DriveLock Features

Compare DriveLock to similar products and you immediately realize that DriveLock not only matches all of their features but exceeds many of them. DriveLock enables easy administration for protecting your data against theft or accidental disclosure. Best of all, DriveLock requires no servers to define and deploy device usage and encryption policies.

Quick Links:
» Comprehensive Device Control
» Removable Media Encryption
» Full Disk Encryption
» Reporting and Auditing
» Administration
» Application Launch Filter
» System requirements

Comprehensive Device Control

• Dynamically locks removable devices (USB memory sticks, floppy disks, CD-ROM, etc.)

• Locks most types of devices (Bluetooth, Palm, Windows Mobile, Smartphones, card readers, imaging devices, network adapters, modems, sound, video and game controllers, cameras, printers and more)

• Locks most types of ports, including USB controllers, 1394/Firewire controllers, PCMCIA controllers, infrared controllers, serial (COM) and parallel (LPT) ports
• Configurable whitelists to allow access to devices (device type or device model)

• Specific storage devices can be controlled based on their serial numbers
• Separate access lists can be defined for every single device or group of devices
• Access can be granted to any user or group
• Fully integrated with Active Directory and Group Policy
• Also supports most other network operating systems, including Novell NetWare and Linux
• Policy enforcement dynamically adjusts permissions when another user logs on
• Assign drive letters to removable drives to avoid conflicts with network drives
• File filter to allow or deny coping of specific file types
• Auditing of files that are read from or written to removable drives
• Shadowing of files keeps a full record of the content of files that are copied to or from removable drives
• Separate configuration of Read and Write access for removable drives
• Drive access rules can be based on drive size or encryption status

Removable Media Encryption

• Encrypt data with state-of-the-art encryption (up to 256-bit encryption strength)
• Choice of industry-standard encryption algorithms (AES, 3DES, Blowfish, etc.)
• Encrypt data on mobile devices or hard disks
• Automatic and transparent encryption of data copied to mobile devices
• Wizard for burning encrypted CDs and DVDs
• Ability to decrypt data on computers without requiring installation of DriveLock
• DriveLock Mobile for encrypting data on Windows Mobile devices
• Secure deletion of your data to prevent data disclosure

Full Disk Encryption

• Encrypt entire hard drives, including system partition
• FIPS140-2 encryption
• Pre-boot authentication with single sign-on
• Mature tools to decrypt damaged drives
• One-time logon options for users who forgot a password
• Support for token and smartcard logon
• Central administration and monitoring of encryption status

Reporting and Auditing

• Security Reporting Center: a central reporting console for all DriveLock events
• Build extensive reports based on collected data
• Multiple alerting mechanisms for DriveLock events

Administration

• All configuration is done using a Microsoft Management Console (MMC) snap-in
• Device Scanner allows you to find out which devices are or were ever connected to all computers in your network and simplifies the creation of rules
• Easy client deployment using Group Policy or other software deployment system
• Central configuration using Active Directory and Group Policy
• Alternate configuration mechanism using configuration files via UNC path, HTTP or FTP
• Supports Group Policy Management Console (GPMC) and NetIQ Group Policy Administrator
• Remote connection to Client computers to temporarily unlock devices and to troubleshoot policy enforcement
• Remote identification of devices connected to clients
• Quick policy deployment using templates for common computer models (Dell, HP, IBM, etc.)
• Deployment Wizard
• Customizable taskbar notification with HTML text
• Multilingual user interface (MUI), supporting 6 languages, more to be added soon
• Anti-tampering mechanisms, such as an optional password for uninstalling DriveLock to prevent unauthorized disabling of the system protection

Application Launch Filter

• Comprehensive control over who can start which programs
• Flexible combination of whitelists and blacklists
• Auditing of all application usage
• Easy implementation using application templates

System requirements

• Windows Vista, Windows XP SP2 or Windows Server 2003 SP1
• Windows 2000 Active Directory (or higher) with Group Policy recommended for central configuration