ReadyNAS Encryption

---

HSTPC wrote:

 

I would like that volume to be encrypted except for when I am copying data to it.

 

---

This is a bit confused.  If a volume is encrypted, then it is always encrypted.  The on-disk structures are what are encrypted.

Perhaps more importantly, encrypting the physical volume doesn't provide any network security. Anyone with the network credentials can still read/write to the shares on the volume.  So encrypting the volume wouldn't give you any protection from a ransomware attack.

Options that could help with ransomware are

• Cloud backup (which often does have built-in protection)
• air-gapping a backup in some way
• disabling file sharing protocols on the backup destination.

What I do myself is that I have backup NAS that only allow rsync backup combined with a cloud backup service.  The backup NAS also are on a power schedule, so they would likely be off when a ransomware attack strikes.  That would hopefully give me time to disconnect them from the network if my systems were infected.  If not, the fallback is the cloud backup service (which also provides disaster recovery).