Security Isolation Mode

[TMroy]

For users who pay great attention to data security but do not need to use external network resources, TerraMaster has added a new security tool in TOS 5 -- Security Isolation Mode.

At present, hackers and ransomware are raging around the world, and a large number of customers' precious digital assets are under unprecedented threat. TOS 5's unique Security Isolation Mode can provide users with a safe and reliable operating environment, isolate external risks, and protect digital assets from infringement.


Kernel security level
Through the digital signature based on the kernel level, once the security isolation mode is enabled, any programs that have not been signed by the system will be blocked from running, effectively preventing viruses or malicious code from running.


Self-isolation
The Security Isolation Mode can effectively prevent illegal in-stack and out-stack access to the external network through the self-established isolation barrier, only allow legal access in the local network, and protect the system from external malicious attacks.


Secondary advanced protection
In order to prevent security barriers and system protection measures from being attacked and tampered with, the Security Isolation Mode adopts secondary password verification protection. Deleting or modifying all configuration information related to security protection measures requires password verification again, effectively preventing hackers from damaging the barrier.


Strong blocking
Any code based on Java, php, or Python will be blocked from execution, effectively preventing the system from being injected with malicious code to threaten data security.


Scenes to be used
. Enterprises or organizations that are extremely sensitive to data security;
. External network services that need to be closed and isolated, do not need to access the external network or provide remote access;
. Only use TNAS to provide file storage, no need to run web pages, databases, mail services, virtual machines, and other applications;
. Applicable industries: military, judicial, electric power, scientific research, medicine, and other industries;

[Akeene69]

OK, have set up unit. Working fine. Can map to drive on couple computers.
Then I run across this Security Isolation Mode. Think about it and sounds good.
NOW can not map drives. Can not even see the unit. I can still log in, which I did and UN-checked that option.
Rebooted all units.
Still can not connect from computers to reach files.
What am I doing wrong?
Model : F2-212
TOS ver. 5.1.73-00078
How can I get my mapped drives back?
thx

[TMeric]

OK, have set up unit. Working fine. Can map to drive on couple computers.
Then I run across this Security Isolation Mode. Think about it and sounds good.
NOW can not map drives. Can not even see the unit. I can still log in, which I did and UN-checked that option.
Rebooted all units.
Still can not connect from computers to reach files.
What am I doing wrong?
Model : F2-212
TOS ver. 5.1.73-00078
How can I get my mapped drives back?
thx

Can you access the NAS via SMB now? If not, please refer to this post to clear the cache: viewtopic.php?t=2759, and then try remapping the drive.

[Akeene69]

That did it. THX
Somehow that was disabled in Windows. I now have full control again.
Fast replay - Thank You.

[RayKah]

This is a very effective security method for sensitive data, and users should start setting up some security methods after setting up the NAS. Thank you!

[Selead1953]

Does Security Isolation Mode also restrict internal services like Docker or media servers on the NAS?

[TMzethar]

It won't affect the local offline functionality of Dockler and the Multimedia server.

[bmclaren]

It won't affect the local offline functionality of Dockler and the Multimedia server.

Hi, jumping on this comment for some clarification.

I have recently set up my Jellyfin server and got everything up and running, posters and metadata all correct (after some issues!). My question is this: if I enable security isolation mode, and then add additional media, will I still be able to search for and add metadata automatically, as presumably Jellyfin needs access to the internet? Or will I need to disable isolation mode and manually run a scan in Jellyfin? What about if I run a scan through the PC desktop app?

Similarly, how does isolation mode impact clamAV updates? Do I have to run these manually?

Finally, how does isolation mode interact with SPC? Do I need to run both or is SPC obsolete when isolation mode is enabled?

(Edit to add: I was playing around with this yesterday, but getting errors or time-outs for metadata, but am aware that there were global outages on affecting various media websites - not sure of these were the issue or limitations imposed by isolation mode.)

[CursaYang]

Hello, after enabling the security isolation mode, your NAS will be restricted from connecting to the internet. Therefore, all functions that require network connectivity will not work.
You can enable both SPC and security isolation mode simultaneously. In addition to restricting network access, SPC will also limit the device's storage space.

[sianderson]

Therefore, all functions that require network connectivity will not work.

what is the point of a Network Attached Storage if the network part of it will no longer work?