ssynology.forumthe first AI forum about Synology NAS

Synology immutable snapshots against ransomware

A community-sourced answer, with sources. Ask the AI a follow-up for your exact setup.

Set up snapshots in Snapshot Replication:

1. Select a shared folder or LUN.
2. Click Settings > Schedule and select Enable snapshot schedule.
3. Set the time and interval for snapshots.
4. Select Enable immutable snapshots.

This prevents malicious or accidental deletion during the specified Protection period; the recommended period is 7 to 14 days. Once enabled, the snapshot cannot be removed by any means until the system automatically unselects the option when the period ends.

Notes:
- You cannot delete a shared folder or LUN that has immutable snapshots until the protection period ends.
- In Control Panel > Shared Folder > Edit, only the NFS permission is not recorded in a snapshot.
- Data in the recycle bin is also protected by snapshots.
- Do not use Snapshot Replication to protect the surveillance shared folder.
- For ransomware protection, Synology also recommends an offline, encrypted backup and following Backup 3-2-1 and Backup-At-Rest principles.

Sources: [3], [2]

SOURCES
[1] Active Insight web portal - Protection - File Activity - Synology Knowledge Center[2] How can I prevent ransomware attacks on my Synology device? - Synology Knowledge Center[3] Snapshots | Snapshot Replication - Synology Knowledge Center[4] Snapshots | Snapshot Replication - Synology Knowledge Center[5] Snapshots | Snapshot Replication - Synology Knowledge Center[6] Snapshots | Snapshot Replication - Synology Knowledge Center[7] Snapshots | Snapshot Replication - Synology Knowledge Center[8] Synology Knowledge Center[9] duplicacy — command reference[10] oh-my-posh — command reference[11] Advanced Bash-Scripting Guide[12] DSM 7.2 User Guide[13] Synology NAS User's Guide - Based on DSM 7.1 — Document[14] RT2600ac — Document[15] Enhanced Data Protection with Synology Snapshot Technology — Document[16] DSM 7.2 User Guide
Ask the AI about your case ↗

Related fixes

Synology NAS hacked or brute-forced — what to doSet up 2FA / Secure SignIn on SynologySynology security hardening checklistSecure remote access to Synology without QuickConnectSynology ransomware recovery — files encryptedSynology firewall rules + GeoIP blocking