Hardware security tools

Question

Information Security

The question is: what are the devices and their accompanying software in order to ensure the safety of information. In the organisation? Those. we have a company network for 50-100 computers, a server where it is necessary:
​​1) Make it so that employees cannot access other people's data. Ideally, some kind of digital key to your computer. The coolest thing is thin clients with cards, but we initially had a PC according to the condition.
2) So that information cannot be taken out of the building. So that it was impossible to send it over the soap, it was done with the help of a firewall. We need to add a hardware component to this.

Yes. Of course, I understand that the one who wants to endure. The task is not to allow this to be done by someone else, third-party, provided that computers are available (for example, a university).
Those. First of all, all hardware solutions are interesting. I would like to get acquainted with what is on the market. Google does not help, because. I don't even know how to form a request.

Answer 1

There are many of these and they are well priced. For example here . It is possible to bind to RUTOKEN out of the box. My teacher works there. And I have a similar development at my enterprise. The main thing is that the information security facility and the enterprise have the necessary valid certificates of the FSB and FSTEC. Your protection will be guaranteed.

Answer 2

Information is stored on the server, access to data is only through a terminal session. You correctly wrote on thin clients. Ordinary PCs can be used as thin clients. Close all other data access.

Answer 3

keys at workplaces can be arranged using usb tokens or fingerprint scanners (and this is inexpensive by the way).

So that information cannot be taken out of the building. So that it was impossible to send it over the soap, it was done with the help of a firewall. We need to add a hardware component to this.

uh? barrier? a guard with a club? in fact, there is only one way - to close all external channels in general, and to plant an n-th number of paranoid security guards, sort of big brothers who monitor all the actions of employees. By the way, this will cost money, and contradicts the Labor Code in most cases.
otherwise, with a relatively small budget and technical knowledge, you can “endure” anything.
in get requests, in dns requests, steganography in faxes, background "noises" during a telephone conversation, and a laser transmitter through a window, after all.

Answer 4

www.infowatch.ru/
This is a product of Kaspersky, it does not allow you to copy files to external media or send them by mail for internal use. Technologically, the same antivirus, only the signature database is not from malicious software, but from files prohibited from being removed.

Answer 5

and also - the analysis of micro-jerks in the power network :) there are no ideal solutions, there is only the price of the issue