ReadyCloud Connection Secure?

[Archytas]

ReadyCloud advertises "creates a secure, private cloud experience" and "VPN-like access". I chatted with Netgear support and they could not come up with a documented level or protocol of encryption security used, if any. I generally understand the mediation server method, but that doesn't mean the peer-to-peer connection is secure once established. Any thoughts or experiences?

ReadyNAS Duo v.Old
ReadyNAS 314

[Nhellie]

What I know is , the readycloud uses HTTPS when connecting remotely and HTTP for local access. When connecting remotely it uses leaf network adapter which connects to the NAS like a VPN tunnel (through port 6300).

[StephenB]

I think the question boils down to "what encryption if any is used in the LEAF adapter's VPN tunnel". There's an old whitepaper here: http://www.readynas.com/download/docume ... _Paper.pdf that says it is using 3des. Not sure if that is still accurate or not.

There's some other info in the paper, but it is quite old and predates ReadyCloud.

[Archytas]

Thanks for info Nhellie and StephenB. I referenced paper in another support ticket I submitted to Netgear trying to get official answer or at least a feature request. I suspect the answer is much less secure than most of us would like. I'll follow up in this thread when I get more information.

[StephenB]

Archytas wrote:
Thanks for info Nhellie and StephenB. I referenced paper in another support ticket I submitted to Netgear trying to get official answer...

I think its important to have full disclosure on security. In addition to knowing the algorithm, it would be very useful to know details on whether the ReadyCloud has the decryption keys, or if the data is secured end-to-end. Thanks for following up.

[Archytas]

Small Update:
Netgear case response was that ReadyCLOUD has the same level of security tunnel encryption as the predecessor. (meaning leaf adapter)

At least it says "VPN" when connected through iOS client out of network and "LAN" when on same network as ReadyNAS.

[Alfred_GS]

Hello,

We have a client that manages medical information needs to be sure that the information is secure before purchasing a NAS that supports ReadyCloud.

Do we have a firm answer in what kind or encryption do we use in this version of ReadyCloud?

Thanks and regards

[StephenB]

Not sure if the encryption on the VPN link actually matters, since we do know that with ReadyCloud enabled you can access the data with normal http (not even https).

I suspect you'll need a different remote access solution.

[Alfred_GS]

Hello,

Thanks for your reply. You are right we need another kind of solution.What a shame.

It would be great if ReadyCloud could let you choose between working on http and https. That would be great.

Thanks for all and regards.