BitLocker Drive Encryption vs. Sophos Central Device Encryption

It is well suited especially for users that access or store sensitive/confidential data on their computers. In the case of where users are accessing confidential data over the network, it is highly recommended to use Bitlocker to encrypt the computer. In the case where users are storing confidential data on their computer, it should be a requirement that BitLocker is used/enabled. It would be less appropriate if someone was using a computer and they were not dealing with any sensitive data, or in cases where the computer is used for recreational purposes (browsing the web, playing games, etc).

Incentivized

We found the incorporated system of both AV and Encryption to be an absolute breath of fresh air for us. It is great for small and mid-sized companies. We rolled this out across our 4 global regions. We created region-specific groups for our endpoints and placed the appropriate endpoints into those groups. [Then] we defined policies for AV and Encryption that would be used inter-region and assigned roles to the different regions' support staff. Great stuff.

Incentivized

• Encrypts the entire drive and provides a high level of security.
• In an Active Directory environment, you can set up BitLocker to automatically save keys to AD.
• As part of Windows, no additional licensing costs.
• Set up and configuration is relatively easy.
• Uses TPM module to increase security.

Incentivized

• Email encryption, it can encrypt based on the criteria defined. We use regex for this to discover the content.
• We can have a view of what is the content of the email being quarantined.
• We use Sophos together with our Email Exchange

Incentivized

• Encryption is not resumed after being suspended sometimes
• Sometimes it take a long time to encrypt a disk
• Encrypting secondary drives can be tricky

Incentivized

• simply the interface
• usability for non technical teams

Incentivized

I give it a nine because encryption always leaves room for improvement, and it must change as security threats evolve and improve, and having an ever-evolving system is essential.

Incentivized

BitLocker Drive Encryption solution offering is cheaper than the one that McAfee offers, it will help you with specific business concerns like "how many encrypted assets do I have?" it's easy to maintain, easy to deploy, and easy to track. It's best suited for companies that are not trying to go far away on the disk encryption matter

Incentivized

The only other one we looked at was Symantec endpoint encryption this seemed less feature reach and less user friendly.

Incentivized

• It allowed us to move to whole drive encryption without much effort
• Integrated in Windows Enterprise, so free
• With the right recovery key, it is really easy for IT to recover the data, backup or reset the user's password.

Incentivized

• Intangible benefits to the organization data, data is highly secure
• No worries to users and IT for data stolen outside the organization
• Protected from malware and ransomware

Incentivized