NAS
-
Hello!
A NAS can be an interesting option as part of a good security plan, but it should not be the only one.
It is usually recommended to follow the 321 plan, 3 backups, on 2 different media, and one of them in 1 different place. If we do not want to exaggerate, at least we can make one copy on the NAS and another on an external USB hard drive that is taken to another physical place and that is left connected only for the time necessary to make the copy.
In the case of using a NAS, we must choose the appropriate tool. It is important that the place where the copy is made does not have easy access with the user with whom you work. For example, if you have a network drive hosted on the NAS using the SMB protocol (the typical one for sharing in Windows), you make the copy with your usual user, it is a copy of files in the raw and also you have it always online, what is going to happen is that the backup files will also be encrypted in case of ransomware. But NAS usually have an ecosystem of applications around them, both from Windows, Linux, Mac, Android, iOS... and that many times are the most recommendable, especially if they have version control. Of the programs you mention, if they allow you to run the copy with another user different from the one you use (a specific one for this task) they will be equally safe, as long as your user does not have write permissions in the destination of the copy.
Another point to consider is that NAS with two or more hard drives can be configured in RAID (1 or mirror, 5, 6...) but a RAID is never a substitute for backup, since it protects us against a hardware failure of a disk, but if something is encrypted on one disk it does so on the rest of the mirror.
As brands, Synology, Qnap and Asustor are usually recommended, although I have only used the former.
-
Many thanks, I would actually buy it with 2 disks and set it up in raid 1 (for the mirroring thing)
What I'm interested in is just file hosting, it's for domestic use.
I'm interested in accessing it through an application with a username and password, the thing I like about it is that viruses can't get in....
So if you recommend any model, I'll be very grateful
tesla tienda :)
-
I couldn't tell you about models. I have a Synology DS215J at home and it works perfectly for me. The current one is the DS218J and I think its micro is a bit more powerful and not much more will be added, but I already told you, more than enough for home use. There will be an equivalent in QNap, but I know less about the brand. In principle, any current model should be enough for you.
As for hard drives, I have Western Digital Red, which are recommended for NAS, and lately Seagate Iron Wolf have also been mentioned.
-
Thank you very much, I would actually buy it with 2 drives and set it up in Raid 1 (for mirroring).
What I'm interested in is just file hosting, it's for domestic use.
I'm interested in accessing it through an application with a username and password, the advantage I see in this is that viruses can't get in....
So if you recommend any model, I'll be very grateful
If you're going to set up a NAS in Raid 1 to have redundant data, you should keep in mind that it doesn't save you from losing information if for some reason you delete (or mistakenly delete) a file, or if a file gets corrupted... or if you accidentally encrypt files (you never know when it can happen until it happens).
In addition to the NAS, I recommend having another external drive (if not two) and backing up every X amount of time.
Of course, it depends on the data, if you have something very important, you can save a copy in the cloud (like Dropbox, Google Drive, Mega, One Drive) since there are free options with enough space to have an extra copy just in case.
Don't worry about your files being in the cloud, for example, Mega uses such a good encryption system that if you lose your access key, they won't be able to help you since they couldn't break that encryption either.
Yes, people like to think that someone is snooping on our data in the cloud... but think about how difficult that is since how many millions of users use these systems and how impractical and useless it is to "spy" on everyone.
Just out of curiosity, there are fireproof boxes to store external drives for backups!!
I know this last part because a client of my company, which is a clinic, has several fireproof boxes to store external backups. They also use several backup servers with an email report, and for each day of the week, they have several backup drives. The icing on the cake is that they do backups through WiMax antennas to another building, haha.
That is, unless there's a natural disaster, it's difficult for them to lose information
.And I must admit that I had the bad experience of fighting a cryptolocker there that gave me quite the headache
Best regards!!
-
@_neptunno_ said in NAS:
Many thanks, I would actually buy it with 2 drives and set it up in RAID 1 (for mirroring).
What I'm interested in is just file hosting, it's for domestic use.
I'm interested in accessing it through an application with a username and password, the advantage I see in this is that viruses can't get in....
So if you recommend any model, I'll be very grateful
If you're going to set up a NAS in RAID 1 to have redundant data, you should keep in mind that it doesn't save you from losing information if for some reason you delete (or mistakenly delete) a file, or if a file gets corrupted... or if files get encrypted accidentally (you never know when it can happen until it happens).
In addition to the NAS, I recommend you have another external drive (if not two) and back up every X amount of time.
Of course, it depends on the data, if you have something very, very important, you can save a copy in the cloud (like Dropbox, Google Drive, Mega, One drive) since there are free options with enough space to have an extra copy just in case.
Don't worry about your files being in the cloud, for example, Mega uses such a good encryption system that if you lose your access key, they won't be able to help you since they couldn't break that encryption either.
Yes, people like to think that someone is snooping on our data in the cloud... but think about how difficult that is since how many millions of users use these systems and how impractical and useful it is to "spy" on everyone.
Just out of curiosity, there are fireproof boxes to store external drives for backups!!
I know this last part because a client of my company is a clinic and has several fireproof boxes to store external backups. In addition, they use several backup servers with an email report and for each day of the week they have several backup drives. And the icing on the cake is that they do backups through WiMax antennas to another building, haha.
That is, unless there's a natural disaster, it's difficult for them to lose information
And I must admit I had the bad experience of fighting a cryptolocker there that gave me a real headacheBest regards!!
Thank you very much for the response, the idea is a NAS for domestic use only to copy files, the only thing I want is for the file upload to be done through some application, either from the NAS brand itself or an external one, and for authentication with the NAS to be done with a username and password.
So that if there's ever a virus, it can't access it, that's the idea I have...
Although as you rightly say, if it backs up every day... and it coincides that one of these encrypting viruses gets in... if I don't notice... they'll be encrypted... and the files will be uploaded incorrectly, so I'm in the same situation...
So maybe it would be good to have a NAS that has file versioning? I'm just throwing this out there.
And about the cryptolocker you fought... were you able to eliminate it? Mine is grancrab 5.1, I find a lot of information about 5.0.4 or earlier... but about 5.1 I can't find anything...
Thanks
-
When a cryptolocker infects your system, you generally consider your information lost. Except for very old versions, or very specific cases, it is not feasible to break the encryption.
I get sick every time I see it at work... I feel like killing the person who designed the virus.There are already certain antivirus programs, like Bitdefender, that have ransomware protection and if you also activate file versioning in Windows, it gives you some help.
But you should always have a backup on a drive that is not permanently connected. Also, it is logical that you do the backup and while you do not do other tasks (which avoids the danger of opening an infected email).You can have your NAS with your data in Raid 1 and, as I told you, buy a couple of external drives and make backups periodically (don't worry too much if you do it weekly or monthly, at least you will always have some peace of mind).
Look, there is always a critical moment that is between backup and backup, but be aware that it is impossible not to lose anything because there is a temporary window where you are working with those files and it is a vulnerable point.By the way, many people have things in Dropbox (to give an example) and when a ransomware enters their PC, it also encrypts those files and they are lost
The thing is that if you are lucky enough to have that folder synchronized on another PC, you can boot it without a network and recover that information since it was not synchronized.Oh, and of course, if a ransomware enters a computer, the first thing is to turn it off "immediately" and then boot it without a network to evaluate the damage and disinfect.
Regards.
-
And another thing is that some NAS have applications that make "snapshots" of files so you can recover them if you get some ransomware. Qnap has it, but I think all the big manufacturers have the same thing:
https://www.qnap.com/solution/ransomware/es-es/
I am one of those copy maniacs:
I have a disk on my PC, the NAS, Dropbox and OneDrive. Everything is replicated between work and my home. Apart from a USB HDD that has the photos (again) and the programs.
The same thing at work, it's on all the PCs we have, because if it gets into one, as they tell you here, you disconnect the network and recover the data. -
I'm looking at these 3 to see what you think, they're missing the disks which would be 50 to 60€ more per disk...
The use I'm going to give it is simply to store copies...just that use, not a multimedia server...nor downloading torrents...
The only thing that in the future could be used is the day the TV at home is "changed"...because the one there is not even a smart TV...it could be used as a multimedia server.
-
WD usually has a bad reputation, and Synology's 218J is better, the 216se is the most basic of the brand within those that have two bays.
-
Always buy one that allows you to use a DLNA server. I don't recommend a nas to anyone. You'll miss that utility later. I changed a thecus 5200pro because I couldn't put a DLNA server on it, and because it didn't have power. I put together a celeron centrino with 512 of ram and even so it doesn't recover. That is, it's about 15 years old, more or less. But it works
