014 Dieter Baron and Thomas Klausner, is distributed under the BSD 3-Clause License (opensource.org/licenses/BSD-3- Clause). ● MOCKITO, Version 1.5, © 2007 Mockito contributors, is distributed under the MIT License (https://opensource.org/licenses/mit-license). ● MUTT, Version 1.5.21-26, © 1996–2016 Michael R. Elkins and others, is distributed under the GNU General Public License Version 2 (http:// www.gnu.org/licenses/gpl-2.0) (Forcepoint Email Security v8.5.0). ● MUTT, Version 1.5.21-28, © 1996–2016 Michael R. Elkins and others, is distributed under the GNU General Public License Version 2 (http:// www.gnu.org/licenses/gpl-2.0) (Forcepoint Email Security v8.5.3, Forcepoint Email Security v8.5.4). ● MYFACES, Version 1.2.12, Copyright © 2012 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● MYFACES TOMAHAWK, Version 1.1.9, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● NET-SNMP, Version 5.7.2-24, is distributed under the Net-SNMP license (http:// net-snmp.sourceforge.net/about/license.html). Various copyrights apply to this package, listed in separate parts. Please make sure that you read all the parts. ● NFS, Version 1.3.0-0.21, is distributed under the GNU General Public License, Version 2 (http://www.gnu.org/licenses/gpl-2.0) (Forcepoint Email Security v8.5.0). ● NFS, Version 1.3.0-0.54, is distributed under the GNU General Public License, Version 2 (http://www.gnu.org/licenses/gpl-2.0) (Forcepoint Email Security v8.5.3). ● NFS, Version 1.3.0-0.65, is distributed under the GNU General Public License, Version 2 (http://www.gnu.org/licenses/gpl-2.0) (Forcepoint Email Security v8.5.4).

Acknowledgment of Third-party Software  7 ● OPENDKIM, Version 2.10.1, © 2009–2012, The Trusted Domain Project, is distributed under the BSD 3-Clause License (opensource.org/licenses/BSD-3- Clause). Portions of this project are also covered by the Sendmail Open Source License, available in this distribution in the file “LICENSE.Sendmail”. See the copyright notice(s) in each file to determine whether or not it is covered by both licenses. ● OPENJDK, Version 8U131, Copyright © 1999, 2015 Oracle and/or its affiliates. Distributed under the GNU General Public License, Version 2 with Classpath Exception (http://gnu.org/software/classpath/license.html), including SSLContextlmpl.txt, which was modified in September 2017 (Forcepoint Email Security v8.5.0). ● OPENJDK, Version 8U181, Copyright © 1999, 2015 Oracle and/or its affiliates. Distributed under the GNU General Public License, Version 2 with Classpath Exception (http://gnu.org/software/classpath/license.html), including SSLContextlmpl.txt, which was modified in September 2017 (Forcepoint Email Security v8.5.3). ● OPENJDK, Version 8U242, Copyright © 1999, 2015 Oracle and/or its affiliates. Distributed under the GNU General Public License, Version 2 with Classpath Exception (http://gnu.org/software/classpath/license.html), including SSLContextlmpl.txt, which was modified in September 2017 (Forcepoint Email Security v8.5.4). ● OPENLDAP, Version 2.4.40-9, © 1998–2016 The OpenLDAP Foundation, is distributed under the OpenLDAP Public License (https://www.openldap.org/ software/release/license.html) (Forcepoint Email Security v8.5.0). ● OPENLDAP, Version 2.4.44-15, © 1998–2016 The OpenLDAP Foundation, is distributed under the OpenLDAP Public License (https://www.openldap.org/ software/release/license.html) (Forcepoint Email Security v8.5.3). ● OPENLDAP, Version 2.4.44-21, © 1998–2016 The OpenLDAP Foundation, is distributed under the OpenLDAP Public License (https://www.openldap.org/ software/release/license.html) (Forcepoint Email Security v8.5.4). ● OPENSSL, Version 1.0.2N, © 1998–2017 The OpenSSL Project, © 1995–1998 Eric Young, is distributed under the OpenSSL license (http://www.openssl.org/ source/license.txt) (Forcepoint Email Security v8.5.0). ● OPENSSL, Version 1.0.2o-1, © 1998–2017 The OpenSSL Project, © 1995–1998 Eric Young, is distributed under the OpenSSL license (http://www.openssl.org/ source/license.txt) (Forcepoint Email Security v8.5.3). ● OPENSSL, Version 1.0.2s, © 1998–2017 The OpenSSL Project, © 1995–1998 Eric Young, is distributed under the OpenSSL license (http://www.openssl.org/ source/license.txt) (Forcepoint Email Security v8.5.4). ● ORG.HIBERNATE, Version 4.3.2, is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl-2.1). ● ORG.SPRINGFRAMEWORK.SECURITY, Version 3.0.7, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0).

Acknowledgment of Third-party Software  8 ● OWASP JAVA HTML SANITIZER, Version 20160628, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● PCRE (Perl Compatible Regular Expressions), Version 6.6-1.1, © 1997–2016 University of Cambridge, is distributed under the BSD 3-Clause license (opensource.org/licenses/BSD-3-Clause) (Forcepoint Email Security v8.5.0). ● PCRE (Perl Compatible Regular Expressions), Version 8.32-17, © 1997–2016 University of Cambridge, is distributed under the BSD 3-Clause license (opensource.org/licenses/BSD-3-Clause) (Forcepoint Email Security v8.5.3, Forcepoint Email Security v8.5.4). ● POSTFIX, Version 2.6.2, © 1997, 1998, 1999 International Business Machines Corporation and others, is distributed under the IBM Public License (https:// opensource.org/licenses/IPL-1.0). ● POSTGRESQL, Version 9.2.15-1, PostgreSQL Database Management System (formerly known as Postgres, then as Postgres95), portions © 1996–2016 The PostgreSQL Global Development Group, portions © 1994 The Regents of the University of California, is distributed under the PostgreSQL license (https:// www.postgresql.org/about/licence/) (Forcepoint Email Security v8.5.0). ● POSTGRESQL, Version 9.2.24-1, PostgreSQL Database Management System (formerly known as Postgres, then as Postgres95), portions © 1996–2016 The PostgreSQL Global Development Group, portions © 1994 The Regents of the University of California, is distributed under the PostgreSQL license (https:// www.postgresql.org/about/licence/) (Forcepoint Email Security v8.5.3, Forcepoint Email Security v8.5.4). ● POWERMOCK, Version 1.4.12, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0). ● PYODBC, Version 3.0.10-1.el7.x86_64, © 2016 Michael Kleehammer, is distributed under the MIT License (https://opensource.org/licenses/mit-license). ● QUARTZ, Version 2.2.1, © Terracotta, Inc., a wholly-owned subsidiary of Software AG USA, Inc., is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● RICHFACES, Version 3.3.3, JBoss, Home of Professional Open Source, © 2008, 2009 Red Hat, Inc. and individual contributors, is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl- 2.1). ● SAMBA, Version 4.2.10-7, is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.0). ● SAMBA, Version 4.7.1-6, is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.3). ● SAMBA, Version 4.9.1-10, is distributed under the GNU General Public License, version 3 (http://www.gnu.org/licenses/gpl-3.0) (Forcepoint Email Security v8.5.4).

Acknowledgment of Third-party Software  9 ● SINGLE ELEMENT CSS SPINNERS, © 2014 Luke Haas, is distributed under the MIT license (https://opensource.org/licenses/mit-license). ● SLF4J (Simple Logging Façade for Java), Version 1.6.1, © 2004–2013 QOS.ch, is distributed under the MIT License (https://opensource.org/licenses/mit- license). ● SNAKEYAML, Version 1.16, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/ licenses/LICENSE-2.0). ● SPRING FRAMEWORK, Version 4.1.6, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.0). ● SPRING FRAMEWORK, Version 4.3.2, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.3). ● SPRING FRAMEWORK, Version 4.3.26, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:// www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.4). ● SPRING FRAMEWORK: HIBERNATE 3, Version 2.0.8, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● SPRING SECURITY CORE, Version 3.0.7, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.0). ● SPRING SECURITY CORE, Version 4.1.3, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.3). ● SPRING SECURITY CORE, Version 4.2.14, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http:/ /www.apache.org/licenses/LICENSE-2.0) (Forcepoint Email Security v8.5.4). ● TAGLIBS, Version 1.1.2, © 2002–2016 The Apache Software Foundation, is distributed under the Apache License, Version 2.0 (http://www.apache.org/ licenses/LICENSE-2.0). ● UNIXODBC, Version 2.3.1-11, is distributed under the GNU Lesser General Public License, version 2.1 (http://www.gnu.org/licenses/lgpl-2.1). ● YARA, Version 3.4.0-44278.411.x86_64, © 2014 The YARA Authors, is distributed under the Apache License, Version 2.0 (http://www.apache.org/ licenses/LICENSE-2.0). ● YARA-PYTHON, Version 3.4.0-47312.0.x86_64, © 2014 The YARA Authors, is distributed under the Apache License, Version 2.0 (http://www.apache.org/ licenses/LICENSE-2.0). ● zip4j, Version 1.3.1,© 2010 Srikanth Reddy Langala, is distributed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0). ● ZLIB, Version 1.2.7-15, © 1995–2013 Jean-loup Gailly and Mark Adler, is distributed under the zlib license (https://www.zlib.net/zlib_license.html) (Forcepoint Email Security v8.5.0).

Acknowledgment of Third-party Software  10 ● ZLIB, Version 1.2.7-17, © 1995–2013 Jean-loup Gailly and Mark Adler, is distributed under the zlib license (https://www.zlib.net/zlib_license.html) (Forcepoint Email Security v8.5.3). ● ZLIB, Version 1.2.7-18, © 1995–2013 Jean-loup Gailly and Mark Adler, is distributed under the zlib license (https://www.zlib.net/zlib_license.html) (Forcepoint Email Security v8.5.4).

Offer of Source Some third-party software included in Forcepoint Email Security is licensed under the following open source license(s): GNU Lesser General Public License GNU General Public License with Classpath Exception If you would like a copy of the source code for such third-party software included in Forcepoint Email Security, you may email your request to [email protected].

© 2020 Forcepoint. Forcepoint and the FORCEPOINT logo are trademarks of Forcepoint. All other trademarks used in this document are the property of their respective owner.

Acknowledgment of Third-party Software  11