• February 25, 2025, 04:23:47 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Data Security  (Read 7304 times)

LaserCobra

  • Level 1 Member
  • *
  • Posts: 8
Data Security
« on: April 03, 2009, 06:29:35 PM »

Perhaps a silly question but I'm curious to know how secure my data is on the dns-323. Obviously the drives are protected by the user name and password that I've setup if accessed while in the unit but what if those same drives are plugged into a PC? The fact the format is Ext would probably thwart most thieves as they would undoubtably plug the drives into a Windows computer but is there more I'm missing? Can I secure these drives in a way they are accessible to my Mac's and PC's? Hope this subject hasn't been beaten to death. Just becoming more physical security conscience.
Logged

ttmcmurry

  • Level 4 Member
  • ****
  • Posts: 438
Re: Data Security
« Reply #1 on: April 04, 2009, 10:13:21 AM »

Without getting into "If you really need a high level of security, why did you buy this particular NAS?" ...

The best way to secure the 323 is by use of Users & Passwords.  That is as complex as security gets on this device.  If you use the default config once you have drives installed, everything is accessable to anyone.  For the majority of home consumers, this is all they want and don't care.

If you want to take it to the next level, you can go to Network Access, specify some users & groups, delete the existing share, and create new share(s) with the user/group security.   As with all User-based password security, your vulnerability is going to be social networking "Oh, yeah, my password is ..." or a weak, guessable password.

Should you need more than that, you'll need to look into fun_plug and have a strong Linux background or consider more secure storage environments such as a Windows domain.
Logged

p23185

  • Level 2 Member
  • **
  • Posts: 39
Re: Data Security
« Reply #2 on: April 04, 2009, 10:48:41 PM »

I tried to set a password for the users/groups (only two of us) and guess what - Excel files cannot be opened when access is password protected.  Kinda kills the usefulness of that scheme.  So I had to revert back to full access and YES I worry about the same thing.  I am now wondering why anyone would purchase this device if you are thinking of savinging data on it that you would want to keep protected.  WHY WILL EXCEL FILES NOT OPEN.  I have posed this question to D-LINK SUPPORT and they refuse to answer it.

copy of my post
Question to DLINK, DNS-323


After over a year of use, yesterday I set the DNS-323 up to allow access only with a password to a user.  All worked fine after I remapped the drive as indicated in your F&Q section.  Files could be opened after attaching using the password.  ONE HUGE problem - MS Excel files will not open.  I have two pc with Win XP Home which gives message -
(1) "Excel cannot access '(filename.xls)'  The document may be read-only or encrypted".  This machine is using Excel 2003 (11.8237.8221) SP3
 
On my vista machine it says
(2) "Access denied.  Contact your admistrator".  This machine is using Excel 2007 (12.0.6331.5000) SP1
 
This is not an acceptable solution to denying access to my DNS-323 over a wired (2 pcs) andwireless (laptop) network.  I have all my financial data saved on the DNS-323 (fully backed up).
 
I am not using any RAID, only have one SATA 500Gb drive installed.
Sent this request to D-link again in Feb 09 and still have no reply, which to me means it is a problem.
Logged

mig

  • Level 3 Member
  • ***
  • Posts: 217
Re: Data Security
« Reply #3 on: April 05, 2009, 01:35:08 AM »

@p23185, which firmware are you using?  If FWv1.06 try changing the oplocks setting
under "advanced" -> "network access".  I don't remember if it is supposed to be set to
"yes" or "no", but I'm pretty sure that is the feature to enable storage of MS Office file
types.
Logged

ttmcmurry

  • Level 4 Member
  • ****
  • Posts: 438
Re: Data Security
« Reply #4 on: April 05, 2009, 07:52:30 AM »

IIRC, if Oplocks is ON then the 323 will keep track of changes being made to a file and deny write access only when two or more computers are modifying a file simultaneously.  For example, you should have it set to ON if you use a Quickbooks database, Access database, etc.  Since Excel can be used in the same way, I'd set Oplocks to ON.
Logged

TThibodeau

  • Level 2 Member
  • **
  • Posts: 31
Re: Data Security
« Reply #5 on: April 06, 2009, 05:34:21 AM »

I am using the same version of excel as you and winxp pro sp3.
My nas is password protected.
FW 1.06 2 drives no raid

I have no problems opening the files with excel
I would check the settings again.
Logged

bigclaw

  • Level 2 Member
  • **
  • Posts: 81
Re: Data Security
« Reply #6 on: April 06, 2009, 07:39:43 AM »

I have used user access control with the DNS-323 since day one and have never had problems with Excel files. That's with firmware 1.04, 1.05, and 1.06.

A couple things to try:

1) make sure the Excel file is not open by another user when you try to modify it.
2) make sure you have given the users read-write rights to the network share. When you create a user and assign him/her a network share in the DNS-323's admin page, I believe the default is read-only.
Logged

p23185

  • Level 2 Member
  • **
  • Posts: 39
Re: Data Security
« Reply #7 on: April 10, 2009, 11:38:48 AM »

I tried again with op locks set to ON, and one user under one group.  The password is entered on the user, not the group (correct?)  When I log onto the drive in Win XP it first puts up the group, but since the group has no password, I have to type in the user name, then the password.  Fine so far - but NO EXCEL FILE WILL OPEN.  No one else is on the network so the files are not open.  It give a message like "The document may be read-only or encrypted" . It was set up for read/write on the DNS323 admin set up panel.

I give up and will just have to be vulnerable.
Logged