DeviceLock Endpoint DLP Suite
Strengths: Full-scale endpoint protection and DLP suite at a good price.
Weaknesses: None that we found.
Verdict: Good value and surprisingly liberal support policy.
The DeviceLock Endpoint DLP Suite consists of three powerful components. First is the DeviceLock module. This allows administrators to set policy for managing the movement of data from company computers through the use of removable media or external storage, such as smartphones, digital cameras, USB sticks, CD/DVD-R, tablets or printers. Next, the NetworkLock module allows administrators to keep data from leaving the network through the internet, such as through webmail, instant messaging, social networks or cloud-based services, such as Dropbox. The final element is ContentLock. This looks inside files for sensitive content - such as account numbers, Social Security numbers or any other personally identifiable or sensitive information - to keep it from leaving the company network.
Overall, we found this product to be easy to install and configure. The installation itself took just a few minutes. We were guided by a short setup wizard that we found to be easy to follow. Once the suite was installed, much of the administration was done natively in Microsoft Active Directory Group Policy Editor. This product actually plugged in directly to the Microsoft Management Console used for managing Group Policy, so we found it comfortable to configure and manage.
As for policy management, we found this product to be quite comprehensive and to have many configurable options for policy. As stated above, this suite integrates directly into Active Directory Group Policy so policy can be pushed out to users, groups, computers or organizational units for granular policy control. Along with to whom the policy gets assigned, there are also several scheduling controls to provide additional flexibility. Furthermore, administrators can lock settings down to prevent users from tampering with, disabling, or uninstalling DeviceLock. Lockdown settings will prevent changes even if the user is a local administrator on the PC.
Documentation included a single PDF user manual. This manual covered the product from initial installation and configuration through advanced setup and use of the product features and functions. We found this manual to be well-organized and to include many screen shots and step-by-step installation and configuration instructions.
DeviceLock offers all customers no cost eight-hours-a-day/five-days-a-week phone- and 24/7 email-based technical support. Additionally, customers can access a large web-based help area on the website that includes a full knowledge base, user forum, webinars, demo videos, product documentation, and many other resources. DeviceLock does not offer any additional plans, but we found its no-cost support to be more than sufficient.
At a price of about $40 per seat for up to 1,000 seats, we found this product to be an excellent value for the money. While it may seem pricey at first glance, we found this product to have a robust feature set with comprehensive policy controls that are easy to deploy and manage. We found its seamless integration with the already existing Active Directory infrastructure to be an excellent addition to the overall value of the tool because administrators will feel comfortable configuring and managing the product from the very beginning.