Choosing a NAS for office files and backups: what really matters

Network storage (NAS) from vendors such as Synology or systems based on TrueNAS is a popular choice for small and medium offices: shared folders, backups of computers and servers, sometimes even video surveillance. To be reliable, a NAS needs more than just disks.

Before buying

• Capacity with a reserve — data grows, and backups need several versions.
• RAID is not a backup. RAID protects against a failed disk, not against deletion, ransomware or a fire.
• Disks for NAS use, ideally from different production batches.
• Support for snapshots (read-only point-in-time copies) and replication to a second device or the cloud.

Secure configuration

1. Disable the default admin account and use MFA for administrators.
2. Do not expose the NAS management interface or file sharing to the internet; use a VPN.
3. Enable automatic security updates and notifications.
4. Configure immutable snapshots that cannot be deleted from a regular account.
5. Keep a second copy off-site, following the 3-2-1 rule.
6. Monitor disk health (SMART) and replace disks before they fail.

A NAS is only as good as the last successful restore test.

Need help with this? Contact CySec for a free consultation.

All articles