The two companies confirmed the rumored acquisition Wednesday, saying it would give VeriSign the opportunity to focus on its more-profitable domain name business, while allowing Symantec to broaden its growing portfolio of enterprise security products.
[ Master your security with InfoWorld's interactive Security iGuide. | The Web browser is your portal to the world -- as well as the conduit that lets in many security threats. InfoWorld's expert contributors show you how to secure your Web browsers in this "Web Browser Security Deep Dive" PDF guide. | Stay up to date on the latest security developments with InfoWorld's Security Central newsletter. ]
"There is a real need to be able to know who the user is and what they should have access to... but without the central theme of identity we weren't able to provide the total solution," Symantec CEO Enrique Salem said during a conference call to discuss the deal. "IT needs to be able to control the information, and identity matters to be able to provide that solution."
Reports surfaced Tuesday that VeriSign had been shopping around its encryption technology and service business, and naming Symantec as the buyer.
The VeriSign business unit sells SSL (Secure Sockets Layer) certificates -- used to authenticate secure Internet servers -- two-factor authentication tokens, fraud detection and public key infrastructure products for government and the enterprise. But the business has grown slowly of late, hurt by dropping SSL certificate prices, a fact that is reflected in the unit's low purchase price relative to its $371 million in annual revenue.
"If you want to succeed in that market you have to have a lot of services, the platform, large and growing distribution channels -- a lot of things that Symantec has," Mark McLaughlin, VeriSign's president and CEO, said on the conference call.
Salem said he and McLaughlin had been talking about a possible deal for more than a year, but that things heated up in the past few months when it became clear that Symantec could buy only the security arm of the company.
As the global economy has heated up in recent months, so too have security industry acquisitions. Last month, Symantec announced plans to spend $370 million buying two encryption companies: PGP and GuardianEdge.
Last year, security vendor SecureWorks bought VeriSign's managed security business for $42.9 million. VeriSign had also been shopping around its iDefense security intelligence business, but has now decided to retain it, McLaughlin said.
The deal makes sense for both companies, according to Lazard Capital Markets, a financial advisory firm. "With its broad security portfolio, Symantec should be able to extract more value from the VeriSign security business than VeriSign currently does," Lazard wrote in a research note published ahead of the official announcement Wednesday.