frame_top

Products & Services: RocITSafe Family

aboutus

RocITSafe™ Product Family:
Securing, Enabling, Mobilizing

Equipping workers with mobile devices is expensive and risky. Laptops must be secured, patched regularly, and if lost, present a tremendous security risk. However, an alternative is emerging. The powerful, highly available RocITSafe-enabled USB drive and family of mobile data protection products. Whether telecommuting, traveling, working remotely in the field, or as a first responder, RocITSafe ensures that applications, files and desktops are both secure and portable.

By creating a virtual desktop on an Absolute ID-enabled RocITSafe USB drive, organizations can provide employees with the ability to communicate safely with corporate systems and work securely from any PC, including a home machine or device in an Internet cafe.

When virtual environments are correctly configured, unscrupulous cyber-criminals are kept at bay. And, when the USB device is removed, all traces of activity vanish.

RocITSafe Advantage for a Mobile Workforce

The advantages of Absolute ID RocITSafe solutions are clear. A USB drive is inexpensive, lightweight and can be centrally managed. If the drive is encrypted, it has zero value if it is lost or stolen. And, organizations can rapidly deploy the solution.

Once deployed, users register themselves on their corporate network where RocITConsole ties their Active Directory details to the unique identifier on their USB drive. It then distributes virtual desktop software, which enables its use from any host machine.

The RocITSafe bare-metal-boot (BMB) solution virtualizes the user's entire desktop, and with its own standalone, highly secure operating system. Under central administrative control, RocITSafe can restrict what executables can run within the virtual desktop, which prevents data leakage via malware on the host PC.

The RocITSafe family includes a DoD grade FIPS-certified, hardware encrypted, password protected USB platform and applications that ensure a secure environment. The product is delivered as a customizable set of applications and services. It is fully manageable from a centralized server that can be administered by the enterprise, as well as provisioned, updated, and maintained consistently across the entire organization.

RocITSafe Versus Competitive Solutions

RocITSafe solutions are built on an extremely secure Linux-based runtime environment that has been hardened and locked down from end-user access, disabling cyber-attacks from occurring by enabling the control of the environment in which the solution runs.

Competitive solutions employ a "defend from attacks" strategy, whereby multiple types of control and security measures are taken to defend from the variety of different attacks. However, since their solutions run within an unsecured, hostile uncontrolled environment, this strategy is a continuous battle, where each new security measure is bypassed by malicious attackers, and new security measures in the solution must be continuously upgraded and revised. RocITSafe is built with a highly secure runtime environment at its core that virtually eliminates attacks that could infect the system.

When RocITSafe is in BMB mode the host computer's hard drive is physically turned off and unavailable to RocITSafe; the ViSoS Runtime Environment (VRE) is directly loaded onto a journaling filesystem on a sub-partition of the secure encrypted partition. This filesystem, and the VRE contained within it, are inaccessible to the host computer's Windows operating system and are completely secure and isolated. In this mode, the solution runs on a host computer system and turns off the host hard drive, if it exists, or runs on a host system that does not have an internal hard drive. The internal hard drive is actually "unavailable" to the end user, providing the highest level of security, and minimizing any potential data leakage, or viral infection from the host system.

    Key Benefits:
  • RocITSafe system is highly secure
  • Complete data protection solution from the inside out
  • Configurable and flexible operating environment
  • Easily integrates into existing IT infrastructure
  • Utilizes FIPS certified components
  • Multi-factor authentication
  • Supports CAC, PIV and Smart Cards
  • Supports full Internet web access
  • Supports standard applications software

frame_bottom