Do I need ReadyCLOUD?

Hello AVoelp,

 

ReadyCloud is a feature on ReadyNAS OS6 units that will allow you to access the NAS remotely via web URL and/or ReadyCloud app (iOS, Android, Windows and Mac). This will also allow you to invite friends to access some shares/folder by setting up a permission.

 

Do you need ReadyCloud? It is up to you, alternatively you can also setup FTP on some shares you want to access remotely, the difference however is FTP uses local users you have in the ReadyNAS admin page for authentication and you need to make sure your ISP and router do not block FTP firewall port.

 

Here are some article you might be interested in:

 

ReadyCLOUD FAQ

What is ReadyCLOUD and how do I use it with my ReadyNAS OS 6 storage system?

 

Hope this helps.

 

Regards,

You can use RAIDar to discover your NAS on your local network and get to the local admin page or if you determine the I.P. using another method browse to e.g. https://ip.address.of.nas to access the local admin page.

 

You certainly don't need to use ReadyCLOUD, but many find it useful.

You don't need to use ReadyCloud - there is a control in the GUI you need to enable for it, and by default that control is off.

 

The NAS will reach out to various netgear hosted servers though - that includes NNTP time servers and software update servers.  There is also an update server for the antivirus service - that is not hosted by Netgear.  AV can be disabled if you wish.

 

There are ways Netgear can access the NAS remotely for support, but you need to take action to enable them (and Netgear does require a consent form from you before they will access it).

 

Personally I see no issues with those other services, but you could avoid using them if you wish. The NNTP servers used are configurable, and you could block internet access to netgear.com to the NAS in a firewall (or using the parental controls in your router). I haven't.

 

Some apps also use third party internet services - Plex in particular.  You'd need to research the security/privacy of those services separately.

---

AVoelp wrote:

Does this also imply that I will be at an increased risk of intrusion into my ReadyNAS through the internet?

 

Which of the operations performed through the ReadyCLOUD interface will make my locally stored data accessible through the internet? Which may cause storage of local data on the ReadyCloud server?

 

---

Netgear doesn't provide much information on security with ReadyCloud (and you won't find the answers to your questions in the FAQ Jennc linked). Personally I'd like to see more disclosure on these aspects.  The days of "security through obscurity" are long over.

 

If you do use ReadyCloud, your data will traverse Netgear cloud servers. And we do know that the servers can decrypt the data - because they do precisely that when you access the data from the ReadyCloud web portal, without the need for a PC VPN client.  Also right now the ReadyCloud portal uses HTTP and not HTTPS.

 

Cloud accounts are distinct from local user accounts (and they show up on your NAS separately). Details on where the credentials are stored and how they are protected haven't been disclosed.  

 

While I am a home user,  I do know that my employer would not use ReadyCloud because it would not meet their security requirements. There isn't enough information from Netgear to fill out their security checklist, but the use of HTTP in the portal would be a non-starter.

 

FWIW, these security gaps are all fixable, and it is unfortunate that Netgear hasn't.

 

---

AVoelp wrote:

 

Are there alternative methods for setting up and administering my ReadyNAS?

 

Of course, I do not want to be paranoid about data protection.

---

Being careful about privacy and security is not being paranoid, and I think your questions are good ones.

 

Setting up and administering the NAS does not need ReadyCloud, and can be done w/o any internet connection.  There is a local app called RAIDar that is handy (whether you use ReadyCloud or not).  RAIDar isn't needed that often, but it can discover your NAS and report status even if the NAS network configuration is broken.  (It uses UDP broadcast, which will not go through your home router).

 

If you want remote access over the internet, then there are a couple ways to go about that.  JennC mentioned FTP - though I'd suggest FTPS which is encrypted.  You can use non-standard ports to work around ISP blocking.  

 

You can also enable HTTPS access with port forwarding.  That enables both remote administration and remote file access (that is all-or-nothing).

 

 

You could also look into the apps for owncloud and btsync.  If you do want owncloud, I suggest getting it from whocares_ at rnxtra.com.  That is the current version, the one shows up in available apps in the NAS web UI is old.

 

 

Another approach (which I am trying out) is to use a router that supports OpenVPN, and use that to reach your home network.  That requires a DDNS service to reach your router (which you also need if you use port forwarding), but your data would not traverse anyone's servers, and is encrypted on your device and decrypted in your router.  

 

OpenVPN gives complete access to your home network, so it is suitable for you and immediate family (or employees) - who already have that access. But it isn't suitable for limited sharing with friends (or customers).

---