
Introduction
8 |
Introduction
Why Endpoint Encryption for Files and Folders?
All organizations have their own rules about what data is available to whom. Some
information is available to all – other information is restricted and confidential. At the
most basic level, most IT users are trusted to access their PC’s and use their
documents; however, at a higher level – for example, at the board of directors, or
within Finance, certain information (e.g. reports and shareholder information) should
remain restricted, even to system administrators.
Endpoint Encryption for Files and Folders allows you to define and protect information
in a way that only certain users can access it. This data is stored, managed, archived,
and distributed as any other file is, however, they can be viewed only by those who
have been given access.
Endpoint Encryption for Files and Folders is a “Persistent Encryption” engine. When a
file has been encrypted and has been moved or copied to another place, it remains
encrypted. If a file is moved out of an encrypted directory, it will also remain
encrypted. Likewise, if an encrypted file is moved to a FAT32 device - such as a
memory stick – the encryption will remain in place.
Endpoint Encryption for Files and Folders follows the Endpoint Encryption Policy control
methods; Administrators can set individual, department, group, or company-wide
policies such as All .doc files will be encrypted, My Documents will be
encrypted, and Users cannot explicitly decrypt encrypted data. This policy
engine is managed from the Endpoint Encryption Manager.
Design Philosophy
McAfee’s product range enhances the security of data by providing data encryption
and a token-based logon procedure using, for example, a Smart Card or a USB based
token. You can use any login method, including passwords and national ID cards to
access protected data. You can also use the same credentials for Endpoint Encryption
for Files and Folders that you may, for example, use with McAfee’s Endpoint
Encryption for PC module. The same administration system, user IDs, and ancillary
software can be used for both systems.
The Endpoint Encryption for Files and Folders client supports the following platforms:
• Microsoft Windows 2000 with SP4 + Rollup package 1
• Microsoft Windows XP SP2
• Microsoft Windows Vista
Comentarios a estos manuales