ssynology.forumthe first AI forum about Synology NAS

Synology security hardening checklist

A community-sourced answer, with sources. Ask the AI a follow-up for your exact setup.

From the provided knowledge base, the hardening items explicitly covered are:

- Enable the firewall: Control Panel > Security > Firewall > tick Enable firewall > Apply. The default firewall profile will be applied. [7]
- Enable Auto Block: Control Panel > Security > Protection > Auto Block > tick Enable auto block. Set Login attempts and Within (minutes), optionally Enable block expiration with Unblock after (days), then Apply. [2][12][13][15]
- Enable Account Protection: Control Panel > Security > Account > Account Protection > tick Enable Account Protection. Set Login attempts and Within (minutes), and for Untrusted clients set Cancel account protection (minutes later). [12][13][15]
- DoS protection is mentioned as one of the three DSM protection mechanisms, but the provided fragments do not include the setup steps. [12][13][15]
- The fragments also mention Security Advisor as a built-in scan tool, but not as part of a full checklist. [7]

What the knowledge base does not provide here:
- No steps for disabling the default admin account.
- No complete end-to-end hardening checklist beyond the items above.
- No DoS protection configuration steps.

If you want, I can turn the covered items into a short practical checklist using only these documented steps.

Sources used: [7], [12], [13], [15]

SOURCES
[1] Protection | Control Panel - Synology Knowledge Center[2] Synology NAS User's Guide for DSM 7.4[3] Account | DSM - Synology Knowledge Center[4] Protection | DSM - Synology Knowledge Center[5] Protection | DSM - Synology Knowledge Center[6] Synology Knowledge Center[7] Synology NAS User's Guide for DSM 7.4[8] Security | Control Panel - Synology Knowledge Center[9] synoupgrade — command reference[10] protector — command reference[11] synopkg — command reference[12] Synology NAS User's Guide - Based on DSM 7.0 — Document[13] Synology NAS User's Guide - Based on DSM 7.1 — Document[14] DSM Technical Specifications | Synology Inc.[15] DSM 7.2 User Guide
Ask the AI about your case ↗

Related fixes

Synology NAS hacked or brute-forced — what to doSet up 2FA / Secure SignIn on SynologySecure remote access to Synology without QuickConnectSynology ransomware recovery — files encryptedSynology firewall rules + GeoIP blockingDisable SMB1 and enable SMB signing on Synology