So we’ve been messing around with Check Point for awhile. But we never actually had to mass deploy it until recently. After messing around for awhile, we decided that we actually kinda’ like how they do things. There are various strategies you can take with how you choose to deploy the software, but they all boil down to building an *.ips file and either publishing it through a network mount as part of the installation package for Check Point FDE. The software automatically begins to encrypt the drive when you push it out, so you don’t need to push out an image with a pre-encrypted drive, although you will need…
-
-
PGP FDE for Mac OS X
OK, so you can encrypt disks, but not the startup disk – although if you could (and you will be able to soon) then it would be far easier to mass deploy than other solutionz…
-
Full Disk Encryption and Cost
If you require Full Disk Encryption for all laptops in your organization then don’t forget to calculate the costs of doing so. There is the chance that you might not need to provided you can control what company assets can leave the environment, but the cost of implementing a solution to do so might outweigh the cost of purchasing FDE software for the Mac populace…
-
Mac OS X: Need Full Disk Encryption?
Check out Check Point FDE for the Mac!
-
TrueCrypt
Great encryption software, although there is no full disk encryption for the Mac from TrueCrypt I hope to see it eventually. By the way, I didn’t mention this yet: it’s free. http://www.truecrypt.org/ UPDATE: While TrueCrypt does not do full disk encryption (FDE) for the boot volume still, it does do FDE for other volumes fairly easily and of course free. If you need FDE for boot volumes on Mac OS X check out PGP and CheckPoint FDE. PGP Desktop is easy to install and use and has a great command line interface. CheckPoint though seems to be a bit more mature and has an easier methodology for mass deployment.