Check Point Endpoint Security - Full Disk Encryption

Check Point Endpoint Security Full Disk Encryption Overview:

Check Point Full Disk Encryption™ delivers robust data protection for endpoint laptops and PCs. A combination of strong encryption with access control exceeds the highest level of the strictest certifications. Centralized management simplifies deployment to Windows, Mac, and Linux endpoint machines, translating into quick and complete protection at the lowest total cost of ownership.

The dramatic proliferation of laptops means your mobile workforce exposes a huge amount of company data outside the secure perimeter of the office each day. Your confidential plans, privileged customer information, and other sensitive data are easily accessed through lost or stolen computers. There is also increased media coverage of data breaches that can damage your corporate reputation and strong privacy regulations, around the world, that open the door for fines, lawsuits, and criminal penalties. You need a simple, enforceable solution that will completely protect your company’s data wherever it goes.

Based on market-leading Pointsec® technologies, Check Point Endpoint Security Full Disk Encryption™ is proven in business and government agencies, of all sizes, around the world, providing the highest level of data security through strong encryption for both PCs and laptops. Check Point Full Disk Encryption is just one of the multi-platform solutions that Check Point offers that also cover handheld wireless devices and portable storage media. Check Point Full Disk Encryption easily works with Windows, Mac, and Linux-based systems and operates transparently to the user. It also ties in seamlessly with all IT environments. Regardless of whether an enterprise uses smartcards or tokens, requires Single Sign-On, or Windows Integrated Login (WIL), Check Point Full Disk Encryption can be configured to meet the organization’s specific needs.

Features & Benefits:

Product Features

• Set-and-forget full-disk encryption with preboot authentication
• Central policy management, key recovery, and remote help
• Automatic and transparent operation to end users
• Strong authentication and Single Sign-On options
• Common Criteria EAL4, FIPS 140-2, and other key certifications

Product Benefits

• Mitigates data breach exposure from lost or stolen PCs or laptops
• Deploys quickly to meet compliance objectives and conserve resources
• Scales to meet the needs of any size enterprise, business, or government agency
• Maintains high end-user productivity and IT control
• Offers compliance with strict privacy legislation and regional laws

To ensure ease of administration and complete control, Check Point Full Disk Encryption provides centralized management. So enterprises control the security policy—while keeping costs down.

Maximum Data Security:

Check Point Full Disk Encryption provides the highest level of security by combining preboot authentication with full-disk encryption and the ability to support all common smartcards and tokens. The Check Point Full Disk Encryption application’s preboot launch protects the OS from all known attack methods. Only authorized users with the correct logon and password can gain access to the computer. If the machine is turned off or goes into standby mode, the entire hard drive remains encrypted protecting all the contents. These claims are further validated by the most and highest level of certifications in the industry, including FIPS 140-2, Common Criteria EAL 4, and BITS.

Light Architecture:

Check Point Full Disk Encryption offers a simplified security policy to minimize the effort of deploying a strong encryption solution. If you are more interested in granular control and configuration of users by leveraging transparent operation with enterprise class Active Directory, the Check Point Full Disk Encryption solution can accommodate this approach as well. Either option provides the same high level of data security without the need for heavy infrastructure. Many deployments of Check Point Full Disk Encryption are at rates in excess of 10,000 seats per month, serving as proof of this light architecture.

Proven at Large Enterprises Worldwide:

Check Point Full Disk Encryption has been deployed in every type of business, industry, and numerous government agencies around the world. The Check Point Full Disk Encryption product family has also been in widespread use for well over a decade. It can be hard to evaluate security needs, but it is easy to follow the lead of major corporations and industry analysts, which recognize Check Point solutions as the clear leaders in data security.

No  Training Required:

Check Point Full Disk Encryption runs in a completely automatic, transparent mode to the user. Administrators do not have to change procedures or tie up their IT staffs with hours of training. Users just see a new login screen at boot up, and that’s it. No elaborate training, user interaction, or user failure points. Utilizing the WIL feature can even eliminate the login screen if this better suits the organization’s needs.

Specifications:

Windows:
100MB free disk space Windows 2000, XP, XP Tablet, Vista, Server 2003 (on workstation hardware) Support for Hyper Threading, Dual Core, and 64-bit processors
Mac:
50MB free disk space Intel Processor Mac OS X 10.4.5 – 10.4.11, 10.5.0
Linux:
50MB free disk space Linux 2.6.4 or higher kernel Supports Red Hat, SuSE 9.x, RHEL 4, and NLD distributions

Product Comparision:

	Secure Access	Full Disk Encryption	Media Encryption	Total Security
Desktop Firewall
Program Control
NAC
Remote Access VPN
Antivirus/Anti-spyware	¹			¹
Full Disk Encryption
Port Protection
Media Encryption

1 - Requires purchase of SmartDefense Anti-Malware service

Documentation:

Download the Check Point Endpoint Security Full Disk Encryption Datasheet (PDF).