BitLocker Drive Encryption vs. Check Point Endpoint Media Encryption and Port Protection (Pointsec)

It is well suited especially for users that access or store sensitive/confidential data on their computers. In the case of where users are accessing confidential data over the network, it is highly recommended to use Bitlocker to encrypt the computer. In the case where users are storing confidential data on their computer, it should be a requirement that BitLocker is used/enabled. It would be less appropriate if someone was using a computer and they were not dealing with any sensitive data, or in cases where the computer is used for recreational purposes (browsing the web, playing games, etc).

Incentivized

Check Point Endpoint Media Encryption and Port Protection (Pointsec) is well suited for Microsoft Windows environment. While, for MacOS it is less appropriate.

Incentivized

• Encrypts the entire drive and provides a high level of security.
• In an Active Directory environment, you can set up BitLocker to automatically save keys to AD.
• As part of Windows, no additional licensing costs.
• Set up and configuration is relatively easy.
• Uses TPM module to increase security.

Incentivized

• The product works with Windows, Linux, and OS X.
• The management of Pointsec has really become very simple and centralized for all IT to handle with ease.
• Preboot encryption keys in the form of a password, by inserting a USB drive containing the key and/or using a one-time password generating device such as an RSA token.

Incentivized

• Encryption is not resumed after being suspended sometimes
• Sometimes it take a long time to encrypt a disk
• Encrypting secondary drives can be tricky

Incentivized

• Types of devices to control needs to be added like McAfee and GFI Endpoint Security.
• Device whitelisting needs more granular level like by Vendor ID, Serial Number, Device ID etc.
• Device Control and Media Protection on MacOS to be added.

Incentivized

I give it a nine because encryption always leaves room for improvement, and it must change as security threats evolve and improve, and having an ever-evolving system is essential.

Incentivized

BitLocker Drive Encryption solution offering is cheaper than the one that McAfee offers, it will help you with specific business concerns like "how many encrypted assets do I have?" it's easy to maintain, easy to deploy, and easy to track. It's best suited for companies that are not trying to go far away on the disk encryption matter

Incentivized

Symantec Encryption, a few management points led me to evaluate and not go with it.

Incentivized

• It allowed us to move to whole drive encryption without much effort
• Integrated in Windows Enterprise, so free
• With the right recovery key, it is really easy for IT to recover the data, backup or reset the user's password.

Incentivized

• It protects your data to being leaked from Endpoint.
• It protects the Removal Storage Media unauthorize use on other endpoint
• The policy management is user freindly and roll out on the endpoint is just a signle click away to protect your sensative data.

Incentivized