넷기어 레디나스의 원격접속 (넷기어 자체 VPN) 이용이 원활하지 않은 경우가 있어, 해당 원격접속의 장애가 있을 경우를 대비하여 대체수단을 찾고 있다. BR200과 같은 VPN 장비를 설치하여 넷기어 자체 VPN을 대체하는 것이 좋을 같아서 검토중인데, 큐냅이나 시놀러지와 같이 자체에 VPN 서버를 설치할 수 있지 않을까 하여 확인해 보니, 역시 설치할 수 있었다.
Response to Qlocker Ransomware Attacks: Take Actions to Secure QNAP NAS
Taipei, Taiwan, April 22, 2021 – QNAP® Systems, Inc. (QNAP), a leading computing, networking and storage solution innovator, today issued a statement in response to recent user reports and media coverage that two types of ransomware (Qlocker and eCh0raix) are targeting QNAP NAS and encrypting users’ data for ransom. QNAP strongly urges that all users immediately install the latest Malware Remover version and run a malware scan on QNAP NAS. The Multimedia Console, Media Streaming Add-on, and Hybrid Backup Sync apps need to be updated to the latest available version as well to further secure QNAP NAS from ransomware attacks. QNAP is urgently working on a solution to remove malware from infected devices.
QNAP has released an updated version of Malware Remover for operating systems such as QTS and QuTS hero to address the ransomware attack. If user data is encrypted or being encrypted, the NAS must not be shut down. Users should run a malware scan with the latest Malware Remover version immediately, and then contact QNAP Technical Support at https://service.qnap.com/.
For unaffected users , it's recommended to immediately install the latest Malware Remover version and run a malware scan as a precautionary measure. All user should update their passwords to stronger ones, and the Multimedia Console, Media Streaming Add-on, and Hybrid Backup Sync apps need to be updated to the latest available version. Additionally, users are advised to modify the default network port 8080 for accessing the NAS operating interface. Steps to perform the operation can be found in the information security best practice offered by QNAP (https://qnap.to/3daz2n). The data stored on NAS should be backed up or backed up again utilizing the 3-2-1 backup rule, to further ensure data integrity and security.
QNAP Product Security Incident Response Team (PSIRT) constantly monitors the latest intelligence to deliver up-to-date information and software updates, ensuring data security for users. Once again, QNAP urges users to take the above-mentioned actions and periodically check/install product software updates to keep their devices away from malicious influences. QNAP also provides the best practice for improving personal and organizational information security. By working together to fight against cybersecurity threats, we make the Internet a safer place for everyone.
About QNAP Systems, Inc.
QNAP (Quality Network Appliance Provider) is devoted to providing comprehensive solutions in software development, hardware design and in-house manufacturing. Focusing on storage, networking and smart video innovations, QNAP now introduce a revolutionary Cloud NAS solution that joins our cutting-edge subscription-based software and diversified service channel ecosystem. QNAP envisions NAS as being more than simple storage and has created a cloud-based networking infrastructure for users to host and develop artificial intelligence analysis, edge computing and data integration on their QNAP solutions.
I received a call from an unknown company's representative. We were introduced by someone else.
The reason for calling is, It was because the existing PC-lass server was broken, and data was blown and a new server was required. The server has already been quoted (HP ML350 / KRW 7.9 million), but the problem was the maintenance of the server. Since they were not familiar with the server, they have a burden not only in the server management itself, but also in everything such as account, operation, and backup. They who gave the estimation said that maintenance was not possible at the place, so they looked for a company that could maintenance and finally contacted us.
I asked if they don't need to operate Active Directory through Windows Server in their company because it seems that the management burden seems to be heavy, and we recommended that they build a NAS that is somewhat easy to maintain and manage hardware.
They reviewed it and finally decided to proceed with our suggestion.
The condition was that using about 40 people, mainly drawing data. It was suggested as a model with the following specifications. Currently, the total data is about 2TB.
NAS Hardware
We decided to proceed with two units of NAS. It was decided to use the main NAS for the main data storage and regularly back up the data to the backup NAS as it is.
The main NAS is all accessible in-house and has been set to use snapshots against ransomware. The backup NAS is set up for sync back up with the main and only administrators can access it.
The main TVS-x71 model has some really coveted specs. All-around player. Backup TS-453 Pro is a specification that can really be faithful to backup.
TEST Operation
This is a test operation.
Disks
The HDD is configured for NAS only, with 4 x 2TB and RAID5.
Dashboard
Dashboard after login
Backup NAS consists of 4 x 2TB for Enterprise HDD and RAID5.
Although not shown in the picture, we also installed two APC UPS SMT750Is. A UPS is the must thing for NAS.
After installation, we provide simple instruction on how to use, and we also checked the operation of the UPS. As a precaution, HDDs can fail after 3 years, so I instructed them to go around to see if the red light on the NAS HDD is lit. We also guided them about disk HOTSWAP.
We had some inquiries during the operation after installation, so we provided additional guidance by phone and email.
