SSDs and Sophos Safeguard (TRIM command)

[Trapper]

I've been replacing our ancient Toshiba Sat Pro's spinning rust with SSDs. We do not have the money for new staff laptops at the moment (but we did for 20 new units for Post 16!) and these old Celeron single core beasts and some Core2Duo's with Sophos Safeguard installed are almost impossible to use. Think pasting a block of text in Word taking up to 10 seconds.

 

Anyway, I know there are easier ways to secure SSDs but we've got years left to run on our SafeGuard contract, and it is very user friendly for the staff. The whole disc encryption on an SSD is practically un-noticeable. You really cannot tell that the SSD is software encrypted. The speed boost is ridiculous.

 

I've been reading and apparently software encrypted hard drives can have a problem when Windows runs the TRIM command. You can find out which blocks of NAND have garbage data to be overwritten and this could be used for access?

 

Has anyone really looked into this? Any recommendations?

[SYNACK]

Do you have a MVLS agreement bitlocker works fine with trim and is completely transparent, it even works with the built in encryption features of the ssd offloading the whole lot and making it almost instant.