|
The IronKey Enterprise solution combines hardware-encrypted IronKey USB flash drives with the IronKey Enterprise Remote Management Service. It allows you to remotely administer policies across thousands of IronKey Enterprise devices over the Internet. Embedded strong authentication capabilities enable organizations to use IronKey drives as a scalable platform for secure remote access and virtual desktops.
Managed, Self-Defending Secure Storage
All user data on an IronKey Enterprise drive is encrypted with high-speed, AES CBC-mode hardware encryption. If a thief tries to break into an IronKey Enterprise device and exceeds a policy-determined number of failed login attempts, the IronKey Cryptochip will lock out the encryption functions and securely erase all encrypted data.
IronKey Enterprise S200 series drives are the only USB flash drives validated to meet the stringent Security Level 3 requirements of the FIPS 140-2 standard. Additionally, IronKey Enterprise S200 protects data with strong AES 256-bit hardware encryption, using the algorithm approved by the DoD for storing Top Secret data. These protections include an epoxy compound that fully encases the chips, strong key management, and other strong anti-tampering measures.
Active Anti-Malware Protection
Malicious code and viruses that are spread by removable storage devices infect millions of computers every year. IronKey's active defenses deliver layered protection to stop the spread of malware and worms. Proactive defenses prevent changes to AutoRun files and allow administrators to remotely control which computers IronKey devices may be used on. Onboard malware scanning protects the device when files are moved or opened. Additionally, a read-only mode prevents malware from jumping onto the device from an infected host PC.
Remotely Disable or Terminate Lost and Stolen USB Drives
A key component of the IronKey Enterprise Remote Management Service is the Silver Bullet Service, which provides powerful options to prevent access to rogue devices–whether lost, stolen or in the possession of a user who has been terminated or deemed an insider threat.
- Deny–Prohibits accessing the data on a device until it can verify status
- Disable–Locks out the user completely the next time the device connects
- Destroy–Instructs the IronKey drive to initiate its self-destruct sequence
Self-Service Password Recovery
IronKey offers optional, self-service online password recovery that employs advanced mutual authentication to verify employee identity.
Administrator Device Unlock and Reset
The IronKey Enterprise solution uses Public Key authentication to allow authorized administrators to access data on employee devices without back-door passwords. Administrator privileges can be remotely revoked.
Portable Security Software
You can optionally deploy IronKey Enterprise devices with a suite of applications and services, including a secure portable version of Mozilla Firefox, IronKey Identity Manager, and the IronKey Secure Sessions service. Policy settings allow IronKey system admins to turn these applications on or off as desired.
Secure Platform for Virtualization
Rapid access performance, high reliability, and hardware-level defenses all combine to make an IronKey drive the ideal platform for deploying secure virtual desktops and portable applications.
Remote Administration and Policy Enforcement over the Internet
The IronKey Enterprise Remote Management Service allows you to easily manage thousands of IronKey Enterprise devices and enforce device-specific policies, including password strength, password retry limits and onboard portable applications.
Strong Authentication
IronKey Enterprise devices have full public-key encryption capabilities, enabling them to be managed securely and remotely. IronKey Enterprise devices support One-Time Password technology such as RSA SecurID®, allowing IronKey devices to be used as a two-factor tokens, eliminating the need for employees to carry multiple devices. Optional onboard identity management software facilitates single sign-on and keeps user credentials safe from keyboard loggers, spyware and other online threats.
Endpoint and Enterprise Application Integration
IronKey Enterprise has been designed to work seamlessly with many of the industry's leading endpoint security software products. IronKey Enterprise devices include an onboard PKCS #11 digital certificate and interface that enable rapid deployment of strong authentication for online enterprise applications.
Policy Enforcement and Provisioning
IronKey administrators use an intuitive, secure online interface to apply security policies to their organization's IronKey Enterprise flash drives. Users can easily self-provision their devices, or you can initialize the devices and deploy them to end users.
|