Transcend JetFlash 220
(click for image gallery)

Storage Capacity: 2 Gbytes, 4 Gbytes, or 8 Gbytes
Casing: Fold-out enclosure
Encryption: 256-bit AES encryption
Special features: Fingerprint reader combined with password for two-factor authentication
Speed: 10-Mbps read, 3-Mbps write
Price: $28 / $40 / $63

Unlike the dual-factor Kanguru Bio AES, the Transcend JetFlash 220 uses fingerprint technology just for the convenience factor. Users also have the option of using a password, even though that defeats the purpose of having a fingerprint as authentication. However, the device does not include protection against multiple password attempts or a requirement for a strong password.

Once authenticated, Transcend provides a "Password Bank Manager" application that maintains your Web site logon details to automatically access your registered accounts. You can also protect individual files on the hard drive of your host computer so that those files can be accessed only by someone authenticated by JetFlash.

So that you don't lose access to this rich store of passwords or protected files if you lose your USB drive, the software allows you to back up your user authentication and fingerprint data onto your hard drive. With the backup file, you can easily re-imprint a JetFlash 220, or if necessary, imprint multiple devices with the same fingerprint/password combination.

Considering what it may protect, make sure you use a strong password if you use one at all.

Storage Capacity: 1 Gbyte, 2 Gbytes, or 4 Gbytes
Casing: Standard, with shirt-pocket clip
Encryption: Hardware-based 256-bit AES encryption
Special features: Software available for enterprise USB drive management
Speed: 24-Mbytes/sec read, 20-Mbytes/sec write
Price: $75 / $125 / $185

The software for SanDisk Cruzer Enterprise closely resembles that of the Kingston DTEP, with the same password parameters (from six to 16 characters with a mix of letters, numbers, and symbols) and general program features. All files transferred to the single partition are automatically encrypted.

Yet SanDisk stands apart with its SanDisk Central Management and Control (CMC) solution for enterprise customers. SanDisk CMC allows central IT organizations to issue SanDisk USB drives containing "device agents" that communicate back to a network server (CMC uses Windows 2003/SQL Server). Administrators can remotely disable lost drives, restrict usage on unauthorized PCs, perform full audits of file transfers and usage, and otherwise extend control over the devices. SanDisk CMC also performs automatic device backup and allows for remote password administration.

Make sure to think through the configuration scenarios. For example, you may like the idea of shutting off a terminated employee's drive remotely, but keep in mind that deploying this optional capability requires users' USB drives to check in upon use to ensure that they're still provisioned. In this scenario, employees would have to give up the ability to use the drive on an airplane, or when the Internet's down at home, or if the lights were out at headquarters. Consequently, most organizations would probably opt to allow offline access (even if it means that a few drives get away), while still taking advantage of central management features (e.g. password resets) during online use.

SanDisk CMC requires Windows 2003 Server and Microsoft SQL Server 2000, and so this solution makes the most sense for IT shops that have the existing infrastructure and bandwidth to support yet another server application in the back office.