Encryption tools

Hello, I have two scenario's where I want to build encryption.  One location has windows server 2008 and win 7 users the other is for a small office with just win 7 users, no server.

I am searching for good manageable tools any recommendations?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Natty GregIn Theory (IT)Commented:
Note Truecrypt has been discontinued.
I recommend:

- DiskCryptor
Sandeep KhanagwalCommented:
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Livin JoseIT Infrastructure and Networking specialistCommented:
If you are looking for a default encryption tool i would recommend to use Bitlocker. BitLocker Drive Encryption is a data protection feature available in Windows 7 Enterprise, Windows 7 Ultimate, and in all editions of Windows Server 2008 R2. BitLocker uses Advanced Encryption Standard (AES) which is more secure and the benefits are below,
-AES is more secure (it is less susceptible to cryptanalysis than 3DES).
-AES supports larger key sizes than 3DES's 112 or 168 bytes.
-AES is faster in both hardware and software.
-AES's 128-bit block size makes it less open to attacks via the birthday problem than 3DES with its 64-bit block size.
-AES is required by the latest U.S. and international standards.
The below link will be able to help you for accure more information.
If you are looking for a 3rd party product and ready to pay, 'Symantec Drive Encryption' is one of the best solution. Using this tool will help you to protect the data with Passphrase, Token or smart card.
You can refer the below link to know more,
Please describe your scenarios, or you will just get random input on what encryption softwares there are.

->are we talking about full disk encryption?
->what manageability do you have in mind? Offer any insight you could.
->what OS versions (pro/enterprise) do you run?
->what's your budget for this project?
Scott ThomsonCommented:
Checkpoint Endpoint encryption is good. and is made by Symantec.

At bios it will ask the user for a prompt. then log them through into windows.
Also it is a per computer basis so the user of 1 computer can only use that machine unless a new user is added.
it can be administered remotely

pretty good software overall.
Ratnesh MishraCommented:

Step by step process for bitlocker encryption. Although this is used for TPM you can use without TPM [Hardware supported] by just enabling a policy in gpedit.msc.
Dave HoweSoftware and Hardware EngineerCommented:
McKnife is correct.
Until you specify what data you want to encrypt, how you want the users to access it, and what attack scenarios you intend your solution to defend against, there is no way to come up with anything other than a random package name in reply.
Rich RumbleSecurity SamuraiCommented:
Have a look at my article here to see if Encryption really solves the issue for you: http://www.experts-exchange.com/Security/Encryption/A_12134-Choosing-the-right-encryption-for-your-needs.html
tucktechAuthor Commented:
Hello, sorry on getting backup to you.  My client has windows 7 pro systems.  This is an insurance agency so they really want it for insurance industry compliance reasons. Ultimately they want to secure their data on each local machine however I understand the pitfalls of encryption base on the links provided.

Having said that this is a low budget to meet insurance industry requirements.  I am awaiting a response from my client to understand the requirements.
Rich RumbleSecurity SamuraiCommented:
If the compliance is for data-at-rest to be encrypted, a full hdd solution is good, if the compliance is for data-in-motion then smime/pgp may be needed, if the database has to be encrypted, then look into HSA's to help with that. Requirements will help, and or specifying which laws or compliance need to be followed for them.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tucktechAuthor Commented:
The client who has requested this cannot seem to get a good answer of requirements from the "Insurance Industry".   Apparently there is some standard he is trying to meet but the "officials" can't give him any specifics.

The tools listed is a good list and the questions are even more valuable as they made us perform more due diligence to why and what is needed.

Fully understandable reason for closure (this is rare).
Scott ThomsonCommented:
Good luck.. we will be here when they know.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.