2	
©	2017	DriveLock	SE	
DriveLock Next-Generation Endpoint Security
The	 German	 company	 DriveLock	 SE	 is	 one	 of	 the	 world’s	 leading	 software	 and	 services	
providers	 for	 cyber	 security.	 Thanks	 to	 its	 Endpoint	 Protection	 Platform	 with	 Artificial	
Intelligence,	the	company	is	one	of	the	leaders	in	its	sector	offering	intelligent,	self-learning	
cyber	 security	 for	 the	 Internet	 of	 Things	 and	 Industrial	 Internet	 of	 Things	 era.	 DriveLock	
particularly	 stands	 out	 with	 its	 extremely	 granular	 options	 for	 regulating	 USB	 and	 other	
devices	 via	 Device	 Control	 as	 well	 as	 for	 its	 encryption	 of	 hard	 disks	 (FDE)	 and	 data	 on	
mobile	 devices.	 Thanks	 to	 Application	 Control	 with	 Predictive	 Whitelisting,	 the	
implementation	of	ransomware	–	even	when	not	yet	known	–	can	be	prevented	sustainably,	
providing	all-round	protection	on	all	user	devices.	
	
	
	
	
Strategy and Vision
“We	protect	and	organizations	data	and	managed	devices	
from	internal	and	external	threats,	without	burdening	the	
productivity”
	
	
©	2017	DriveLock	SE.	All	rights	reserved.	Proprietary	&	Confidential. 4
DriveLock	at	a	glance
Founded in	1999
HQ:	Munich
100%	
Made	in	
Germany
3.000.000	devices
3.000	customers
30	countries
Environments	with
100	– 150.000
managed devices
Gartner	Quadrant
since 2013
award-winning IT	
Security	solution
3	
©	2017	DriveLock	SE	
Solution Highlights
General Features
• Ease	of	installation	–	central	management.	
• Smooth	rollout	–	auditing	and	simulation	modes	available.	
• Customizable	to	your	enterprise	–	flexible	and	scalable.	
• Multilayered	functionality	–	encryption,	application/device	control,	and	more!	
• Central	management	console	–	helps	minimize	administrative	costs.	
• Central	reporting	and	forensic	data	analysis	–	research	and	trace	incidents.	
• Security	awareness	and	education	–	keep	end-users	updated	with	info	and	alerts.	
• Modular	licensing	and	implementation	–	adapts	to	any	requirements	and	growth.	
• Supports	physical,	virtual	and	thin-clients	–	applicable	in	every	industry.	
• Multi-tenancy	–	perfect	fit	for	service	providers	and	companies	with	subsidiaries.	
• Wide	platform	support	–	including	Windows,	smartphones,	Citrix	and	cloud	storage.	
• “Made	in	Germany”	–	no	back-doors;	development	and	support	from	Germany.	
	
Multi-Layered Architecture
Comprehensive	data	protection:	
ü Fully-integrated	security	solution	
ü Compatible	with	all	Operating	Systems,	Fat-clients,	Thin-clients	and	Zero-clients	
ü Protects	your	data	on	all	devices	or	in	the	Cloud	
	
	
	
	
	
©	2017	DriveLock	SE.	All	rights	reserved.	Proprietary	&	Confidential. 12
Holistic Multi-Layer-Concept
Web	Security
Artificial Intelligence
Application Control
Device	Control
Encryption
Awareness
Reporting	and Forensic
Malware
Authorized data
access
YOUR	
DATA
4	
©	2017	DriveLock	SE	
Capabilities
Device	Control		
ü Most	flexible	control	of	external	drives,	devices	&	media	
ü Possibility	to	adjust	within	17	dimensions	
o R/W-rights,	user,	groups,	computer,	date,	time,	network,	file	filter,	...	
ü Integrated	flow	of	data	by	file-type	control	
o It	can	be	defined,	who	can	read	or	copy	which	data.	
ü Extensive	audit	options	of	file	operations,	incl.	shadow	copies	
ü Protect	all	your	endpoints	(Thin	clients,	fat	clients,	VDIs,	server,	Terminal	server…)	
	
	
Encryption-2-Go	
ü Secure	container	encryption	on	removable	USB	media	&	hard	disk	
ü Intuitive	&	flexible	policy	management	
ü Plausible	ease-of-use	
ü Online	&	offline	recovery	wizard	
ü Automated	encryption	of	removable	USB	media	
ü Decryption	without	DriveLock	Agent	(Windows,	macOS,	iOS,	Android)	
ü Secure,	irreversible	erasing	of	data	(shredding)	
	
	
Application	Control/	Predictive	Whitelisting	
ü Efficient	management	of	secure	applications		
ü Blocking	of	non-authorized	applications	
ü Easy	&	effective	configuration	–	also	in	virtual	environments	
ü Prevent	zero-day	exploits	
ü Transparent	blacklisting	&	whitelisting	
ü User-defined	access	control	
ü Predictive	Whitelisting	Method	(Machine	Learning)	in	Industry	4.0	environments	
	
	
Full	Disk	Encryption	
ü Automatically	encrypt	and	decrypt	multiple	hard	disk	partitions	
ü Pre-boot	user	authentication	
ü Single	sign-on	or	manual	Windows	authentication	
ü Emergency	pre-boot	logon	recovery	
ü Several	encryption	algorithms:	
o Advanced	Encryption	Standard	(AES)	-	recommended	
o The	International	Data	Encryption	Algorithm	(IDEA)	-	128bit	
o The	Data	Encryption	Standard	(DES)	
o Triple	DES	(3DES)	-	112bit
5	
©	2017	DriveLock	SE	
	
File/Folder	Encryption	
ü Fast	&	solid	encryption,	local,	central,	mobile	or	in	the	cloud	
ü User-	or	group-based	encryption	
ü Supports	cloud-based	services	like	Dropbox,	OneDrive	or	Google	Drive	
ü Intuitive	user	interface	
ü No	disturbance	of	existing	processes	like	backup	or	provisioning	
ü Integrated,	central	reporting	with	broad	analytic	possibilities	
ü Easy,	fast,	solid	&	flexible	
	
	
WebSecurity	
ü Cloud-based	Internet	security	
ü Usage	of	industry-leading	web	filter	functionality		
ü URL	protection:	Location-	and	network-independent	protection	in	real-time	
ü Easy	to	manage	with	the	DriveLock	Management	Console	
ü Fast	system	–	end-user	perceives	no	delay	at	all	
ü Detailed	reporting,	provides	an	overview	of	parried	dangers	
ü Categorization	of	URL`s	in	cloud	worldwide	datacenters	
	
	
Security	Awareness	
ü User	sensitize	&	create	awareness	for	security	
ü Predefined	campaigns	
ü Customizable	with	picture-,	audio-	or	video-elements	
ü Hint	of	current	risks	at	the	workplace	
ü Mapping	of	compliance	requirements	
ü Central	reporting	of	user	behavior	
	
	
Reporting	&	Forensics	
ü Transparency	–	Know	what	happens	in	your	environment	
ü Analysis	–	To	be	on	the	track	of	the	perpetrator	
ü Monitor	the	usage	of	removable	media	or	external	devices	
ü Build	user-specific	reports	and	distribution	via	email	
ü Anonymization	of	personal	data	
o Only	after	authentication	(4/6-eyes	principle)	the	data	will	be	shown	
ü Scheduled	creation	of	reports	and	distribution	(Excel,	PDF,	HTML	etc.)	
ü Queries	from	different	starting	points	
ü Recognize	coherences	between	security	incidents	
ü Auditing	and	shadowing	
o Possibility	to	track	the	path	of	files	
o Which	files	were	saved	and	copied	to	a	USB	device?	
ü Fast,	easy	of	use	and	integrated

Introduction to drive lock

  • 2.
    2 © 2017 DriveLock SE DriveLock Next-Generation EndpointSecurity The German company DriveLock SE is one of the world’s leading software and services providers for cyber security. Thanks to its Endpoint Protection Platform with Artificial Intelligence, the company is one of the leaders in its sector offering intelligent, self-learning cyber security for the Internet of Things and Industrial Internet of Things era. DriveLock particularly stands out with its extremely granular options for regulating USB and other devices via Device Control as well as for its encryption of hard disks (FDE) and data on mobile devices. Thanks to Application Control with Predictive Whitelisting, the implementation of ransomware – even when not yet known – can be prevented sustainably, providing all-round protection on all user devices. Strategy and Vision “We protect and organizations data and managed devices from internal and external threats, without burdening the productivity” © 2017 DriveLock SE. All rights reserved. Proprietary & Confidential. 4 DriveLock at a glance Founded in 1999 HQ: Munich 100% Made in Germany 3.000.000 devices 3.000 customers 30 countries Environments with 100 – 150.000 managed devices Gartner Quadrant since 2013 award-winning IT Security solution
  • 3.
    3 © 2017 DriveLock SE Solution Highlights General Features •Ease of installation – central management. • Smooth rollout – auditing and simulation modes available. • Customizable to your enterprise – flexible and scalable. • Multilayered functionality – encryption, application/device control, and more! • Central management console – helps minimize administrative costs. • Central reporting and forensic data analysis – research and trace incidents. • Security awareness and education – keep end-users updated with info and alerts. • Modular licensing and implementation – adapts to any requirements and growth. • Supports physical, virtual and thin-clients – applicable in every industry. • Multi-tenancy – perfect fit for service providers and companies with subsidiaries. • Wide platform support – including Windows, smartphones, Citrix and cloud storage. • “Made in Germany” – no back-doors; development and support from Germany. Multi-Layered Architecture Comprehensive data protection: ü Fully-integrated security solution ü Compatible with all Operating Systems, Fat-clients, Thin-clients and Zero-clients ü Protects your data on all devices or in the Cloud © 2017 DriveLock SE. All rights reserved. Proprietary & Confidential. 12 Holistic Multi-Layer-Concept Web Security Artificial Intelligence Application Control Device Control Encryption Awareness Reporting and Forensic Malware Authorized data access YOUR DATA
  • 4.
    4 © 2017 DriveLock SE Capabilities Device Control ü Most flexible control of external drives, devices & media ü Possibility to adjust within 17 dimensions oR/W-rights, user, groups, computer, date, time, network, file filter, ... ü Integrated flow of data by file-type control o It can be defined, who can read or copy which data. ü Extensive audit options of file operations, incl. shadow copies ü Protect all your endpoints (Thin clients, fat clients, VDIs, server, Terminal server…) Encryption-2-Go ü Secure container encryption on removable USB media & hard disk ü Intuitive & flexible policy management ü Plausible ease-of-use ü Online & offline recovery wizard ü Automated encryption of removable USB media ü Decryption without DriveLock Agent (Windows, macOS, iOS, Android) ü Secure, irreversible erasing of data (shredding) Application Control/ Predictive Whitelisting ü Efficient management of secure applications ü Blocking of non-authorized applications ü Easy & effective configuration – also in virtual environments ü Prevent zero-day exploits ü Transparent blacklisting & whitelisting ü User-defined access control ü Predictive Whitelisting Method (Machine Learning) in Industry 4.0 environments Full Disk Encryption ü Automatically encrypt and decrypt multiple hard disk partitions ü Pre-boot user authentication ü Single sign-on or manual Windows authentication ü Emergency pre-boot logon recovery ü Several encryption algorithms: o Advanced Encryption Standard (AES) - recommended o The International Data Encryption Algorithm (IDEA) - 128bit o The Data Encryption Standard (DES) o Triple DES (3DES) - 112bit
  • 5.
    5 © 2017 DriveLock SE File/Folder Encryption ü Fast & solid encryption, local, central, mobile or in the cloud ü User- or group-based encryption üSupports cloud-based services like Dropbox, OneDrive or Google Drive ü Intuitive user interface ü No disturbance of existing processes like backup or provisioning ü Integrated, central reporting with broad analytic possibilities ü Easy, fast, solid & flexible WebSecurity ü Cloud-based Internet security ü Usage of industry-leading web filter functionality ü URL protection: Location- and network-independent protection in real-time ü Easy to manage with the DriveLock Management Console ü Fast system – end-user perceives no delay at all ü Detailed reporting, provides an overview of parried dangers ü Categorization of URL`s in cloud worldwide datacenters Security Awareness ü User sensitize & create awareness for security ü Predefined campaigns ü Customizable with picture-, audio- or video-elements ü Hint of current risks at the workplace ü Mapping of compliance requirements ü Central reporting of user behavior Reporting & Forensics ü Transparency – Know what happens in your environment ü Analysis – To be on the track of the perpetrator ü Monitor the usage of removable media or external devices ü Build user-specific reports and distribution via email ü Anonymization of personal data o Only after authentication (4/6-eyes principle) the data will be shown ü Scheduled creation of reports and distribution (Excel, PDF, HTML etc.) ü Queries from different starting points ü Recognize coherences between security incidents ü Auditing and shadowing o Possibility to track the path of files o Which files were saved and copied to a USB device? ü Fast, easy of use and integrated