Lost or stolen laptops and desktop PCs are a major cause of data breaches. SafeGuard Easy protects confidential data on laptop and desktop PCs with full-disk encryption for internal and external hard disks - easily and transparently. If a PC is lost or stolen, the data is unreadable - even if the hard disk is removed - and you are protected and compliant with data security regulations.

SafeGuard Easy Features

 

Strong, transparent encryption

• Extensive transparent encryption functionality

• Full hard disk encryption (NTFS, FAT, FAT32)

• Strong, internationally recognized encryption algorithms

• Secure, encrypted hibernation

• Encrypted data cannot be read even if hard drives are removed from PCs, except by security administrators

• High-speed encryption/decryption algorithms Secure power-on authentication and authorization

• Pre-boot user authentication with Windows credentials (user ID, password)

• Single sign-on to the operating system

• Pre-defined, enforced password rules

• Multi-user pre-boot environment with audit trails

• Hardened log-on process prevents password penetration attacks

• User-friendly graphical pre-boot login screen that is customizable

• Service accounts allow administrators to securely access PCs while end users retain ownership

• Automated administrative activities enabled by Secure Wake-On-LAN

Enforceable policy

SafeGuard Easy comes with a Policy Editor that allows administrators to create initial security configuration policies for SafeGuard Easy. If the initial policies need to be updated after deployment, these policies can be modified and reapplied via any standard software management tool.

Reporting

SafeGuard Easy provides a scriptable tool to query and report on encryption status, product version, etc. The tool can be integrated into most system management and reporting consoles for customized reporting.

 

Easy, remote installation

• Installation packages can be distributed and installed centrally and unattended via standard MSI packages.

• Network rollout is easy—user involvement is not required

• Offers fast initial encryption option, which encrypts only used areas of a partition. This speeds up initial encryption/decryption process.

Central administration with SafeGuard Enterprise (optional)

SafeGuard Easy is designed to be deployed in non-centrally managed environments or environments that prefer using application-independent software management tools. If centralized management is required, SafeGuard Easy can be easily upgraded to SafeGuard Enterprise, Sophos’s enterprise-class data security solution. SafeGuard Enterprise provides advanced key management and policy administration. Tokens and smartcards are also supported. SafeGuard Easy can be upgraded without having to decrypt and re-encrypt the drives.

 

Secure recovery of passwords, data and forensics

• Challenge/response over the phone with the help desk for recovery of forgotten passwords

• Local self-help to recover forgotten passwords during pre-boot without calling the help desk or the need for an internet connection

• External boot option with Windows PE (e.g., for recovering broken operating system configurations on encrypted disks)

• Ready for EnCase (Guidance Software), AccessData and Kroll Ontrack (access requires user or administrator cooperation)

• Support for Microsoft Business Desktop Deployment and Computrace

• Integration with Lenovo Rescue and Recovery for secure recovery of encrypted operating systems and data