Thank you very much for your videos !! First of all you got a super clear English. For pleople like me that we speak Spanish and English it's really handy to hear people like you and understand every word that you say.. second I love your videos because you explain very detailed and its great ! thanks again my friend !
Doesn't this make you vulnerable to Man in the middle attacks? At the start of the video, your browser is showing a padlock with an exclamation mark, which I presume indicates that you are using a self-signed certificate. If I understand correctly, this is not a problem when you are connecting using a private IP address (as you are at that point) because attackers would hopefully not be inside your private network. However, when we enable remote access through port-forwarding we need to install our CA certificate in our browsers to verify that we have a secure connection direct to the NAS without a man in the middle decrypting our passwords. If somebody tries to access the NAS remotely without installing the CA certificate they will get a security warning telling them they are vulnerable to man in the middle attacks. With QuickConnect - Synology don't have our CA certificate installed so the link between them and the NAS is not verified surely. Am I right?
I'd prefer using port forwarding. I've seen this example before. Can you demo using port forwarding, along with any security and or certificates that may be needed? Thanks
I have the DS420+ setup with a storage volume and pool. I signed up and can connect via quick connect. I have started adding users however they cannot use quick connect. It defaults their use account to my quick connect settings and doesn’t allow me to let them set up their own account. What could I be doing wrong?
Why on gods earth would I entrust my logon credentials, to no less than the data hub (and more) on my network, to ANY 3rd party? Synology be trustworthy, but they are also a hacking target. There's a reason for this being "easy"...
Newbie here: not sure were to write this, but would you do an episode on which security features to apply? Or more spesifically how to set up the firewall? Using almost all your advices, and when I try others, I start getting into trouble.
You dont login to QC, it's just a pointer to your server. Once there (either via de QC weblink or via a Synology app), you just login with your DSM credentials as usual. The 2fa can be found in DSM -> Control Panel -> User -> Advanced -> 2-step verification
I cant figure out to use the DS file app though on Android if I am out and about not on my home network. I setup the quick connect but when I am using my cell service, its no good. Can you assist?
Had to reset Synology now can not access quick connect how do I fix this. Thanks I heard there is a discord channel please let me know so I can get more help. Thank you
Thank you very much for your precious video, i have a question please, how do you get the email address with synology? can i use mine for example? and what about your login ? did you receive it from synology once they sent you the confirmation email ? Thank you
Connecting a NAS to my cable provider does NOT seem plug-n-play. So, as a typical cable customer (Spectrum, Brighthouse, Verizon), I cannot just buy a Synology or Qnap NAS, plug it into my cable provider's equipment and access my NAS on either my home network or through the Internet WITHOUT buying, for example, a Synology Router (which will grant me access to advanced setup features that my cable company may not)? Has any Spectrum or Brighthouse or Verizon customer successfully added a NAS--Synology or Qnap--to their network? PS. Regarding Synology's QuickConnect, doesn't this undermine the reason for choosing a Synology vs Google Drive--keeping your data off "their" (vs "your") cloud?
I like quickconnect, but sucks when you share files, it can be slow. On mine, I only had to open 1 port (5001). SSL and disabled Admin account, 2FA, good rules to live by
Love your videos, but this one surprised me. Your vids are usually very security conscious, so I was a little shocked to see you vouching for QuickConnect. All that traffic is most certainly not end-to-end encrypted. Curious if you've changed your position on QuickConnect 4 years later.
Probably most useful if you have a castrated internet connection without a public IPv4 IP (usually called DS-Lite or CG NAT). With QuickConnect you can at least work around this for the most part until IPv6 is widely available everywhere (unfortunately there are still some crappy lazy providers around which do not have IPv6, really sad).
David Something You really have no clue what you are talking about David. I’m not talking about static vs. dynamic. What DS-Lite or CG NAT does is assign your router an internal non routable IPv4 IP address, like 10.0.22.X. Of course you can then make a dynamic dns provider update your Hostname with this IP, but it won’t help since it is an internal IP behind a NAT done by your provider.
David Something, I have DYDNS for a domain I own tied back to my pfSense box. But I'd be very cautious to present a NAS directly to the web. Heck I just got a L3 Cisco for my home lab am I'm rolling out fairly strict (at least i think so) inter vLAN communication rules.
"Why not use this service?" Because it is so damned slow. And setting port forwarding rules in an application layer firewall is utterly quick & easy, and performs much better than QuickConnect.
I just setup QC for a family member and it was slow as you say, that said I am grateful it another option to access your NAS, she has CG NAT so regular port forwarding wouldn't work. QC is also a good option for people that don't understand networking and port forwarding... my 2 cents
Just the review I was looking for I would like to use a ds918+ in a small office max 6 users the main aspect would be to have everyone working and collaborating on files stored on the nas and being able to backup each pc automatically as well as to work on the files thats stored on the nas from an outside network will this nas handle this smoothly or should i look elsewhere thanks.
@@tiagogoncalves8250 If you have a door and a key to enter it then a lockpicker can do it as well. If you do not have a door at all than a lockpicker will not have a chance...
Thank you very much for your videos !! First of all you got a super clear English. For pleople like me that we speak Spanish and English it's really handy to hear people like you and understand every word that you say.. second I love your videos because you explain very detailed and its great ! thanks again my friend !
Doesn't this make you vulnerable to Man in the middle attacks? At the start of the video, your browser is showing a padlock with an exclamation mark, which I presume indicates that you are using a self-signed certificate. If I understand correctly, this is not a problem when you are connecting using a private IP address (as you are at that point) because attackers would hopefully not be inside your private network. However, when we enable remote access through port-forwarding we need to install our CA certificate in our browsers to verify that we have a secure connection direct to the NAS without a man in the middle decrypting our passwords. If somebody tries to access the NAS remotely without installing the CA certificate they will get a security warning telling them they are vulnerable to man in the middle attacks. With QuickConnect - Synology don't have our CA certificate installed so the link between them and the NAS is not verified surely. Am I right?
I'd prefer using port forwarding. I've seen this example before. Can you demo using port forwarding, along with any security and or certificates that may be needed? Thanks
Thank You, this is the best explanation of Quick Connect. You're the Man!
Hi, I don't understand where the id for registration is, the one that appears in your server name?
What's the difference between DS file and Synology Drive app?
I have the DS420+ setup with a storage volume and pool. I signed up and can connect via quick connect. I have started adding users however they cannot use quick connect. It defaults their use account to my quick connect settings and doesn’t allow me to let them set up their own account. What could I be doing wrong?
Why on gods earth would I entrust my logon credentials, to no less than the data hub (and more) on my network, to ANY 3rd party? Synology be trustworthy, but they are also a hacking target. There's a reason for this being "easy"...
Tried, but can't get it to work. Going back to windows remote login.
Newbie here: not sure were to write this, but would you do an episode on which security features to apply? Or more spesifically how to set up the firewall? Using almost all your advices, and when I try others, I start getting into trouble.
Which login and pw did you use in the QC login? The Syno or the QC ID?
Also, you didn't say where 2 factor is.
You dont login to QC, it's just a pointer to your server. Once there (either via de QC weblink or via a Synology app), you just login with your DSM credentials as usual.
The 2fa can be found in DSM -> Control Panel -> User -> Advanced -> 2-step verification
Can I later change that quick connect name?
How do u set this up with DS AUDIO using an iphone?
I cant figure out to use the DS file app though on Android if I am out and about not on my home network. I setup the quick connect but when I am using my cell service, its no good. Can you assist?
Had to reset Synology now can not access quick connect how do I fix this. Thanks I heard there is a discord channel please let me know so I can get more help. Thank you
Will this work even if you change your ports for the DSM?
i don't understand what my login is
How do you access photos in your Synology when using a photo program by capture one
Are there any other NAS brands with Quickconnect-like functionality?
Thank you very much for your precious video, i have a question please, how do you get the email address with synology? can i use mine for example? and what about your login ? did you receive it from synology once they sent you the confirmation email ? Thank you
My internet is spectrum, I just put in my spectrum Email address and it works. ignore the box that defaults to gmail.
Is quick connect supported if the NAS device connects to the internet via a web proxy, if the device hosting vlan has no direct internet access?
Do you know if the Plex client app will connect to Synology with quick connect settings?
I don't have to do anything with my firewall? I got a popup notification saying "firewall has blocked the below network ports. port 5000, 5001, 6690
It’s cool to remotely control NAS, but sharing video files seems too slow.
Connecting a NAS to my cable provider does NOT seem plug-n-play. So, as a typical cable customer (Spectrum, Brighthouse, Verizon), I cannot just buy a Synology or Qnap NAS, plug it into my cable provider's equipment and access my NAS on either my home network or through the Internet WITHOUT buying, for example, a Synology Router (which will grant me access to advanced setup features that my cable company may not)? Has any Spectrum or Brighthouse or Verizon customer successfully added a NAS--Synology or Qnap--to their network? PS. Regarding Synology's QuickConnect, doesn't this undermine the reason for choosing a Synology vs Google Drive--keeping your data off "their" (vs "your") cloud?
My phone just said something in the notifications about quick connect. I never heard of it. Does this mean someone is monitoring my phone?
I like quickconnect, but sucks when you share files, it can be slow. On mine, I only had to open 1 port (5001). SSL and disabled Admin account, 2FA, good rules to live by
I also found QuickConnect to burdensomely slow. Much prefer static IPs, a packet stateful firewall do the job nicely.
How do I give a user access to shares over the internet?
Just started with Synology, thanks for the great and easy info!
Love your videos, but this one surprised me. Your vids are usually very security conscious, so I was a little shocked to see you vouching for QuickConnect. All that traffic is most certainly not end-to-end encrypted. Curious if you've changed your position on QuickConnect 4 years later.
I use Quick Connect with 2-Factor Authentication enabled.
Probably most useful if you have a castrated internet connection without a public IPv4 IP (usually called DS-Lite or CG NAT). With QuickConnect you can at least work around this for the most part until IPv6 is widely available everywhere (unfortunately there are still some crappy lazy providers around which do not have IPv6, really sad).
MustermannAnybody I've got Comcast who has implemented IPv6 and still will only assign a single IPv6 address even if more are requested.
You could use a service such as DynDNS if you do not have a static public IP address.
David Something You really have no clue what you are talking about David. I’m not talking about static vs. dynamic.
What DS-Lite or CG NAT does is assign your router an internal non routable IPv4 IP address, like 10.0.22.X.
Of course you can then make a dynamic dns provider update your Hostname with this IP, but it won’t help since it is an internal IP behind a NAT done by your provider.
David Something, I have DYDNS for a domain I own tied back to my pfSense box. But I'd be very cautious to present a NAS directly to the web. Heck I just got a L3 Cisco for my home lab am I'm rolling out fairly strict (at least i think so) inter vLAN communication rules.
Thankyou Anybody :-) . This does also happen with some usb 3g/4g dongles.
I don’t think what you showed works unless you have UPNP enabled on your router, which I don’t. Something you may want to mention.
I can confirm it does work, no need for UPNP nor should anyone be using it. It's a security risk.
@@RayIT560 Thanks for confirming. I think I was having some other issues (Synology FW) previously. I retried after your note and got it working now.
One of the best synology features .
very helpful. Thanks
Can you also use this to remotely connect to a VM using Microsoft Remote Desktop
So Synology can access to my data??? they know my password etc. that don't looks secure!!!
The icons'....too funny. It's ok Willie, we are all together here ;-)
Very helpful. Thanks!
"Why not use this service?"
Because it is so damned slow.
And setting port forwarding rules in an application layer firewall is utterly quick & easy, and performs much better than QuickConnect.
I just setup QC for a family member and it was slow as you say, that said I am grateful it another option to access your NAS, she has CG NAT so regular port forwarding wouldn't work. QC is also a good option for people that don't understand networking and port forwarding... my 2 cents
Just the review I was looking for I would like to use a ds918+ in a small office max 6 users the main aspect would be to have everyone working and collaborating on files stored on the nas and being able to backup each pc automatically as well as to work on the files thats stored on the nas from an outside network will this nas handle this smoothly or should i look elsewhere thanks.
thanks dear
Quickconnect should be named SlowConnect ,,, so useless
yeah just enable it to the public so ransomware attacker can get you hacked and wipe your synology drives!
No. Because when you get in you need to put your login and wordpass
@@tiagogoncalves8250 If you have a door and a key to enter it then a lockpicker can do it as well. If you do not have a door at all than a lockpicker will not have a chance...