What I don't understand is why corporate America has not turned to the folks who have been working on the Semantic Web for ages starting on SGML and moving to XML. It's those MLIS-heads who have dedicated a good portion of their careers working on metadata and DATA CLASSIFICATION schemas and solutions. What we're seeing now with DLP is that you really need to "know what you've got" before you can protection, meaning companies are now being forced to implement data classification. It's already been done several times over...just on a smaller scale and many cases in specific industries. It certainly would save many security folks from recreating the wheel and could give them another ally within their organizations.

I'm curious as to whether this is the first of a few security-related acquisitions (would Determina make a Blue Lane acq redundant?) or whether Citrix will get there first. This does reflect the growing trend of the big companies (MS, HP, Cisco, IBM) seeking to acquire and bake security into their products rather than continuing to feed the infosec product world. VMware is just drinking the Kool-Aid at a much earlier phase.