As I just learned…..

[7Natives]

FWIW, from Palo Alto Networks Unit 42 courtesy of Spiceworks

 

[Jan Janowski]

Brief overview… paints AI with pretty bad strokes.
By the time I got to (what I expected to be at the very bottom of that white paper), it was exactly what I thought was waiting for me….

Would love to ask: “OK, I’ve got Firewall in 2600 router, and Firewall in Multiple NAS’s: and Threat Prevention, & Safe Access also running in router……,,,,, With these tools - cause that’s the only tools - we’ve been given… what’s the best settings to give the most secure, yet OK for every day - usage????

This is assuming we here don’t open up emails or texts from unusual sources, even those we know, nor same on phone.

 

[7Natives]

In Threat Prevention > Settings > General tic:

• Enable Threat Prevention
• Drop high-risk packets automatically
• Security priority mode

Monitored Interfaces tic all

..> Device tic all
..> Notification tic Enable event notification, customize here and [Advanced] as preferred

In Safe Access > Security > Network Protection tic all and grab an AI key from Google (granted, this is the low-budget approach).
..> Exception List add your known & needed
some SSL verifiers you may want to include:

• rapidssl.com
• geotrust.com
• thawte.com
• digicert.com

Assuming the firewall(s) on your router(s) and NAS's are setup, go to Security Advisor > Overview, click [Scan], review, then click [View Results].

I believe that's about all of it using the Synology provided tools. YMMV and others may have more or better ideas.

Oops, forgot this: Security Advisor > Advanced > Security Baseline > select [Customize checklist] > tic all
..> Scan Schedule > tic Enable regular scan schedule and pick your choice, e.g., Daily at HH:MM