Ransomware Protection with Synology Immutability - DSM 7.2 | Synology

[@rowdy2589]

So awesome to see immutability now from Synology, this is a total game changer!

[@btn006]

Great video but have a question. Why would I need a worm shared folder for immutable snapshots? Cant immutable snapshots be fine protected on a normal shared folder? Thanks.

[@leexgx]

Think about documents that shouldn't be changed (snapshots don't prevent that as it's more for undo, WORM does as it prevents the file it self from been modified) Snapshots say 90 max + 7 or 14 day immutable is what most should work with (WORM is more for business)

[@FlemmingWiltonHansen]

Hi, I got a DS2413+ & a DS2415+ , will they get version 7.2 in the future ?

[@johnyangsana911]

1. You can delete WORM share folder using Admin via Control Panel > Share Folder and delete. 2. You Can't delete only one or more file. Just delete share folder. If you want to remove only one file, i suggest you back file to other location first. 3. The condition can be delete if you Choose Enterprise Mode. Not Compliance Mode (05:00).

[@jochoaus]

great detail, thoroughly explained 👍

[@dezeque]

When WORM folder is not more needed how to remove it ? We need to reset all the dsm to factory default ?

[@EnriqueReyes]

Great question. I also want to know 🤔

[@johnyangsana911]

1. You can delete WORM share folder using Admin via Control Panel > Share Folder and delete. 2. You Can't delete only one or more file. Just delete share folder. If you want to remove only one file, i suggest you back file to other location first. 3. The condition can be delete if you Choose Enterprise Mode. Not Compliance Mode (05:00).

[@johnyangsana911]

1. You can delete WORM share folder using Admin via Control Panel > Share Folder and delete. 2. You Can't delete only one or more file. Just delete share folder. If you want to remove only one file, i suggest you back file to other location first. 3. The condition can be delete if you Choose Enterprise Mode. Not Compliance Mode (05:00).@@EnriqueReyes

[@gobofraggel7383]

But I can turn off the snapshot schedule. Unless I am not understanding, a hacker only needs to turn off snapshots and wait a few weeks.

[@dlambethful]

Enable Log alerts (auditing). This way you can receive notification of any changes made to the Synology.

[@Dmitriitube]

@@dlambethful what if it disables the log and prevents the alert from going off about it?

[@duelistXmist2]

Why is this not supported on devices older than 2020 models?? Really screwing over customers.

[@YSEVERYNAMETAKENGOD]

how is not including a feature that wasn't even available when you bought the thing "screwing over customers"? did you also think it was screwing over the customers when you bought the thing, knowing full well that it wasn't a feature?

[@duelistXmist2]

You can easily add some of these features such as immutable volumes or WORM snapshots with a software update. You see this for example on your phone with new iOS or Android updates that adds new features and security updates to your phone. It's one thing if it was a hardware limitation that prevents Synology from doing this, but clearly there is not. Look at the "innovation" in hardware specs from ~2018-2024. Not much changes, very similar performance & Specs on at least on the DS Series. Its a sleezy move, that is anti-consumer. Something like this security functionality should go out further than 3-4 years.

[@aekkupbori7668]

What should do if want to delets some file in the worm storage?

[@johnyangsana911]

1. You can delete WORM share folder using Admin via Control Panel > Share Folder and delete. 2. You Can't delete only one or more file. Just delete share folder. If you want to remove only one file, i suggest you back file to other location first. 3. The condition can be delete if you Choose Enterprise Mode. Not Compliance Mode (05:00).

[@RobertHorvat]

I have not Immutable snapshots under Settings to choose!

[@leexgx]

20+/Xs nas or higher

[@fbifido2]

part 1 ???

[@LuLu860706]

kzbin.info/www/bejne/eobahqGvp56Co5o

[@elcapitan2414]

The configuration shown (Shared folder, Compliance Mode, Lock immediately, Remain locked forever) seems pretty dumb to me. With this configuration, you wouldn't be able to delete anything in that folder FOREVER! The recommendation to set a quota on that folder with the shown settings seems dumb as well. When the set quota is reached, your backups won't work anymore since no free space is left and you can't delete anything FOREVER. That means you have a filled up folder for the rest of your life, good job.

[@leexgx]

Backups wouldn't be set to forever (you run out of space) this is for static files

[@ubigian]

You have a severe media indexing freezing problem. We, your customers, have paid you millions of dollars for freezing NAS. Give us a solution, or give us our money back!

[@AlexandrLinux]

complete nonsense, a snapshot is needed to protect against ransomware