Sophos SafeGuard RemovableMedia

Overview:

Seamless and transparent encryption of confidential data on all removable media lowers your business risk without impacting productivity

The convenience and widespread use of removable media create vast security risks for enterprises. Media such as USB drives, external hard disks, cards, and rewritable CDs and DVDs can contain gigabytes of sensitive information that can very easily fall into the wrong hands. Theft or loss of confidential company information stored on removable media can have severe financial consequences and damage the reputation of organizations. To protect you from such events, Sophos’s SafeGuard RemovableMedia provides strong encryption at all times, for seamless protection across the widest variety of removable media. With SafeGuard RemovableMedia, your confidential information will not fall into the wrong hands.

SafeGuard RemovableMedia’s fully automated, user-transparent operation ensures no impact on employee productivity and working habits. Simply drag and drop files into the media and they are automatically encrypted. You can conduct your business with greater ease and confidence assured by secured data storage at all times. SafeGuard RemovableMedia offers flexible workflow options by enabling you to store only encrypted files or both encrypted and plain text files on the same media. If SafeGuard RemovableMedia is not installed, the encrypted data can be accessed by password-protected self-executable files.

SafeGuard RemovableMedia’s unique keyring feature enables secure data sharing between members of a project team. Central management options include the application of Microsoft Active Directory settings. The application programming interface (API) allows customized central administration, key management and automation of repetitive tasks. Your confidential data is in safe hands, protected by Sophos.

Key benefits

Enhanced security

• Transparent data encryption
• Seamless support for all kinds of removable storage media
• Centrally enforced rules for using removable storage media with configurable security levels for users
• Strong, proven encryption algorithms
• Seamless integration with operating system – no additional login required
• Local file encryption in pre-defined folder

Easy to deploy

• Quick, easy installation and distribution via Windows Installer or other software management systems
• Simple, flexible administration with Microsoft Management Console
• Scalable from a single workstation solution all the way to a companywide rollout
• Integration of custom third-party applications with scripting API

Easy to use

• Transparent background encryption and decryption of all data
• Optional combined use of encrypted and non-encrypted files on the same storage medium
• Automatic selection of security rules depending on the type of storage medium
• Simple, intuitive user interface
• No extensive user training required
• Encrypted data can be processed on external devices with no software installation
• Keyring feature enables secure data sharing among project team members
• Optical media encryption integrated in Windows burning wizard

Features & Benefits:

Security

• Fast and transparent encryption on all storage media and on pre-defined folders of the local hard disk
• Protects data on FAT, FAT32 and NTFS file systems
• Uses the latest, highly secure Advanced Encryption Standard (AES) algorithm with 256- bit keys
• Secure key derivation based on PKCS #5: Password-Based Cryptography Standard
• Protection against unauthorized storage of unencrypted data on mobile storage media
• Protection against unauthorized importing of unencrypted data into the company using mobile storage media
• Key backup and restore

System administration

• Windows Installer (MSI)-based installation also possible using other software management systems
• Application programming interface (API) for automating recurring administrator tasks
• Central administration of security-relevant settings with Active Directory Group Policy Objects
• Highly granular Group Policy settings not restricted or dependent on drive letters
• Company key deployment during setup
• Central logging

Easy to use

• Option for automatic encryption without user intervention
• High level of acceptance by users: no additional training required
• No disruption to normal user workflows
• Seamless integration with the operating system (no additional login required)
• All types of confidential files can be encrypted and stored on mobile storage media
• RemovableMedia Portable add-on application enables encrypted file access for removable storage media on external computers that do not have SafeGuard RemovableMedia installed
• Pre-configurable plaintext folder
• Encryption of files in pre-defined folder of local hard disk
• Overlay icon for easy viewing on encrypted files

Complementary SafeGuard® Products

• SafeGuard Advanced Security Plug and Play Management for central control of all plugand- play modules
• SafeGuard Application Specific Access Rights for configuration of user, application and data rights
• SafeGuard Easy for secure encryption of operating systems and all data stored on internal hard drives

System requirements:

Hardware

• PC with Intel Pentium or compatible processor
• Supported storage media:
• Memory cards including CFC, SDC, MMC, SMC
• USB memory sticks and hard drives
• FireWire hard drives
• CD/DVD-RW
• Floppy, Zip, Jaz drives
• All other devices recognized by the OS as storage media

Operating system

• Microsoft Windows Vista 32-bit
• Microsoft Windows XP 32-bit
• Microsoft Windows 2003

Certification

• FIPS 140-2

Interoperability

• Compatible with all standard software distribution mechanisms (MSI packets)

Interfaces

• Scripting API to automate recurring administrator tasks

Standards/Protocols

• AES 256-bit key length
• PKCS #5

Language Versions

• English, German, French, Japanese
• Additional language support will be available

Documentation:

Sophos SafeGuard RemovableMedia Data Sheet (.PDF)