RE: Encrytped USB Key quick win solution‏

["Steve Freeman" <freema2 () bellsouth net>]

I have been in the position of a limited budget for a particular fiscal year
and negotiated with a vendor a cost for the current year that my company
could swallow followed with a contract for the next year to complete the
amount needed. This allowed me to implement the solution I wanted for the
enterprise only once and with the product that fit best. This kept me from
implementing one product now followed with another product in the next
fiscal year. Discuss this with the vendor you want to work with and see if
they can arrange a two part contract for the same product. This will save
you an enormous amount of work and ensure you are their customer. A win-win
proposal if you can work it out. Many vendors can accommodate this type of
sale.

Steve

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Paul Deasy
Sent: Saturday, October 03, 2009 7:29 AM
To: Secure Net
Cc: security-basics () lists securityfocus com
Subject: Re: Encrytped USB Key quick win solution‏

HI,

Have you looked at Device Control, by Lumension ?
<http://www.lumension.com/data-protection/>
In my opinion, it's a very good product. (From my view point as an
administrator of the product).

Though when you say you have a limited budget, you could always talk
with a reseller, and try to negotiate a discount for a volume order. I
can PM you the name of our reseller, (UK based),  who I have found to
be very good with pricing on the various security systems we have
bought.

PD

2009/9/30 Secure Net <secure.net () live ca>:
> Hi,
>
> I'm working in a large enterprise that will look next year for an
"enterprise class solution" that can handle all the life cycle of USB key
that use encryption.
> But now, we have to find a quick win solution that we can put in
production shortly with a limited budget.
> I personally used Truecrypt for several years but here the reason why I
don’t want to use it for an enterprise solution:
> 1-If the user lost the password of his USB key, you are dead
> 2-If the user go on a computer that don't already have Truecrypt
installed, you need administrative privilege
> I did some search and I tried FreeOTFE (http://www.freeotfe.org/)
>
> It does what I wanted to:
>
> 1-Technical Support will be able to create a backup key before giving the
USB key to the user. So they will be able to recover the data if the user
lost his password.
> 2-There is a utility called FreeOTFE Explorer that can open the encrypted
volume on the USB Key in the case you don't have administrative privilege on
the computer. The app is not very quick but it seems to do the job.
> My question is: Did someone had any bad experience with this app? If yes,
did you find a better one that did the things I mentioned before and was
working fine?
> Thanks
>
> JEP
> _________________________________________________________________
> Avec Windows Live, vous gardez le contact avec tous vos amis au même
endroit.
> http://go.microsoft.com/?linkid=9660830
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.
>
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------