NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
disconnecting/reconnecting a 314 programmatically to/from windows-network - ransomwareprotection
Hi,
in times of "wanna cry" and co, I want to use that NAS for intermediate backups in our network (Windows)
An example szenario as follows is planned:
# switch on (connect) that NAS to my network at 11:30
# do my backup copies to the NAS, eg. by robocopy or something else
# switch off (disconnect) that NAS from my network afterwards
switching on/off is for securing that nobody can access it (in particular no one of those crazy ransomware things like locky, wanna cry and whats going to come) from my network.
My Question: How can I send a NAS to sleep (switch NAS off) and wake it up (switch NAS on) programmatically or via ssh-telnet (which I could autotmate probably) ??
regards
J.B.
Hi,
my solution is now to switch my HP-Procurve-2530er-Ports on/off by SNMPSET.
Thats a quit simple freeware commandline tool which I can control by AHK, perfect.
J.B.
3 Replies
Since most ransomware infects Windows, just disconnecting any mapped drives (NET USE /DELETE) is the most important thing. Using a product like Acronis lets you back up to a NAS without ever mapping a drive where Robocopy is going to need a destination "drive".
WoL can wake the NAS, as can the internal timer. Programatically turning it off is another issue. You could just set the power off time, but that's a gamble that you left enough time for the backup to complete. If the backup is performed by the NAS, though, it will stay on until the job completes.
Hi,
my first thing is, I want to have that "server driven" - that control skript needs to be run on my file-server and NOT on the ReadyNAS.
Inbetween I found and tried another solution as follows partially:
# I've two "honeypot-files" (Excel and Word) on my mapped server shares
# when I start my backup script/procedure (I'll write it with Autohotkey/AHK)
- I check wether these honeypotfiles are manipulated or not (filesize, filename or what else) by ransomware
- if everything is all right, I enable that certain port (where NAS is connected) on my HP-Procurve-Switch via (automated by AHK) CLI-interface-access via SSH-Telnet
- do my backup things (robocopy or what else)
- then I disable that certain switch port of my HP-Procurve-Switch by CLI-Interface-access via SSH-Telnet
so everything should be save enough.
J.B.Hi,
my solution is now to switch my HP-Procurve-2530er-Ports on/off by SNMPSET.
Thats a quit simple freeware commandline tool which I can control by AHK, perfect.
J.B.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
