Check Point Endpoint Security Media Encryption

Check Point Endpoint Security Media Encryption Overview:

Check Point Media Encryption prevents unauthorized copying of sensitive information from enterprise laptops and PCs through centrally managed port control, content filtering, and media encryption.

The staggering number of USB and other plug-and-play-enabled ports, as well as CD/DVD writers on laptops and PCs, has driven the potential for serious data leakage occurring within your enterprise. These connection ports and removable media allow users to extract any data in an instant using common storage devices like USB flash drives, iPods, or Bluetooth devices—effectively making all enterprise computers vulnerable to this data leakage threat. Most users only intend to download music or digital photos onto their work PCs from their personal storage devices. However, the capability to copy huge amounts of sensitive enterprise data from corporate PCs onto these personal devices and assorted removable media places your organization at considerable risk of undetected data leaks.

Couple all that with the shrinking size of plug-and-play storage and a booming market for personal electronics like music players and digital cameras, and an entirely new category of threats to your most sensitive information has emerged. Not only are your chances of data loss increasing, you probably have no way to detect or track these devices on your network—even if you have fully educated users about your formal security policy.

Check Point Endpoint Security Media Encryption™ addresses the internal threat from unauthorized copying of enterprise data to all personal storage devices and removable media through a powerful combination of port management, content filtering, centralized auditing and management of storage devices, and optional media encryption. Check Point Media Encryption plugs these potential leak points and provides a comprehensive audit-reporting capability of how data files move to and from these devices, giving enterprises complete control of their security policies.

Check Point Media Encryption is centrally managed so the solution can be deployed easily across all endpoints, and policy settings can be updated as business needs change. This fine level of granularity over policy settings keeps enterprises in control, allowing them to optimize security while minimizing the effect on user work patterns and IT operational costs.

Features & Benefits:

Product Features

• Centrally managed port control and content filtering
• Removable media encryption—flash drives, CDs and DVDs, etc.
• Enforced content and virus scan
• Granular control of removable media by type, brand, or model
• Centralized auditing and reporting
• Fully MSI-enabled installer

Product Benefits

• Meet regulatory compliance objectives with total control of connection ports and removable media
• Delivers transparent end user experience for high workplace productivity
• Conserves IT resources with centralized deployment and management
• Scales for any size enterprise or government agency
• Provides 100 percent transparent operation with Active Directory and Novell eDirectory

Complete Flexibility:

Check Point Media Encryption enables flexible, comprehensive management of USB and all plug-and-play devices and removable media. By operating 100 percent transparently with Windows 2000/2003 Active Directory and Novell eDirectory, roaming user security policies are associated with existing users and groups to enable role-based access throughout the organization.

Unique Whitelist and Blacklist Functionality:

Check Point Media Encryption has an exclusive design that offers both whitelist and blacklist management of plug-andplay devices and removable media. This capability allows organizations to enforce the use of authorized devices and media across the enterprise, while offering the flexibility to enable the use of unapproved devices without introducing unwanted or malicious files.

Transparent Removable Media Encryption:

Leading the market in device security, Check Point Media Encryption controls which employees are allowed to share data internally, while providing authorized users with transparent access to encrypted media. Read/write access to encrypted media is maintained when offline or traveling, without requiring third-party software. In addition, up-to-date content and virus scans are enforced to ensure network integrity when returning to the online environment.

Comprehensive Audit Capabilites:

Check Point Media Encryption delivers robust audit capability that extends beyond the boundaries of workstation control. Unique to the market, this three-dimensional audit trail enables network administrators to track data movement to and from removable media, wherever plug-and-play devices and CD/DVD writers are used.

Specifications:

Product Comparision:

	Secure Access	Full Disk Encryption	Media Encryption	Total Security
Desktop Firewall
Program Control
NAC
Remote Access VPN
Antivirus/Anti-spyware	¹			¹
Full Disk Encryption
Port Protection
Media Encryption

1 - Requires purchase of SmartDefense Anti-Malware service

Documentation:

Download the Check Point Endpoint Security Media Encryption Datasheet (PDF).