.

Full Disk Encryption - Which solution do you prefer?

<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Sat Mar 06, 2010 7:29 pm

Full Disk Encryption - Which solution do you prefer?

I need to implement full disk encryption for traveling laptops.  I would need Windows, Mac, and Linux support.  I also need an enterprise key management system that would allow me to recover lost and deleted keys.  Otherwise, I am pretty flexible but would prefer something not too bloated.    If I didn't need the enterprise key management feature, I would have already gone with Truecrypt :)

What do you guys use?  Do you have any recommendation for a particular solution?  Are there any I should stay away from?  Do you prefer PGP, PointSec, others?

Thanks!
~~~~~~~~~~~~~~
Ketchup
<<

former33t

Full Member
Full Member

Posts: 226

Joined: Sat Feb 14, 2009 12:33 am

Post Sat Mar 06, 2010 9:17 pm

Re: Full Disk Encryption - Which solution do you prefer?

When I first saw the name of the post, I was wondering why you hadn't just decided on truecrypt.  I suppose the key management features in truecrypt are lacking.  I have only used it for personal use and in an environment where key management wasn't an issue.  I figured someone had written a commercial key management "plugin" or something for TC by now, but google confirms that I am wrong.

Any investors out there???
Certifications: CREA, MCSE: Security, CCNA, Security+, other junk
<<

rattis

User avatar

Hero Member
Hero Member

Posts: 1172

Joined: Mon Jul 27, 2009 1:25 pm

Post Sun Mar 07, 2010 12:56 am

Re: Full Disk Encryption - Which solution do you prefer?

When I looked into this about 2 years ago, the Senior Engineer (I've replaced him) and I were for PGP. The company however didn't want to spend the money.

One thing that was suggested, I think by the Director, was since they're company Laptops, was to use TC, but all the systems have the same passphrase.

In the end, we still haven't done it. And might use bit locker in the future. (not my choice).
OSWP, Sec+
<<

j0rDy

User avatar

Hero Member
Hero Member

Posts: 591

Joined: Tue Feb 23, 2010 4:55 am

Location: Netherlands

Post Mon Mar 08, 2010 3:43 am

Re: Full Disk Encryption - Which solution do you prefer?

i'd say go for truecrypt, being an open source supporter and all. At work we use SafeBoot, which comes with McAfee i believe. i dont know if it supports mac and linux as well, but i'm pretty happy with it.
CISSP, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
<<

KamiCrazy

Jr. Member
Jr. Member

Posts: 78

Joined: Wed Jun 17, 2009 8:40 pm

Post Mon Mar 08, 2010 4:08 am

Re: Full Disk Encryption - Which solution do you prefer?

Money not a problem? Checkpoint.

Enterprise support? Check (for management's peace of mind)
Multiplatform compatible? Check (for ease of deployment)
Centralised management facility? Check (for your piece of mind)
Lots of information on the net to research pros and cons? Check (so you can find out wtf you are buying beforehand)

I don't work for Checkpoint nor normally bother to endorse their products.
<<

Bane

Post Wed Mar 10, 2010 2:44 pm

Re: Full Disk Encryption - Which solution do you prefer?

Take a look at PGP Universal. It meets all of your needs as far as management and platform support. We use it at work and it works well. Pretty much the best that is out there for mulitplatform support.
<<

Dengar13

User avatar

Sr. Member
Sr. Member

Posts: 380

Joined: Tue Sep 20, 2005 8:43 am

Location: The Steel City

Post Thu Mar 11, 2010 4:40 am

Re: Full Disk Encryption - Which solution do you prefer?

We use McAfee's Endpoint Encryption and are a Windows shop.  You can rule this solution out since it doesn't support Mac or Linux.

http://www.mcafee.com/us/enterprise/pro ... ption.html
A+, Net+, MCP, CEH
MCSE: Security/Messaging
MCSA: Security/Messaging
Former U.S. Marine and damn proud of it!

Return to Hardware

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software