[SATLUG] Drive Encryption

[Ernest de Leon]

I believe this topic may have been discussed partially on list before, but I
wanted to get a more in depth response from the community.  Recently, my
organization (government) purchased a copy of the EnCase software to search
several computers.  What I have come to understand from reading the
literature and the vendor's information is that the software is capable of
searching at the cluster level for data.  Does anyone on list have any
experience with this software?  If so, are fully encrypted drives immune to
the EnCase search methods?  What do you recommend for encrypting our
sensitive data so that not even software like EnCase can pull data from our
servers.  What would you recommend so that we can still be able to search
employee computers with EnCase if we suspect something bad?

Thanks,
Ernest