© 2012 SECUDE IT Security, LLC
END-POINT DATA ENCRYPTION
Enabling Compliance through Smart End Point Encryption
AgendaAgenda
� About SECUDE� Solution Portfolio
� FinallySecure Enterprise� SecureFolder Enterprise
� Case Studies� Customers
© 2012 SECUDE IT Security, LLC
� Customers
8/20/20132
About SECUDEAbout SECUDE
� Facts & Figures� 1,000,000+ licensed users� 15 years in business� Privately held
� Corporate Milestones� 1996: Founded by SAP AG and Fraunhofer Research Institute
© 2012 SECUDE IT Security, LLC
� 2005: Purchased Full Disk Encryption Technology� 2006: First hybrid Full Disk Encryption in partnership with Seagate� 2010: SAP announced acquisition of part of SECUDE IP� 2011: SECUDE focuses on Data Protection business
8/20/20133
SECUDE ExperienceSECUDE Experience
GovernmentGovernment Global Enterprises
Global Enterprises
© 2012 SECUDE IT Security, LLC
Mid-sizeMid-size System Integrators
System Integrators
8/20/20134
Solution PortfolioSolution Portfolio
Central Management• Emergency Recovery• Helpdesk• User & Device Management
• Shared Work Groups• Access Control Policies• Compliance Reporting & Auditing
© 2012 SECUDE IT Security, LLC 8/20/20135
Full Disk Encryption
File & Folder Encryption
FinallySecure™ Enterprise
SecureFolder Enterprise
Drivers for End Point EncryptionDrivers for End Point Encryption
Compliance RequirementsCompliance Requirements
Brand ReputationBrand Reputation
© 2012 SECUDE IT Security, LLC
Brand ReputationBrand Reputation
Data Loss IncidentsData Loss Incidents
8/20/20136
Incidents do happen!Incidents do happen!
© 2012 SECUDE IT Security, LLC 8/20/20137
Competitive SummaryCompetitive Summary
Folder Encryption
Software Full Disk Encryption
Hardware Full Disk Encryption
Hybrid Full Disk Encryption
Hybrid FDE+ Folder
Complete Power-off Protection � � � � �
Data-in-use/transit Protection � � � � �
No User Training required � � � � �
Rapid Deployment � � � � �
© 2012 SECUDE IT Security, LLC 8/20/20138
Protection against Admin Access � � � � �
Highest User Productivity � � � � �
Highest Level of Compliance � � � � �
Integration into Management Infra. � � � � �
Competitors • Symantec• Sophos• McAfee
• McAfee• Symantec• Sophos• …
• WinMagic• TrendMicro• Sophos• Symantec
• SECUDE • SECUDE
FinallySecure Enterprise
© 2012 SECUDE IT Security, LLC
FinallySecure EnterpriseHybrid Full Disk Encryption
8/20/20139
ComplianceCompliance
State of the Art EncryptionState of the Art Encryption
Compliance ReportingCompliance Reporting
© 2012 SECUDE IT Security, LLC
Compliance ReportingCompliance Reporting
FIPS 140-2FIPS 140-2
8/20/201310
FlexibilityFlexibility
End Point Management IntegrationEnd Point Management Integration
Configurable Level of Configurable Level of
© 2012 SECUDE IT Security, LLC
Configurable Level of SecurityConfigurable Level of Security
Automatic Hardware DetectionAutomatic Hardware Detection
8/20/201311
ProductivityProductivity
Highest PerformanceHighest Performance
Virtually TransparentVirtually Transparent
© 2012 SECUDE IT Security, LLC
Virtually TransparentVirtually Transparent
Offline HelpdeskOffline Helpdesk
8/20/201312
Full Disk Encryption Competitive AdvantagesFull Disk Encryption Competitive Advantages
� Performance/Features� Takes less time to initially encrypt drive� Better run-time performance� External Media Encryption built-in� Selected for Novell’s ZENworks product offering
� Deployment� AD/LDAP Integration; no separate credentials or complicated sync
required
FinallySecure™Enterprise
© 2012 SECUDE IT Security, LLC
required� Single Sign-On without GINA replacement� Ability to suspend pre-boot for painless patch deployment� Support for automatic user capturing to ease deployment
� Management� Support standalone mode; no backend required� Optional central management through web-based console, scripting
engine or development API� Compliance at lowest possible cost
8/20/201313
SummarySummary
FinallySecure™ Enterprise enables Enterprises to be
© 2012 SECUDE IT Security, LLC 8/20/201314
FinallySecure™ Enterprise enables Enterprises to be compliant at the lowest possible cost.
Pre-Boot AuthenticationPre-Boot Authentication
© 2012 SECUDE IT Security, LLC 8/20/201315
Challenge/Response HelpdeskChallenge/Response Helpdesk
© 2012 SECUDE IT Security, LLC 8/20/201316
ReportingReporting
© 2012 SECUDE IT Security, LLC 8/20/201317
SecureFolder Enterprise
© 2012 SECUDE IT Security, LLC
SecureFolder EnterpriseShared Folder Encryption
8/20/201318
SecureFolder EnterpriseSecureFolder Enterprise
Local and Shared Folder EncryptionLocal and Shared Folder Encryption
Multi-User AccessMulti-User Access
© 2012 SECUDE IT Security, LLC 8/20/201319
Single- and Multi-Factor AuthenticationSingle- and Multi-Factor Authentication
IDM IntegrationIDM Integration
LDAP & Standalone ModeLDAP & Standalone Mode
Local Folder EncryptionLocal Folder Encryption
© 2012 SECUDE IT Security, LLC 8/20/201320
Network Folder EncryptionNetwork Folder Encryption
© 2012 SECUDE IT Security, LLC 8/20/201321
Intuitive User InterfaceIntuitive User Interface
© 2012 SECUDE IT Security, LLC 8/20/201322
Competitive AdvantagesCompetitive Advantages
� Support for Distributed File System� Full LDAP/AD Integration� Transparent to end users and data processing workflows� Optional multi-factor authentication� Enterprise API for integration into existing IDM systems� Ability to run in standalone mode
© 2012 SECUDE IT Security, LLC
� Ability to run in standalone mode� Optional web-based management console available
8/20/201323
Questions?Questions?
© 2012 SECUDE IT Security, LLC 8/20/201324
Copyright InformationCopyright Information
SECUDE AG © 2012 All rights reserved.
All product and service names mentioned are the trademarks of theirrespective companies. No part of this publication may be reproduced ortransmitted in any form or for any purpose without the express writtenpermission of SECUDE AG. The information contained herein may be
© 2012 SECUDE IT Security, LLC
permission of SECUDE AG. The information contained herein may bechanged without prior notice.
Microsoft, Windows, and Active Directory are the brand names or registeredtrademarks of Microsoft Corporation in the United States. ACE/Server, RSA,and SecurID are brand names or registered trademarks of RSA Security Inc.
8/20/201325
SECUDE vs. CynapsProSECUDE vs. CynapsPro
� SECUDE� Web-based Management Console (FinallySecure Management
Console)� Full Disk Encryption (FinallySecure Enterprise)
� Limited External Media Encryption
� Shared Folder Encryption (SecureFolder Enterprise)
� CynapsPro (SECUDE-branded OEM)
© 2012 SECUDE IT Security, LLC
� CynapsPro (SECUDE-branded OEM)� Windows-based Management Console� Full featured Device/Interface Control (DevicePro)� Full featured External Media Encryption (CryptionPro)� Full features Application Control (ApplicationPro)� Full Disk Encryption (FinallySecure Enterprise)
8/20/201326