Sophos SafeGuard Easy
Simple full-disk encryption for laptops, netbooks and desktops

Features:

Get secure power-on authentication and authorization

You'll protect information on your PCs from unauthorized access, while keeping things simple for your users:

Provides single sign-on (SSO) to the operating system, which means users only have to remember one set of credentials

Enables you to enforce pre-defined password rules, and you'll block password penetration attacks with a hardened login process

Allows multiple users to share encrypted computers without sharing their passwords

Lets you customize the pre-boot login screen with your company's logo and instructions to give users a consistent look-and-feel

Provides service accounts that let administrators efficiently roll out the software and perform maintenance of PCs and notebooks

Allows automation of administrative activities (such as patch management) enabled by Secure Wake-On-LAN functionality

Securely recover passwords, data and forensics

SafeGuard Easy helps your IT staff save time and lets them work with tools they already know:

Lets users recover passwords through challenge/response over the phone, through a web portal l or through local self-help, so they don't lose time waiting for an admin to reset their passwords

Uses Windows PE's external boot option to recover broken operating system configurations on encrypted disks

Works with familiar tools including EnCase (Guidance Software), Computrace (Absolute Software), AccessData and Kroll Ontrack

Integrates with Lenovo Rescue and Recovery for secure recovery of encrypted operating systems and data

Simplify set up and maintenance

Our Policy Editor lets you quickly create your initial security configuration policies. If you need to update the initial policies after deployment, you can use any standard software management tools to modify and reapply your policies.

Install quickly and remotely

For central, unattended installation, use standard MSI packages to deploy SafeGuard Easy to users' computers:

We make network rollout easy because there's no end user involvement during installation

You'll save time by choosing the fast initial encryption option, which only encrypts areas of a disk partition that are in use

Customize your reporting

A scriptable tool lets you query and report on encryption status, product version and other features. You can use this tool with most system management and reporting consoles to create custom reports.

Manage disk encryption centrally with SafeGuard Enterprise (option)

When you need to manage everything from one central point, simply upgrade from SafeGuard Easy to SafeGuard Enterprise. There's no need to decrypt and re-encrypt drives when you upgrade. And when you upgrade you also get much more, including advanced key management, extended policy administration, and token and smartcard support.

Specifications:

System requirements

Operating systems

• Microsoft Windows 7 (32 and 64 bit)
• Microsoft Windows Vista (32 and 64 bit; Service Pack 1, Service Pack 2)
• Microsoft Windows XP (32 bit; Service Pack 2, Service Pack 3)

Certifications

• Common Criteria EAL 3+
• Uses FIPS 140-2 validated cryptography

Standards and protocols

• Symmetrical encryption: AES 128/256 bit
• Asymmetrical encryption: RSA
• Hash functions: SHA-256, SHA-512
• Password hashing: PKCS #5, PKCS #12

Language versions

• English, French, German, Italian, Japanese, Spanish
• Unicode-based support for other languages

Documentation:

Download the Sophos SafeGuard Easy Data Sheet (PDF).