Riverbed Technology (RVBD)

Management’s Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over our financial reporting as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. Our management, with the participation of our principal executive officer and principal financial officer, has evaluated the effectiveness of our internal control over financial reporting as of December 31, 2008. In making this assessment, management used the framework set forth by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) in Internal Control-Integrated Framework. Based on our assessment, using those criteria, our management concluded that, as of December 31, 2008, our internal control over financial reporting was effective. The attestation report concerning the effectiveness of our internal control over financial reporting as of December 31, 2008, issued by Ernst & Young, LLP, Independent Registered Public Accounting Firm, appears in Part II, Item 8 of the Annual Report on Form 10-K.

(a.) Management’s Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over our financial reporting as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. There are inherent limitations in the effectiveness of any internal control, including the possibility of human error and the circumvention or overriding of controls. Accordingly, even any effective internal control can provide only reasonable assurance with respect to financial statement preparation. Further, because of changes in conditions, the effectiveness of any internal control may vary over time.

Our management, with the participation of our principal executive officer and principal financial officer, has evaluated the effectiveness of our internal control over financial reporting as of December 31, 2007. In making this assessment, management used the framework set forth by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) in Internal Control-Integrated Framework.

Based on our assessment, using those criteria, our management concluded that, as of December 31, 2007, our internal control over financial reporting was effective.

82

Table of Contents

(a.) Management’s Report on
Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over our
financial reporting as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. There are inherent limitations in the effectiveness of any internal control, including the possibility of human error and the circumvention or overriding of
controls. Accordingly, even any effective internal control can provide only reasonable assurance with respect to financial statement preparation. Further, because of changes in conditions, the effectiveness of any internal control may vary over
time.

Our management, with the participation of our principal executive officer and principal financial officer, has evaluated the effectiveness of
our internal control over financial reporting as of December 31, 2007. In making this assessment, management used the framework set forth by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) in Internal
Control-Integrated Framework.

Based on our assessment, using those criteria, our management concluded that, as of December 31, 2007, our
internal control over financial reporting was effective.

82

Table of Contents