Close
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cybersecurity
    • Cybersecurity
    • IT Management

    SecureWave Gets High Marks for Lock-Down Capabilities

    By
    Andrew Garcia
    -
    April 17, 2007
    Share
    Facebook
    Twitter
    Linkedin

      SecureWaves Sanctuary 4.1 is simply one of the most comprehensive security lockdown products eWeek Labs has seen to date, allowing an unparalleled granularity of control over user devices and settings.

      While initial deployment can be complex, and ongoing policy management could definitely be better organized, Sanctuary 4.1s many capabilities will go a long way toward locking out mischief while clamping down on data.

      We tested the Sanctuary Device Control flavor of Sanctuary 4.1, which provides device lockdown, encryption and in-depth reporting.

      SecureWave also offers Sanctuary Application Control, which is functionally akin to Bit9 Parity. Customers can get both products in the full Sanctuary suite.

      The first thing we noticed about Sanctuary was the incredibly deep level of control it provides. Not only can Sanctuary control access to pretty much any device we could think of (including USB drives, CD/DVDs, PDAs and infrared or wireless networking ports, among many others), but it is also bus or connection aware. For example, we could create different access rules governing the use of wireless network adapters connected via USB and those connected via PCI.

      We created policies in the Device Explorer panel, one of many configuration screens in the Sanctuary Management Console. (The console can be installed on any Windows machine throughout the network.)

      The Device Explorer looks remarkably similar to Windows Device Manager, but underneath each listed device class are line items of the access policies rather than individual devices. For example, under the Removable Storage Devices class, we configured a series of rules, assigning different access privileges and requirements for Domain Administrators and for Domain Users, as well as different copy limits (how much data a user could transfer to this device) and shadow policies (reporting exactly what elements were transferred or accessed from the monitored device) for each group.

      But this granularity can get confusing as the policy rules for every user and group are muddled together. We could pull up a report of the specific rules applied to a specific user or group, but we would prefer a more object-based approach to policy definition, where we could create policy templates that we could then apply to a user or groups. This could extend existing configurations to new groups or users as a company grows.

      Sanctuarys reporting and logging capabilities are outstanding. Prepackaged reports allowed us to easily pull up a users or computers specific permissions, while the logs allowed us to track pretty much anything under the sun, including the number of times a user accessed a device and when; how much of a copy limit a user has usurped; or violated access permissions over a defined amount of time.

      We particularly liked the audit log, which tracked Sanctuary itself, reporting what policy changes were made, by whom and when. Sanctuary also can be used to secure removable media devices with AES 256-bit encryption.

      Administrators encrypt the USB device at a Sanctuary console, where they can also optionally assign the device to a specific user or group from Microsoft Active Directory. Using Sanctuarys centralized encryption features is much easier if there is a Microsoft Certificate Authority in the domain. Otherwise, administrators can push USB device encryption responsibilities out to the users.

      When users try to access the encrypted drive, they must provide the encryption key (which administrators can export to the device directly or give to the user another way) and a password. However, Sanctuary does grant the ability to use an encrypted drive on an unprotected workstation—as long as the administrator enables Sanctuarys Easy Exchange feature, which loads a Secure Volume Browser and the encryption key on the encrypted drive. The user can then enter a password to unlock the device from machines not protected by Sanctuary.

      Check out eWEEK.coms Security Center for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEKs Security Watch blog.

      Andrew Garcia
      Andrew cut his teeth as a systems administrator at the University of California, learning the ins and outs of server migration, Windows desktop management, Unix and Novell administration. After a tour of duty as a team leader for PC Magazine's Labs, Andrew turned to system integration - providing network, server, and desktop consulting services for small businesses throughout the Bay Area. With eWEEK Labs since 2003, Andrew concentrates on wireless networking technologies while moonlighting with Microsoft Windows, mobile devices and management, and unified communications. He produces product reviews, technology analysis and opinion pieces for eWEEK.com, eWEEK magazine, and the Labs' Release Notes blog. Follow Andrew on Twitter at andrewrgarcia, or reach him by email at agarcia@eweek.com.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.
      Get the Free Newsletter!
      Subscribe to Daily Tech Insider for top news, trends & analysis
      This email address is invalid.

      MOST POPULAR ARTICLES

      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Applications

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      IT Management

      Intuit’s Nhung Ho on AI for the...

      James Maguire - May 13, 2022 0
      I spoke with Nhung Ho, Vice President of AI at Intuit, about adoption of AI in the small and medium-sized business market, and how...
      Read more
      Applications

      Kyndryl’s Nicolas Sekkaki on Handling AI and...

      James Maguire - November 9, 2022 0
      I spoke with Nicolas Sekkaki, Group Practice Leader for Applications, Data and AI at Kyndryl, about how companies can boost both their AI and...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×