Ensure delivers the performance, scale and flexibility that organizations require to expand the perimeter to also include third-parties
Ensure delivers the performance, scale and flexibility that organizations require to expand the perimeter to also include third-parties
Ensure eliminates the administration and management demands of traditional compliance data systems, making it an ideal solution for third-party device risk mitigation.
The system is delivered as-a-service.
No enrollment of users: The U.S. patented Ensure technology is able to check the security status of third-party devices without having to onboard them into a mobile device management system (MDM).
Devices are automatically enrolled and checked for security compliance at the time of login. The method is referred to as a “security-audit-on-the-fly”.
Gradual roll-out: It’s possible to target specific IP-addresses and gradually open up for more IP-numbers to go through the device security check.
Ensure verifies full disk encryption, FDE, with a minimum 128 bit key length regardless of if it is OS-native (BitLocker or FileVault2) or any other vendor encryption software. File or folder encryption technologies are not approved.
Ensure verifies that passcodes are activated on iOS and Android smartphones and tablets. It also checks that Android devices are not rooted.
Once the agent is downloaded and installed on a device, it can be re-used for device checks on other websites/portals running the Ensure platform.
After the agent has performed the check it remains inactive until next time a verification is requested.
In case of a false-negative your system’s helpdesk can override the check. This capability can also be handled by Ensure’s 24/7 Helpdesk Team.
The Ensure servers are based in the US with mirroring and redundant backups for highest availability. The US patented Ensure technology is developed by the same team that developed PointSec – a world leading full disk encryption software.
All communication between the Ensure agent and the Ensure servers is secured by TLSv1.2.
