volume based on usb disk

Hi All 

on Safeguard 8.3 is possible use volume base encryption?

thank you very much


  • Yes it is. It’s not quite that simple though if you’re referring to USB volumes. Are these USB drives removable? 

  • yes, it is a USB driver removable, or Flash drive USB. which parameters in the policy should I put?


  • You shouldn't do that. 

    Although you can, because removable USB use solid-state memory which has a limited number of writes. They also use a swap mem bank and if you change a file on a USB stick, it isn't changed in situ - the block is actually copied out into the swap, modified and then copied back to another "free" location on the drive and the original block is zeroed out. 

    Now, if you have volume-based encryption, it will add data into every block on the USB (even the zeroed ones) so not only will every block have more writes to it than it needs for operation (all those encryption passes) but it will also slow the drive down because it will think that every block is filled and have to write more data in the swap. Although, newer USB sticks have a smarter caching system and you probably wouldn't see that much degradation.

    SGN offers file-based encryption for USB sticks that mitigates all these problems. Since the drive is left in the clear and just the data being written is encrypted, you get to keep all the benefits of the USB drive and not reduce its lifetime.


    Program Manager, Support Readiness | CISSP | Sophos Technical Support
    Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.