Sophos SafeGuard Easy

Overview:

Prevent unauthorized access to laptops and desktops with transparent and easy-to-use full disk encryption. If a SafeGuard-encrypted PC falls into the wrong hands, the data is unreadable even if the hard disk is removed.

Key benefits

• Unmatched data security with proven encryption algorithms, which maximizes security and performance
• Encrypted swap and hibernation files for complete security
• User-transparent background encryption, which ensures work without interruptions
• Higher end-user productivity with secure password recovery via phone or the local selfhelp option
• Convenience and speed for end users with single sign-on to the operating system from the pre-boot stage
• Customizable, user-friendly graphical pre-boot login screen
• Stronger security with biometric fingerprint authentication at pre-boot

Features & Benefits:

Strong, transparent encryption

• Extensive transparent encryption functionality
• Full hard disk encryption (NTFS, FAT, FAT32)
• Strong, internationally recognized encryption algorithms
• Secure, encrypted hibernation
• Encrypted data cannot be read even if hard drives are removed from PCs, except by security administrators
• High-speed encryption/decryption algorithms

Secure power-on authentication and authorization

• Pre-boot user authentication with Windows credentials (user ID, password)
• Single sign-on to the operating system
• Pre-defined, enforced password rules
• Multi-user pre-boot environment with audit trails
• Hardened log-on process prevents password penetration attacks
• User-friendly graphical pre-boot login screen that is customizable
• Service accounts allow administrators to securely access PCs while end users retain ownership
• Automated administrative activities (e.g., patch management) enabled by Secure Wake-On-LAN

Secure recovery of passwords, data and forensics

• Challenge/response over the phone with the help desk for recovery of forgotten passwords
• Local self-help to recover forgotten passwords during pre-boot without calling the help desk or the need for an internet connection
• External boot option with Windows PE (e.g., for recovering broken operating system configurations on encrypted disks)
• Ready for EnCase (Guidance Software), AccessData and Kroll Ontrack (access requires user or administrator cooperation)
• Support for Microsoft Business Desktop Deployment and Computrace
• Integration with Lenovo Rescue and Recovery for secure recovery of encrypted operating systems and data

Enforceable policy
SafeGuard Easy comes with a Policy Editor that allows administrators to create initial security configuration policies for SafeGuard Easy. If the initial policies need to be updated after deployment, these policies can be modified and reapplied via any standard software management tool.

Reporting
SafeGuard Easy provides a scriptable tool to query and report on encryption status, product version, etc. The tool can be integrated into most system management and reporting consoles for customized reporting.

Easy, remote installation

• Installation packages can be distributed and installed centrally and unattended via standard MSI packages.
• Network rollout is easy—user involvement is not required.

Central administration with SafeGuard Enterprise (optional)
SafeGuard Easy is designed to be deployed in non-centrally managed environments or environments that prefer using application-independent software management tools. If centralized management is required, SafeGuard Easy can be easily upgraded to SafeGuard Enterprise, Sophos’s enterprise-class data security solution. SafeGuard Enterprise provides advanced key management and policy administration. Tokens and smartcards are also supported. SafeGuard Easy can be upgraded without having to decrypt and re-encrypt the drives.

System requirements:

Platforms supported	x86 32-bit	x86 64-bit	IA-64 (Itanium) 64-bit	Minimum disk space	Minimum memory
Sophos SafeGuard Easy for full encryption
Windows 7 including XP mode				300 MB	1 GB
Windows Vista SP1+				300 MB	1 GB
Windows XP SP2+				300 MB	512 MB

Standards and protocols

• Symmetrical encryption: AES 128, AES 256 bit
• Asymmetrical encryption: RSA (PKCS#1)
• Hash functions: SHA-1, SHA-256, SHA-384, SHA-512
• Password hashing PKCS #5, PC/SC
• Protocols and interfaces: PKCS #11, PKCS #15, Microsoft Cryptographic Service Provider (CSP), XML, CCID, Kerberos

Certifications

• Common Criteria EAL 3+
• Uses FIPS 140-2 validated cryptography
• Aladdin eToken enabled

Language versions

• English, French, German, Italian, Japanese, Spanish
• Unicode-based support for other languages

Note: If no service pack is specified, then SP0+ is implied.

Documentation:

Sophos SafeGuard SafeGuard Easy Data Sheet (.PDF)