July 03, 2009
Data Encryption SystemsProduct:
£75 (single), £45 (1,000 users)
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Provides an intuitive way of handling removable media
- Weaknesses: LDAP integration, key recovery and documentation could use small improvements
- Verdict: An overall solid offering, given the price point for volume licensing
DESlock+ is a software-based product that contains both a central administration server component as well as a client application to manage encryption in the enterprise. Both the management software and client agents install on any 32-bit Windows host from 2000 to Windows 7 RC and the backend database is SQL Server.
Installation of both the management console and client agent is driven by point-and-click wizards which provide a fast and easy setup. Once it is set up, integrating with an LDAP service is a bit tricky. Instead of a direct import or synchronisation with a directory service, administrators are required to export users to a .CSV file and then import the file to the DESlock+ database. Unfortunately, as users or groups change, this must be repeated.
Admin and management is straightforward and intuitive. Users are assigned keys based on logical groups, and user access to hosts, folders, files and removable media is based on this chain of permissions. Encryption methods ranging from whole disk to individual files or folders are set by policy from the management console, which contains a vast number of useful, customisable options. One tiny drawback we noted was when whole disk encryption is used. Users will have to authenticate three times to the host: the PBA screen, the Windows GINA and then the DESlock+ client software.
A unique feature that we liked is the way DESlock+ handles removable media such as USB drives. Users are able to utilise USB tokens without having to encrypt the entire drive. An encrypted folder is created on the stick and any PC with the DESlock+ client software installed will mount the drive from the encrypted folder, making the root folder of the drive equate to the encrypted data. Data is visible or hidden depending on whether the host has the agent installed.
With the extensive features of the product, we would have expected to see an extensive set of documentation, but it consists of just one PDF, which provides some screenshots and brief instructions.
Included in the cost of the product is 8/5 phone and email support. The support website contains a user knowledgebase and FAQ list.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- Researchers hack Visa cards in six seconds
- The information security implications of M&A deals
- Cyber-security must reflect risk not just regulation
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?