QuTScloud

QuTScloud is the operating system for QNAP Cloud NAS virtual appliances. With the possibility of on-premises and cloud deployment, QuTScloud enables optimized cloud data usage and flexible resource allocation at a predictable monthly cost.

System
Applications

QES

QES is the operating system for dual-controller QNAP NAS models. With FreeBSD and ZFS, QES is flash-optimized, capable of driving outstanding performance for all-flash storage arrays.

System
Product
Resources

QNE Network

QNE Network is the operating system for QuCPE, QNAP's universal customer premises equipment series. Run virtual network functions, freely configure software-defined networks, and enjoy benefits such as lowered costs and reduced management efforts.

System
Applications

QSS

QNAP Switch System (QSS) is the configuration interface for QNAP's managed switch series. Enable management functions such as link aggregation, VLAN, and RSTP, to take care of your network topology with ease.

System

QuRouter

QNAP’s QuRouter OS simplifies managing high-speed and high-coverage LAN/WAN. With NAT, VPN, security, and QuWAN SD-WAN, network management is made easier and remote connections more secure.

System
Applications

QVR Surveillancee

QVR Surveillance is QNAP’s network video recorder software solution. It offers subscription-based QVR Elite and perpetual QVR Pro, and can be used with a series of apps, such as face recognition and door access control for a wider range of scenarios.

System
Applications
Resources

QVR Face

QVR Face is a smart facial recognition solution featuring real-time live streaming video analytics from connected cameras. It can be integrated into multiple scenarios to provide intelligent attendance management, door access control management, VIP welcome systems and smart retail services.

System
Applications
Resources

KoiMeeter

QNAP smart video solutions provides integrated intelligent packages such as video conferencing and smart retail, boosting productivity for individuals and businesses.

Video Conferencing
Smart Retail

What are best practices for enhancing NAS security?


Last modified date: 2022-12-16

Applicable Products

All NAS series


Best Practices

The highest security risks to a NAS are malware/ransomware threats from the internet. To prevent malware infection or other attacks, QNAP strongly recommends securing your QNAP NAS and routers by following these best practices:

Don't expose the NAS to the internet

  1. Disable port forwarding on your router.
    1. Log in to the management interface of your router
    2. Check the Virtual Server, NAT or Port Forwarding settings, and disable the port forwarding setting of NAS management service port (port 8080 and 443 by default).
  2. Disable Auto Router Configuration
    1. Open myQNAPcloud.
    2. Disable UPnP port forwarding.
    3. Go to Auto Router Configuration.
    4. Deselect Enable UPnP Port forwarding.

Remotely connect using myQNAPcloud Link or QVPN Service

Note

After disabling Port forwarding, the NAS is still accessible through myQNAPcloud link or QVPN Service. Connect to the NAS using myQNAPcloud Link.
  1. Log in to QTS, QuTS hero, or QuTScloud as an administrator. 
  2. Open myQNAPcloud. 
  3. Register your device with myQNAPcloud.
    1. Click Overview
    2. Click Get Started and follow the steps to register your device. 
  4. Enable DDNS.
    1. Go to My DDNS.
    2. Click the toggle button to enable My DDNS
  5. Do not publish your NAS services.
    1. Go to Published Services.
    2. Deselect all items under Publish
    3. Click Apply
  6. Configure myQNAPcloud Link to enable secure remote access to your NAS via SmartURL.
    1. Go to myQNAPcloud Link
    2. Click Install to install myQNAPcloud Link on your NAS. 
    3. Click the toggle button to enable myQNAPcloud Link
  7. Restrict who can remotely access your NAS via the SmartURL.
    1. Go to Access Control
    2. Next to Device access controls, select Private or Customized
      Note
      • Private allows only the QNAP ID logged in to myQNAPcloud to access the NAS via the SmartURL. 
      • Customized allows you to invite other QNAP ID accounts to access the device via the SmartURL. 
      1. If you selected Customized, click Add and specify a QNAP ID to invite the user.
Use QVPN Service to connect to the NAS
  1. Open App Center
  2. Search for QVPN Service
  3. Click Install.

Update the NAS firmware to the latest version


  1. Log in to QTS, QuTS hero, or QuTScloud as an administrator. 
  2. Go to Control Panel > System > Firmware Update
  3. Under Live Update, click Check for Update.
    1. QTS, QuTS hero or QuTScloud downloads and installs the latest available update. 
      Tip
      You can also download the latest firmware for your NAS from https://www.qnap.com/en/download. This firmware can then be manually installed on your device.
  4. Under Auto Update,
    1. Enable Recommended version.
    2. Click Apply.
    3. The system will periodically check for new updates and install the firmware automatically.

Update all applications on the NAS to their latest versions


  1. Log on to QTS, QuTS hero, or QuTScloud as an administrator. 
  2. Open App Center
  3. Update applications.
    1. Locate Install Updates in the top-right corner of the window. Click All
    2. A confirmation message appears. Click OK
    3. QTS, QuTS hero, or QuTScloud installs the latest versions of all applications. 
  4. Enable Auto Update
    1. Click Settings.
    2. Go to Update
    3. Pick Install all updates automatically and Enable the item.
    4. Click Apply.

Apply strong passwords for all user accounts on the NAS


QNAP recommends using strong passwords that:
  • Are at least 8 characters in length
  • Include both uppercase and lowercase characters
  • Include at least one number and one special character
  • Do not contain the username or the username reversed
  • Do not repeat the same character three or more times

Change the admin password

  1. Log on to QTS, QuTS hero, or QuTScloud as an administrator.
  2. Click the profile picture on the QTS Taskbar. The Options window opens.
  3. Click Change Password.
  4. Enter the current password.
  5. Enter a new password.
  6. Remove unnecessary user accounts and applications
  7. Verify the new password.
  8. Click Apply.

Change user passwords

  1. Open the Control Panel
  2. Go to Privilege > Users.
  3. Select a user.
  4. Click Change Password. The Change Password window appears.
  5. Enter the current password.
  6. Enter a new password.
  7. Verify the new password.
  8. Click Apply.
  9. Repeat the above steps for other users.

Remove unnecessary user accounts and applications


Remove unnecessary or unknown user accounts.

  1. Open the Control Panel.
  2. Go to Privilege > Users. A list of the NAS users is displayed.
  3. Delete any user accounts that are no longer required, or any user accounts that you do not recognize.

Remove unknown or suspicious applications

  1. Open the App Center.
  2. Go to My Apps A list of your apps is displayed.
  3. Disable or remove any apps that you do not recognize.

Leverage security applications


Use the latest version of Malware Remover.

  1. Open the App Center.
  2. Search for "Malware Remover".
  3. Click Install.
  4. Open Malware Remover.
  5. Click Start Scan.

Install QuFirewall.

  1. Open the App Center.
  2. Search for "QuFirewall".
  3. Click Install.
  4. Open and enable QuFirewall.

Avoid opening default port numbers to the internet


If the NAS is directly connected to the Internet (for example, via PPPoE, static external IP address, or a router in DMZ mode), change the system port number in QTS.

  1. Open the Control Panel.
  2. Go to System > General Settings > System Administration.
  3. Specify a new system port number.
    Warning
    The following ports are default system ports that should not be used: 443, 8080, 8081, 80.
  4. Click Apply.

If your NAS is behind a router but is connected to the Internet through port forwarding, specify a new port number on the router. Do not use 443, 80, 8080 or 8081.

Take snapshots and back up regularly to protect your data


Note: Snapshots require at least one storage pool, and one volume.

  1. Open the Control Panel.
  2. Go to Storage & Snapshots > Storage > Storage/Snapshots.
  3. Select a volume.
  4. Select Snapshot Manager in the Menu of Snapshot.
  5. Click Schedule Snapshot and Enable schedule.

Subscribe to the QNAP Security Advisory newsletter


You can attain up-to-date security information by subscribing to our Security Advisory newsletter.

  1. Signup for Security Advisory Newsletter
  2. A confirmation email is sent to your email address. If you do not receive this email, check your spam/bulk email folder.
  3. Click the link in the email to confirm that you want to receive emails from QNAP.

Was this article helpful?

81% of people think it helps.
Thank you for your feedback.

Please tell us how this article can be improved:

If you want to provide additional feedback, please include it below.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Choose specification

      Show more Less

      Choose Your Country or Region

      open menu
      back to top