Help
<  Back to Index

Overview

Encryption Options

Note: FileFlex Enterprise uses encryption to protect all communications including the streaming of digital media. It is possible to enforce higher levels of encryption to provide additional protection against snooping, intercept and malware, however using a higher level of encryption may prohibit some users from accessing your shared content depending on their device type and client application.

When adding a storage repository via a FileFlex Connector agent such as a server, NAS or PC, you will see the following encryption options.

Encryption Options

Share with anybody - Normal Encryption - This is the default encryption setting as it is the most flexible. Anyone can receive a document shared with this setting on any FileFlex Enterprise client. This setting also allows for streaming of digital media such as music, movies and videos.

Share with double-encryption clients - Double Encryption - This adds a second layer of encryption that brings extra protection against snooping and intercept. The drawback however is that files shared with double-encryption cannot be accessed from the FileFlex Enterprise web client. The recipient must be using a downloaded FileFlex Enterprise desktop, iOS or Android native client. Typically the web client is used when sharing with recipients outside of your company. When sharing with this option, outside recipients will be forced to download and install the FileFlex Enterprise desktop or mobile apps in order to access this content. If the option is grayed out it is not supported by the device and is unavailable.

Share from Intel SGX technology provider source only - Intel SGX Protection - In addition to a second layer of encryption, this option also provides protection even if the sender or receiver’s systems are compromised with malware as the encryption keys are generated within a protected enclave inside of the Intel CPU. The drawback however is that the recipient must be using a Windows PC that has a 7th generation Intel Core CPU or later. When sharing with this option, recipients using smart phones, tablets or Apple computers will not be able to access the file. If the option is grayed out it is unavailable as the device does not have or support Intel SGX technology.

Encrypt Media - If either the Double Encryption or Intel SGX Protection is enabled, then the higher level of encryption selected is disabled by default for media such as music, movies and videos. This will allow for streaming of digital media. That streaming is still protected with some level of encryption. If the Encrypt Media radio button is selected, then the higher level of encryption selected is applied to digital media as well, but that means that the digital media cannot be streamed. Digital media must be downloaded the local device before it can be accessed. In this case also the sharer must enable the files to be downloadable when they set their options for each share.