Scribd
Upload
18 views

See Enc PB101

Endpoint Encryption provides full-disk and removable media encryption to protect sensitive data from loss or theft. It uses strong cryptography and centralized management to encrypt data on devices. The software offers a seamless user experience with single sign-on and multiple recovery options. Administrators can manage encryption across an organization from a single console and integrate it with data loss prevention solutions.

Uploaded by

ahmed gaafar
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
18 views

See Enc PB101

Endpoint Encryption provides full-disk and removable media encryption to protect sensitive data from loss or theft. It uses strong cryptography and centralized management to encrypt data on devices. The software offers a seamless user experience with single sign-on and multiple recovery options. Administrators can manage encryption across an organization from a single console and integrate it with data loss prevention solutions.

Uploaded by

ahmed gaafar
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

Product Brief Endpoint Encryption

Overview
Symantec® Endpoint Encryption combines strong full-disk and removable
media encryption. Built on world-leading PGP® encryption technology with
AT A GLANCE an intuitive central management platform, it protects sensitive data from
Endpoint Encryption provides strong loss or theft and helps administrators prove a device was encrypted should
full-disk and removable media it go missing. Endpoint Encryption provides the following key features and
encryption to protect sensitive data benefits:
from loss or theft.
• Comprehensive endpoint encryption
KEY BENEFITS • Strong cryptography
• Maximize protection to ensure no • User experience
files are left unencrypted • Enterprise class management
• Comply with government and With these core features, Endpoint Encryption enables your remote and
industry requirements with strong mobile workforce to be productive from anywhere, while protecting any
cryptography sensitive data that may be stored on their devices. The solution also helps
customers to maintain world-class security standards and simplify their
• Ease of use and multiple recovery
workload.
options to reduce the burden on
end users and administrators
Comprehensive Endpoint Encryption
• Consolidated encryption
During the initial encryption phase, Endpoint Encryption uses a FIPS 140-2
administration to reduce operations
validated cryptographic module to encrypt each drive, sector by sector,
burden
ensuring that no files are left unencrypted for maximum protection. The
solution also supports trusted platform module authentication with auto-
KEY FEATURES login to prove a user’s identity when they authenticate to their device.
• Comprehensive endpoint This authentication further helps provide security against threats such as
encryption for mobile workforce, firmware and ransomware attacks.
laptops, and removable media
• Architecture provides superior Strong Cryptography
scalability to easily adapt to large Endpoint Encryption uses a FIPS 140-2 validated cryptographic module.
enterprise environments This cryptographic module can help customers comply with a range of
government and industry requirements such as Continuous Diagnostics and
• Single sign-on to eliminate the need
Mitigation, Payment Card Industry Data Security Standard, Health Insurance
to re-input multiple passwords
Portability and Accountability Act, and the EU General Data Protection
• Multiple options to enable the Regulation. In many cases, when a data breach occurs, organizations must
correct mix of self-assisted recovery notify victims and governing bodies of what happened. With encryption
and administrator-assisted recovery in place, organizations can apply for Safe Harbor, removing the need to
disclose the event if a data breach occurred.
• Centralized management of native
operating system encryption and
Opal-compliant self-encrypting
User Experience
drives The following features improve the Endpoint Encryption user experience:
• Single Sign-On: Once encrypted, a user only needs to enter their
passphrase to login to their device, and single sign-on technology passes
them through to their main screen. As users access their encrypted data,
decryption and re-encryption happens instantaneously, eliminating the
need to enter another password for a seamless experience. Smart cards
are also supported when stronger authentication is required.

Endpoint Encryption
Product Brief

User Experience (cont.) Enterprise Class Management


• Recovery Options: Endpoint Encryption offers an integrated management platform to allow
Connectionless recovery is organizations to quickly deploy and manage the solution from a single
supported to allow users to console. Additionally, the following features are also provided to help
access their data, even if the organizations implement and manage the solution:
client has no connection to the • Active Directory Synchronization: Administrators can sync user and
server. To enable this, multiple group profiles with Active Directory to automate key management
recovery options are offered to and policy controls across the organization, speeding deployments,
allow the appropriate mix of self- and reducing administrative overhead. Additionally, devices that fail to
recovery and help desk support. connect to the network within a given timeframe can be locked out for
Local self-recovery enables users extra security.
to set up knowledge-based
question and answer challenges • Seamless Upgrades: Endpoint Encryption allows Windows Feature
to regain entry to their data, Updates to be installed within the need to decrypt beforehand.
while web-based help desk • Scalable Architecture: Endpoint Encryption includes a robust
support features a one-time use management architecture that provides superior scalability. This
token that the user can use to scalability ensures that organizations can easily deploy the solution to
unlock their machine. large enterprise environments without significant operational burden.
• Bring Your Own Device: • Audit and Compliance Reports: Organizations often struggle to prove
Removable media enables remote compliance with regulators and auditors. Endpoint Encryption provides
users can leverage their personal standard compliance reports that can be used as-is or easily customized
devices while still protecting to help ease the burden of proof to auditors and key stakeholders.
sensitive data. The types of
removable data supports are USB • Heterogeneous Support: Endpoint Encryption enables organizations
drives, external hard drives, and to manage native operating system encryption, such as BitLocker and
CD, DVD and Blu-ray media. FileVault from its management console. Administrators can manage all
endpoint encryption from a single console. Management capabilities
have also been extended to provide support for Opal-compliant self-
encrypting drives.

Integration with Data Loss Prevention


Enterprises continue to face data protection concerns from emerging privacy laws, targeted attacks, and digital
transformations, but sensitive data is often transferred to unprotected devices through user error. Endpoint
Encryption helps address this issue through integration with our industry-leading Symantec Data Loss Prevention
(DLP) solution. As users accumulate information on laptops and desktops, DLP scans this data, flagging sensitive
content and monitoring user activity on and off the network. When the user attempts to move sensitive material to
a removable device, instead of simply blocking the transfer and potentially frustrating the user, DLP logs the action,
notifies the user, and gives them the option to encrypt the file before authorizing the transfer. This notification
allows organizations to proactively prevent user error and ensure business continuity.

Summary
The current shift to remote work has only accelerated the trend to support Bring Your Own Device. Employees
rely on mobility and anywhere, anytime access to stay productive. Unfortunately, sensitive or regulated data may
be unknowingly synchronized from the cloud and stored on their devices, putting this data at risk if these devices
are lost or stolen. Endpoint Encryption protects sensitive information and ensures regulatory compliance, by
encrypting all files stored on these devices for maximum security.

For more information, please visit: www.broadcom.com/symantec-encryption

About Broadcom® Software


Broadcom Software is a world leader in business-critical software that modernizes, optimizes, and protects the world’s most
complex hybrid environments. With its engineering-centered culture, Broadcom Software is building a comprehensive portfolio
of industry-leading infrastructure and security software, including AIOps, Cyber Security, Value Stream Management, DevOps,
Mainframe, and Payment Security. Our software portfolio enables scalability, agility, and security for the largest global companies
in the world.

For more information, visit our website at: software.broadcom.com


Copyright © 2022 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. All
trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.
SEE-ENC-PB101 January 10, 2023

You might also like