security

  1. Cyberwasp

    DDNS security question

    I've been looking into accessing my NAS from outside my LAN. I finally got DDNS working with my cellphone and can go to my DDNS and see my desktop via cellular. My only question is, what is the best way to protect this from the outside besides not giving out the ddns address because when I do...
  2. R

    Security SSL Certificates

    Hi All, I have a question about my NAS, and the SSL certificates. I get a security report every month, and my NAS boxes flag, because the SSL certificate isn't registered against my domain, but instead Synology domain name. When i select to add a new cert from Lets encrypt, under security tab in...
  3. P

    Security certificate for intranet access

    Hello, When I access my NAS within my home network (192.168.0.x), I always get the warning that the connection is not private... How can I install a certificate that will prevent this warning message form popping up? Many thanks in advance. Paulo
  4. 0

    Remote file sharing from NAS configured as reverse proxy - how best to ensure security?

    Hi all, I'm configuring a NAS for a small business, to allow secure transfer of files to clients directly from the Synology NAS. So far, I have configured the NAS as a reverse proxy server and opened port xyz (ports 80 and 443 are already forwarded to other services, so this is some other...
  5. EAZ1964

    security of the hyper backup vault port

    Just to be sure, I would like to know your opinion on the hyperbackup-vault port. As I do run a cross backup between two online NASses, They have been setup identically. I have opened and forwarded the HB-vault port on my routers to the same port on the NAS. The NAS firewall is active, and it...
  6. EAZ1964

    backblaze blog article on nas security

    For what it is worth, a recent article on nas security: https://www.backblaze.com/blog/recent-qnap-and-synology-security-alerts-how-to-protect-your-nas/ There is nothing new in the article, it just refers to the synology knowledgebase and their own backup service. But it may refresh someones...
  7. R

    Digital Security Assessment Checklist

    Hi all, I came across this document: https://www.synoforum.com/resources/security-checklist.31/ Under section E (Data Backup) it reads: "04 Configure an alert threshold in Hyper Backup for file changes between two backup versions, so that it automatically notifies you of abnormal behavior and...
  8. G

    Backup Security

    With all the ransomware going on in the world, how can we protect our backups even more? I have two NAS systems in two different physical locations. They both utilize hyper backup and send a complete backup to the opposing NAS. For each hyper backup task, you need to specify the target and a...
  9. Huggy

    Security - What do I need to do next?

    So I've just read @jeyare's thread that's pinned at the top of this forum. Great post btw, thanks @jeyare. However, like many "unskilled" users It's quite scary and quite overwhelming. I share my NAS with a few family members and might add a couple of friends in soon. I want to make sure all...
  10. Sly870

    Reverse proxy and security..

    Hello all, Something been on my mind for quite a while is security, security and security! I currently have my RaPi 4 with my home assistant exposed a on a single port, currently the only thing exposed but I would like to expose my OpenVPN as well. Just a few questions: 1) Would it be wise to...
  11. jeyare

    Best ever hint for better home security

    how you get 100% sure no one will hack you from the WAN? So that on Friday evening after coming home from work, tired, you decide to make adjustments to the FFTx supply and your drill will do so differently than you expected. The WAN silence was incredible. Not for all family members. 🥃
  12. WST16

    The bots that steal your 2FA codes (report).

    https://www.vice.com/en/article/y3vz5k/booming-underground-market-bots-2fa-otp-paypal-amazon-bank-apple-venmo
  13. G

    Hardware security: reset button and disk-keys

    We are talking to somebody (13 employees) that has office in a collective building. We have to rent 3u in a rack to put network and NAS in. My issue is, these racks are not only for my prospect to access. We can lock the disks (but any Synology key fits...). Next, it is easy to somebody to...
  14. Chavilan

    Third party phone apps - Security concerns

    Hi everyone, I am quite new on Synology, I have download the 'DS Manager Pro' app for my iPhone, it looks brilliant but I have a big concern, I am not sure how safe it is give user/password to a third party company, could it be a security problem with this? Would it be better to create a...
  15. EAZ1964

    OpenSSL security issue warning

    https://www.synology.com/en-us/security/advisory/Synology_SA_21_24
  16. R

    Well it looks like they enhanced system health and security scanning in DSM 7

    There is nothing like waking up to a message like this in E-Mail: Malware was detected on brains. Please sign in to DSM on brains and open Security Advisor to fix it. From brains Found this when logging in, I use iDrive backup for work files and C2 backup for personal files and apps on the...
  17. Crabber

    Use Lan2 to confine Security Cameras?

    Have a 920+ with 2 lan ports. Is there a way to hook the poe switch to the second port and Isolate it from my ISP's router? My thought is to take the load off the main network as well as to hopefully isolate the camera's from the WWW. I would still want to view the cameras via DS Cam etc. The...
  18. H

    Why is Security Advisor's Login Analysis show 'No Data'??

    Hi all, I'm hoping someone can help me understand Synology's Security Advisor 'Login Analysis' section. For reference, I currently do not have my Synology login page available externally. I do have a reverse proxy set up for a several applications (i.e. Jellyfin, Bitwarden, Grocy, Firefly) but...
  19. fredbert

    Safe Access High volume of alerts for 'security reasons (malicious)'

    This is a story, or sorts, about getting a noisy security alert. Starting around 21:00 last Friday evening (28th May) I got a few and then a lot of Safe Access alerts about local devices trying to access 52.113.194.132. Checking on AbuseDB I find I'm not alone. The AbuseDB lookup indicated...
  20. G

    Snapshot Replication

    Hi, First of all, sorry for my english, I'll try to make it understandable... I use Snapshot replication toibackup schedule backup tasks from Active Backup. I have several interrogations about this method ? The first one is the encryption. There is no encryption on the destination, except...
Top