NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

dodgebros's avatar
dodgebros
Aspirant
Sep 03, 2017

Plan to protect image files stored on NAS from Ransomeware

Hi everyone.  I would like to get your opinion on my plan to protect so files stored on a ReadyNAS RN214.  The NAS will have 4 2Tb hdds.  I will be using Macrium Reflect on the server which will store it's image files on Disk 1 of the NAS.  The workstations will also have Macrium Reflect which will store their image files on Disk 2.  Each of the workstations will have a folder just for their image files as in PC1 will store it's Macrium image files in a folder named PC1 on Disk2 of the NAS.  Each folder will have it's own share that is protected with it's own user account on the NAS.

I will manually run backups on the NAS that will use only the Rsync protocal to copy the contents of Disk1 to Disk3 and Disk2 to Disk4.  Disks 3 and 4 will have no shares so they shouldn't be accessible from the network.  I will run the backups manually as that way we don't accidently copy the ransomeware over to Disk 3 and 4.

 

BTW, the workstations are Windows 7 Pro with Avast Endpoint Protection Plus running and the pc's are kept up to date with Windows updates.

 

So, your thoughts please.

 

 

4 Replies

Replies have been turned off for this discussion
  • mdgm-ntgr's avatar
    mdgm-ntgr
    NETGEAR Employee Retired

    Well any protection strategy should involve backup. If the only copy of important data is on one device then there's a significant risk, however likely/unlikely that if that device got compromised or there was a fire, flood, theft... There's things like disk failures as well.

    • StephenB's avatar
      StephenB
      Guru - Experienced User

      mdgm wrote:

       If the only copy of important data is on one device then there's a significant risk, 


      Yes.  A better strategy would be to get a second NAS (RN212 or RN214) and move disks 3 and 4 to the second NAS.  Then use rsync as you described above.

       

      I also suggest using RAID on the primary NAS instead of jbod. That would keep your data available for your users if you have a normal disk failure.

      • dodgebros's avatar
        dodgebros
        Aspirant

        Thanks guys for replying. Please keep in mind that the ReadyNAS I'm talking about will only be used to store disk images from workstations and a server.   Would love to hear more thoughts on ways to use ReadyNAS to protect your workstations/servers from ransomeware. 

         

         

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More