Premium Content

Access "Is it Wise to Encrypt Blocks?"

Published: 17 Oct 2012

Whether you're mandated by law to encrypt your data, or whether you're just overly cautious, there are a lot of ways to secure "data at rest."If you want to encrypt data that lives on a Fibre Channel (FC) array, at least two vendors--Decru, with its Data Fort storage security appliance, and NeoScale, with CryptoStor FC--have inline encryption appliances that live directly in the fabric. But one competitor, Vormetric, has grave doubts about the wisdom of encrypting data at the block rather than at the file level. "With a SAN, you have limited context about the source of read and write requests," says Phil Grasso, Vormetric founder and VP. "That makes it nearly impossible to implement access control because the context has already been stripped." Also, without a file system, you can't granularly encrypt files; you must encrypt entire volumes instead. One logical place to use block level data is with removable media, such as tape, Grasso says. "Block level encryption protects removable media just fine, because I can't trick you into decrypting it for me." Both ... Access >>>

Access TechTarget
Premium Content for Free.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

What's Inside


More Premium Content Accessible For Free