Why do I get a 403 Forbidden error when I access my NAS?
Applicable products
- NAS running QTS / QuTS hero
Overview
A 403 Forbidden error is an HTTP status code indicating that your request was understood by the server, but the server refuses to fulfill it. This typically means your NAS is blocking access from your IP address or network, even though the web server is reachable and the URL exists. Common causes include your IP address being on the deny list or being temporarily blocked due to repeated failed login attempts. Features such as allow/deny lists and IP access protection are designed to strengthen system security.
Occasionally, browser cache or cookies can lead to a 403 error. To rule this out, try accessing your NAS from a different web browser or in Incognito/Private mode.
Solution
- Test browser access:
- Open the NAS login page in a different browser or Incognito/Private mode.
- If accessible, clear your original browser’s cache and cookies and try again.
- Check the allow/deny list settings:
- Go to Control Panel > System > Security > Allow/Deny List.
- Review entries in both lists. If your IP address or range appears in the deny list, select it and click Remove.
- Click Apply to save changes.
- If QuFirewall is installed, open QuFirewall and review or modify the allow/deny settings accordingly. Refer to QuFirewall’s documentation for detailed steps.
- Check IP access protection status:
- If IP access protection is triggered by multiple failed logins, your IP address may be temporarily blocked. To review and unblock, go to Control Panel > System > Security > IP Access Protection and manage the blocked list as needed.
Note: Modifying firewall or security settings may affect system security. Make changes with caution. If you are unable to access your NAS at all, consider using a different trusted network or contact QNAP support for further assistance.
