@@QNAPUK thank you for your answer..can you make a video how to do it...I have a router but I have little experience how to set up..i am afraid I will do a mistake .I will like to set the port correctly so it is the same for the nas ,my TV,my phone...... it is changing every time and it makes confusing to do is right..I have enable port forwarding and if a disabled it will my qnap connect to the internet?..it is very confusing for me.😰
@@QNAPUK i understand that the settings is not in the qnap but in the router..If I disable the port forwarding in the router and the upnp..can I access the nas from the internet?
i guess im randomly asking but does anyone know a method to log back into an instagram account..? I somehow lost my password. I love any tips you can give me!
You got the question if you can disable the admin account, and you say no. I have created a new administrator account, logged in thru that, and disabled the admin account. I think this is a great security measure. In my log I see many attempts to login from somewhere unknown to me, using the admin account.
I'm late to this and the subject may have changed in a subsequent update since this was published, but you can disable the admin account and I have done on both my QNAP NAS. A separate account has been set up with administrator privileges for that purpose. The reason I did was that I was getting "robot" calls to that account name (admin) which is a fairly obvious target. I also set up address blocking for a number of incorrect passwords.
Hi, a question about the ssl message you show. I get that too, even though I install certificates for internal. The helpdesk sends a link to a how2 with openssl on qnap site which then solves nothing except for iexplorer. But not other browsers. And when I ask about it, I get the response that they do not support 3epart applications. now I have seen on my new model that an open ssl generator has been added, but that also gives the same problem. I have it with certificates based on ip address and static DNS. How can this be solved for the internal network?
@@QNAPUK strange in my opinion I already answered. but thanks again for the response. I'm using the hostname I created in my mikrotik router via the Static DNS option. and just to be sure I also put the ip-address and hostname in my hosts file.
Mainly for security as it involves no port forwarding, you could also say ease of use for the same reason as not everyone knows how to configure their router for port forwarding and putting their NAS on a static IP address that would be required.
I know this video is old but I installed SSL cert and now I'm getting insecure notice and the cert is invalid NET::ERR_CERT_COMMON_NAME_INVALID and a red, not secure notice,when I check this it says invalid cert
@@QNAPUK I figured that out now that the cert as you say is only covered the domain which I purchased. It is still saying not secure when I open from Qnap finder. I now enter Qnap through my Qnap cloud now and not through the finder. It still comes up once on Qnap when I open Plex and it says insecure
hi if i don't want to use nas through the internet because i don't need that does it okay to connect it just by thunderbolt 3 ? and if it is okay please make video about it thank you
Hi Craig. I had the SSL certificate setup on my old NAS and found all the warnings quite annoying so just used the normal HTTP connection. If i'm on the same LAN as my nas but log on with myqnapcloud will my connection speed be slower as it's doing a round trip via the internet or is there some clever routing stuff going on?
@@QNAPUK Thanks for the reply. I'll do some testing. Slightly off topic but do you know when any Hero firmware updates might be inbound? I've recently got a h1688x and the Hybrid desk (in QTS) is VERY glitchy/unusable - this is tricky because I use hybrid desk if I lock myself out - also, GPU in V Station is disabled. I almost sent it back but a 1288 user told me they had the same issues - i assume it's just firmware? Thanks!
@@QNAPUK good to know. It’s the hero firmware. Like I say - the hdmi output using either the hybrid Desktop qts hero app or the chrome browser makes the screen go to glitchy garbage. I suspect they both use/share a chromium CEF with some weird rendering flag set. Also, you can’t use a gpu with visualisation station which is a shame as I wanted to use a vm as a media encoder for my editing system. I hope it gets sorted with the next FW. Sorry to hijack the page! These videos are great BTW.
@@QNAPUK Thank you for your answer.I looking in forums but nothing i use Pfsense and i have also Unraid server home and everything is fine. But i cant make it to work DDNS.I didn't ask the support yet hope i find solutions in forums first.
If I log in using my mobile browser on my home network I still get the not secure icon in Chrome using HTTPS 192.168.*.* I've done the letsencrypt step too I can't use the secure friendly *.myqnapcloud.com address without having "myqnap cloud link" enabled. I don't want to traffic my data through Qnap servers. All i want to do is have my nas update *.myqnapcoud.com with my current dynamic I.P so I can then use Qbelt android app to vpn from a mobile network. I bet I've missed a simple step somewhere
@@QNAPUK thanks for replying, I'm trying to vpn into my nas over a cellular network with the Qbelt mobile app My home network doesn't have a static I.P so I've been trying to get the Qbelt app to login via something.myqnaplcloud.com details but it never seems to connect, I've tried with the Qlink setting enabled and my Nas is registered and temporarily visable on MyQnapCloud while I'm testing but still no joy I'll hop onto the forums later for guidance, thanks
@@QNAPUK I'm sorry, I meant a Clamav scan. Clamscan uses 54% of the cpu and some other processes the rest. I only scan the download map with 150GB in it and it takes about 8 hours
@@QNAPUK When I try to login in a WebDav share with a Browser it doesn't work.For example I type "localhostip:port/folder" in my Browser (Firefox) the login doesn't work. But when I try to login with Mac or Windows like in your Video it works. Sorry for my English :P
Hi Sir: Thanks for the great videos you are making. I’m using QNAP ts-453b, I have a domain name with ssl certificate from namecheap, is it possible to direct my NAS to use this domain name and the ssl certificate ? And if yes how can we do it “as I’m not a tech savvy”? Thanks 😊
how to secure my nas from the router..that settings is safe for my routers to connect a qnap nas?please can you help me?
@@QNAPUK thank you for your answer..can you make a video how to do it...I have a router but I have little experience how to set up..i am afraid I will do a mistake .I will like to set the port correctly so it is the same for the nas ,my TV,my phone...... it is changing every time and it makes confusing to do is right..I have enable port forwarding and if a disabled it will my qnap connect to the internet?..it is very confusing for me.😰
@@QNAPUK i understand that the settings is not in the qnap but in the router..If I disable the port forwarding in the router and the upnp..can I access the nas from the internet?
@@QNAPUK thank you very much for your answer and your time.
i guess im randomly asking but does anyone know a method to log back into an instagram account..?
I somehow lost my password. I love any tips you can give me!
@Bronson Alec instablaster =)
Thank you for this security overview video, direct and simple... this should be a "must see" for all the new Qnap users like me...
Thanks, for the video. I'm new to having my own server so this video helped setting up and getting started.
Very good overview on qnap security. Thank you!
Great video Craig, thanks for sharing 👍
You can disable the admin account. Just make up a new one with a new name and disable the 'admin' account. Done.
You got the question if you can disable the admin account, and you say no.
I have created a new administrator account, logged in thru that, and disabled the admin account. I think this is a great security measure. In my log I see many attempts to login from somewhere unknown to me, using the admin account.
I'm late to this and the subject may have changed in a subsequent update since this was published, but you can disable the admin account and I have done on both my QNAP NAS. A separate account has been set up with administrator privileges for that purpose. The reason I did was that I was getting "robot" calls to that account name (admin) which is a fairly obvious target. I also set up address blocking for a number of incorrect passwords.
19:14 Accessing your NAS remotely
24:30 Accessing the NAS via VPN connection
How to secure your NAS without watching the video: Setup a VPN, this way will bypass so many vulnerabilities by exposed services.
when using webdav with windows explorer, how can you login with 2 step verification? I only get accountname and password, then it fails to connect.
Hi, a question about the ssl message you show. I get that too, even though I install certificates for internal. The helpdesk sends a link to a how2 with openssl on qnap site which then solves nothing except for iexplorer. But not other browsers. And when I ask about it, I get the response that they do not support 3epart applications. now I have seen on my new model that an open ssl generator has been added, but that also gives the same problem. I have it with certificates based on ip address and static DNS. How can this be solved for the internal network?
@@QNAPUK strange in my opinion I already answered. but thanks again for the response. I'm using the hostname I created in my mikrotik router via the Static DNS option. and just to be sure I also put the ip-address and hostname in my hosts file.
Hi just a question I see the tab "IP access protection", but I can't open it. What could be causing this.
@@QNAPUK thanks for the reply and i tried but the problem persists. it's not a setting that causes this.
Why do you not recommend myQNAPlink as the preferred default for remote file access?
Mainly for security as it involves no port forwarding, you could also say ease of use for the same reason as not everyone knows how to configure their router for port forwarding and putting their NAS on a static IP address that would be required.
I know this video is old but I installed SSL cert and now I'm getting insecure notice and the cert is invalid NET::ERR_CERT_COMMON_NAME_INVALID and a red, not secure notice,when I check this it says invalid cert
@@QNAPUK I figured that out now that the cert as you say is only covered the domain which I purchased. It is still saying not secure when I open from Qnap finder. I now enter Qnap through my Qnap cloud now and not through the finder. It still comes up once on Qnap when I open Plex and it says insecure
myqnapcloud.com
@@QNAPUK Thank you for the info that what I have done, works better and quicker than Qnap finder
hi if i don't want to use nas through the internet because i don't need that does it okay to connect it just by thunderbolt 3 ? and if it is okay please make video about it thank you
@@QNAPUK hi thank please make video about how to secure qnap for beginner and non tech-savvy for Mac and pc thank you
Hi Craig. I had the SSL certificate setup on my old NAS and found all the warnings quite annoying so just used the normal HTTP connection. If i'm on the same LAN as my nas but log on with myqnapcloud will my connection speed be slower as it's doing a round trip via the internet or is there some clever routing stuff going on?
@@QNAPUK Thanks for the reply. I'll do some testing. Slightly off topic but do you know when any Hero firmware updates might be inbound? I've recently got a h1688x and the Hybrid desk (in QTS) is VERY glitchy/unusable - this is tricky because I use hybrid desk if I lock myself out - also, GPU in V Station is disabled. I almost sent it back but a 1288 user told me they had the same issues - i assume it's just firmware? Thanks!
@@QNAPUK good to know. It’s the hero firmware. Like I say - the hdmi output using either the hybrid Desktop qts hero app or the chrome browser makes the screen go to glitchy garbage. I suspect they both use/share a chromium CEF with some weird rendering flag set. Also, you can’t use a gpu with visualisation station which is a shame as I wanted to use a vm as a media encoder for my editing system. I hope it gets sorted with the next FW. Sorry to hijack the page! These videos are great BTW.
DDNS not work at all do you know some fix for this.
Thank you.
@@QNAPUK Thank you for your answer.I looking in forums but nothing i use Pfsense and i have also Unraid server home and everything is fine.
But i cant make it to work DDNS.I didn't ask the support yet hope i find solutions in forums first.
If I log in using my mobile browser on my home network I still get the not secure icon in Chrome using HTTPS 192.168.*.*
I've done the letsencrypt step too
I can't use the secure friendly *.myqnapcloud.com address without having "myqnap cloud link" enabled. I don't want to traffic my data through Qnap servers.
All i want to do is have my nas update *.myqnapcoud.com with my current dynamic I.P so I can then use Qbelt android app to vpn from a mobile network. I bet I've missed a simple step somewhere
@@QNAPUK thanks for replying, I'm trying to vpn into my nas over a cellular network with the Qbelt mobile app
My home network doesn't have a static I.P so I've been trying to get the Qbelt app to login via something.myqnaplcloud.com details but it never seems to connect, I've tried with the Qlink setting enabled and my Nas is registered and temporarily visable on MyQnapCloud while I'm testing but still no joy
I'll hop onto the forums later for guidance, thanks
Thank you for the clearly webinar. Is it normal that a Clamav virus update takes several hours on my TS-451 and the cpu is between 90%-100% ?
@@QNAPUK I'm sorry, I meant a Clamav scan. Clamscan uses 54% of the cpu and some other processes the rest. I only scan the download map with 150GB in it and it takes about 8 hours
@@QNAPUK Yes
Cool Video, I don´t can accsess WebDav via Browser (only in Guest Mode) you have a solution ?
@@QNAPUK When I try to login in a WebDav share with a Browser it doesn't work.For example I type "localhostip:port/folder" in my Browser (Firefox) the login doesn't work. But when I try to login with Mac or Windows like in your Video it works. Sorry for my English :P
Hi Sir:
Thanks for the great videos you are making.
I’m using QNAP ts-453b, I have a domain name with ssl certificate from namecheap, is it possible to direct my NAS to use this domain name and the ssl certificate ? And if yes how can we do it “as I’m not a tech savvy”? Thanks 😊