The Data Encryption Standard was once a predominant symmetric-key algorithm for the encryption of electronic data.Whether you’re a large enterprise or small business, you have to be more vigilant than ever when it comes to protecting your confidential data The threat landscape continues to grow more volatile, putting your data at risk in the latest Symantec Internet Security Threat Report, the total number of reported breaches grew by 62 percent over the previous year, with the number of identities exposed due to those breaches quadrupling to more than 5 million But your data is not at risk just to hackers Accidental exposure and device theft/loss accounted for 56 percent of those breach incidents. Regulatory compliance, data privacy concerns and brand reputation often become powerful motivating factors for organizations to take advantage of encryption technologies. Despite encryption’s effectiveness at keeping sensitive data safe, far too many organizations fail to take advantage of its data privacy and security benefits others might employ encryption to a limited degree within their organization, but not to the full extent necessary to adequately safeguard their sensitive data and communications The reasons for non- or under-utilization of encryption vary, but often it’s due to unfounded encryption misperceptions

Symantec Encryption Solutions

 Symantec’s encryption portfolio includes endpoint, file and folder and email encryption. Integration with Symantec Data Loss Prevention automatically encrypts sensitive data being moved onto removable media devices or residing in emails and files. Robust management features include individual and group key management, automated policy controls, and out-of-the-box, compliance-based reporting. Heterogeneous management capabilities include support for native OS encryption (BitLocker and FileVault2) and Opal compliant self-encrypting drives.

Symantec Endpoint Encryption

Full-Disk and Removable Media Encryption with Management

Symantec Endpoint Encryption, powered by PGP technology provides organizations with strong full-disk and removable media encryption and the ability to integrate with Symantec Data Loss Prevention. Intuitive management enables enterprise scale deployments and features compliance-based, out-of-the-box reporting plus customizable reports. Management capabilities include support for native OS encryption (BitLocker and FileVault2) and Opal compliant self-encrypting drives.

Key Features

  • Built PGP Strong – High performing, strong encryption, built with PGP Hybrid Cryptographic Optimizer (HCO) technology and leveraging AES-NI hardware optimization for even faster encryption speeds.
  • Single-Sign-On – SSO means fewer passwords for users to remember.
  • Key Recovery – Multiple recovery options allow organizations to determine the right solution for them to minimize potential lockouts and reduce HelpDesk calls.
  • Active Directory Support – Individual and group policies and keys can be synchronized with Active Directory to help speed deployments and reduce administration burdens.
  • Robust Reporting – Administrators can take advantage of out-of-the-box compliance reports or customize their own reports to help ease the burden of proof to auditors and key stakeholders.
  • Heterogeneous Management – Management capabilities have been extended to include support for BitLocker (Microsoft), FIleVault2 (Apple) and support for Opal compliant self-encrypting drives.

 Key Benefits

  • User-Friendly – Installation and registration is completely transparent to users, while CPU utilization during initial encryption is minimized to ensure that users can continue being productive while encryption happens in the background.
  • Flexible – Support multi-user deployments in both Active Directory and non-Active Directory environments.
  • Collaborative – Users can access encrypted data on removable media safely even on systems without Symantec Endpoint Encryption installed.
  • Scalable – Scalable management architecture easily adapts to small and large enterprise environments.

Stronger Protection – Symantec’s market leading Data Loss Prevention (DLP) software integrates with removable media encryption to analyze data before it’s transferred and automatically encrypt sensitive outgoing data.

Symantec Gateway Email Encryption

Network-based email encryption with no client software

Symantec Gateway Email Encryption provides centrally managed email encryption to secure email communications with customers and partners regardless of whether or not recipients have their own email encryption software. With Gateway Email Encryption, organizations can minimize the risk of a data breach while complying with regulatory mandates for information security and privacy.

 Key Features

  • Customizable – Provides customizable, secure delivery options such as a secure web portal or protected PDF attachments even if the recipient lacks their own encryption solution.
  • Integration – Optional integration with Symantec Data Loss Prevention or Symantec Messaging Gateway allows organizations to protect potentially sensitive communications from leaving their network unencrypted.
  • Management – Integrated management includes:
    • Automated key management and policy controls synched with Active Directory or LDAP
    • Extensive reporting and logging
    • Multiple recovery options

Key Benefits

User Friendly – Email is secured automatically without burdening users with the need for client software.

Scalable – Administration can be simplified by adding other Symantec Encryption solutions to the management console without additional integration.

Symantec Desktop Email Encryption

End-to-End email encryption for laptops and desktops

Symantec Desktop Email Encryption provides an end-to-end email encryption solution that automatically encrypts and decrypts email directly between clients without the need to log into a third-party website. Email remains encrypted on internal mail servers or when email is outsourced to the cloud.

Key Features

  • Standards Based – Enables true end-to-end email encryption using OpenPGP and S/MIME message formats.
  • Integration – Works with standard email clients such as Outlook, Thunderbird, and Lotus Notes .
  • Management – Integrated management includes:
    • Automated key management and policy controls synched with Active Directory or LDAP
    • Extensive reporting and logging
    • Multiple recovery options

Key Benefits

  1. Secure – Encrypts email at the client rather than the mail server or gateway, helping ensure only authorized users can access content.
  2. User Friendly – Improves policy and regulatory compliance without hindering productivity.
  3. Fast – Operates as a proxy to increase performance while removing the need for application or version-specific plug-ins.

Scalable – Administration can be simplified by adding other Symantec Encryption solutions to the management console without additional integration.

Symantec File Share Encryption

File and folder encryption with policy enforcement to enable team collaboration and cloud sharing

Symantec File Share Encryption allows users and groups to automatically or manually encrypt files and folders on laptops, desktops, and file servers for secure file sharing. Files and folders can be automatically encrypted based on policy or manually using a simple drag-and-drop interface.

Key Features

  • Automation – File encryption can be set to automatically encrypt files from specified applications or set folders, including Dropbox.
  • User Friendly – Users can easily encrypt files manually by dropping files into folders specified for encryption or by right-clicking files and selecting which user or group keys to encrypt to.
  • Role Separation – Role separation is supported by enforcing different permission levels for users, data owners, and administrators.
  • Integration – Optional integration with Symantec Data Loss Prevention allows organizations to automatically encrypt sensitive data found on network drives.
  • Management – Integrated management includes:
  • Automated key management and policy controls synched with Active Directory or LDAP
  • Extensive reporting and logging
  • Multiple recovery options

Key Benefits

  • Secure Sharing – Enables users to read, write, and share encrypted files across their organization internally and in the cloud via Dropbox without impacting productivity.
  • Key Ownership – Enables administrators to provide owner-based content encryption for files and folders while maintaining organizational control over encryption keys and policies.
  • Security in Transit – By embedding encryption into the file or folder, it can be moved without losing its protection, ensuring authorized access only by those with appropriate permissions.

Scalability – Administration can be simplified by adding other Symantec Encryption solutions to the management console without additional integration.

Command Line

Symantec Command Line enables organizations to quickly and easily integrate encryption into batch processes, scripts, and applications to ensure the security of corporate data at rest or in transit. Whether your challenge is protecting credit card information, financial transactions, payroll, medical records, or other confidential information, Command Line’s scriptable encryption is a key part of an organization’s data protection tool kit.

Key Features

  • Command line based scriptable encryption which operates on 35 different platforms from laptops to servers to mainframes.
  • Integrates with most existing scripting tools such as Shell Scripts, Perl, and Windows batch files.
  • Over 300 encryption operations available; encrypt, decrypt, wipe, self-decrypting archive creation and more.
  • Can allocate and manage keys as well as interact with keyservers to support uploading and downloading of keys from keyservers plus searching for keys over LDAP.

Key Benefits

  • Easily add encryption to existing operational scripts and applications such as backup procedures, end-to-end file transfers and lock-box based data access.
  • Automate labor and time intensive encryption activities such as file server encryption and ftp file transfers.

Simplify true end-to-end file transfer protection. Easily protect files not only in transit but also at rest on sending and receiving file servers.