Full Disk Encryption
R81 Harmony Endpoint Server Administration Guide|185
Full Disk Encryption
Full Disk Encryption gives you the highest level of data security for Endpoint Security client
computers. It combines boot protection and strong disk encryption to ensure that only
authorized users can access data stored in desktop and laptop PCs.
When configuring the Full Disk Encryption policy, you choose an encryption engine for groups
of computers. The encryption engine can be either
"Check Point Full Disk Encryption" below
or
"BitLocker Encryption for Windows Clients" on page208
.
Check Point Full Disk Encryption
Check Point Full Disk Encryption has two main components:
n
Disk encryption ensures that all volumes of the hard drive and hidden volumes are
automatically fully encrypted. This includes system files, temporary files, and even
deleted files. There is no user downtime because encryption occurs in the background
without noticeable performance loss. The encrypted disk is inaccessible to all
unauthorized people.
n
Pre-boot Protection requires users to authenticate to their computers before the
computer boots. This prevents unauthorized access to the operating system using
authentication bypass tools at the operating system level or alternative boot media to
bypass boot protection.
Configure the settings for Check Point Full Disk Encryption in SmartEndpoint in the Policy tab
> Full Disk Encryption rules.
To Next Page