Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: NAS Security Issues

NAS Security Issues 8 years 1 week ago #28276

  • JRSMI17
  • JRSMI17's Avatar
  • Offline
  • New Member
  • Posts: 1
  • Karma: 0
Hey guys...

I believe this will turn into a couple questions, so please excuse me if this sounds confusing...

Let's say a network had to disable all USB ports on computers due to an auto-run virus that turns on all auto-run features on a computer. All computer loads and software are stored on external Hard Drives so reloading these machines all of a sudden becomes impossible. As a possible solution, the network administrator looks into NAS drives to be connected via Ethernet connection. These drives would be utilized similar to external's, not as a large capacity file share connected at the server.

Questions:

1) How vulnerable are NAS drives to an auto-run attack?

2) Do NAS drives have software that provide security?

3) If I had to sell this option to an administrator, what would my strong and weak points be?

Thanks guys, I appreciate your help on this issue.
JRSMI17
The administrator has disabled public write access.

Re: NAS Security Issues 7 years 11 months ago #28397

  • menshaco
  • menshaco's Avatar
  • Offline
  • New Member
  • Posts: 2
  • Karma: 0
great
photos
The administrator has disabled public write access.

NAS Questions... 7 years 3 days ago #32878

  • katzebnt
  • katzebnt's Avatar
  • Offline
  • New Member
  • Posts: 16
  • Karma: 0
1) How vulnerable are NAS drives to an auto-run attack?
NAS drives are not like USB devices, normally when you connect to one there is no "Auto Play" feature in Windows.

2) Do NAS drives have software that provide security?
Yes, but most consumer-grade NAS software shouldn't be trusted with the security of all your data. Normally NAS access and security is dealt with using network and domain security policies (ACLs, LDAP / domain permissions, etc).

3) If I had to sell this option to an administrator, what would my strong and weak points be?
NAS storage is nice because it is accessible network-wide. I don't know what your network infrastructure looks like or how your authentication is set up, but the NAS could possibly be put in another VLAN or subnet to isolate it. A good enterprise level NAS isn't cheap, and that's not including the cost of the drives. $$$ will be (and always is) a main deciding factor.

By the way, you can disable auto-run completely on individual computers in a workgroup environment, and also in a domain environment through group policy.
The administrator has disabled public write access.
Time to create page: 0.076 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup