Transcript Pointsec Device Protector ® (formerly Reflex Disknet Pro)

Pointsec® Device Protector
(formerly Reflex Disknet Pro)
Device Discovery
• Requires no software installation
• Provides a complete snapshot of device activity across the
network since OS was installed
• Extensive exportable HTML reports summarise device activity
and can be used to provide business case
• Essential Pre-sales utility
Key Components
Device Manager
Removable Media Manager
Encryption Policy Manager
Auditor
Program Security Guard
Deployment Server
Device Manager
Manages known and unknown devices
Controls removable media devices on all connection ports
Supports both Black List and White List
Manages the devices by type, brand, model or individual device
Prevent the installation of unknown devices
Removable Media Manager
Digitally signs and approves devices
Detects changes performed when outside the company
Enforces a configurable content check of new devices
Enforces anti-virus check and blocks malicious code
 Once the media has been tagged with the MediaID, it can be freely used within the
Reflex Disknet Pro protected environment without any further authorisation
required. If the media is taken to a workstation not running Reflex Disknet Pro
and files are written to or removed from the device, the MediaID would become
invalid. This would mean the media item would need to be re-authorised to be
used within the protected environment.
Encryption Manager
FIPS, DIPCOG and Common Criteria Certified Encryption
Delivers transparent encryption within the network
Enables secure offline access without the need to install software
Supports encrypted device revocation and key recovery
Requires no central management or need for physical registration
Auditor
Detailed auditing of attempted security breaches
Complete audit of device usage
Client side filtering to send only relevant information to the server
Fully configurable filters and audit analysis report
Configurable e-mail alerts and HTML reporting
Program Security Guard
Prevents the introduction of malicious & unauthorized file types
Blocks the deletion or modification of administrator defined file types
Allows “trusted” applications to bypass the process check
Prevents the installation of unlicensed software
Deployment Server
Allows automated and silent client deployment
Offers easy 3 click deployment procedure
Can record a first install to configure the installation package
Can deploy any 3rd party applications, including hotfixes, patches,...