Re: Mac security options

["Nevin, David" <Dave.Nevin () OREGONSTATE EDU>]

Hi Dave,

We've recently rolled out JAMF's Casper Suite to administer our macs and
couldn't be happier with it. It is worth a look.

For encryption, our enterprise solution is Check Point Software's Pointsec
but we've had mixed experiences deploying it on Macs. When it doesn't
work, we've used FileVault--not ideal from a management standpoint but at
least it is now full-disk.

Antivirus is managed Symantec SEP.

We're slowly in the process of migrating macs into AD.  We do have a
standard configuration that includes security settings such as enabling
the firewall, locking screensaver, etc.

Hope this helps--and would be happy to share more specifics--just let me
know.

Dave

--
Dave Nevin, Deputy CISO
Information Services
108E Ballard Hall
Oregon State University
Corvallis, OR 97331
541-713-3549
Dave.Nevin () oregonstate edu



 

On 7/9/13 10:46 AM, "David Opitz" <dopitz () LOYOLA EDU> wrote:

> Hi,
>
> We are looking at ways to better manage our university owned Macs.  I'm
> wondering what steps you take to secure Macs in your environment (both
> desktops and laptops).  In particular, which of the following do you do
> in your environment:
>
> - Hard drive encryptions for Mac laptops (if so - which product do you
> use?).
> - Enforcing password complexity.
> - Managed operating system patches.
> - Managed application patches.
> - Anti-virus installed.
>
> Are your Macs in AD?  Do you use SCCM to manage them?  Do you use a
> different product to assist in the management of your Macs?  Do you have
> a Mac configuration standard?  Is there anything else you do to secure
> your Macs?
>
> Our answer has mostly been "Macs are hard to manage in a large
> enterprise" so we haven't been doing too much, but we are finding that is
> just not acceptable when they will be used to access university data.
>
> Peace,
> Dave Opitz
> Loyola University Maryland