secure private cloud

secure your private data as secure as enterprises – accessing a synology nas for private or small and medium-sized businesses

authentication

enable for admin and other sensitive accounts the 2-step verification – read more @multi-factor authentication

dns

add some kind of dynamic dns service to access your changing public ip address like dyndns, changeip, strato, etc.

certificate

secure encrypted connection should mandatory, at least since edward snowden leaked information about “security” agency’s

1. redirect traffic from http to encrypted https – be aware of public wifi, read more about ssl strip @attack vectors
2. add a public trusted certificate to your system, letsencrypt.org provide free certificates – request via control panel at your synology

This slideshow requires JavaScript.

firewall

active port forwarding for vpn connection to your nas/vpn server

vpn

to access private data from remote, configure devices vpn settings or download an app, enter you external ip address or full qualified domain

This slideshow requires JavaScript.

additionally you can add higher security if you authenticate via certificate from your device – read more @blog.centurio

profile

create a vpn profile in apple configurator with you account information and connection secret, send to your apple devices

we’re done