SGN Data Exchange

Well this isn't difficult at all.  This is the simplist method and honestly safest with the least impact to your users, it allows data to flow in but not out of the company.

First create a ROOT KEY specific for to your media, so for example create a new key to be inherited on the root level as "ENC_MEDIA_KEY" or something along those lines.

Next go to your root policy and create a new policy item for device protection choose the target as removable media, set meda encryption mode as file based, set algorithm as AES-256, set the key to be used as a defined key on list, and on the list specify the key you created as the first step.  This will sign ALL your USB keys and files with the same key, all users will get that key as long as they have an "authorized" machine with a DX license.

The rest of the file settings set as you need, them, warning though SG Portable allows the users to sign the files with an alternate local key they specify with a symetric password meaning they can decrypt the file on the flash drive as needed.  If that's the behaviour your want then train your users, if not then don't use SG Portable and tell them they need to use an authroized company computer to access the data PERIOD.

Well this isn't difficult at all.  This is the simplist method and honestly safest with the least impact to your users, it allows data to flow in but not out of the company.

First create a ROOT KEY specific for to your media, so for example create a new key to be inherited on the root level as "ENC_MEDIA_KEY" or something along those lines.

Next go to your root policy and create a new policy item for device protection choose the target as removable media, set meda encryption mode as file based, set algorithm as AES-256, set the key to be used as a defined key on list, and on the list specify the key you created as the first step.  This will sign ALL your USB keys and files with the same key, all users will get that key as long as they have an "authorized" machine with a DX license.

The rest of the file settings set as you need, them, warning though SG Portable allows the users to sign the files with an alternate local key they specify with a symetric password meaning they can decrypt the file on the flash drive as needed.  If that's the behaviour your want then train your users, if not then don't use SG Portable and tell them they need to use an authroized company computer to access the data PERIOD.