QNAP strives to provide Turbo NAS users with the most secure possible environment and to meet the challenges of new and more complicated network attacks. To maintain a secure environment, we also recommend that our users follow the below guidelines to protect their files & data.
Q: How do I enhance the security of my Turbo NAS using services provided by QNAP?
A: QNAP provides lots of services to strengthen Turbo NAS security. Here are seven settings that can assist in providing a secure environment for your Turbo NAS.
1. Enable Network Access Protection
Enabling this option can strengthen your system’s security and deny repeated attacks. You can set conditions to block IP addresses or common communication protocols.
Steps to enable Network Access Protection: “Control Panel” > “System Settings” > “Security” > “Network Access Protection” > Click “Enable Network Access Protection”
Steps to block IP addresses: “Control Panel” > “System Settings” > “Security” > “Security Level”
2. Enable System Connection Logs
By monitoring system connections, you can view all of the access attempts to check for unusual activity.
Steps to start System Connection Logs: “Control Panel” > “System Settings” > “System Connection Logs” > “Start Logging”
You can choose what connection types you want to log by clicking “Options”
3. SMS/Email Notification Settings
Users can set their Turbo NAS to provide instant SMS/Email notifications in the event of unusual activity.
For more information, please refer to the information on our website.
4. Connection with SSL (secure connection)
Using a secure connection, files being transmitted will be encrypted for extra protection. This setting is strongly recommended if you access your files & data through public networks.
Steps to enable SSL: “Control Panel” > “System Settings” > “General Settings” > “System Administration” > Click “Enable secure connection”
5. Service Binding
If there are multiple LAN ports on your Turbo NAS, you can set one to provide exclusive access to a service. For example, you can set LAN 1 just for “Web Server” connections and users can only use the web server through the LAN 1 IP address. Then you can set LAN 2 with no limit, and users can use it to connect without being blocked.
Steps to set up service binding: “Control Panel” > “System Settings” > “Network” > “Service Binding” > Click “Enable Service Binding”
6. Enable or Disable Network Services
We recommend that users disable services that they currently do not need to reduce the likelihood of being attacked. Services such as FTP, SSH, and Telnet can be easily attacked, so we recommend disabling them when not needed.
You can check what services are enabled using the following steps. The green light means that they are enabled. You can disable/enable services in the Control Panel. “Control Panel” > “System Settings” > “System Status” > “System Service”
7. Use Antivirus
Enable the Antivirus service in the Control Panel and regularly scan your Turbo NAS for malicious software. You can use the built-in antivirus or download third-party antivirus apps to protect your PCs.
Steps to enable Antivirus: “Control Panel” > “Applications” > “Antivirus” > Click “Enable Antivirus”.
Q: How to know what services are enabled?
A: You can check it using the following path. We recommend disabling unneeded services to reduce the likelihood of being attacked. In the myQNAPcloud service, we also suggest you to turn off the redirect function you don’t need it.
“Control Panel” > “System Settings” > “System Status” > “System Service”
How to turn off the redirect function on myQNAPcloud?
“myQNAPcloud” > “Remote Access Services” > “Auto Router Configuration” > “Enable” services
Q: How to make my Turbo NAS unsearchable?
A: External users can search for your Turbo NAS and enable services if you publish services to myQNAPcloud. We suggest that you set the two following settings to enhance the security of your Turbo NAS.
1. Set your Turbo NAS as unsearchable
After you set your QID and the connection to your Turbo NAS, you can set your Turbo NAS as unsearchable to prevent access from the external users.
Steps to make your Turbo NAS unsearchable: Sign in to “myQNAPcloud” > “My Devices” > “Device Detail” > Turn off “Searchable”
2. Disable services you have published on myQNAPcloud website
Your Turbo NAS service will be published to myQNAPcloud website if you choose “Publish”. If you do not need to share files with others, it is better disable this service. If you want to share with others, it is safer to check both “Publish” and “Private” so that users must have permission to access the Turbo NAS.
How to cancel services published on myQNAPcloud?
“myQNAPcloud” > “Remote Access Services” > “My DDNS/Cloud Portal” > “Cloud Portal”
Q: Is there anything should be careful when using the Turbo NAS?
A: A more complicated network environment allows for more potential attacks. Although we cannot ensure 100% protection, following good practices when setting up and using your Turbo NAS will mitigate a lot of risks.
- Scan your PCs regularly to check for malicious software and viruses.
- When accessing via Wi-Fi, use WPA/WPA2. WEP can be easily hacked.
- Regularly change your QID password if you use myQNAPcloud.
- Ensure you are using the most recent Turbo NAS firmware.
- Use strong password that is hard to guess.
For other security suggestions, please check the QNAP website.