Deployment Guide

Policy Aggre
ssive
Protec
tion
for All
Fixed
Drives
and
Extern
al
Drives
PCI
Regula
tion
Data
Breac
h
Regula
tion
HIPAA
Regula
tion
Basic
Protec
tion
for All
Fixed
Drives
and
Ext
Drives
(Defau
lt)
Basic
Protec
tion
for All
Fixed
Drives
Basic
Protec
tion
for
Syste
m
Drive
Only
Basic
Protec
tion
for
Extern
al
Drives
Encry
ption
Disabl
ed
Description
EMS
Access to
unShielde
d Media
Block Read only Full Access Read
only
Full
Access
Block, Read Only, Full
Access
This policy has interactions
with PCS. See Encryption
External Media and PCS
Interactions.
When this policy is set to
Block Access, you have
no access to removable
storage unless it is
encrypted.
Choosing either Read-Only
or Full Access allows you
to decide what removable
storage to encrypt.
If you choose not to
encrypt removable storage
and this policy is set to Full
Access, you have full read/
write access to removable
storage.
If you choose not to
encrypt removable storage
and this policy is set
to Read-Only, you cannot
read or delete existing
files on the unencrypted
removable storage, but
the client does not allow
any files to be edited
on, or added to, the
removable storage unless it
is encrypted.
EMS
Encryptio
n
Algorithm
AES256 AES-256, Rijndael 256,
AES-128, Rijndael 128
EMS Scan
External
Media
True False True allows removable
media to be scanned every
time it is inserted. When
this policy is False and
the EMS Encrypt External
Media policy is True, only
new and changed files are
encrypted.
A scan occurs at every
insertion so that any
files added to the
56 Policies and Template Descriptions