A Guide to Securing Your Synology NAS and Home Router, a Checklist with Eddie the Web Guy

DISCLAIMER - Just to save you time putting it in the comments! Yes, I know this is a long video and YES I know that it is delivered rather slowly and with less of Robbie's arm-waving excitement. BUT, this is not the most exciting/crazy subject in the world and 15 years of experience in networking has taught me that clients need things delivered slowly and methodically. Below (and likely in the KZbin time bar automatically) are the chapters that I cover in this video and it is designed to be taken in digestive chunks, not all in one go. As always, if you need free help with your network setup (regardless of your skill level), you can always use the free NASCompares advice service. Me and Robbie will answer your questions as soon as we can (we are humans, with lives, making a video a day and an article/guide every other day) so although we might not be the fastest, it is a genuinely free service and provided with the ambition of allowing home users and those in strict budgets do not have to pay the exorbitant fees that this industry cultivates by hiding behind a degree of network/techie mysticism. You can find the NASCompares Free Advice Area here - nascompares.co...
Video Chapters
00:00 - The Start (duh!)
00:25 - Why Network Security is more important than ever - RANSOMWARE, , MALWARE & PHISHING
2:32 - Securing Your Home Router. Tips, Ideas & How to adapt the settings
07:00 - How to identify which ports are open, a quick and easy way in your web browser/client machine with Pentest Tools & Nmap
11:45 - VPNs, the Do's and Don't have Why You Need One
13:00 - Setting you SHOULD change/check on your Router
16:55 - How to Setup Port Forwarding
18:40 - Understanding Your Firewall
20:15 - How to Stop Attacks to your Internet from INSIDE your Network, the Synology NAS Settings
23:05 - Synology NAS Security Settings you should care about
23:45 - Enabling Two-Step Authentication
24:20 - Synology Firewall Settings
25:00 - DDOS & Auto Blocking access attempts
25:40 - Using the Synology Security Scanner
27:00 - Why you should disable the Admin Account
28:15 - Disabling/Restricting Command Line Access to your Synology NAS
32:15 - PLEASE Make sure you have a backup in place
Vulnerabilities And Exploits On Synology & QNAP NAS - Stay Updated! - nascompares.co...
NAS Buyers Guide - Get It RIGHT First Time - nascompares.co...
Synology DSM 7 Review - ALL PARTS - nascompares.co...
Synology DSM 6.2 vs DSM 7.0 - • Synology DSM 7 0 vs DS...
Synology DSM or QNAP QTS in 2021/2022, Part I - nascompares.co...
Synology DSM or QNAP QTS in 2021/2022, Part II - nascompares.co...
Synology DSM or QNAP QTS in 2021/2022, Part III - nascompares.co...
Mesh Routers VS Powerline Adapters And Wi-Fi Extenders - Buyers Guide 2021 - nascompares.co...
Synology NAS Unofficial Memory Upgrade Guide - nascompares.co...
How To Switch From Google Photos And Drive To Synology NAS - A Step By Step Guide - nascompares.co...
This description contains links to Amazon. These links will take you to some of the products mentioned in today's video. As an Amazon Associate I earn from qualifying purchases.
Amazon NAS Solutions - amzn.to/37oX47P
Or follow and speak with Robbie directly on his Twitter - / robbieonthetube
Still not enough? Then why not visit and subscribe to our blog. Updated regularly it gives you a far wordier version than the NASCompares KZbin, as well as provide you with hints and tips on how to make the most of your hardware here www.NASCompares...
Don't forget to visit them on Facebook to enter prize draws, giveaways and competitions, as well as hear about the latest news, NAS releases & offers - / nascompares

[@nascompares]

*DISCLAIMER* - Just to save you time putting it in the comments! Yes, I know this is a long video and YES I know that it is delivered rather slowly and with less of Robbie's arm-waving excitement. BUT, this is not the most exciting/crazy subject in the world and 15 years of experience in networking has taught me that clients need things delivered slowly and methodically. Below (and likely in the KZbin time bar automatically) are the chapters that I cover in this video and it is designed to be taken in digestive chunks, not all in one go. As always, if you need free help with your network setup (regardless of your skill level), you can always use the free NASCompares advice service. Me and Robbie will answer your questions as soon as we can (we are humans, with lives, making a video a day and an article/guide every other day) so although we might not be the fastest, it is a genuinely free service and provided with the ambition of allowing home users and those in strict budgets do not have to pay the exorbitant fees that this industry cultivates by hiding behind a degree of network/techie mysticism. You can find the NASCompares Free Advice Area here - nascompares.com/contact-us/

[@GeorgeTJ]

It's excellent and very informative!

[@WhiteDieselShed]

Thanks but any chance of an arm waving & coffee fuelled quick guide on what the essentials are to testing your synology NAS security. I make goldfish seem attentive. :) Ideally something that does not require signup or registration to a service or app. Thanks.

[@JoeCole1]

Good info! Protip: watch on 1.5x speed.

[@yazanalsolaimi416]

I love their videos, but they’re damn long :(

[@ricigri1242]

This awesome guide came just in time. Thank you !

[@SocialWorkProfessor]

Thanks for this, Eddie. I feel like I could use more details on setting up the firewall. I'd love to set it up so that only certain countries would have access. I'm afraid of locking myself out while doing this 😂

[@gswhite]

Great info. Just do not expose your NAS to the internet. Including quick connect. Create the smallest attack surface you can. If you still want services from your NAS or Plex. Use a reverse proxy. Preferably not the one on the NAS 😂 Use NGINX or something else. Place something in front of your NAS. Use Cloudflare and get yourself a certificate. Keep your attack vector and surface tiny. Use two factor. Synology has push authentication for free make sure it’s enabled. Only forward essential ports through to your reverse proxy

[@katsasstrophy2334]

Thank you so much for making this video.

[@mehoolshah]

Useful video. Honest feedback - It wasn't up there in line with your better ones though and could have used a little more focus+detail! I have a couple of questions - (1) I have a network that's segregated exactly like how Eddie suggests i.e. the computers, tablets, phones, NAS, etc on one subnet and SSID, whereas the streaming devices on another and all the chinese IoTs on a third subnet/SSID. The practical problem I have with this set up is that I have media on the NAS but the streaming devices cannot access it unless I bring them on to the same SSID/subnet as the NAS, which kind of defeats the purpose. And with the growing number of security incidents with NASs, I am really paranoid but at the same time, I feel like I am losing out on the potential of my NAS to be the ideal media server/store. BTW, my NAS isn't open to access via the Internet (yet), for the same reasons cited above. So, is there an elegant way out of this? Would greatly appreciate any suggestions. (2) Eddie suggests using the QNAP Cloud method to access the NAS remotely but I recollect that Robbie had mentioned in one of his earlier videos that there's a high risk potential with that too. So is it safe to use the QNAP proxy to access the NAS remotely? I have currently disabled that option on my NAS. Pls. advise. And yes, thanks for the great job you guys are doing!

[@livingadreaminparadise9307]

Really good info for someone looking to beef up there security..

[@CrazyAngelfire]

Could go make a video with a bit more in depth about the firewall that you mentioned

[@throttlenerd]

Great, thanks! But please make chapter two video about two friends sharing portions of their NASes for mutual remote backups without opening any ports. Or maybe opening just one port for VPN is a good idea? Please clarify this for noobs/dummies like me )