Securing Your NAS: Best Practices
Vložit
- čas přidán 28. 05. 2024
- In this informative and practical video, we delve into the essential best practices for securing your Synology Network Attached Storage (NAS) device, ensuring optimal data protection and safeguarding your valuable information. Whether you are a home user or managing a business environment, this video offers invaluable insights and step-by-step instructions to fortify your NAS against potential threats.
First, we explore the importance of strong user authentication and access controls. You will learn how to set up secure user accounts with complex passwords and enable two-factor authentication for an extra layer of protection. We'll take you through several other best practice tips that every Synology NAS owner should deploy.
By following these suggested best practices demonstrated in this video, you'll gain the knowledge and confidence needed to secure your Synology NAS effectively, protecting your data from unauthorized access, and other potential security risks.
00:00 - Introduction
00:14 - Disable Admin & Guest Users
00:49 - Password Settings
01:28 - Logout Timer
02:38 - Disable SSH
03:25 - Change DSM Ports & Redirect HTTP to HTTPS
04:28 - Two-Factor Authentication
05:42 - Bonus Tip
07:09 - Closing Segment
Share this video - • Securing Your NAS: Bes...
Subscribe to this channel - goo.gl/dRbTqD
Channel Support:
Buy Tony A Coffee - www.buymeacoffee.com/quiktech
PayPal - paypal.me/quiktechsolutionsllc
Earn $100 Cloud Credits from Digital Ocean by signing up at:
m.do.co/c/41d68f5e11bd
Amazon Affiliate Storefront:
www.amazon.com/shop/quiktechs...
Disclaimers:
This video is not made for or intended for kids.
I participate in the Amazon Affiliate/Influencer Program. When purchasing using my Amazon Affiliate links, your price doesn't change. You pay the same, but I do get a small percentage of the sale in commission. This helps the channel to continue creating content you enjoy viewing.
All images used in this video are my own or taken from pixabay.com.
About Tony:
I am a retired educator of 32 years. I started out as an instrumental music teacher and evolved into technology support. After many years of providing technology support to teachers and students, the last ten years of my career, I was in a leadership position of Technology Coordinator and also Supervisor of Technology. My passion has always been helping people. I hope to continue helping people through my CZcams channel.
Contact Tony at:
quiktechreview@gmail.com
Follow me on:
Twitter @quiktechreview
Facebook @quiktechsolutionsllc
Instagram @quiktechsolutionsllc
Hope you enjoyed this video. Please subscribe, like, & share. - Jak na to + styl
Thank you Tony, super helpful!
Awesome! Glad the content was helpful. Thanks for watching.
Some great information Tony - Thanks 😊
Thanks David, much appreciated.
Great video Tony! Super clear, understandable and all points are spot on!
Thanks Avi. Hope all is well.
Great info, Tony!
Thanks Willie
Very informative! Everyone should do these.
Thanks for watching Jay.
Tony had a beach day!
Yes, actually have had quite a few. Thanks for watching.
One question in regards to using Secure Sign In app for storing the OTP accounts for use with the 2FA. Currently the app only supports backups to Synology Account. Meaning the backup will be stored at Synology. I am wondering why it is not possible to make local NAS backup of the OTP accounts. Do you have any thoughts on this? Synology has not been able to provide me a meaningful answer.
I have not explored this scenario in depth enough to provide you a reasonable response. I’m going to have to do a little testing. Have a great day.
When changing the DSM ports http and https numbers, is there a range you have to stay within, like 5000 to 9999? I'm guessing I can't just pick a random set of numbers or can I? Will changing these numbers effect any other connections or applications? Obviously I don't know what I'm doing and don't want mess it up. Thanks in advance for the clarification.
No specific range, just be sure what you select isn’t already being used. For example 80, 443, 53, 67 etc. you can google port numbers
Hrmmm, no google authenticator with 2FA ? I'm dead-set against downloading 50 apps for (2|m)fa, they need to get over this proprietary BS and play nice like most. Otherwise, great tips Tony.
Thanks for watching Ressy. I actually thought the same thing when the option for a 3rd party authenticator app wasn’t an option.
Awesome information Tony, thanks for the content.
Thanks for watching and commenting!