Removable Media Encryption

QHalo

Trying to get an idea what everyone out there is using, trials and tribulations, etc. We're looking at Symantec, Sophos and McAfee right now. Anyone using these? Got opinions? Someone else we should consider? Thanks.

higherho

You should check our McAfee's e policy orchestrator suite. The module DLP (Data loss prevention) can provide you the ability to only allow certain USB devices on your network. I understand this does not answer your encryption question but its an avenue to pursue imo and I've been using it for the past year and a half.

jdancer

I use TrueCrypt at TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows 7/Vista/XP, Mac OS X and Linux

KenC

I use TrueCrypt myself and also IronKey on an occasion. Both fine for me, but not so sure it is what you need for an enterprise solution. Have you looked at BitLocker (To Go)?

What are your main priorities (availability, security, etc)?

demonfurbie

totally agree bitlocker to go is good and free

iron key is also nice but if i remember correctly you have to use an ironkey drive and they cost more

paul78

How many endpoints are you needing to support? We use Symantec. We have about 20k endpoints worldwide.

SteveLord

I have a few dozen Ironkeys. I use to use them more, but rarely have to now. I never opted for the Enterprise versions. Our state is trialing them now though. Problem with TrueCrypt was lack of central management.

QHalo

We're starting with laptops, but I'm sure that will end up moving to all machines. That's just short of 1000 machines total. Central management would be key. We have several remote sites so being able to help users from across the country is ideal. Security of data being moved to removable media is the top priority and ensuring that if a USB key is lost that the data is encrypted and the device is basically a brick without the password. While that sounds like a huge 'duh', its really the key factor. Ease of use with end users is also something we highly need as well. I'm dealing with attorneys who may not be the most tech savvy and I have to take that into consideration. Thanks for all the responses thus far.

Truecrypt would be a great idea if it had central management. I'll inquire about BitLocker To Go, but since we're just now rolling Windows 7 and I've only been here for 3 weeks thus far, if they haven't already looked at this as well. It was one of those, lets find some vendors and do some proof of concepts type of endeavors.

QHalo

higherho wrote: »

You should check our McAfee's e policy orchestrator suite. The module DLP (Data loss prevention) can provide you the ability to only allow certain USB devices on your network. I understand this does not answer your encryption question but its an avenue to pursue imo and I've been using it for the past year and a half.

I've used ePO in the past and I wasn't thoroughly impressed with it although that was more Virus Scan. McAfee is a magic quadrant Gartner company so we've looking at them here with their endpoint removable encryption software.

QHalo

paul78 wrote: »

How many endpoints are you needing to support? We use Symantec. We have about 20k endpoints worldwide.

How's the product overall? Is it easy to use? Is it something you can deploy and let the Service Desk manage? I'm looking for something that we can get into that doesn't have a ton of in depth administration and that we can turn over to our Application teams to manage overall.