Best Encryption Software

anilreddy3 · 2017-03-02T19:40:47.000Z

Hello all,

We need to find a solution for encrypting the data at rest and in transit using a SMB share.

Can you guys suggest any better solution, which might be helpful.

Thanks.

Rod-IT · 2017-03-02T19:43:24.000Z

What is your definition of best?

Cheapest, most popular, all-in-one solution, central control, cheapest?

It’s all your preference, and we don’t know budget or if you require FIPS

Data at rest you could use Bitlocker, McAfee, PGP or many others, likewise for endpoints.

In-transit where, within the LAN or outside too?

edwineekelaers2 · 2017-03-02T19:45:27.000Z

I may be shunned by some for saying that you can do it in powershell for zero $ if you google the powershell scripting games. Downloaded an encryption script a few months ago and I’m still picking it into pieces to properly understand it.

anilreddy3 · 2017-03-02T19:48:24.000Z

Rod-IT:

What is your definition of best?

Cheapest, most popular, all-in-one solution, central control, cheapest?

It’s all your preference, and we don’t know budget or if you require FIPS

Data at rest you could use Bitlocker, McAfee, PGP or many others, likewise for endpoints.

In-transit where, within the LAN or outside too?

Something like all in one solution, in-transit need both the outside and LAN too.

Rod-IT · 2017-03-02T19:49:52.000Z

Would an SFTP do the job for transit? Is it to and from a specific place, or anyone, does it need to be email, HTTPS, SFTP or any method, your quite vague on details with regard to what you intend to encrypt and to and from who or how many.

martinwesley · 2017-03-02T19:50:12.000Z

“Best” is such a subjective term, and has no place in any query posted on this forum.

Asking Better Questions Best Practices & General IT

Over the years of reading questions on SpiceWorks, I’ve come to the conclusion that there are a few simple ways that nearly all of us could get better answers, better advice, more information by changing how we ask questions. Here are some tips that I’ve learned (this is not about break/fix questions but about guidance questions…) Always give the business background. No IT choice is made outside of a business context, so provide us with the drives on the decision. Need product type X? Do you …

Don't Ask for the Best Best Practices & General IT

This must happen several times a day: we get a post asking for the best of a product or approach as if there is a clear "best" for each category. Some examples are "Please tell me the best:" NAS SAN Operating System Hypervisor The list goes on and on. And the question rarely has any more information than that. It's clear that the assumption, unstated of course, is that all of IT can be distilled to just a "List of the Current Best Products" and that that is just a super secret list and that…

Ask better questions, get better responses.

wellsanderson · 2017-03-04T14:44:48.000Z

It would help to know what operating systems may be accessing the SMB share. For Windows, as @Edwin_Eekelaers suggested, you can encrypt in transit for free. See: SMB Security Enhancements | Microsoft Learn

As for encryption at rest, it would help to know more specifically the risks you want to address. Is management concerned about a physical break-in? Typically there are much bigger security threats to address than movie-style thieves in ninja suits and plastic explosives to breach your server room. You might need to explain to management that encrypting network drives does nothing to protect against threats of information security breaches. Encryption at rest does not protect against criminals who breach your defense electronically. They appear as authorized users or system administrators who can access the data normally. Adding at-rest encryption does nothing to block them.

For an earlier discussion, with all posters weighing in against network drive encryption, see: Encrypt the entire network drive

Of course, if your SMB share is hosted by another company, that is an entirely different question.