StorageSecure is an all-inclusive, secure hardware storage encryption solution that connects to 1 Gb or 10 Gb Ethernet networks over CIFS and NFS and protects shares, folders and files on any NAS filers regardless of vendor. StorageSecure encrypts information based on defined business policies and securely stores the information without impacting ongoing operations or reducing information availability.
StorageSecure securely stores all encryption keys and their associated parameters within hardware. Keys can also be shared with SafeNet KeySecure centralized key management solution that securely stores StorageSecure keys but also other heterogeneous encryption keys for truly centralized key management.
Storage Security Features Offered by StorageSecure:
Granular Data Level Protection
Our storage encryption solution, StorageSecure, protects data at rest at the share/folder/file level. By providing granular data level protection, instead of enforcing an all or nothing protection, organizations are able to enforce data-specific authorization based on user privileges, job responsibilities, and data location.
Ensures Compliance with Legislative and Regulatory Mandates
Protecting sensitive data at rest is fundamental in ensuring compliance. StorageSecure ensures that sensitive data will be encrypted and rendered unreadable to unauthorized users even as it moves across the different storage tiers, including operations and staff who need to manage the systems but not access the data. Once data is encrypted, it remains encrypted through its lifecycle without any additional intervention.
Backup, replication, and snapshotting applications that work on files on the NAS filers all continue to function exactly as before while the underlying data remains encrypted.
Privileged User Access and Separation of Duties
StorageSecure augments existing access controls defined in Microsoft AD, LDAP, NIS and allows enterprises to strengthen these controls for users and administrators by building upon previously defined identity and access management controls, creating stronger separation of duties. In this way, StorageSecure protects against rogue users and administrators
Highly Secure and Easy to Deploy
StorageSecure is a “self-contained” appliance. There are no changes to the storage devices, no agents to install, and more importantly, the user does not need to change their daily operations. StorageSecure is placed within the network on an Ethernet connection, configured based on data/information value and user access controls. Data is automatically encrypted and decrypted within the hardware appliance.
Integrated with KeySecure for Automated and Centralized Key Management
By combining StorageSecure and SafeNet KeySecure, organizations are able to enforce more robust data access and key management controls while eliminating lost and stolen keys and preventing information access. KeySecure can host backup keys to StorageSecure devices for disaster recovery and maintain a key archive for all deployed and purged keys