suggestions for NAS with good access control

[iansik]

I know that there are already many threads on suggested NAS for SMEs, but each company has different requirements.
i am a noob when it comes to networking, yet i've been tasked to come up with a solution for this.
my company is small with 10 employees and deal with a lot of confidential information, however due to the lack of expertise in the company and high costs, we are looking at alternative solutions instead of a full blown server.

the current NAS used only has a simple user access rights (ie. allowed or not allowed complete access) which we think is not sufficient

we will need some comprehensive file access control management and access from the internet.

anyone can suggest a good NAS we can look at?

 

[davidktw]

I know that there are already many threads on suggested NAS for SMEs, but each company has different requirements.
i am a noob when it comes to networking, yet i've been tasked to come up with a solution for this.
my company is small with 10 employees and deal with a lot of confidential information, however due to the lack of expertise in the company and high costs, we are looking at alternative solutions instead of a full blown server.

the current NAS used only has a simple user access rights (ie. allowed or not allowed complete access) which we think is not sufficient

we will need some comprehensive file access control management and access from the internet.

anyone can suggest a good NAS we can look at?

I would believe you are referring to Windows ACL, if not, I wonder what kind of ACL you are looking for. Various NAS supports Windows ACL. Synology, QNAP both support Windows ACL.

If not, the common unix permissions ACL would be READ,WRITE,LIST/EXECUTE access on directories and files.

 

[iansik]

i'm not sure how windows ACL works with the NAS
how does that work?

 

[chengsun]

why not engaging a proper SI to help your company do the assessment?

 

[davidktw]

i'm not sure how windows ACL works with the NAS
how does that work?

When you have Windows ACL, normally it's only applicable to the local disk. External NAS doesn't necessarily need to make available these metadata to the files exposed to your system, As such if the user is a Windows system managed by the Domain Controller where security policy is enforced, storing files into the external NAS would normally be lost.

For NAS that support Windows ACL, these metadata information will be stored in the NAS as well, so the security policy can be enforced. The NAS can also participate in the domain to be managed by the Domain Controller.

This is a Synology KB on Windows ACL and related issues How to manage Windows ACL permission... - Synology Inc. Network Attached Storage - NEW NAS Experience.

As such, it will provide seamless integration into existing user accounts that are managed by the Domain Controller in your corporate.

Without Windows ACL, Synology NAS itself also provide Unix Discrete Access Control to manage what your users can access, but this is not integrated with Windows AD.

 

[iansik]

thanks david, i think i'll look into synology's nas
you dont happen to work for synology do you?

 

[davidktw]

thanks david, i think i'll look into synology's nas
you dont happen to work for synology do you?

Nope I don't get a cut or promotion for recommending Synology It's something I use and have experience about.

 

[iansik]

Nope I don't get a cut or promotion for recommending Synology It's something I use and have experience about.

haha.. too bad.. was looking to get a quote
looks like i now have an excuse to go to the PC show tomorrow