Commonly Asked Questions - EthicsPoint

Commonly Asked QuestionsWho may report a concern?Anyone is encouraged to report a concern related to potential misconduct involving ExtremeNetworks including an employee, contractor, supplier, channel member, or customer.Why has Extreme Networks contracted with EthicsPoint for reporting of concerns?EthicsPoint is an independent company that provides secure, confidential telephone and webbasedsystems for use by those who wish to report a concern regarding workplace businessconduct. We believe that our employees are our most important asset. By creating open channelsof communication, we can promote a positive work environment and maximize productivity. Aneffective reporting system will augment our other efforts to foster a culture of integrity andethical decision-making.We certainly do. In fact, we need you to report. Your willingness to report a concern or ask aquestion translates into an opportunity for the Company to do better. You may have initialknowledge of an activity that may be cause for concern. Your reporting can minimize thepotential negative impact on the Company and our people. Also, offering positive input may helpidentify issues that can improve corporate culture and performance.1 | P a g eExtreme Networks, Inc. 3/14/2013Reporting – GeneralHow do I report a concern about potential misconduct?You may file a confidential, anonymous report via either the telephone, at 1-855-227-0662 or theInternet at www.ExtremeHelpline.EthicsPoint.com.What type of situations should I report?Please report any violation of our Extreme Networks Code of Business Conduct and Ethics, orother Extreme Networks related compliance and ethics concern or question.If I see a violation, shouldn't I just report it to my manager, security, or human resources and letthem deal with it?When you observe some behavior that you believe violates our code of conduct, we expect you toreport it. Ideally, you should bring any concerns forward to your direct manager or other memberof our management team. We recognize, however, that there may be circumstances when you arenot comfortable reporting the issue in this manner. This is why we have partnered withEthicsPoint. We would rather you report anonymously than not report.Why should I report what I know? What’s in it for me?We all have the right to work in a positive environment and with that right comes theresponsibility of acting in an ethical manner and letting the appropriate people know if someoneis not acting appropriately. By working together, we can maintain a healthy and productiveenvironment. Misconduct can threaten the livelihood of an entire company.Does management really want me to report?

Reporting Anonymously, Securely, & ConfidentialityMay I ask a question or report my concern anonymously?You may ask questions anonymously and may also report a concern anonymously, except asprohibited by law. If you choose to be anonymous, you will be provided with a report key andasked to create a password. You will need to retain these to return to the report you previouslysubmitted. When you check back, you can monitor the progress and add additional information, ifnecessary. This will also allow the Company to ask follow-up questions, while protecting youranonymity.Should I identify myself?If you choose to identify yourself in reporting your concern, Extreme Networks will make everyreasonable effort to hold your name in confidence during any investigation. Investigations may bemore quickly and effectively completed when the reporter is identified because it allows theCompany investigator to follow up directly with the reporter. Any retaliation or negativerepercussions for reporting are strictly prohibited.Where do these reports go? Who can access them?Reports are entered directly on the EthicsPoint secure server to prevent any breach in security.EthicsPoint makes these reports available only to specific individuals within the Company whoare charged with evaluating the report, based on the type of violation and location of the incident.Each of these recipients has been trained to maintain reports in the utmost confidence and areheld accountable for doing so.I understand any report I send from a Company computer generates a server log that shows theweb-sites I viewed. Won’t this log identify me as a report originator?EthicsPoint does not generate or maintain any internal connection logs with IP addresses, so noinformation linking your computer is available. In fact, EthicsPoint is contractually committednot to pursue a reporter’s identity.Can I file a report from home, an internet café, or friend’s computer and still remain anonymous?A report from home, a neighbor’s computer, or any Internet portal will remain secure andanonymous. An Internet portal never identifies a visitor by screen name and the EthicsPointsystem strips away Internet addresses so that anonymity is totally maintained. Plus, EthicsPoint iscontractually committed not to pursue a reporter’s identity.I am concerned that the information I provide EthicsPoint will ultimately reveal my identity. Howcan you assure me that will not happen?EthicsPoint is designed to protect your anonymity. If you wish to remain anonymous, please takecare not to report information that may personally identify you such as your reporting relationshipto others in the company or exact physical work location.Is the telephone toll-free hot line confidential and anonymous too?Yes. You will be asked to provide the same information that you would provide in an internetbasedreport and an interviewer will type your responses into the EthicsPoint Web site. Thesereports have the same security and confidentiality measures applied to them during delivery.Extreme Networks, Inc. 3/14/20132 | P a g e

Tips & Best PracticesI am aware of some individuals involved with unethical conduct, but it doesn't affect me. Whyshould I bother reporting it?Our Company chooses to promote ethical behavior. All unethical conduct, at any level,ultimately hurts the Company, including you. You only have to consider what happened in recentcorporate scandals to see the disastrous effects that a seemingly harmless lapse in ethics can haveon an otherwise healthy company. So if you know of any incidents of misconduct or ethicalviolations regardless if it directly affects you, please report it.I am not sure if what I have observed or heard is a violation of Company policy, or involvesunethical conduct, but it just does not look right to me. What should I do?File a report. EthicsPoint can help you prepare and file your report so it can be properlyunderstood and investigated. We'd rather you report a situation that turns out to be harmless thanlet possible illegal or unethical behavior go unchecked because you weren't sure.What if my boss or other managers are involved in a violation? Won’t they get the report and starta cover-up?The EthicsPoint system and report distribution are designed so that implicated parties are notnotified or granted access to reports in which they have been named. EthicsPoint makes thesereports available only to specific individuals within the Company who are charged withevaluating the report, based on the type of violation and location of the incident.What if I remember something important about the incident after I file the report? Or what if theCompany has further questions for me concerning my report?When you file a report at the EthicsPoint Web site or through the EthicsPoint Call Center, youreceive a unique user name and are asked to choose a password. You can return to the EthicsPointsystem again either by Internet or telephone and access the original report to add more detail oranswer questions posed by a Company representative and add further information that will helpresolve open issues. We strongly suggest that you return to the site in the time specified toanswer any potential questions. You and the Company will leverage the EthicsPoint website toenter into an “anonymous dialogue” where situations are not only identified but can be resolved,no matter how complex.Are these follow-ups on reports as secure as the first one?All EthicsPoint correspondences are held in the same strict confidence as the initial report,continuing under the umbrella of anonymity.Can I still file a report if I don’t have access to the internet?If you don’t have access or are uncomfortable using a computer, you can call the EthicsPoint tollfreehotline 1-855-227-0662 which is available 24 hours a day, 365 days a year.Links to Other Related Information and ResourcesIf you are an Extreme Networks employee, please go to Basecamp, our internal intranet, at for moreinformation.Extreme Networks, Inc. 3/14/20133 | P a g e