Storage

Ask something
Discussion Locked

USB pen storage devices enterprise solution?

0 helpful
5 replies

by mdeane 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Has anyone successfully implemented a USB policy for their company? We are trying to figure a solution for the demand of USB storage devices. We want the devices to be secure. If there was some way a USB pen drive could authenticate to active directory I would be a happy man.

5 replies

by amcol

I've distributed 256mb USB 2.0 flash drives to everyone in my organization, without worrying about special encryption or any other extra security measures.

We make it clear to everyone that the flash drive is to be used for temporary file transport only, just as you'd use a 3.5 inch floppy. Everyone understands that whatever's on the flash drive is not subject to network backups, and that they should avoid putting sensitive or confidential information on something that all too easily grows legs and walks away.

We've not had one single problem in the year since we implemented this policy.

Treat people like adults and professionals, and typically they'll act that way.

by amcol

But a little on the expensive side. They're about twice as costly as most others on the market, which is obviously a function of the encryption capability.

I know, security is priceless. However, considering how cheap non-encrypted flash drives are and how easy they are to buy, it doesn't matter if you equip your users with these things and require they be the only type used...someone will go out to Joe's Fly-By-Night Computer Stuff and buy and use whatever they want.

by servhi-tech

You have USB drive out there that have a certificate embedded in the device that the network admin add through the company software utility. In that case, your certificate must be valid on the domain to be able to read the data on it. To read the data when the user is out of the office, he need a passphrase to access his/her data. You have some SecurID that have the ability to be a smart card and a usb drive at the same time.

by pgerloff

is really your best defence here people being people will always try to get around measures you put in place. I would work out what kind of size device the users need and if the company will foot the bill bulk buy as many as you need and distribute them, or at least recommend a good brand(for good and cheap i have used sandisk cruiser with much success). them educate the users explain about having adequate backups including a compy in a folder that is backed up on the network. tell them not to bring in spurious files etc etc etc. the users will be happy and more co-operative and you will have less head aches

This discussion is closed to new replies.