Encyrption software - recommendations?

Bokeh

Co. that I work for has a need to start encrypting files that will be stored on an off-site server. We do not have a need to encrypt entire hard drives, just files that will be encrypted locally in one folder, and sent to this off site server for storage.

Cost is a factor. Initially there will be 50 users with access. We have looked at PGP Netshare, but there is no trial version available to evaluate. Truecrypt looks like it wants to do entire drives, which is not necessary, only this one folder (for now).

If anyone has some recommendations, I am all ears.

dynamik

What OS?

TrueCrypt can also create an encrypted file that will store other files. When you want to access what's in it, you just open up TC, choose "mount", and select a drive letter you want to mount it on (at least in Windows, I assume you'd just use a mount point with Linux). Then you just access it like a drive.

Bokeh

These are all on Win XP. We would like something that encrypts on the fly. So the program knows that anything in this folder gets encrypted, and not have to manually select, if possible.

Megadeth4168

Like Dynamik said,

Truecrypt allows you to create a file container. This is a file that you can mount as a virtual drive. It's very easy to do and cheap

dynamik

Are you in a domain environment? Do you have a PKI? You could just use EFS.

And TrueCrypt will automatically encrypt anything in the mounted drive. You just need to manually mount/dismount. It might be difficult to maintain the integrity of your password, key file, etc. with that many users though...

Daniel333

Winzip all the way.

Bokeh

I'll take another look at Truecrypt.

The environment is Goldmine, using Goldvision as document viewing. So each client record will have a link showing the pdf document associated to it. If someone needs to view it, they will just click on it and it will decrypt on their end.

dynamik

I think TrueCrypt is going to be a hassle for that. What about the domain/PKI?

RTmarc

TrueCrypt will do it for you, but take a look at AxCrypt as well.

http://www.axantum.com/AxCrypt/

liven

bump trucrypt for cost reasons....


Andy maybe some sort of keypass system... Just a thought off the top of my head.

techgeek07

I really like pgp in a large enviroment. But, if your only doing it for 50 users, and not using WDE, it can get expensive (although, I haven't tried the version you were talking about). Isn't truecrypt free? But, If you ever decide on using WDE on a large number of pc's pgp can't be beat.

RTmarc

TrueCrypt and AxCrypt are both free.

I tend to prefer TrueCrypt, however, users seem to find AxCrypt easier to use.

techgeek07

Question: How are Truecrypt and Axcrypt at key recovery?

RTmarc

heh, don't lose your key.

brad-

If you want a paid peice of software, Guardian Edge is the standard.

RTmarc

brad- wrote:

If you want a paid peice of software, Guardian Edge is the standard.

I have to disagree with this. In my experience, PointSec has been consistently chosen over everything else.

Ahriakin

techgeek07 wrote:

Question: How are Truecrypt and Axcrypt at key recovery?

For encrypted volumes (ie. those you create from within Truecrypt to reside on a normal drive) you need to manually record the Key (unless you use Keyfiles), if you lose either forget it. If you encrypt an entire drive it will not let you begin encryption until it verifies you have created the Backup CD with the initial key (No matter what the key is changed to later you will always be able to decrypt the partition with the original).

brad-

RTmarc wrote:

brad- wrote:

If you want a paid peice of software, Guardian Edge is the standard.

I have to disagree with this. In my experience, PointSec has been consistently chosen over everything else.

I say that because they have huge government + private sector contracts and we almost started using them a while back.