NSA 320

simonegr

Dear,

I Have the NSA 320 with the 4.7 firmware. The first questione ther'is the new firmware ? It's possible installing two new harddisk 3Tb ?

Best regard's

Mijzelf

Yes, 4.70(AFO.3) is the last firmware for the '320. And yes, you can put 3TB disks in it. Unless these disks support PWDIS, in which case I don't know if it will work.

But, this firmware hasn't been maintained for 9 years by now, and there are known, unpatched vulnerabilities. For at least one of them it's enough that you open a malicious website in your browser while being in the same network as the NAS, to get the NAS infected with malware. For this particular vulnerability there is a mitigation in the Tweaks package, but for others there is not.

It is possible to install a modern OS on that box (Debian) but I understand when that's a bridge too far.

If you want to use this box with that old firmware, at least make sure it can't reach to the internet. That can be done in two ways, put a rule in the firewall of your router to prohibit internet access for the NAS, or give the NAS a static IP address, and leave the default gateway empty (or give 0.0.0.0 if you can't leave it empty)

Mijzelf

Yes, 4.70(AFO.3) is the last firmware for the '320. And yes, you can put 3TB disks in it. Unless these disks support PWDIS, in which case I don't know if it will work.

But, this firmware hasn't been maintained for 9 years by now, and there are known, unpatched vulnerabilities. For at least one of them it's enough that you open a malicious website in your browser while being in the same network as the NAS, to get the NAS infected with malware. For this particular vulnerability there is a mitigation in the Tweaks package, but for others there is not.

It is possible to install a modern OS on that box (Debian) but I understand when that's a bridge too far.

If you want to use this box with that old firmware, at least make sure it can't reach to the internet. That can be done in two ways, put a rule in the firewall of your router to prohibit internet access for the NAS, or give the NAS a static IP address, and leave the default gateway empty (or give 0.0.0.0 if you can't leave it empty)