Health Insurance Portability and Accountability Act (HIPAA) Solution

§ 164.312(a)(2)(iv) Encryption and decryption (addressable)

Implement a mechanism to encrypt and decrypt EPHI.

Check Point Full Disk Encryption delivers the highest level of data security by providing a strong, full-disk encryption solution for PCs and laptops as well as access control. Check Point Full Disk Encryption Pointsec enables the secure exchange of sensitive data by ensuring the integrity and authenticity of data.  Check Point's remote access solutions, VPN-1 and Connectra, provide strong encryption for data during transmission over open networks using standards-based encryption protocols. VPN-1 supports SSL- and IPSec-encrypted communication protocols. Connectra supports SSL- and TLS-encrypted communication protocols. In addition, both products support the MD5 and SHA-1 protocols to ensure the integrity of secure transmissions involving cardholder data.

UTM-1 Edge, which provides Wi-Fi access as part of the solution, employs IPSec-over-WLAN encryption and enables the regular rotation of WEP keys. It supplements WEP, WPA, and WPA with inspection by Check Point's firewall, intrusion prevention, and antivirus technologies. Users who use IPSec over WLAN rather than WEP can be granted higher access rights, as well.

Check Point VARs, SIs, and business partners