NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
JustKJ
Jun 24, 2014Aspirant
Security Recommendations in a mostly OS X network
I am looking for recommendations for file protocols and security for my new NAS. I figure I should start out on the right foot from the beginning. I used to not have any security (beyond a secure ne...
xeltros
Jul 30, 2014Apprentice
Apple devices are fully compatible with AFP (developed and maintained by Apple) and SMB/CIFS (microsoft). I believe that they also are compatible with NFS, but NFS has the reputation to be less secure.
Speed should be roughly the same. AFP was known to be faster than SMB at some point I think, but with recent Microsoft updates for the protocol I read this isn't true anymore.
If you are to have windows machines, I would advise SMB. Apple devices will do fine with either AFP or SMB.
If you want to access files over internet I would advise using cyphered connection (VPN) or SSL-enabled services (FTPS, Rsync over SSH, HTTPS...). You should avoid to publish AFP/SMB/NFS on internet as they are not optimized nor secured for it.
For user permissions you have two sets of rights. System rights that are managed by linux itself and apply directly on the system (the chmod command) and you have rights that are managed by the server (AFP, SMB...).
Those two rights apply consecutively. You get through the network and log in using network permissions, then the server tries to read the file using the system permissions that are given to the user that runs the server. If one of those two fails, access is denied.
Speed should be roughly the same. AFP was known to be faster than SMB at some point I think, but with recent Microsoft updates for the protocol I read this isn't true anymore.
If you are to have windows machines, I would advise SMB. Apple devices will do fine with either AFP or SMB.
If you want to access files over internet I would advise using cyphered connection (VPN) or SSL-enabled services (FTPS, Rsync over SSH, HTTPS...). You should avoid to publish AFP/SMB/NFS on internet as they are not optimized nor secured for it.
For user permissions you have two sets of rights. System rights that are managed by linux itself and apply directly on the system (the chmod command) and you have rights that are managed by the server (AFP, SMB...).
Those two rights apply consecutively. You get through the network and log in using network permissions, then the server tries to read the file using the system permissions that are given to the user that runs the server. If one of those two fails, access is denied.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!