Encrypt Sign Form Secure

Encrypt Sign Form Secure

hello and welcome to this video about securing your Synology nas version 6.2 or six point two and up perhaps even before so first step is to enable HTTPS then change default ports so no one who knows the default ports can try to access them unable and configure firewall get SSL certificate for the domain if you are using external domain but even if you are not I would definitely recommend doing that enable two-factor authentication or multi-factor authentication and keep your DSM and abs up to date so let's start with number one so go to your Synology and control panel you will have to enable advanced mode to see all the options like security but for now go to network DSM settings and then automatically redirect HTTP connections to HTTPS so it'll pretty much redirect I currently have HTTP as you can see connection is not secure once I'll enable it it'll transfer to HTTPS let's try this so essentially the HTTP port is still open however the web server will redirect all requests to HTTPS okay this is what is to be expected because I do not trust or my Firefox does not trust this certificate because it's self issued so let's add exception a bonus thing I would add is when you go to security you can set up a support for modern browsers because there's a version SSL one as a salt 2 as a cell 3 TLS also one but it's been proven that the older versions of SSL aren't secure hence we're using only tli so I would suggest you use modern compatibility so in case someone's trying to exploit that vulnerability it would not go through because it's just enabled let's go to number two change default ports so what happens when you have default ports on any application is that some external parties usually foreign actors I do get or I used to get before I did this step a lot of requests from like China and other Asian or South Asian countries that would try to access my system by you changing the default port to something that is unknown or lesser-known you will pretty much disabled or reduce this option so since I've done this I haven't had an attempt because someone would have to scan my my IP address what sort of services I'm running what is open but then they would not know necessarily what exactly am i running because I have restricted firewall which I will show you later so this is a good step to sort of eliminate any even attempts to your network will go to control panel Network DSM settings and will change the default ports so you can make up your own I wouldn't go below 1000 because these are usually used for system services so 443 is secure communication over HTTPS then you've got the port 80 as HTTP your web browsing 53 is DNS and so on and so...