How to Secure your Synology NAS | 4K TUTORIAL

NAS units become easy targets for adversaries who will attempt to gain access and then exploit the NAS for ransom money. The reason that NAS units are targeted so often, is because they, unlike most network devices, use UPNP to open ports on your router. This is done in order to allow you to remotely access your filesystem from outside of your network, however it also opens the door for adversaries to export vulnerabilities on their NAS.

This tutorial gives over the different ways to secure your Synology NAS, regardless of what you need!

Links:

Affilate Links:
Synology Recommendations:

Drives:

Going 10GbE:

*These are affiliate links, which means that if you purchase a product through one of them, I will receive a small commission (at no additional cost to you). Thank you for supporting my channel!

[coryhyatt]

If you cut the cable its still a nas, Not Attached Storage.

[loicbourrit]

Awesome content, thanks!

Also, I would add the following points for any types of user:

- disable guest account as well
- change default port numbers
- force HTTPS over HTTP
- disable any protocole that you don't need (Telnet, FTP, TFTP, SSH, etc.)
- activate DoS protection
- make sure the firewall is activated
- block IP by country location
- update regularly NAS OS
- disable relay mode if Quickconnect is enabled
- possibly install free / McAfee antivirus

Cheers :)

[gabharri]

Thank you for this video. I have been trying to make sure that I am doing enough when it comes to securing my NAS.

[Hogtym]

Great job. You make it simple for all of us that don't have the tech expertise to secure these devices.

[Aether-Entropy]

"But I have port 22 open"
Subtle flex lol
Great video!

[anderssjohansson]

Thanks very much - this is the best security NAS video so far....looking forward to a Firewall dito!!

[TheOnlyDominik]

Forget everything you know about complicated passwords, only the length counts. Thank you for your great Videos.

[indigoleslie]

Did you ever make a video about Security Advisor? I have been getting a warning about "Lan service accessible from the Internet". I looked in the Synology community and found some conversations from a few years ago but no solutions as far as I could see. A lot of people guessing. So a video would be helpful. Thanks. Great channel, btw...

[HenrikStrindberg]

Thanks a lot! Would be great to have a tutorial on how to use your custom domain (any domain) and without a static IP (plus https)!

[derred]

thanks i'm learning this stuff before i buy my first nas and try to use it to remote into, I think it's called Audiostation, but also plex possibly.

[elias]

That’s it then, suggestion number one it is! 😄
What do you think about whitelisting local network IPs and adding Geo Block rule to the firewall?

[patiencetaylor]

I love how you explain the technical terms so clearly in your videos. My question is, can you enable/disable Quick Connect on an as-needed basis? Say you are traveling and know you will need access to your files while gone, but once home, the need is no longer there. Does disabling Quick Connect disable the ability to access the NAS, or is it a case of once it is set up it is always active?

[gerardlunow]

Helps me to think about all options. I only go to my NAS over VPN and check the logs. Still will look at the rest. Mr, Synology!! Thank you!

[safetime]

thanks, very helpful, subscribed and liked, was wandering what camera and microphone you are using, where to buy them.

[Usercod]

Thank you very much for this video! I noticed some things I did not think of and changed the settings!

[TM-vgmx]

I bought nas but then I did not use it because of fear of security as I am not a tech person. thanks for the great video

[ApicalTrades]

As usual, , , another great tutorial.
Thank you

[howard]

Another fantastic tutorial. Obviously an older one but I was able to find all the settings in DSM 7. I don't see the Update and Security Center tutorial link in the Description? Mentioned at the end of the video.

[JeremyCobb]

once again a great video with a combination of good common sense and know how

[tabbarsg]

I cut the NAS cable and I never get hacked, best advice !