Safend Encryptor

Safend Encryptor Overview:

• Protect enterprise data from loss and theft
• Achieve optimum balance between security, productivity and performance
• Waive disclosure requirements in the event of machine loss or theft with provable encryption
• Enable compliance with regulatory, data security, and privacy standards
• Deploy and manage a single agent for all data protection needs

The Need for Endpoint Data Protection

Laptops have become a significant part of an organization’s computing fleet. The mobility and convenience that make laptops so useful to employees and organizations also make them a weak spot in enterprise data security.

While the cost of replacing software and hardware for a lost or stolen laptop is limited, the lost data may cause tremendous damage to the organization when it falls into the wrong hands. The financial implications associated with the leakage of sensitive data can be staggering, the fines for noncompliance can be astronomical, and the loss of corporate reputation immeasurable.

“Personal data on more than 26 million U.S. veterans had fallen into the hands of thieves… The data were on a laptop and external drive stolen in an apparent random burglary”. CNN

“Average cost per data breach incident was $6.6M and the cost per record was $202 in 2008” . Ponemon Institute

“Information breaches trigger an average 5% drop in company share prices. Recovery to pre-incident levels takes nearly a year” . EMA Research

Safend Encryptor - Eliminate Endpoint Data Loss

Safend Encryptor enforces an enterprise wide encryption policy to protect the data stored on laptop and desktop hard disks, so that sensitive data cannot be read by unauthorized users in the case of loss or theft.

Safend Encryptor utilizes Total Data Encryption technology, that automatically encrypts all data files, while avoiding unnecessary encryption of the operating system and program files. This innovative concept minimizes the risk of operating system failure, and has a negligible performance impact.

Leveraging this unique encryption technology, Safend Encryptor provides transparent hard disk encryption. Safend Encryptor seamlessly protects your data, without changing any of your existing end-user or helpdesk workflows.

Safend Encryptor and Safend Protector are components of the Safend Data Protection Suite. Safend Protector provides centrally enforced removable media encryption for storage devices, external hard drives, and CD/DVD, as well as comprehensive port and device control.

A Comprehensive Encryption Solution

The combination of Safend Encryptor and Safend Protector with the Safend Data Protection Suite provides customers with internal hard drive, external hard drive, removable storage and media encryption using a single management server, a single management console and a single, lightweight agent. This comprehensive encryption solution offers end-to-end protection of confidential corporate data from loss or theft with AES 256 encryption.

Encrypt your data, don’t change the way you work

Utilizing Safend’s unique encryption technology, Safend Encryptor provides True SSO (Single Sign-On functionality). Safend Encryptor uses your existing Windows login interface for user authentication, and requires no changes to work processes.

With this unique technology, Safend Encryptor provides secure and completely transparent hard disk encryption.

Features and Benefits:

• Transparent to End Users
  Transparently uses Windows login to access the encrypted data and therefore does not require any end-user training.
• Transparent to Help Desk
  Transparently uses the generic AD domain password reset process. No dedicated password recovery procedure is required.
• Performance Maintained
  Maintains performance by avoiding the encryption and decryption of system or program files that do not require protection.
• Automatic Key Management and Escrow
  All encryption keys are centrally generated and securely stored on the Safend Management Server before encryption is initialized.
• Full Visibility and Audit Trail
  Provides detailed logs and reports on security incidents, encryption status and administrative actions.
• Highly scalable
  A single management server can manage more than 75,000 agents. Additional servers can be seamlessly added to create a server cluster.
• Tamper Resistant
  The agent includes multi-tiered anti-tampering capabilities to guarantee permanent control over enterprise endpoints.
• Flexible and intuitive management
  Automatically synchronizes with Microsoft Active Directory and Novell eDirectory.

Technical Specifications:

Multi Factor Authentication Support

Safend Encryptor transparently supports any multi-factor authentication device supported by Windows (smart card, USB token, biometric, etc.), including multi-factor devices that change the Windows GINA or use a custom login interface.

Interoperability with Patch Management and Software Distribution Systems

Unlike most encryption products, Safend Encryptor lets you maintain your current patch management and software distribution infrastructure and processes, and perform scheduled remote software installations without any prior preparation, and without affecting data security.

Certifications

• Common Criteria EAL2 certified
• FIPS 140-2 Validated

System Requirements - Agent

• Windows XP Professional (SP1,SP3)
• Windows XP Tablet PC Edition (SP2, SP3)
• Windows 2003 Server (SP2)
• Windows Vista Enterprise, Business and Ultimate Editions (SP1)

System Requirements - Server

• Windows 2003 Server (SP1, SP2)
• Windows XP Professional (SP2) for evaluation purposes only

Documentation:

Download the Safend Encryptor Data Sheet (PDF).