• Mac OS X,  Mac OS X Server,  Mass Deployment

    Mac OS X: Check Point FDE

    So we’ve been messing around with Check Point for awhile.  But we never actually had to mass deploy it until recently.  After messing around for awhile, we decided that we actually kinda’ like how they do things.  There are various strategies you can take with how you choose to deploy the software, but they all boil down to building an *.ips file and either publishing it through a network mount as part of the installation package for Check Point FDE.  The software automatically begins to encrypt the drive when you push it out, so you don’t need to push out an image with a pre-encrypted drive, although you will need…

  • Mac OS X,  Mac Security

    Full Disk Encryption and Cost

    If you require Full Disk Encryption for all laptops in your organization then don’t forget to calculate the costs of doing so.  There is the chance that you might not need to provided you can control what company assets can leave the environment, but the cost of implementing a solution to do so might outweigh the cost of purchasing FDE software for the Mac populace…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Ubuntu,  Unix,  Windows Server,  Windows XP

    TrueCrypt

    Great encryption software, although there is no full disk encryption for the Mac from TrueCrypt I hope to see it eventually.  By the way, I didn’t mention this yet: it’s free. http://www.truecrypt.org/ UPDATE: While TrueCrypt does not do full disk encryption (FDE) for the boot volume still, it does do FDE for other volumes fairly easily and of course free.  If you need FDE for boot volumes on Mac OS X check out PGP and CheckPoint FDE.  PGP Desktop is easy to install and use and has a great command line interface.  CheckPoint though seems to be a bit more mature and has an easier methodology for mass deployment.