NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
MGBear
Feb 19, 2014Aspirant
RN104: 50 % performance hit for encrypting?
In trying to decide whether to encrypt my drives on my new RN104 I came across this Facebook entry, purportedly from someone with Netgear: <<< ReadyNAS Niklas, there is a read/write performance ov...
xeltros
Feb 19, 2014Apprentice
Security is structured with four key points, confidentiality, integrity, availability and proof.
If you are concerned about security, wifi is off limit by design (availability is affected by signal strength, integrity by signal loss/interferences and confidentiality by weak wireless security) unless you use 802.1x with radius/SSL which is considered almost as secure as wired network but you are still transmitting outside the walls. The chances are your wifi will be hacked way before someone steals your NAS. So telling encryption will actually enhance security is a myth except for mobile or already highly secured devices of course. I'm not even speaking about sniffing / spoofing problems that would say samba / AFP / NFS are not secured at all.
If you are going to encrypt, you are also going to store data on at least two places with at least 100km between them, enabling MD5 checksum and centralizing logs to see what's going on, enabling virus scan and snapshots...
By default ReadyNAS is not protected against brute force attacks nor DDos Attacks, it doesn't even have a firewall.
If you are sharing files over internet using a standard FTP, then all the security you can get will not be enough since FTP sends login / password in clear text.
You'll also want to change admin account name, change login/pass of each app you download to the NAS...
What I mean is that if you are going to be paranoid about security, drive encryption is not the first thing to think of (unless it's on mobile devices). It's a good feature but it's one of the last in the security chain since the attacker will need physical access to the device. So unless you are moving your NAS to LAN or something like that (which is not recommended), buy a good lock, this will be nearly as good as drive encryption IMO.
If you are concerned about security, wifi is off limit by design (availability is affected by signal strength, integrity by signal loss/interferences and confidentiality by weak wireless security) unless you use 802.1x with radius/SSL which is considered almost as secure as wired network but you are still transmitting outside the walls. The chances are your wifi will be hacked way before someone steals your NAS. So telling encryption will actually enhance security is a myth except for mobile or already highly secured devices of course. I'm not even speaking about sniffing / spoofing problems that would say samba / AFP / NFS are not secured at all.
If you are going to encrypt, you are also going to store data on at least two places with at least 100km between them, enabling MD5 checksum and centralizing logs to see what's going on, enabling virus scan and snapshots...
By default ReadyNAS is not protected against brute force attacks nor DDos Attacks, it doesn't even have a firewall.
If you are sharing files over internet using a standard FTP, then all the security you can get will not be enough since FTP sends login / password in clear text.
You'll also want to change admin account name, change login/pass of each app you download to the NAS...
What I mean is that if you are going to be paranoid about security, drive encryption is not the first thing to think of (unless it's on mobile devices). It's a good feature but it's one of the last in the security chain since the attacker will need physical access to the device. So unless you are moving your NAS to LAN or something like that (which is not recommended), buy a good lock, this will be nearly as good as drive encryption IMO.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!