Introduction
Reflex Disknet Pro is the only global solution to offer management of all removable media I/O devices combined with transparent encryption
Recent surveys have shown that authorized users now pose the biggest threat to an organization's IT security. Most organizations have adequate external security for e-mail and internet access but very few have procedures in place to stop internal security breaches. The release of new 'plug and play' operating systems like MS Windows 2000/XP bring with them new security threats.
Removable media devices can now be plugged into workstations and function without the need to logon with administrative rights and also without the need to install third party drivers. These devices often have large data storage capabilities giving an attacker the ability to import unauthorized data, unlicensed software, malicious code, games, screen savers and other inappropriate material. More importantly these devices increase the risk of theft of intellectual property and proprietary information.
Reflex Disknet Pro is a unique corporate solution that provides a policy driven mechanism of securing an organization's information and ensures data integrity.
Reflex Disknet Pro provides unrivalled end point security over the use of USB and other Memory Devices. By managing the use of all I/O devices with Removable Media Manager (RMM) and Device Manager the system administrator can take back control. Access to devices can be controlled either by denying all access, providing read only access, allowing full authorized access or enforcing only encrypted access.
Reflex Disknet Pro includes the following features and benefits:
Manages the use of all removable media & I/O devices (printers, modems, PDAs, scanners, RIM, Bluetooth etc) |
Reflex Disknet Pro is the only solution to support both white list and black list control of removable media and I/O devices on any port (USB, Firewire, IDE, Bluetooth etc). The system administrator can centrally manage access to all devices both known and unknown. Using white list security it possible to deny access to ALL devices except for those specifically permitted. Using Black List security it is possible to grant access to all devices apart from explicitly un-trusted devices. Device control can be either on a global device type basis or as specific as model and brand of device. In addition, Reflex Disknet Pro includes a unique media authorization system that digitally tags and authorizes devices based on content. By ensuring that only digitally signed devices can be accessed Reflex Disknet Pro can provide device specific security rights.
The following modes of operation are provided:
No access
Read only access
Read only signed access
Full access
Full encrypted access (Encryption Policy Manager)
Full encrypted access with the ability to access data offline
* Note all device access can be type, model or brand specific |
Transparent removable media encryption |
Reflex Disknet Pro can enforce encryption of removable media devices. This component enables businesses to promote the use of digital storage devices in a controlled and secure manner. Encryption is transparent to the user and can be globally enforced including the ability to allow offline access. If offline access is permitted users can access encrypted media on third party systems via a password without the need to install any software and more importantly without the need for local administration rights on the 3rd party system. Reflex Disknet Pro is the only solution on the market to provide this functionality. |
Unauthorized software/file protection |
The introduction of unapproved software, spyware, malicious code and other administrator defined file types can be controlled on a user/group basis. New software packages can only be installed by trusted users/applications. |
Generic active/malicious code protection |
Blocks the introduction of viruses, adware and spyware by providing complete 'day zero' protection. |
Centralized management |
Reflex Disknet Pro utilizes client>server technology and integrates transparently with the existing network infrastructure. Management is performed using a familiar Microsoft Management Console (MMC) interface. |
Centralized auditing and alerts |
A centralized audit of all attempted security breaches and device usage is maintained. Audit information is encrypted and filtered on the client side before sending to the server at defined intervals. E-mail alerts can be configured for administrator defined events. |
Client side content filtering of removable media |
Administrator defined content filtering can be performed on all removable media devices. A low level file scan can be performed to ensure only permitted file types are introduced on removable media. |
Automatic anti-virus scanner integration |
The Reflex Disknet Pro client software automatically detects and integrates with any installed 3rd party anti-virus scanners. A complete virus check can be enforced of any new device before access is granted. |
Remote/Mobile user support |
Remote and standalone machines can be controlled in the same way as fully networked workstations. Where a VPN or RAS connection is present central administration can be performed. |
Transparent network deployment |
The Reflex Disknet Pro client software can be silently deployed using any existing MSI or command line compatible software distribution package. Alternatively, Reflex Disknet Pro is supplied with the Reflex Deployment Server which provides deployment and management of the entire Reflex product range. |
Supports MS Windows NT/2000/2003/XP & Novell |
Reflex Disknet Pro supports MS Windows NT/2000/2003/XP & Novell NDS networks |
|
