Security guideline best practice to follow

[ITEngineer]

Is there any procedure or security best practice documentation I must follow to securely harden my QNAP QTS 5.x before releasing the NAS to the production sites which allows internet connection outbound from this NAS?

[dolbyman]

Why would production sites allow innound LAN connections ..let alone storage device connections?

[ITEngineer]

Why would production sites allow innound LAN connections ..let alone store connections?

Is it required for receiving the Firmware updates?

[dolbyman]

No..that is done by the NAS and does not require incoming NAT traversal.

[ITEngineer]

OK, is there any security guidelines or procedure I can follow to harden or secure the NAS from QNAP?

[dolbyman]

Depends on the usage and environment...maybe you should get a professional company to do some security evals for you.

[ITEngineer]

OK, I am trying to gather some official documentation from the QNAP vendor but cannot find it apart from this website:

Code: Select all

https://www.youtube.com/watch?v=FeYbfkCfwSc

Code: Select all

https://www.youtube.com/watch?v=rtZ3knepQZE

No need to spend any more money when you can do it yourself.