• On-the-fly encryption of personal files on local or removable drives.

• Encryption of shared files on local, removable or network drives (Windows, Unix, Novell servers, etc.).

• Automatic encryption of the swap file.

• Compressed and encrypted containers for the exchange of files.

• Can encrypt the browser cache (Intranet protection).

• Can encrypt the user profile (Desktop, My Documents, temporary files, Internet browser cache, …).

• It can encrypt entire workstations or volumes, including the system volume (except for the system itself, to allow IT administration by third parties).

• Automatically detects USB memory keys, and offers encryption.

• Compatible with roaming (encrypted profile) and offline encrypted folders.

• Encrypted temporary files.

• Password access (controllable force).

• Access controlled by RSA keys in PFX/P12 key holder files.

• Access controlled by RSA keys in PKCS#11 smart cards and CSP containers.

• PKI and LDAP compatible.

• Group management (access files).

• Role management (users, zone administrators, recovery and backup).

• Cryptographic engine running in ‘kernel mode’.

• Keyboard driver preventing the capture of access key PIN codes.

• On-the-fly wiping.

• Ability to prevent the creation of clear files on removable devices or in certain zones.

• Security policy based on GPOs (Group Policy Objects) which can be managed at domain level.

•Can be installed automatically (compatible with SMS, Tivoli, etc.).

•The delegation of rights and roles can be combined with the users and Windows groups.

•SOS password.

•In-place, back-office or remote administration.

•Graphical or command line administration tools (all tasks).

•Simplified, delegated or centralized administration.

•Automation of applications, of reapplications, or of the control of the security plan.

•Network and office automation can be performed by service providers having without right to know.