Check Point has been showcasing its full disk encryption (FDE) programme for OS X, which prevents data theft via a comprehensive security field that remains in place even after the computer is shut off or forced into standby mode. 

"Check Point was the absolute first disk encryption with pre-boot authentication," product manager Jonas Iggbom told IT Examiner. "Full disk encryption generates unique keys for each system during the installation process. The entire HD or bootable SSD (solid state drive) is then encrypted. Once completed, the application acts as a filter, as it protects all data saved or read on a disk drive. Related lag is certainly negligible and has never exceeded three per cent," stated Iggbom.

The product manager also explained that Check Point had created a recovery procedure to assist users with crashed Mac operating systems.

"It is certainly possible to decrypt a HD without booting via the use of unique recovery files that are written to a central location and secured by qualified system admins," said Iggbom. "Recovery files are typically saved on bootable, recoverable media, such as a USB drive, which can be successfully accessed without initiating the operating system." 

Iggbom added that the Mac target market was growing steadily in the "government, education and entertainment sectors".

"Full disk encryption is frequently used to help prevent costly and potentially dangerous leaks," said Iggbom.

Ben Khoushy, vice president of endpoint products at Check Point, expressed similiar sentiments. "With the increasing number of Macs in the enterprise, companies are looking for leading security vendors to provide first-class network, data and endpoint security for these systems. Check Point understands this need and is dedicated to making its industry-leading security solutions available for all operating systems, including Mac OS X."

It should be noted that a number of competing security products offer various levels of protective options for Mac OS X - including PGP, True Crypt and Apimac. True Crypt, which utilises AES-256, Serpent and Twofish algorithms, encrypts partitions or storage devices, while stealthily concealing the computer's volume and operating system. Similarly, PGP features pre-boot authentication and full-disk encryption that secures both temporary and swap files. Finally, Apimac's "protect files" feature creates a 128 or 256-bit encryption space on a Mac's hard drive, external disk, or USB device. The protective space can then be used to safely store documents, files and folders. X