Can you add AV

[Vamp]

Hi to all

Is it possible to add a firewall and AV to the nas system like comodo internet security which has a firewall and AV all in one. If yes How do you do it?

Thank you for the help
Vamp

 

[Inxsible]

Keeping the same thread topic for 2 different questions will lead to confusion. Please change the thread title for one of them to get better views/answers from other users who know more about the stuff that you have questions on.

 

[Vamp]

Keeping the same thread topic for 2 different questions will lead to confusion. Please change the thread title for one of them to get better views/answers from other users who know more about the stuff that you have questions on.

That took me some time to find out how to change title lol but done ok

 

[danb35]

Yes, a much more descriptive title. By design, FreeNAS doesn't do either of these things, and it really shouldn't do the firewall--that ought to be its own device. And if you're wanting to scan traffic for viruses, that should be on the firewall. You could probably install antivirus in a jail, though, to scan files on the NAS. ClamAV appears to run on FreeBSD, so it ought to work.

 

[Vamp]

Yes, a much more descriptive title. By design, FreeNAS doesn't do either of these things, and it really shouldn't do the firewall--that ought to be its own device. And if you're wanting to scan traffic for viruses, that should be on the firewall. You could probably install antivirus in a jail, though, to scan files on the NAS. ClamAV appears to run on FreeBSD, so it ought to work.

So you have a network server with a internet 24/7 connection but no way to stop malware, spy, Trojans or worms from a unknown source or Hacker.? Is this not the reason why big companies are loosing costumers info stored on servers like Nas ( Not that I am saying that Nas is to blame here ) I am saying is that some kind of extra security is needed not just user name and password.

Sorry if that sounded a bit forward but be for I go and put a lot of data on to one system and just hope it's safe I am trying to do some home work first. I hope you understand a big thank you thow for the help.

 

[Inxsible]

So you have a network server with a internet 24/7 connection but no way to stop malware, spy, Trojans or worms from a unknown source or Hacker.? Is this not the reason why big companies are loosing costumers info stored on servers like Nas ( Not that I am saying that Nas is to blame here ) I am saying is that some kind of extra security is needed not just user name and password.

Sorry if that sounded a bit forward but be for I go and put a lot of data on to one system and just hope it's safe I am trying to do some home work first. I hope you understand a big thank you thow for the help.

what @danb35 is saying is that it isn't FreeNAS' job to be a firewall because it is a storage solution. That does NOT mean that you shouldn't have a firewall on your network.

You can look into off-the-shelf solutions or build another box to host your firewall, router, DHCP Server, DNS Server, VPN client, VPN Server, AV, traffic shaper, QOS etc etc.

some options are pfSense which is also based on FreeBSD, IPFire, IPCop

 

[Vamp]

what @danb35 is saying is that it isn't FreeNAS' job to be a firewall because it is a storage solution. That does NOT mean that you shouldn't have a firewall on your network.

You can look into off-the-shelf solutions or build another box to host your firewall, router, DHCP Server, DNS Server, VPN client, VPN Server, AV, traffic shaper, QOS etc etc.

some options are pfSense which is also based on FreeBSD, IPFire, IPCop

Looks like I need to do some more home work Big ty for the help

 

[danb35]

So you have a network server with a internet 24/7 connection but no way to stop malware

That's why you have a firewall. And why your NAS isn't open to the Internet.

Edit: and why you implement a sane backup and snapshot strategy.

 

[chris crude]

Well DanB did say you need a firewall, and you should have that regardless of FreeNAS. most routers at least have SPI so it only accepts packets that you requested (basic explanation). FreeNAS is mainly Network Attached Storage, a file server, it's not like windows where you go lookup porn material and get a malicious ad. If your client computer gets ransomeware that can traverse your entire network and hoses the files stored on FreeNAS, you can always roll back to an earlier date with snapshots.
EDIT---- looks like some people beat me to the reply as I typed with big fingers on a small phone.

 

[Hazimil]

Hi, I've written a resource on using ClamAV with FreeNAS:

https://forums.freenas.org/index.php?resources/how-to-install-clamav-on-freenas-v11.66/

Yours
Jonathan