How Do I Replace Dropbox?

[capite]

What’s the latest/best way to use Synology to replace OneDrive, Dropbox, Google Drive?

I have a small company and want to provide 12 or so users with their own “accounts” like if we all used Google Drive and wanted to share files and folders occasionally.

We want to have access to our files both in the office with PCs, and at home and on the road with iPhones.

I also want no external access to DSM or anything that could let a hacker in to do any damage.

There seem to be so many apps, both Synology and third party, like NextCloud, that I don’t know where to start.

 

[one-eyed-king]

If your company uses office365, I would recommend the included OneDrive.
If your company used GSuite, I would recommend the included GDrive.

If your company uses non of the above, NextCloud is a good solution, see: Docker - Nextcloud - the self-hosted productivity platform that keeps you in control

 

[jeyare]

welcome @capite!
the answer is Synology Drive.
Works for me in similar operation, also for external and internal co-workers, customers, ...
You can find here tons of inspirations

 

[fredbert]

Hi @capite, let's recap your requirements:

1. Replace public Cloud storage sharing services with a self-hosted alternative
2. Provide access to the self-hosted service from
   1. internal office
   2. employee homes (non-work provided)
   3. public WiFi, other WiFi, and mobile data when not at locations 1 or 2.
3. The self-hosted service equipment (DSM) must not be externally accessible (from the Internet)
   1. This therefore blocks access from anywhere but internal office locations

How do you propose to allow non-office access to this if it's not accessible externally?

I'd suggest a remote access solution, such as VPN Plus running on an SRM router which will isolate the DSM NAS from being directly accessible from the Internet. Then run Synology Drive and desktop and mobile clients pointing to the DSM NAS using URLs that are only LAN resolvable (or LAN IP).

This would force users to establish a secure VPN connection first and then access Synology Drive.

 

[WST16]

How do you propose to allow non-office access to this if it's not accessible externally?

I reread the post and I think @capite mentioned that he doesn’t want external access to DSM per se. External access for his other requirements is fine.
Correct @capite? If not, then Houston we have a problem

 

[fredbert]

Its not that specific. The ‘or anything that would let a hacker...’ is a 2nd condition. I’m trying to think what this covers and can see it would be addressed by placing the NAS on its own protected subnet away from client devices and IOT: potentially a correctly configure DSN firewall would achieve this but a separate firewall would be a clearer solution.

For business there is a different risk profile than for home use and the value of data assets and impact of loss/breach to business needs to be considered.

It shouldn’t be that the reader needs to make assumptions because they may make the wrong ones. The requirement must be self-evidently clear. Did you ever wonder why government projects never run smooth?

 

[WST16]

Its not that specific. The ‘or anything that would let a hacker...’ is a 2nd condition. I’m trying to think what this covers and can see it would be addressed by placing the NAS on its own protected subnet away from client devices and IOT:potentially a correctly configure DSN firewall would achieve this but a separate firewall would be a clearer solution.

Yes. You have a point.
I guess @capite should rethink his request and mitigate as much as he can and accept the risks.

 

[jeyare]

Hi @capite, let's recap your requirements:

1. Replace public Cloud storage sharing services with a self-hosted alternative
2. Provide access to the self-hosted service from
   1. internal office
   2. employee homes (non-work provided)
   3. public WiFi, other WiFi, and mobile data when not at locations 1 or 2.
3. The self-hosted service equipment (DSM) must not be externally accessible (from the Internet)
   1. This therefore blocks access from anywhere but internal office locations

How do you propose to allow non-office access to this if it's not accessible externally?

I'd suggest a remote access solution, such as VPN Plus running on an SRM router which will isolate the DSM NAS from being directly accessible from the Internet. Then run Synology Drive and desktop and mobile clients pointing to the DSM NAS using URLs that are only LAN resolvable (or LAN IP).

This would force users to establish a secure VPN connection first and then access Synology Drive.

plus
incl. 2FA
for some just web based connections, fir some desktop/App clients