BitLocker Drive Encryption vs. Check Point Harmony Endpoint

It is well suited especially for users that access or store sensitive/confidential data on their computers. In the case of where users are accessing confidential data over the network, it is highly recommended to use Bitlocker to encrypt the computer. In the case where users are storing confidential data on their computer, it should be a requirement that BitLocker is used/enabled. It would be less appropriate if someone was using a computer and they were not dealing with any sensitive data, or in cases where the computer is used for recreational purposes (browsing the web, playing games, etc).

Incentivized

Check Point Endpoint Media Encryption and Port Protection (Pointsec) is well suited for Microsoft Windows environment. While, for MacOS it is less appropriate.

Incentivized

• Encrypts the entire drive and provides a high level of security.
• In an Active Directory environment, you can set up BitLocker to automatically save keys to AD.
• As part of Windows, no additional licensing costs.
• Set up and configuration is relatively easy.
• Uses TPM module to increase security.

Incentivized

• Requires authorized passwords and logins from end users.
• Utilizes voiceprint recognition to validate users.
• Allows for a one time login from end users working remotely away from their desks.

Incentivized

• Encryption is not resumed after being suspended sometimes
• Sometimes it take a long time to encrypt a disk
• Encrypting secondary drives can be tricky

Incentivized

• Types of devices to control needs to be added like McAfee and GFI Endpoint Security.
• Device whitelisting needs more granular level like by Vendor ID, Serial Number, Device ID etc.
• Device Control and Media Protection on MacOS to be added.

Incentivized

I give it a nine because encryption always leaves room for improvement, and it must change as security threats evolve and improve, and having an ever-evolving system is essential.

Incentivized

BitLocker Drive Encryption solution offering is cheaper than the one that McAfee offers, it will help you with specific business concerns like "how many encrypted assets do I have?" it's easy to maintain, easy to deploy, and easy to track. It's best suited for companies that are not trying to go far away on the disk encryption matter

Incentivized

Symantec Encryption, a few management points led me to evaluate and not go with it.

Incentivized

• It allowed us to move to whole drive encryption without much effort
• Integrated in Windows Enterprise, so free
• With the right recovery key, it is really easy for IT to recover the data, backup or reset the user's password.

Incentivized

• Stops Ransomware attacks
• Easy to manage
• Easy to deploy

Incentivized