RE: FDE solution for laptops

["Scott" <whip () supportmenot com>]

Pointsec will not attempt to connect to a network service until the
monitoring app has loaded within Windows - bootup error messages will be a
different issue. Even when the app tries to check for updated profiles, it
won't error if it is offline.

And how do you plan on encrypting the disk without touching the OS, when the
OS is installed on the disk? Pointsec (and other FDE products) don't change
anything directly with the OS (apart from installing monitoring apps) - it's
the MBR they modify.

As others have said, I highly recommened Pointsec too.


Cheers,
Scott


Need relief from IT support stress?
http://supportmenot.com

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Albert R. Campa
Sent: Friday, 22 February 2008 8:40 AM
To: Macy
Cc: ыфзкфт; security-basics () securityfocus com
Subject: Re: FDE solution for laptops

I had a user come in for a vuln scan with a lappy that had pointsec on
it and had all kinds of errors loading up and slowness. I guess it was
trying to contact the central server, but it wasnt on the network
so...

Seems easier just a disk encryption method that doesnt mess with the
OS. I believe there are others that create a small partition for it to
live on.

Saludos.

Albert

On Wed, Feb 20, 2008 at 10:12 AM, Macy <mwtorrey () hotmail com> wrote:
> Sapran,
>
>  We use and resell pointsec (now a check point company).    The reason I
>  suggest this is because it provides centralized management and remote
>  support (supports single sign-on using windows passwd, includes remote
>  support utilities in case users get locked out).
>
>  macy
>
>  --------------------------------------------------
>  From: "ыфзкфт" <sapran () gmail com>
>  Sent: Wednesday, February 20, 2008 9:47 AM
>  To: <security-basics () securityfocus com>
>  Subject: FDE solution for laptops
>
>
>
>  > Hi list!
>  >
>  > I am in search of a solution for full disk encryption. The main goal
>  > is to protect data stored at travelling managers' laptops from loss
>  > and/or theft of device.
>  >
>  > I had tried the shiny new TrueCrypt 5 with system drive/partition
>  > encryption, but it made an OEM XP boot into safe mode only, so I guess
>  > that's not a right choice.
>  >
>  > I will appreciate any help on topic.
>  >
>  > Here come some details:
>  > 1) We use mostly Dells: Inprisons, Inspirons and Vostros.
>  > 2) The encryption must be easily recoverable using rescue CD/DVD or
smth.
>  >
>  > --
>  > sapran
>  >

No virus found in this incoming message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.21.1/1302 - Release Date: 27/02/2008
4:34 PM
 

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.21.1/1302 - Release Date: 27/02/2008
4:34 PM