Forum Discussion

Aspirant

Apr 24, 2020

ReadyCloud security issues

Hi. I decided to try ReadyCloud with my RN104. So I started ReadyCloud service on device, connected device to my account and right after I was able to see device content on web and mobile. But: ...

JohnCM_S

NETGEAR Employee Retired

May 01, 2020

Hi racer841,

Welcome to the Community!

The ReadyCLOUD web portal actually runs on HTTPS, all connections from apps, portal and back-end access are on HTTPS.

The reason that you see HTTP on the web portal is for the NETGEAR home routers where they also connect to ReadyCLOUD. However, due to their specifications they usually are having a hard time maintaining HTTPS connection because of certificates being updated from time to time. So seeing the portal on HTTP is just actually for the routers to be able to use its feature but ensuring back-end and other access is secured using HTTPS and VPN connections.

Regarding the issue#2, can you still view or download those files even when ReadyCLOUD is disabled on the NAS?

Regards,

racer841

Aspirant

May 14, 2020

Hi.

Thanks for the answer, but I can't agree. I've just connected to my NAS from corporate network, where no NETGEAR home routers are in use. The connection to my NAS through readycloud.netgear.com is still insecure (http://readycloud.netgear.com).

Regarding the issue#2, no, I was not able to download files after I've disabled ReadyCLOUD on the NAS.

Regards,

Greg

Sandshark
Sensei
May 14, 2020
You misread the response. ReadyCloud is also included on some Netgear home routers, and this restriction is based on what they need to make it work. That you don't have a Netgear home router has nothing to do with it, and the rest of the response explains why you shouold have no concern.

But, frankly, I don't understand why you would use ReadyCloud in that environment. It's intended as a home solution, A corporate network would more likely be using a VPN.
- racer841
  Aspirant
  May 14, 2020
  I don't use ReadyCloud in corporate environment. RN 104 is my home NAS and I just tried to connect it from internet - in this case corporate network.
  
  So I've NAS at home, beyond two routers - one is my private orbi and the second is router from my ISP. None of routers allows any direct connection to my home network, so I think NAS connects to readycloud. Readycloud allowes authenticated user/connection to see NAS content from internet, but the connection is to readycloud, not to NAS directly. Why this internet --> readycloud connection is not secured, just as readycloud login page is?
  - StephenB
    Guru - Experienced User
    May 15, 2020
    racer841 wrote:
    
    So I've NAS at home, beyond two routers - one is my private orbi and the second is router from my ISP. None of routers allows any direct connection to my home network,
    
    If all you want is remote access for yourself, then I suggest that you set up OpenVPN on the Orbi (and forward the ports it needs in your ISP router). That's what I do myself (I need to use my Fios router at the edge, and have an Orbi router right behing it).
    
    Like schumaku I am also unclear as to exactly how the web interface to readycloud is secured (though I am not doubting JohnCM_S ).
    
    But overall, I prefer using OpenVPN for simple remote access. There's no reason I need to connect via a cloud service for that.