IC L10: Seamless Encryption of Data Sync'ing to Dropbox Using Symantec File Share Encryption

Transcription

1 IC L10: Seamless Encryption of Data Sync'ing to Dropbox Using Symantec File Share Encryption Jeremy Tully, Douglas Rivers, Matt Dawdy Technical Field Enablement 1

2 Is your Enterprise Data secure in the Cloud? CORPORATE DATA CORPORATE DATA Dropbox user Corporate Network Dropbox User uploads sensitive data to cloud CORPORATE DATA Home Corporate sensitive data is accessed and stored to non-enterprise mobile devices and PCs 2

3 Dropbox Cloud Protection Automatic encryption Seamless access Managed Windows machines ios devices Centralized management of policies 3

4 Requirements Symantec Encryption Symantec Management Server 3.3 Symantec Encryption Desktop 10.3 (with File Share enabled) ios Symantec ios File Share App for ipod, iphone, and ipad *The Dropbox native app is not required. Windows Client Dropbox application for Windows 4

5 Architecture 5

6 Dropbox Encryption Policy Dropbox user with File Share SEMS Corporate Network Symantec Encryption Management Server manages File Share Dropbox Encryption Policy for PC and ios devices VPN Symantec ios File Share App Home 6

7 Architecture Overview Symantec Encryption Desktop and Dropbox SEMS Pull the Dropbox policies Symantec Encryption Desktop Other Desktop components (PGP SDK, USP etc) Windows Box File Share Daemon File Share Library Local File-system Dropbox Folder Locate the Dropbox folder and apply the encryption policy Upload the encrypted file on cloud Dropbox Sync Application [Native] 7

8 Architecture Overview (cont d) Symantec ios File Share app (in App Store) Dropbox policies and keys SEMS Firewall ios device Authenticate Dropbox account and get files Symantec ios File Share USP Library App core and UI Dropbox SDK Auth Dropbox Sync App [Native] Dropbox SDK uses Native app for authentication, if present. PGP SDK File Share Library Quicklook Local cache 8

9 End to End Security of Information Stored in the Cloud CORPORATE DATA CORPORATE DATA Dropbox user with File Share SEMS Corporate Network Symantec File Share encrypts Dropbox data before it is uploaded to the cloud FSFSDFSDGSD Symantec ios File Share App File Share provides end to end Data Encryption Home User can not view encrypted data on unmanaged computer (without File Share) 9

10 Use Cases Core Encryption management for Dropbox files Automatic encryption of new files when copied to Dropbox folder Automatic encryption of existing Dropbox files when modified Automatic re-encryption of Dropbox files and folders on policy change Allow manual encryption of Dropbox files Note: Existing Dropbox files are not encrypted Encryption Policy Enforcement Prevent manual decryption/re-encryption of Dropbox files via Explorer or command line 10

11 Symantec Encryption Education Offerings 11

12 Symantec Encryption Product Training Optimize product functionality Shorten your implementations and spend less time with support Leverage your investment in Symantec technology to the fullest Learn at your convenience via the web For more information on Encryption training offerings, visit:

13 Training for Encryption products Symantec Education offers training to help you and your team get the most from your Symantec investment Course Duration Delivery Symantec Encryption products Administration course Symantec Encryption products Administration Web-based training 5 day Instructor-Led Training or Virtual Academy ~4 hours Self-Paced annual Subscription Unsure if your team needs training? Symantec Education offers a free skills assessment on Symantec PGP Universal Server for individuals or teams to help you identify strengths and skills gaps. Go to or contact your Symantec Education Specialist today to set up a free group assessment. 13

14 Thank you! Copyright 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. 14