August 01, 2006
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Flexibility of configuration; potentially robust encryption
- Weaknesses: Requires a certain level of user understanding
- Verdict: An interesting and capable tool for disk encryption, in the right hands
ProtectDrive encrypts disk drives, either wholly or in part, an approach that may well appeal to organisations or government agencies which run a fleet of laptops, or have multi-user access to fixed workstations. In such cases, concerns about data being misappropriated from the disk drives, should they fall into the wrong hands, can be very real.
Of course, such protection will only be as good as the attendant access control procedures, and the two layers should be looked at in parallel. ProtectDrive recognises this and provides flexible support for access control, including single sign-on management and the use of various GINAs.
Both Windows and Novell clients are supported, while a useful PDF manual stresses the importance of proper processes for security and data management. Much is also made of evaluation against Common Criteria, and which OSs and functions have been tested - ProtectDrive is certified to CC EAL2, with EAL4 under evaluation.
In this context, one gains the impression that ProtectDrive has been seriously considered from the broader security perspective. With regard to encryption, 3DES, IDEA and AES (up to 256-bit) algorithms are supported and encryption/decryption takes place in real-time. Theoretically this could cause a slight degradation of realised performance, but users should not find this an issue with contemporary hardware and memory complements.
User authentication takes place at pre-boot level, and two-factor authentication is supported, as is comprehensive password management, including password complexity, refresh rates and so on.
User management is simple, with up to 200 users supported per workstation configurable per user. Access to serial and parallel ports in included, as well as diskette read and write permissions.
While being reasonably straightforward in principle, there is a good deal of flexibility inherent in the configuration of this product for those who wish to exploit it.
It will appeal to those who are serious about security and prepared to invest some time in the development of risk management and appropriate processes in order to ensure that encryption is used wisely. In this respect, one might consider ProtectDrive as a professional tool worthy of inclusion in your security toolbox.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success
- Research: Hacked companies could see customer exodus if breached
- Misconfigured drive exposes locations of explosives used by oil industry