Educause Security Discussion mailing list archives

Re: Question about Endpoint Encryption


From: "Basgen, Brian" <bbasgen () PIMA EDU>
Date: Thu, 2 Sep 2010 11:54:29 -0700

 We are also using Checkpoint. It has been a usable product that has worked for us on a fairly limited scale (250 high 
risk machines), but it is not an enterprise product. They are trying to make it into an enterprise product via their 
"security suite", but I think they are a few years away. That said, from the security side, I think it is one of the 
better products out there. Last time we looked 2 years ago, many products out there were "Full disk encryption" in name 
only. 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Brian Basgen
Information Security Office
Pima Community College
Office: 520-206-4873
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Hanson, 
Mike
Sent: Thursday, September 02, 2010 10:59 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Question about Endpoint Encryption

Gregory,

We use Checkpoint endpoint protection and I can say I do not recommend it. The product was originally from Pointsec and 
they were a small and responsive company with a decent product. Then Checkpoint bought them and it has been more or 
less downhill since then. Checkpoint is supposedly doing a complete rewrite of the product now to address problems. We 
currently have three different versions of Checkpoint running, since each version is incompatible with the older 
version in terms of management. Not what you would call an ideal situation. Licensing has been a nightmare that has 
taken far too much time to deal with yearly. There have been technical product issues that have taken far too long to 
resolve as well.

I will be looking for a new vendor this Spring, so I would be interested in the feedback you gather.



Mike Hanson
Network Security Manager
The College of St. Scholastica
Duluth, MN 55811
 

On Thu, Sep 2, 2010 at 9:58 AM, Gregory N Pendergast <gnpendergast () vcu edu> wrote:
 I'm looking for feedback on endpoint encryption solutions - both products you've used or are using and your 
experiences. VCU purchased GuardianEdge some time ago, but we've run into a number of problems that have delayed our 
deployment and caused me to lose confidence in the product, to the point that I'm considering dropping it and looking 
for a different solution. The problems we've encountered are generally post-installation failures that lead to the 
computer failing to boot, inability of user to login and/or failure of drive to encrypt after installation.

My question is two-fold. First, if any of you are using an endpoint encryption product (specifically targeting laptops 
at this point), what are you using and would you recommend it to others? Secondly, if any of you are using, or have 
used GuardianEdge, have you experienced similar failures and have you had any success resolving them? We keep reaching 
a point where the vendor wants us to ship them our laptops for diagnosis.

If any of you are using GuardianEdge, I'd also like to pick your brain more directly, either by phone or email, on your 
experience with the product. So, if you're willing, contact me off list to discuss further.

Thanks,

-- 
Gregory Pendergast
Interim Information Security Officer
Virginia Commonwealth University


Current thread: