Cyber Security Suite
Data Storage Server with Cyber Security

Key Cyber Security Features:

• Ransomware resilient NAS & Data Storage solution
• Quantum-safe cryptography protection layer – Optional
• Multi-factor Authentication - TOTP (Time + OTP based)
• 2 Factor Authentication based SSH access
• Audio and Visual Alerts in the event of Disk removal/failure
• AI based Behavioural Analytics
• Immutable Snapshots with WORM Technology
• Lock-down of Local Console on Primary and Secondary NAS Systems to prevent un-authorized access
• Hardware Security Modules (HSMs)
• Specialized hardware devices designed to securely store cryptographic keys and perform cryptographic operations.
• HSMs are used in environments where high levels of security are essential, such as in financial services, government, utilities and large enterprises.
• Perpetual Licence at no extra cost
• Data Encryption - AES 256
• Physical Tamper Detection
• Network Management System-Extensive monitoring (HTTP(S) based)
• Encrypted Backup and Disaster Recovery
• On-site and Off-Site data backups
• Periodic, user scheduled, incremental data back up sessions of offsite system with active, hard network isolation
• Encryption key validation before Encrypting any data
• Audio/Visual Alarms in the event when an unvalidated / unauthorized encryption key is attempted to be used
• Recurring Read-only Snapshots
• Long Retention Time on Snapshots
• Daily snapshots (2 weeks retention)
• Weekly snapshots (1 year retention)
• Monthly snapshots (5 years retention)
• Annually snapshots (10 years retention)
• User programmable option to increase the Snapshot
• Retention Duration on the Destination System
• Replicate to a Secondary NAS System
• Using a Separate Replication Network
• Set Separate Administrative Passwords
• Configurable Two-Factor Authentication (2FA) for Administrators

Additional Security Features:

• “Pull Replication” in Offsite Server: The offsite backup server autonomously initiates a network connection to facilitate a scheduled data backup and then automatically disconnect from the network after executing its periodic data backup.
• NTP Synchronization for Scheduled Backup Service: The offsite backup server synchronizes its operations with the on-site Network Time Protocol (NTP) Server, establishing connections at predetermined administrator assigned times and seamlessly going offline upon successful backup completion.
• Resilience to Ransomware Attack via Read-Only Snapshots: The immutability of read-only files and folders provides a robust defence against ransomware attacks by preventing their encryption
• IP Filtering Capabilities: Administrators have granular control over access permissions by specifying the allowed IP domains for specific shared resources
• Network Access Protection: Access to server resources and shares is restricted based on predefined IP address ranges, enhancing security and control Two-step authentication for secured access
• HTTPS Secure Connection: A secure Hypertext Transfer Protocol Secure (HTTPS) connection is established to protect the web-based graphical user interface (GUI) against potential Man-in-the-Middle (MITM) attacks.
• Importable SSL Certificate Requirement: The establishment of HTTPS connections necessitates the presence and utilization of SSL certificates for secure data transmission.
• AES 256-bit Volume-Based Data Encryption: Sensitive data may also selectively be safeguarded through implementation of advanced 256-bit AES encryption, applied at the volume level.

Software Specifications:

• Operating System
• Linux or UNIX based. Either one option is acceptable.
• Licences
• Software and license is included with the equipment at no additional cost or charge. There will be no recurring or additional bi-annual / or annual recurring licence payments that are required to be made after the purchase of the equipment. The included licence is for perpetual use during the lifetime of the NAS data storage server equipment that is being offered.
• Protocols
• CIFS/SMB, AFP, NFS, FTP, HTTP, HTTPS, SSH, iSCSI, SNMP, SMTP, LLDP, WebDAV, S.M.A.R.T
• File System
• Internal: EXT3, EXT4
• External: NFS, CIFS, EXT3, EXT4, NTFS, FAT32
• Networking
• TCP/IP IPv4 & IPv6 Dual Stack
• Dual Gigabit Ethernet with Jumbo Frame
• Multi-IP Setting, Port Trunking, Failover, 802.3ad
• DHCP Client
• UPnP & Bonjour Discovery
• OpenVPN Server, OpenVPN Client
• FTP Server
• FTP over SSL/TLS (explicit)
• Max. Concurrent connections: 256
• Passive FTP Port Range Control
• FTP Bandwidth & Connection Control
• Unicode Support
• Disk Management
• • Online RAID capacity expansion
  • Online RAID Level Migration
  • HDD S.M.A.R.T
  • SCRUB Task
  • SHORT Test
  • LONG Test
  • Offline Test
  • Conveyance Test
  • Bad block scan
  • RAID recovery
• iSCSI
• iSCSI Target
• Virtual Disk Drive
• Server Virtualization
• Supports Virtual Machines
• Jails
• Support OS level virtualization for tamper proofing and maintaining sanctity
• Power Management
• Wake on LAN
• Scheduled power on/off
• Automatic power on after power recovery
• UPS management support
• Administration
• CLI and GUI support
• HTTPS based user interface
• HTTP/HTTPS connections
• Email alerts
• SNMP Traps (v2 & v3)
• Dynamic DNS (DDNS)
• UPS Support with SNMP & USB
• Resource Monitor
• Network Recycle Bin for CIFS/SMB
• Comprehensive Logs (Events & Connections)
• Syslog Client
• Backup & Restore system settings
• Web Based Quick Configuration Wizard