HexOS is a NAS operating system in its infancy, introduced as a beta product with the aim of revolutionizing how home users, small businesses, and creative professionals manage data storage and applications. Unlike established solutions such as TrueNAS Core or Unraid, HexOS prioritizes simplicity and accessibility, targeting users who find traditional NAS setups too complex or time-consuming. While it is built on the reliable foundation of TrueNAS Core, HexOS diverges significantly in its approach by emphasizing automation and guided workflows. This overview explores HexOS Beta 1, analyzing its current features, usability, and areas for improvement. We will evaluate the feedback it has received from the community, compare it with competing solutions, and provide insights into its potential as a mainstream NAS option.

TL;DR: HexOS Beta Overview (2/12/24)

What’s in the Beta:

• Setup Wizard: Streamlined configuration for home servers, including automatic storage pool setup and system health analysis.
• Storage Management: Basic tools for managing storage devices, replacing failed drives, and expanding pools incrementally.
• Apps: One-click installation of Plex and Immich, with automatic folder and permission setup.
• Dashboard: Web-based Command Deck for monitoring CPU, memory, network, and storage usage, designed for mobile and desktop.

What’s Missing:

• Advanced Features: No custom RAID setups, snapshots, or replication yet.
• App Ecosystem: Limited to two curated apps (Plex and Immich); no Docker or third-party app catalog.
• Local UI: Currently relies on a cloud-based interface, with no offline management options.
• Additional Tools: Lacks SMART testing, email/SMS alerts, and advanced data import/export tools.

Planned for the Future (2025):

• Snapshots and Replication: Data protection features, including innovative “Buddy Backups” for encrypted peer-to-peer storage.
• Virtual Machines: Simplified hybrid VM setup for Windows desktops or media players.
• Expanded Apps: Larger catalog via partnerships with developers and container creators.
• Local UI: Full offline management for system configurations, even during cloud outages.
• Cloud Backups: Integration with StorJ/TrueNAS for enhanced remote data protection.

What Is HexOS?

HexOS is built on TrueNAS Core, a well-known and robust open-source storage operating system designed for enterprise and advanced home use. However, where TrueNAS Core excels in power and flexibility, it also requires technical know-how, creating a barrier for casual users. HexOS seeks to bridge this gap by offering an intuitive and simplified interface tailored to individuals who want the benefits of a NAS without a steep learning curve. For example, HexOS automates the creation of storage pools based on best practices. If a user connects two hard drives, the system automatically configures them in a mirrored layout, providing redundancy without requiring the user to understand RAID or ZFS. Similarly, its Command Deck interface consolidates system health, resource monitoring, and storage management into a unified dashboard accessible via web browsers or mobile devices.

While the beta release of HexOS shows promise, it lacks some advanced features that TrueNAS Core users might expect. For instance, custom RAID configurations are not yet supported, and the app ecosystem is currently limited to two curated applications. These trade-offs reflect HexOS’s focus on accessibility at the expense of flexibility, positioning it as an entry-level NAS solution.

Feedback on Initialization of a TrueNAS Scale server with HexOS?

One of HexOS’s standout features is its guided setup process. The system’s initialization wizard walks users through the configuration of their NAS, automating tasks such as hardware detection, storage pool setup, and network configuration. For many users, this is a welcome change from the often intimidating, multi-step setup processes of traditional NAS software.

For instance, a Reddit user who transitioned from TrueNAS Core to HexOS highlighted how the initialization process “took under 10 minutes, and I didn’t even need to Google anything.” This simplicity is particularly beneficial for individuals who are new to NAS systems or who have limited technical knowledge. The software also alerts users to potential hardware issues, such as SMR drives, ensuring that they are aware of potential performance bottlenecks before proceeding.

However, some users have noted the lack of customization during initialization. Advanced users who require specific RAID configurations or filesystem layouts may find HexOS’s automation limiting. For these users, the inability to manually override the default settings can be frustrating, though the development team has promised greater flexibility in future updates.

App Installation in HexOS?

HexOS currently supports one-click installation for Plex and Immich, a personal photo library application. These apps are designed to integrate seamlessly with the system, with HexOS automatically creating storage folders and assigning appropriate permissions. This streamlined process is ideal for users who want their NAS to “just work” without having to navigate the complexities of manual app setup.

For example, installing Plex on HexOS involves selecting the app from the Command Deck and clicking “Install.” Within minutes, the app is ready to use, and users can begin uploading and streaming media. Similarly, Immich allows users to back up photos from their smartphones to their NAS with minimal configuration. A Reddit user praised this simplicity, stating, “I uploaded my entire photo album to Immich within an hour of setting up HexOS. It just works.”

Despite these advantages, the limited app catalog has drawn criticism. Competing platforms like TrueNAS Core and Unraid offer extensive app ecosystems, supporting everything from Docker containers to virtual machines. While HexOS does allow users to manually install apps via the TrueNAS interface, this process undermines its goal of accessibility. Expanding the app catalog will be crucial for HexOS to compete with established NAS solutions.

Web GUI at the Moment and Long Term Access?

The HexOS Command Deck is a web-based interface that serves as the control center for the NAS. It is designed to be user-friendly and mobile-responsive, allowing users to manage their system from a variety of devices. Key features include real-time monitoring of CPU, memory, and network usage, as well as tools for managing storage pools and connected devices.

While the interface is visually appealing and intuitive, it is currently cloud-dependent, requiring an internet connection for access. This reliance has raised privacy and reliability concerns among some users. One Reddit thread criticized the cloud-based design, with a user stating, “What happens if the server goes down? I need a local option for peace of mind.” In response, HexOS has committed to introducing a local UI/UX in its 2025 release, ensuring that users can manage their systems even during Command Deck maintenance windows.

For now, the Command Deck provides a solid foundation but lacks some advanced features, such as detailed SMART testing or granular network configuration. These omissions are expected to be addressed in future updates.

Access issues during the HexOS beta have become a significant pain point for some users, as highlighted in threads like the HexOS community post. A frequent problem revolves around servers getting “Stuck on Connecting” during the initial claim process, preventing users from completing their setup. While some users have suggested network misconfigurations or hardware compatibility issues as potential causes, a larger consensus points to HexOS’s cloud servers struggling to scale with the sudden surge of early adopters.

It appears that the system wasn’t adequately prepared to handle the level of interest generated by the Black Friday promotion, leaving some users unable to connect their devices to the Command Deck. Although a few have found workarounds, like reassigning static IPs or power cycling their network, many remain stuck without clear guidance from HexOS. The issue has led to frustration, especially since the beta depends entirely on remote server access. This situation underscores the challenges of scaling a cloud-based platform to meet demand and raises questions about HexOS’s readiness to handle a wider audience as the beta progresses.

Costs, Early Access Pricing and Value?

HexOS adopts a tiered pricing model, starting at $99 for a lifetime license during the early access phase. This price will rise to $199 and eventually $299 as the software approaches full release. The company also plans to introduce subscription options for features like integrated remote access, which will be optional. Compared to other NAS software, HexOS’s pricing is competitive. For example, Synology’s solutions often require significant hardware investment, while TrueNAS Core is free but demands more time and expertise. HexOS strikes a balance by offering an affordable entry point with minimal setup effort. However, some users have questioned whether the limited features of the beta justify even the discounted pricing. For budget-conscious users, the current pricing represents good value, especially if the promised features materialize. However, those seeking a more comprehensive solution may prefer to wait for the 1.0 release.

The $99 Black Friday deal for lifetime access to HexOS has elicited a variety of responses from the community, particularly due to its requirement for participation in the beta program. Discussions on platforms like Reddit reveal a divided opinion. Some users view the pricing as an appealing entry point for a NAS solution that aims to simplify server management, especially with promises of future feature expansions. However, others express reservations about paying for a beta-stage product, emphasizing the current limitations, such as a lack of advanced RAID options, a minimal app catalog, and the absence of a local user interface. Proponents highlight the potential long-term value of securing lifetime updates at a reduced cost before prices increase to $199 or $299. Nonetheless, skeptics question the practicality of paying upfront for software that is still maturing. The discourse reflects broader concerns about the trade-offs between early adoption and investing in a software solution that may not yet fulfill the expectations of more experienced users.

What’s Missing

As a beta product, HexOS is far from feature-complete. The app catalog is one of its most glaring shortcomings, with only Plex and Immich available for one-click installation. Additionally, the software lacks support for custom RAID configurations, making it unsuitable for users with specific storage needs.

The absence of a local interface is another drawback. While the Command Deck simplifies remote management, it does not cater to users with unreliable internet connections or those who prioritize local control for privacy reasons. Advanced features like snapshots, replication, and detailed SMART testing are also missing, though these are planned for future updates.

These limitations mean that HexOS currently appeals more to casual users than to enthusiasts or professionals. As the development team continues to refine the software, addressing these gaps will be crucial for broader adoption.

Feedback from Reddit Users

Reddit discussions about HexOS reveal a polarized community. Supporters praise its simplicity, with one user summarizing, “HexOS is for when you don’t have time for TrueNAS and just need the NAS to work.” This sentiment resonates with users who value convenience over customization. However, critics have been vocal about the software’s shortcomings. Threads often highlight the limited app catalog and the reliance on cloud-based management as major drawbacks. Some users have also expressed skepticism about HexOS’s pricing, questioning whether it offers enough value compared to free alternatives like TrueNAS Core. These mixed reactions underscore the challenge HexOS faces in satisfying diverse user needs. While it appeals to beginners, its limitations may alienate more advanced users.

What Is Planned on the Roadmap Later

HexOS’s roadmap for 2025 includes several significant updates. The introduction of a Virtual Machine Manager will enable users to run hybrid setups, combining physical and virtual hardware for applications like media servers or dedicated workstations. This feature could make HexOS more appealing to tech-savvy users. Snapshots and replication are also on the horizon, providing advanced data protection and synchronization options. The planned “Buddy Backups” feature, which allows encrypted data sharing with trusted peers, reflects HexOS’s focus on community-driven solutions. Other planned updates include an expanded app catalog, local UI support, and integrated cloud backups. These features aim to address current shortcomings and position HexOS as a versatile NAS solution.

Read HERE for the latest post from HexOS on their ‘Road to 1.0’ Roadmap article.

Verdict of the Beta So Far

HexOS Beta 1 delivers on its promise of simplicity but is not without its flaws. While it excels in accessibility and ease of use, its limited features and reliance on cloud-based management highlight its beta status. For now, HexOS is best viewed as a foundational product with significant room for growth. HexOS is ideal for home users, small businesses, and creative professionals who prioritize ease of use over advanced customization. Its guided setup process and intuitive interface make it an excellent choice for beginners. However, advanced users may find its current limitations restrictive. For families and hobbyists, HexOS provides a straightforward way to manage data and applications. Its focus on accessibility makes it a valuable option for users who want a hassle-free NAS experience. As the software evolves, its planned features could make it a strong contender in the NAS market. For users willing to experiment with a beta product, HexOS offers a glimpse of a promising future. However, those seeking a complete solution may prefer to wait for the 1.0 release.

Join Inner Circle

Want to follow specific category? Also Read...UniFI UNAS Pro NAS Software DeHexOS AMA - User Questions AnsHexOS AMA - User Questions AnsWhat Is The Most User-FriendlyThe Best User-Friendly NAS SofWhat is HexOS? A Truly User-FrUGREEN NAS Software - The UGOSTerramaster TOS 6 NAS SoftwareUGREEN NAS Software - The UGOSLinus Investing in a New NAS S Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

QNAP has just launched the TS-433eU NAS, a compact 4-bay unit designed for small businesses and home offices in need of robust data storage without a huge footprint or price tag. Packed with essential features and impressive 2.5GbE connectivity, the TS-433eU offers a great balance of performance and affordability in QNAP’s NAS lineup. Here’s everything you need to know about this new release!

Key Highlights of the QNAP TS-433eU:

• 2.5GbE LAN Ports: Dual 2.5GbE RJ45 ports allow for link aggregation, pushing bandwidth up to 5 Gbps and maximizing data transfer speeds.
• Compact 1U Rackmount Design: Measuring just 11.5 inches in depth, the TS-433eU fits easily into shallow rack spaces, making it ideal for tight setups.
• AI-Powered Multimedia Capabilities: Equipped with an NPU (Neural Processing Unit) for faster photo indexing, facial recognition, and other multimedia tasks.
• 4-Bay Flexibility: Supports both 3.5″ HDDs and 2.5″ SSDs for a wide range of storage configurations tailored to different needs.
• ARM Cortex-A55 Processor: Powered by a quad-core ARM processor, this NAS handles day-to-day tasks effectively, from backups and file sharing to light multimedia streaming.

Hardware Overview:

The QNAP TS-433eU is built to provide reliable performance in a space-efficient package. With an ARM Cortex-A55 64-bit processor clocking at 2 GHz and 4GB of soldered DDR4 RAM, it’s designed for power efficiency rather than intensive multitasking. However, it holds its ground well for typical NAS operations such as backups, file management, and light multimedia handling.

The built-in NPU is a standout feature, bringing AI capabilities for tasks like image recognition and facial indexing in your photo library, making it easier to organize and manage large multimedia collections.

Performance and Connectivity

This NAS features two 2.5GbE LAN ports, enabling combined speeds up to 5Gbps through link aggregation. With support for up to 282 MB/s read and 286 MB/s write speeds, the TS-433eU meets the needs of SMBs and tech enthusiasts looking for fast, reliable access to data.

For additional connectivity, the TS-433eU includes two USB 3.2 Gen 1 ports, perfect for external storage or backup drives. However, keep in mind that the RAM cannot be upgraded beyond the soldered 4GB, which may be a limitation for users looking to run several intensive applications simultaneously.

Storage Options and Expandability

The TS-433eU is compatible with both 3.5″ HDDs and 2.5″ SSDs, offering flexibility to mix and match based on capacity needs and budget. QNAP has tested the TS-433eU with up to 22TB drives, supporting substantial storage options for various use cases. While the NAS lacks M.2 SSD caching, users can still enjoy SSD storage in the main bays for faster data access.

Ideal Use Cases

With its AI-powered capabilities, multi-gigabit speeds, and space-efficient design, the TS-433eU is perfect for:

• Small Business & Home Office Data Management: Ideal for handling day-to-day backups, file sharing, and work collaboration.
• Home Multimedia Hub: While it isn’t tailored for intense media streaming, the TS-433eU can handle 4K local streaming and manage multimedia libraries for local access.
• Secure Backup Solution: Provides an easy-to-manage backup solution with QNAP’s robust apps and data protection features.

Final Thoughts on the QNAP TS-433eU

The TS-433eU NAS stands out as a strong option for users looking for essential NAS capabilities with enhanced multimedia indexing in a small, rack-friendly package. With robust data management software, dual 2.5GbE, and built-in AI functionality, this NAS hits a sweet spot for affordability and performance. However, if you’re looking for extensive virtualization or heavy multimedia transcoding, you might want to consider models with more powerful processors and expandable RAM options.

Where to Buy the QNAP TS-433eU NAS?

As of now, the TS-433eU is available at QNAP’s authorized retailers and various online marketplaces. Check for the latest prices and availability to find the best deal.

Where to Buy a Product
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤

If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you. Anything you purchase on the day you click on our links will generate a small commission which is used to run the website. Here is a link for Amazon and B&H. You can also get me a Ko-fi or old school Paypal. Thanks! To find out more about how to support this advice service check HERE   If you need to fix or configure a NAS, check Fiver   Have you thought about helping others with your knowledge? Find Instructions Here  

WE LOVE COFFEE

Or support us by using our affiliate links on Amazon UK and Amazon US

     

UPDATE – The UniFi UNAS Pro NAS is now available and can be found HERE

The UniFi UNAS Pro is Ubiquiti’s first major leap into the NAS (Network Attached Storage) market, building on the success of their networking hardware and ecosystem. This rackmount NAS aims to provide a cost-effective, streamlined option, especially for those who are already invested in the UniFi product ecosystem. But is this device the right choice for your storage needs? In this detailed review, we’ll explore the pros and cons of the UniFi UNAS Pro to help you decide.

Pros of the UniFi UNAS Pro NAS

1. Competitive Pricing

One of the most remarkable selling points of the UniFi UNAS Pro is its price. Retailing at $499, the UNAS Pro offers a 7-bay rackmount NAS, which is significantly more affordable than many competing NAS devices with similar hardware capabilities. For this price, you get a quad-core ARM Cortex-A57 processor, 8GB of DDR4 memory, and a built-in 10GbE networking port alongside a 1GbE port, without the need for additional licenses. In comparison, similar rackmount NAS devices from brands like Synology and QNAP are typically priced closer to $800 or even $1,000. For example, a comparable system like the QNAP TS-832PX often costs around $900 but comes with similar performance in terms of storage and connectivity options. The value proposition is undeniable, especially when you factor in that UniFi’s NAS software comes with no extra costs for features like snapshot management or backups. For small businesses or home users looking for high-capacity storage at a low price, the UniFi UNAS Pro is a solid choice.

2. Ease of Use

Ubiquiti has a long-standing reputation for designing user-friendly products, and the UNAS Pro is no exception. The NAS system comes with an intuitive user interface that’s reminiscent of UniFi’s networking equipment management software, making it easy for existing UniFi users to get up and running quickly. The interface, whether accessed via the web or through UniFi’s mobile app, offers a clean, straightforward experience.

The mobile app, which supports both Bluetooth and Wi-Fi connectivity, allows you to monitor and manage the NAS on the go. This functionality is particularly useful for small businesses where IT support might not always be readily available. Additionally, the built-in LCD panel on the front of the device allows for on-the-spot diagnostics and control without needing to access the web interface, offering a more hands-on approach to managing your NAS.

3. Offline Setup Capability

One standout feature of the UniFi UNAS Pro is its ability to be set up and managed offline. Many NAS systems require users to create an online account to access core features or manage the device, but with the UNAS Pro, you can set up local credentials and manage the device without ever needing to connect to the cloud. This means you can retain complete control over your data and avoid sharing anything with external services, which is an attractive option for users who prioritize privacy. Though you will miss out on certain remote access features without a UniFi cloud account, this offline setup capability is ideal for environments where internet access may be unreliable or for users who prefer to keep their storage network air-gapped from the wider web.

Keep in mind however that setting the device up without a UI.com / UniFi account will limit some of the remote access and additional security verification features of the UNAS Pro.

4. Modular Updates

UniFi has implemented a modular update system that makes software maintenance more flexible and customizable. Rather than requiring full system reboots or blanket updates that affect every part of the NAS at once, the UNAS Pro allows users to schedule and manage individual updates for the NAS OS and each of its applications. You can select between stable updates or more cutting-edge early access updates for those who prefer to stay on the forefront of new features. This update system ensures that you can keep critical parts of your system updated while minimizing disruptions to services. For example, you might set security updates to apply immediately while delaying other updates until a convenient time. For a NAS that’s designed to run continuously, this granular control is a valuable feature.

5. Solid Core Features

For its first foray into the NAS market, UniFi has done an excellent job at providing all the core features users expect from a modern NAS. The UNAS Pro excels in basic NAS functionality, such as file storage, folder creation, and permission management. Its a very straight forward system to understand and use, as well as a very responsive GUI (especially for the internal hardware it has being so modest). Whether backing up to another NAS or a cloud service, browsing files/folders on the fly, managing active shares quickly – the process is straightforward and reliable.

RAID support is available out of the box, allowing users to configure their drives for performance, redundancy, or a balance of both. While the hardware might not be top-tier, UniFi has ensured that its software nails down the fundamentals, providing reliable performance for small businesses and home users.

6. 10GbE Connectivity

At this price point, the inclusion of a 10GbE networking port is a significant advantage. Many NAS devices in this price range only include 1GbE or, at best, 2.5GbE networking. The 10GbE port on the UniFi UNAS Pro enables much faster data transfer rates, particularly for users dealing with large file transfers such as video production teams, graphic designers, or those needing to back up multiple systems simultaneously. For small businesses that need faster network throughput without breaking the bank, the UNAS Pro is an excellent option.

7. Seamless UniFi Ecosystem Integration

The UniFi UNAS Pro integrates seamlessly with the broader UniFi product ecosystem. If you’re already using UniFi routers, switches, or access points, the UNAS Pro can be managed alongside these devices through the same UniFi controller interface.

This makes it easy to monitor and manage all your network infrastructure from a single dashboard. For businesses already invested in UniFi, this integration adds significant value and simplifies network management.

8. Very Easy Snapshot and Backup Management

The UNAS Pro’s snapshot management is another highlight. It allows for easy setup and quick recovery of snapshots, making it a powerful tool for backing up and restoring data.

Whether you’re scheduling automatic snapshots or manually backing up your most important files, the system is responsive and reliable. Data can also be backed up to a cloud service like Google Drive, adding flexibility to your data management strategy.

Cons of the UniFi UNAS Pro NAS

1. Modest Hardware Specifications

Despite its many strengths, the UniFi UNAS Pro’s hardware can feel somewhat underwhelming, especially for more demanding users. The device is powered by a quad-core ARM Cortex-A57 processor, which is capable but not nearly as powerful as the Intel or AMD x86 processors found in higher-end NAS devices.

Specification	Details
Brand	UniFi (from Ubiquiti)
Model	UniFi UNAS Professional Rackmount NAS
Dimensions	442.4 x 325 x 43.7 mm (17.4 x 12.8 x 1.7 inches)
Weight	Without Rackmount Brackets: 5.11 kg (11.27 lb)
	With Rackmount Brackets: 5.20 kg (11.46 lb)
Enclosure Characteristics	SGCC Steel
Processor	Quad-Core ARM Cortex-A57 at 1.7 GHz
System Memory	8GB DDR4
On-Board Flash Storage	SPI NOR 32 MB, USB Flash 8 GB
Power Supply	200W Lipet Internal
Max. Power Consumption	160W
Max. Power Budget for Drives	135W
Power Method	(1) Universal AC Input
	(1) RPS DC Input
Power Supply	100-240VAC, 50/60 Hz, 2A
Networking Interfaces	(1) 10/100/1000 Mbps RJ45 Ethernet
	(1) 1/10 Gbps SFP+ Ethernet
Management Interface	Ethernet In-Band Management
ESD/EMP Protection	Air: ±12kV, Contact: ±8kV
Operating Temperature	-5 to 40° C (23 to 104° F)
Operating Humidity	5 – 95% Non-condensing
LED Indicators	System: (1) Power, Blue/White

While the ARM processor is energy-efficient and suitable for basic tasks like file storage, it lacks the muscle required for more demanding workloads like virtualization, media transcoding, or running complex applications.

For users who need to perform CPU-intensive tasks or run multiple concurrent operations, the ARM architecture could be a limiting factor. Although it’s understandable that UniFi opted for ARM to keep costs down, this choice might alienate users looking for a high-performance solution.

2. Limited Expandability

One of the most significant downsides of the UniFi UNAS Pro is its lack of expandability. While the 7-bay design offers substantial storage out of the box, there are no options for expanding the system beyond that. The device lacks PCIe slots for adding features like SSD caching, additional networking interfaces, or other hardware upgrades. Additionally, the 8GB of DDR4 RAM is non-upgradable, which means users are stuck with the default memory capacity—limiting the NAS’s potential to handle more intensive applications or larger numbers of users.

This lack of scalability could be a dealbreaker for businesses or IT professionals who expect their storage needs to grow over time and want a system that can grow with them.

3. Single Storage Pool

Unlike more advanced NAS systems that allow users to create multiple storage pools, the UniFi UNAS Pro is limited to a single storage pool. This limitation could be problematic for users who want to segregate different types of data or use different storage media, such as SSDs for high-speed access and HDDs for bulk storage. While the system does allow for RAID configurations, the lack of flexibility in storage pool management could be a downside for more advanced users who need granular control over their storage environments.

4. No Redundant Power Supply

For businesses that require constant uptime, the lack of a redundant power supply on the UniFi UNAS Pro is a significant shortcoming. While the device does support an external uninterruptible power supply (UPS), it lacks the built-in redundancy that is common in many higher-end NAS systems. Redundant power supplies are critical in ensuring that hardware failures don’t lead to extended downtime. Without this feature, the UNAS Pro may not be suitable for mission-critical environments where uptime is a priority.

5. Lack of UniFi Protect Support

A surprising omission in the UniFi UNAS Pro is its lack of support for UniFi Protect, UniFi’s popular video surveillance platform. UniFi Protect is available on other UniFi hardware such as the Dream Machine and UNVR systems, but it cannot be installed on the UNAS Pro. This is a missed opportunity, especially for users who might want to centralize their storage and surveillance needs on a single device. While future software updates may address this, the current lack of Protect support limits the device’s versatility, particularly for small businesses or homeowners looking to consolidate network and surveillance management.

6. Absence of Popular NAS Apps and Virtualization

Compared to more established NAS solutions like QNAP or Synology, the UniFi UNAS Pro falls short when it comes to app availability. There’s no support for popular applications like Plex or Docker, which limits its utility for users who want to run media servers, manage smart home devices, or deploy containerized applications. This absence is particularly noticeable when compared to NAS solutions from other brands that have built extensive app ecosystems over many years. Additionally, the lack of virtualization support makes the UNAS Pro less appealing for businesses that need to run virtual machines or isolated environments for development and testing. While this might not matter to users looking for simple storage solutions, it’s a glaring omission for power users.

While the UniFi UNAS Pro covers the basics well, it lacks many of the advanced features that have become standard in more mature NAS systems. There’s no support for containerization, virtual environments, or advanced SaaS integrations like Google Workspace or Office 365. These high-end features are often essential for businesses with complex workflows or larger teams. The absence of these capabilities makes the UNAS Pro less competitive for users who need more than basic file storage and backups.

7. Limited OS Client Tools and File Syncing

Although the UNAS Pro offers a web interface and easy-to-use file sharing features, it lacks the more sophisticated client tools available on competing NAS platforms. For instance, Synology Drive and QNAP QSync offer robust client tools that allow users to sync files across multiple devices or manage their NAS more comprehensively from their desktop, without any need to engage with the system dashboard or the NAS GUI itself – with all file synchronization happening in the background whilst they only interact with their native OS file manager. By contrast, the UniFi UNAS Pro’s file syncing tools are fairly limited and although mapping via SMB and similar is possible, there is little to no live sync tools at launch, which could be frustrating for users looking for more advanced file management capabilities. I really think this is something that UniFi will remedy in time, but at least right now, this is absent to the same degree as their new NAS competitors.

Should You Buy the UniFi UNAS Pro NAS?

The UniFi UNAS Pro is a compelling entry into the NAS market, offering excellent value for money, ease of use, and seamless integration with the UniFi ecosystem. For users looking for a simple, reliable NAS solution that can handle basic storage tasks and backups, the UNAS Pro is a great option, particularly at its competitive price point of $499. However, the device’s limitations in hardware scalability, application support, and advanced features mean that it may not be the best choice for power users or businesses with more complex needs – at least at launch. If you’re already invested in UniFi’s ecosystem and only need a NAS for fundamental storage and backups, the UNAS Pro is a solid choice. But for users seeking greater flexibility, more advanced features, or the ability to scale their storage, other NAS systems from QNAP or Synology may be a better fit.

I feel like a bit of a broken record in this review, and I keep repeating the same two words in conjunction with the UniFi UNAS Pro—fundamentals and consistency! It’s pretty clear that UniFi has prioritized the need for this system to perfectly complement their existing UniFi ecosystem and make it a true part of their hardware portfolio. In doing so, it has resulted in them focusing considerably on the fundamental storage requirements of a NAS system and making sure that these are as good as they possibly can be out of the gate. To this end, I would say that UniFi has unquestionably succeeded. The cracks in the surface begin once you start comparing this system with other offerings in the market right now—which is inevitably what users are going to do and have been doing since the first indications of a UniFi NAS system were being rumored. It may seem tremendously unfair to compare the newly released UniFi NAS with solutions from vendors that have had more than 20 years of experience in this field, but for a business that wants to fully detach themselves from the cloud and wants true user-friendly but highly featured control of their network operations, comparison is inevitable! The UniFi UNAS Pro is an excellent choice for users seeking a budget-friendly, easy-to-use NAS solution with solid core features and strong integration into the UniFi ecosystem. However, for those needing more advanced capabilities or future-proof scalability, it may be worth exploring other options in the NAS market.

BUILD QUALITY - 10/10

HARDWARE - 7/10

PERFORMANCE - 7/10

PRICE - 9/10

VALUE - 8/10

8.2

PROS

Nails down the fundamentals of NAS Storage very well
Easy to use GUI and well suited in the UniFi Ecosystem/UX
Complete Offline Use is supported
Use of a UI account is NOT compulsory
Excellently deployed Snapshot Features
10GbE out-the-box
Open HDD Compatibility, but also 1st party options too
Backup and Restoration Options Nailed down perfectly
Very power efficient and CPU/, Memory utilization rarely high
Compact, Quite and well designed chassis
The LCD controls are completely \'different level\' compared to other brands in the market
Promised competitive pricing
FAST deployment (3-5mins tops)
Reactive Storage expandability and easy-to-understand storage failover options
Mobile app deployment is intuitive/fast
Feels stable, secure and reliable at all times
Performance is respectable (considering SATA Bay count and CPU) but also sustained performance is very good
Single screen dashboard is clear and intuitive
Ditto for the native file explorer

CONS

7 Bays is a bit unusual, plus feels like the existing UNVR with different firmware
Additional App installation (eg. \'Protect\') not currently supported. So no container support for 3rd party apps
Network Controls are limited
Works at it\'s best in an existing UniFi managed network, feels a little limited in \'standalone\'
Multiple storage pools not supported (nor is RAID 0)
Lack of Scheduled On/Off
Lack of redundant PSU
Only 1 10Gb port and 1x 1GbE, no USBs for expanded storage or an expansion

Where to Buy a Product
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤

DEAL WATCH – Is It On Offer Right Now? These Offers are Checked Daily

SUBSCRIBE TO OUR NEWSLETTER
[contact-form-7]
Join Inner Circle

Want to follow specific category? Also Read...Week 51 Tech Round-Up – QNAPLocal AI and NAS Drives - IS TFAQ for DIY NAS Builds: EverytRecommended ATX Motherboards fRecommended ATX Motherboards fN305 6-Bay 10GbE NAS MotherboaCWWK Q670 8-Bay Gen5 NAS vPro Flashstor Gen 2 NAS ReviewHexOS NAS Software - Review ofN305 6-Bay 10GbE NAS Motherboa Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

UPDATE – The UniFi UNAS Pro NAS is now available and can be found HERE

In the realm of Network Attached Storage (NAS), QNAP has long been a dominant player, known for its extensive range of high-performance NAS solutions and rich software ecosystem. On the other hand, UniFi, a well-known brand for networking solutions under Ubiquiti, is a newcomer in the NAS space. With the recent launch of the UniFi UNAS Pro, UniFi is entering the highly competitive NAS market that has been dominated by companies like QNAP for decades. This article takes a close look at the NAS solutions offered by QNAP and UniFi, comparing their hardware, software, security, expandability, and overall value. The aim is to help users decide which NAS system best fits their needs—whether for home use, small business, or enterprise-level data management.

QNAP vs UniFi NAS – Price

When it comes to price, UniFi enters the market with aggressive pricing for its UNAS Pro NAS, while QNAP offers a wide range of models at various price points. The UniFi UNAS Pro is priced at $499, making it a competitive 7-bay rackmount NAS with built-in 10GbE networking. This is a very appealing price point, especially for small businesses or home offices looking to add a NAS to their network. It’s designed to provide a simple, integrated solution for users already invested in the UniFi ecosystem.

QNAP, on the other hand, has a vast portfolio of NAS solutions, ranging from entry-level home models to enterprise-grade systems. The QNAP TS-464, which is similarly priced at around $499, offers a 4-bay desktop NAS with a more powerful Intel Celeron quad-core processor and dual 2.5GbE ports. This model supports PCIe upgrades for additional 10GbE connectivity, providing flexibility in network performance as user needs grow.

QNAP’s rackmount models, such as the TS-832PXU, are more expensive, starting around $800, offering an ARM-based 8-bay NAS with dual 10GbE ports and more enterprise features.

While QNAP’s range offers more flexibility and higher-end options, UniFi’s UNAS Pro delivers a great entry-level NAS with robust networking features at a lower price point. For users who need a simple NAS solution integrated into their existing UniFi network, the UNAS Pro presents a very competitive option.

QNAP vs UniFi NAS – Hardware / Range / Value for Money

QNAP has established itself as a leader in NAS hardware, offering a wide variety of devices that cater to home users, SMBs, and enterprise environments. Their hardware is known for its flexibility and upgradeability, with options for PCIe expansion, SSD caching, and higher-performance processors. UniFi’s UNAS Pro, however, is positioned as an affordable, 7-bay rackmount NAS.

It comes with an ARM Cortex-A57 processor, 8GB DDR4 memory, and 10GbE networking, making it a solid choice for users who need simple storage and fast network access but don’t require extensive hardware expandability. Unfortunately, the RAM is non-upgradable, and there are no PCIe slots for future hardware expansion.

QNAP excels in hardware variety and expandability. The TS-464, for example, comes with an Intel Celeron quad-core processor, 4GB of RAM (expandable to 16GB), and a PCIe slot for adding features like 10GbE, NVMe SSDs, or additional storage controllers. Their rackmount systems, like the TS-832PXU, provide even more bays and include features like redundant power supplies, dual 10GbE ports, and scalable storage. Below is a comparison of key hardware features between the UniFi UNAS Pro and similar QNAP models:

While UniFi provides a solid and affordable 7-bay NAS with built-in 10GbE, QNAP offers more flexibility with hardware expansion and a broader range of options. For users who need scalable performance, QNAP’s offerings are better suited to handle growing data needs.

QNAP vs UniFi NAS – Software Presentation

The software user experience is a critical factor when comparing NAS systems. UniFi’s UNAS OS is simple and streamlined, focusing on tight integration with the broader UniFi ecosystem. It borrows much of its design from UniFi’s networking interface, offering users a text-heavy, analytical dashboard ideal for those familiar with UniFi’s network products.

QNAP’s QTS (and its ZFS-based variant, QuTS hero) provides a more graphical and feature-rich interface, similar to Synology’s DSM. QTS presents users with a desktop-like environment, with drag-and-drop functionality, customizable icons, and an app-driven design. The interface is user-friendly and highly customizable, making it easy for both novice users and IT professionals to navigate.

UniFi’s software is more minimalist, sticking to core NAS functions with an emphasis on system monitoring and performance analytics. While it works well for network administrators who prefer UniFi’s style, it lacks the richness of QNAP’s QTS, which includes a wide range of built-in applications and customization options.

QNAP’s QTS is the better option for users looking for a feature-rich, customizable software experience, while UniFi’s UNAS OS provides simplicity and ease of use for those already embedded in the UniFi ecosystem.

QNAP vs UniFi NAS – Security and Access

Both QNAP and UniFi offer strong security features, but their approaches differ based on their respective ecosystems.

QNAP QTS includes comprehensive security features such as two-factor authentication (2FA), SSL certificates, built-in firewall configuration, and advanced ransomware protection. QNAP also supports a variety of third-party security tools and includes IP blocking, VPN integration, and security event monitoring, making it a robust choice for businesses with stringent security needs.

UniFi’s security features are more network-centric, borrowing heavily from the UniFi ecosystem. The UNAS Pro integrates with UniFi’s enterprise-grade networking tools, providing features like IP tracking, network monitoring, and the ability to monitor devices across the entire UniFi infrastructure. However, it is more reliant on UniFi’s own tools and lacks the flexibility of QNAP’s system-level security options.

For businesses already using UniFi networking equipment, the seamless integration of security features across devices may be a major advantage. But QNAP’s more comprehensive NAS-specific security features give it the edge in environments that prioritize data protection at the device level.

QNAP vs UniFi NAS – Software Features

QNAP’s QTS is known for its extensive feature set, providing a wide array of applications for file management, backups, virtualization, and multimedia. QNAP’s built-in app store includes hundreds of apps, including popular third-party solutions like Plex for media streaming, Docker for containerized applications, and Virtualization Station for running virtual machines.

QNAP also excels in providing enterprise features like iSCSI management, snapshot support, hybrid cloud integration, and advanced RAID configurations. Their backup solutions, including Hybrid Backup Sync and Hyper Data Protector, are highly regarded for multi-platform backup support, ensuring data can be securely stored across different locations and devices.

In contrast, UniFi’s UNAS OS focuses on core NAS functions with tight integration into the UniFi ecosystem. While it provides essential file storage, backup scheduling, and snapshot capabilities, it lacks support for more advanced features like Docker or virtual machines.

The UNAS OS doesn’t have a dedicated app store, meaning users are limited to the built-in functions, which may not satisfy power users or businesses looking for extensive features. Whereas QNAP has had a number of years to fully expand their software portfolio.

Key Examples of QNAP’s Advanced Software Features:

• Plex: Media server integration for streaming movies, music, and photos to multiple devices.
• Docker: Support for containerized applications, allowing users to run isolated apps and services.
• Virtualization Station: Enables the creation and management of virtual machines on the NAS.
• QVR Pro / QVR Elite: Full-featured NVR solution for video monitoring and security.

To give you some more perspective (and somewhat damningly), her is the full list of modern NAS appliances and uses that you might consider the defacto full list of services that NAS solutions can/do provide in 2024/2025, and how QNAP and UniFi UNAS compare and contrast:

QNAP vs UniFi NAS – Hardware and Storage Expandability

When it comes to hardware and storage expandability, QNAP offers far more flexibility than UniFi. QNAP NAS systems often come with PCIe slots for expanding network connectivity or adding NVMe SSDs for caching. Models like the TS-464 and TS-832PXU support external expansion units, allowing users to add more drive bays as their storage needs grow.

UniFi’s UNAS Pro, on the other hand, is a more fixed solution. With 7 drive bays, it offers a solid starting point for SMBs or home users, but there is no option to add more storage beyond the built-in bays. The UNAS Pro also lacks PCIe slots, meaning users cannot upgrade to faster networking options or add SSD caching for improved performance.

For businesses that expect to scale their storage over time, QNAP’s expandability is a major advantage. Users can add external storage, upgrade to faster networking, or implement SSD caching to improve performance as their data needs increase.

Key Examples of QNAP’s Expandability:

• PCIe Slots: For adding 10GbE, 25GbE, 40GbE and 100GbE cards, SSD caching, or additional storage controllers that combine them BOTH!
• Expansion Units: Add-on units like the TL and TR Series allow users to easily increase storage capacity.
• NVMe SSD Support: Available on many models for high-speed caching, improving read and write speeds.

QNAP vs UniFi NAS – Verdict and Conclusion

Choosing between QNAP and UniFi NAS systems depends largely on your specific requirements and whether you’re looking for a versatile, expandable solution or a streamlined, network-centric device. QNAP is the go-to choice for users who need flexibility and advanced features, offering a comprehensive ecosystem of software solutions, virtualization, and scalability through PCIe slots, NVMe caching, and external storage expansion units. Its rich app store and high-end features like Docker, Virtualization Station, and support for complex storage configurations make it a strong contender for businesses, creative professionals, and power users who require robust performance and the ability to scale as their needs grow.

On the other hand, UniFi’s UNAS Pro is designed for simplicity and tight integration within the existing UniFi network infrastructure. With a focus on ease of use, basic NAS functions, and seamless deployment, it’s an appealing option for small businesses or home users already invested in the UniFi ecosystem. While it lacks the depth of features seen in QNAP, such as virtualization, multimedia management, and extensive software tools, UniFi’s UNAS Pro excels in providing network-level security, easy file management, and hassle-free backups, particularly for those who value remote access and centralized control over their network and NAS devices. Its built-in 10GbE networking capabilities also make it an affordable choice for users seeking faster connectivity without the need for additional expansions.

Ultimately, QNAP is ideal for users who prioritize feature-rich software, extensive hardware expandability, and the ability to run advanced applications. Its higher cost is justified by its robust capabilities and long-term flexibility. However, if your focus is on network integration, simplicity, and affordability, UniFi’s UNAS Pro offers a practical, budget-friendly solution that fits seamlessly into the broader UniFi environment. Both platforms offer distinct advantages, but the decision will come down to whether you need a powerful, scalable NAS or a simple, well-integrated storage system.

Feature	QNAP Pros	UniFi Pros	QNAP Cons	UniFi Cons
Software Features	Extensive app store, Docker, VM support	Seamless integration with UniFi ecosystem	Higher cost for advanced models	Limited software features
Hardware Expandability	PCIe slots, NVMe caching, external expansion	Compact design, built-in 10GbE	Expandable hardware can drive up costs	No SSD caching or PCIe slots
Multimedia Management	Plex, Video Station, and Photo Station	Simple file sharing with Drive	Removal of Video Station in some models	Lacks dedicated multimedia management
Backup Solutions	Hybrid Backup Sync, Hyper Data Protector	Basic cloud backups via Google Drive	Some apps feel dated compared to competitors	Lacks advanced backup features
Virtualization Support	Docker and Virtualization Station	Tight integration with UniFi Controller	Not all models support high-end VM needs	No Docker or virtualization support
Security Features	Comprehensive NAS-specific security tools	Strong network-level security integration	Advanced security might be overkill for small users	Fewer security options for the NAS itself
Storage Management	QTS/QuTS hybrid RAID, multiple storage pools	Simple and easy-to-use snapshot management	Can be more complex to set up advanced storage features	Fixed hardware, no expandability beyond 7 bays
Price Flexibility	Broad range of NAS models at different prices	Affordable NAS with solid networking	Higher initial cost for advanced models	No pricing flexibility with limited hardware options
Complexity	Powerful features but requires a steeper learning curve	Simple, basic setup for UniFi ecosystem	Can be more complex for less experienced users	Basic compared to competitors
Software Maturity	Mature software with a wide range of features	Simple, early-stage OS but integrated well	Some apps feel outdated compared to competitors	Early-stage OS with fewer features
NAS-Specific Security	Advanced security features for robust data protection	Strong network-level security integration	Might be too complex for smaller setups	Fewer NAS-specific security tools
Setup Complexity	Can be complex to set up advanced features	Easy to set up, integrates well with UniFi devices	Requires technical expertise for full feature implementation	Very basic setup and customization options
Where to Buy

Join Inner Circle

Want to follow specific category? Also Read...Week 51 Tech Round-Up – QNAPLocal AI and NAS Drives - IS TFAQ for DIY NAS Builds: EverytRecommended ATX Motherboards fRecommended ATX Motherboards fN305 6-Bay 10GbE NAS MotherboaCWWK Q670 8-Bay Gen5 NAS vPro Flashstor Gen 2 NAS ReviewHexOS NAS Software - Review ofN305 6-Bay 10GbE NAS Motherboa Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

UPDATE – The UniFi UNAS Pro NAS is now available and can be found HERE

In the realm of Network Attached Storage (NAS), QNAP has long been a dominant player, known for its extensive range of high-performance NAS solutions and rich software ecosystem. On the other hand, UniFi, a well-known brand for networking solutions under Ubiquiti, is a newcomer in the NAS space. With the recent launch of the UniFi UNAS Pro, UniFi is entering the highly competitive NAS market that has been dominated by companies like QNAP for decades. This article takes a close look at the NAS solutions offered by QNAP and UniFi, comparing their hardware, software, security, expandability, and overall value. The aim is to help users decide which NAS system best fits their needs—whether for home use, small business, or enterprise-level data management.

QNAP vs UniFi NAS – Price

When it comes to price, UniFi enters the market with aggressive pricing for its UNAS Pro NAS, while QNAP offers a wide range of models at various price points. The UniFi UNAS Pro is priced at $499, making it a competitive 7-bay rackmount NAS with built-in 10GbE networking. This is a very appealing price point, especially for small businesses or home offices looking to add a NAS to their network. It’s designed to provide a simple, integrated solution for users already invested in the UniFi ecosystem.

QNAP, on the other hand, has a vast portfolio of NAS solutions, ranging from entry-level home models to enterprise-grade systems. The QNAP TS-464, which is similarly priced at around $499, offers a 4-bay desktop NAS with a more powerful Intel Celeron quad-core processor and dual 2.5GbE ports. This model supports PCIe upgrades for additional 10GbE connectivity, providing flexibility in network performance as user needs grow.

QNAP’s rackmount models, such as the TS-832PXU, are more expensive, starting around $800, offering an ARM-based 8-bay NAS with dual 10GbE ports and more enterprise features.

While QNAP’s range offers more flexibility and higher-end options, UniFi’s UNAS Pro delivers a great entry-level NAS with robust networking features at a lower price point. For users who need a simple NAS solution integrated into their existing UniFi network, the UNAS Pro presents a very competitive option.

QNAP vs UniFi NAS – Hardware / Range / Value for Money

QNAP has established itself as a leader in NAS hardware, offering a wide variety of devices that cater to home users, SMBs, and enterprise environments. Their hardware is known for its flexibility and upgradeability, with options for PCIe expansion, SSD caching, and higher-performance processors. UniFi’s UNAS Pro, however, is positioned as an affordable, 7-bay rackmount NAS.

It comes with an ARM Cortex-A57 processor, 8GB DDR4 memory, and 10GbE networking, making it a solid choice for users who need simple storage and fast network access but don’t require extensive hardware expandability. Unfortunately, the RAM is non-upgradable, and there are no PCIe slots for future hardware expansion.

QNAP excels in hardware variety and expandability. The TS-464, for example, comes with an Intel Celeron quad-core processor, 4GB of RAM (expandable to 16GB), and a PCIe slot for adding features like 10GbE, NVMe SSDs, or additional storage controllers. Their rackmount systems, like the TS-832PXU, provide even more bays and include features like redundant power supplies, dual 10GbE ports, and scalable storage. Below is a comparison of key hardware features between the UniFi UNAS Pro and similar QNAP models:

While UniFi provides a solid and affordable 7-bay NAS with built-in 10GbE, QNAP offers more flexibility with hardware expansion and a broader range of options. For users who need scalable performance, QNAP’s offerings are better suited to handle growing data needs.

QNAP vs UniFi NAS – Software Presentation

The software user experience is a critical factor when comparing NAS systems. UniFi’s UNAS OS is simple and streamlined, focusing on tight integration with the broader UniFi ecosystem. It borrows much of its design from UniFi’s networking interface, offering users a text-heavy, analytical dashboard ideal for those familiar with UniFi’s network products.

QNAP’s QTS (and its ZFS-based variant, QuTS hero) provides a more graphical and feature-rich interface, similar to Synology’s DSM. QTS presents users with a desktop-like environment, with drag-and-drop functionality, customizable icons, and an app-driven design. The interface is user-friendly and highly customizable, making it easy for both novice users and IT professionals to navigate.

UniFi’s software is more minimalist, sticking to core NAS functions with an emphasis on system monitoring and performance analytics. While it works well for network administrators who prefer UniFi’s style, it lacks the richness of QNAP’s QTS, which includes a wide range of built-in applications and customization options.

QNAP’s QTS is the better option for users looking for a feature-rich, customizable software experience, while UniFi’s UNAS OS provides simplicity and ease of use for those already embedded in the UniFi ecosystem.

QNAP vs UniFi NAS – Security and Access

Both QNAP and UniFi offer strong security features, but their approaches differ based on their respective ecosystems.

QNAP QTS includes comprehensive security features such as two-factor authentication (2FA), SSL certificates, built-in firewall configuration, and advanced ransomware protection. QNAP also supports a variety of third-party security tools and includes IP blocking, VPN integration, and security event monitoring, making it a robust choice for businesses with stringent security needs.

UniFi’s security features are more network-centric, borrowing heavily from the UniFi ecosystem. The UNAS Pro integrates with UniFi’s enterprise-grade networking tools, providing features like IP tracking, network monitoring, and the ability to monitor devices across the entire UniFi infrastructure. However, it is more reliant on UniFi’s own tools and lacks the flexibility of QNAP’s system-level security options.

For businesses already using UniFi networking equipment, the seamless integration of security features across devices may be a major advantage. But QNAP’s more comprehensive NAS-specific security features give it the edge in environments that prioritize data protection at the device level.

QNAP vs UniFi NAS – Software Features

QNAP’s QTS is known for its extensive feature set, providing a wide array of applications for file management, backups, virtualization, and multimedia. QNAP’s built-in app store includes hundreds of apps, including popular third-party solutions like Plex for media streaming, Docker for containerized applications, and Virtualization Station for running virtual machines.

QNAP also excels in providing enterprise features like iSCSI management, snapshot support, hybrid cloud integration, and advanced RAID configurations. Their backup solutions, including Hybrid Backup Sync and Hyper Data Protector, are highly regarded for multi-platform backup support, ensuring data can be securely stored across different locations and devices.

In contrast, UniFi’s UNAS OS focuses on core NAS functions with tight integration into the UniFi ecosystem. While it provides essential file storage, backup scheduling, and snapshot capabilities, it lacks support for more advanced features like Docker or virtual machines.

The UNAS OS doesn’t have a dedicated app store, meaning users are limited to the built-in functions, which may not satisfy power users or businesses looking for extensive features. Whereas QNAP has had a number of years to fully expand their software portfolio.

Key Examples of QNAP’s Advanced Software Features:

• Plex: Media server integration for streaming movies, music, and photos to multiple devices.
• Docker: Support for containerized applications, allowing users to run isolated apps and services.
• Virtualization Station: Enables the creation and management of virtual machines on the NAS.
• QVR Pro / QVR Elite: Full-featured NVR solution for video monitoring and security.

To give you some more perspective (and somewhat damningly), her is the full list of modern NAS appliances and uses that you might consider the defacto full list of services that NAS solutions can/do provide in 2024/2025, and how QNAP and UniFi UNAS compare and contrast:

QNAP vs UniFi NAS – Hardware and Storage Expandability

When it comes to hardware and storage expandability, QNAP offers far more flexibility than UniFi. QNAP NAS systems often come with PCIe slots for expanding network connectivity or adding NVMe SSDs for caching. Models like the TS-464 and TS-832PXU support external expansion units, allowing users to add more drive bays as their storage needs grow.

UniFi’s UNAS Pro, on the other hand, is a more fixed solution. With 7 drive bays, it offers a solid starting point for SMBs or home users, but there is no option to add more storage beyond the built-in bays. The UNAS Pro also lacks PCIe slots, meaning users cannot upgrade to faster networking options or add SSD caching for improved performance.

For businesses that expect to scale their storage over time, QNAP’s expandability is a major advantage. Users can add external storage, upgrade to faster networking, or implement SSD caching to improve performance as their data needs increase.

Key Examples of QNAP’s Expandability:

• PCIe Slots: For adding 10GbE, 25GbE, 40GbE and 100GbE cards, SSD caching, or additional storage controllers that combine them BOTH!
• Expansion Units: Add-on units like the TL and TR Series allow users to easily increase storage capacity.
• NVMe SSD Support: Available on many models for high-speed caching, improving read and write speeds.

QNAP vs UniFi NAS – Verdict and Conclusion

Choosing between QNAP and UniFi NAS systems depends largely on your specific requirements and whether you’re looking for a versatile, expandable solution or a streamlined, network-centric device. QNAP is the go-to choice for users who need flexibility and advanced features, offering a comprehensive ecosystem of software solutions, virtualization, and scalability through PCIe slots, NVMe caching, and external storage expansion units. Its rich app store and high-end features like Docker, Virtualization Station, and support for complex storage configurations make it a strong contender for businesses, creative professionals, and power users who require robust performance and the ability to scale as their needs grow.

On the other hand, UniFi’s UNAS Pro is designed for simplicity and tight integration within the existing UniFi network infrastructure. With a focus on ease of use, basic NAS functions, and seamless deployment, it’s an appealing option for small businesses or home users already invested in the UniFi ecosystem. While it lacks the depth of features seen in QNAP, such as virtualization, multimedia management, and extensive software tools, UniFi’s UNAS Pro excels in providing network-level security, easy file management, and hassle-free backups, particularly for those who value remote access and centralized control over their network and NAS devices. Its built-in 10GbE networking capabilities also make it an affordable choice for users seeking faster connectivity without the need for additional expansions.

Ultimately, QNAP is ideal for users who prioritize feature-rich software, extensive hardware expandability, and the ability to run advanced applications. Its higher cost is justified by its robust capabilities and long-term flexibility. However, if your focus is on network integration, simplicity, and affordability, UniFi’s UNAS Pro offers a practical, budget-friendly solution that fits seamlessly into the broader UniFi environment. Both platforms offer distinct advantages, but the decision will come down to whether you need a powerful, scalable NAS or a simple, well-integrated storage system.

Feature	QNAP Pros	UniFi Pros	QNAP Cons	UniFi Cons
Software Features	Extensive app store, Docker, VM support	Seamless integration with UniFi ecosystem	Higher cost for advanced models	Limited software features
Hardware Expandability	PCIe slots, NVMe caching, external expansion	Compact design, built-in 10GbE	Expandable hardware can drive up costs	No SSD caching or PCIe slots
Multimedia Management	Plex, Video Station, and Photo Station	Simple file sharing with Drive	Removal of Video Station in some models	Lacks dedicated multimedia management
Backup Solutions	Hybrid Backup Sync, Hyper Data Protector	Basic cloud backups via Google Drive	Some apps feel dated compared to competitors	Lacks advanced backup features
Virtualization Support	Docker and Virtualization Station	Tight integration with UniFi Controller	Not all models support high-end VM needs	No Docker or virtualization support
Security Features	Comprehensive NAS-specific security tools	Strong network-level security integration	Advanced security might be overkill for small users	Fewer security options for the NAS itself
Storage Management	QTS/QuTS hybrid RAID, multiple storage pools	Simple and easy-to-use snapshot management	Can be more complex to set up advanced storage features	Fixed hardware, no expandability beyond 7 bays
Price Flexibility	Broad range of NAS models at different prices	Affordable NAS with solid networking	Higher initial cost for advanced models	No pricing flexibility with limited hardware options
Complexity	Powerful features but requires a steeper learning curve	Simple, basic setup for UniFi ecosystem	Can be more complex for less experienced users	Basic compared to competitors
Software Maturity	Mature software with a wide range of features	Simple, early-stage OS but integrated well	Some apps feel outdated compared to competitors	Early-stage OS with fewer features
NAS-Specific Security	Advanced security features for robust data protection	Strong network-level security integration	Might be too complex for smaller setups	Fewer NAS-specific security tools
Setup Complexity	Can be complex to set up advanced features	Easy to set up, integrates well with UniFi devices	Requires technical expertise for full feature implementation	Very basic setup and customization options
Where to Buy

Join Inner Circle

Want to follow specific category? Also Read...Week 51 Tech Round-Up – QNAPALL the Ubiquiti / UniFi BlackProtect Your QNAP NAS: VulneraBlack Friday 2024 - Data StoraBlack Friday 2024 - Data StoraUniFI UNAS Pro NAS Drive SoftwWeek 43 Tech Roundup - UniFi FQNAP TS-433eU NAS – A Deep DUniFI UNAS Pro NAS Software DeUniFi UNAS Pro - FIRST TIME SE Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

UPDATE – The UniFi UNAS Pro NAS is now available and can be found HERE

The UniFi UNAS Pro is Ubiquiti’s first major leap into the NAS (Network Attached Storage) market, building on the success of their networking hardware and ecosystem. This rackmount NAS aims to provide a cost-effective, streamlined option, especially for those who are already invested in the UniFi product ecosystem. But is this device the right choice for your storage needs? In this detailed review, we’ll explore the pros and cons of the UniFi UNAS Pro to help you decide.

Pros of the UniFi UNAS Pro NAS

1. Competitive Pricing

One of the most remarkable selling points of the UniFi UNAS Pro is its price. Retailing at $499, the UNAS Pro offers a 7-bay rackmount NAS, which is significantly more affordable than many competing NAS devices with similar hardware capabilities. For this price, you get a quad-core ARM Cortex-A57 processor, 8GB of DDR4 memory, and a built-in 10GbE networking port alongside a 1GbE port, without the need for additional licenses. In comparison, similar rackmount NAS devices from brands like Synology and QNAP are typically priced closer to $800 or even $1,000. For example, a comparable system like the QNAP TS-832PX often costs around $900 but comes with similar performance in terms of storage and connectivity options. The value proposition is undeniable, especially when you factor in that UniFi’s NAS software comes with no extra costs for features like snapshot management or backups. For small businesses or home users looking for high-capacity storage at a low price, the UniFi UNAS Pro is a solid choice.

2. Ease of Use

Ubiquiti has a long-standing reputation for designing user-friendly products, and the UNAS Pro is no exception. The NAS system comes with an intuitive user interface that’s reminiscent of UniFi’s networking equipment management software, making it easy for existing UniFi users to get up and running quickly. The interface, whether accessed via the web or through UniFi’s mobile app, offers a clean, straightforward experience.

The mobile app, which supports both Bluetooth and Wi-Fi connectivity, allows you to monitor and manage the NAS on the go. This functionality is particularly useful for small businesses where IT support might not always be readily available. Additionally, the built-in LCD panel on the front of the device allows for on-the-spot diagnostics and control without needing to access the web interface, offering a more hands-on approach to managing your NAS.

3. Offline Setup Capability

One standout feature of the UniFi UNAS Pro is its ability to be set up and managed offline. Many NAS systems require users to create an online account to access core features or manage the device, but with the UNAS Pro, you can set up local credentials and manage the device without ever needing to connect to the cloud. This means you can retain complete control over your data and avoid sharing anything with external services, which is an attractive option for users who prioritize privacy. Though you will miss out on certain remote access features without a UniFi cloud account, this offline setup capability is ideal for environments where internet access may be unreliable or for users who prefer to keep their storage network air-gapped from the wider web.

Keep in mind however that setting the device up without a UI.com / UniFi account will limit some of the remote access and additional security verification features of the UNAS Pro.

4. Modular Updates

UniFi has implemented a modular update system that makes software maintenance more flexible and customizable. Rather than requiring full system reboots or blanket updates that affect every part of the NAS at once, the UNAS Pro allows users to schedule and manage individual updates for the NAS OS and each of its applications. You can select between stable updates or more cutting-edge early access updates for those who prefer to stay on the forefront of new features. This update system ensures that you can keep critical parts of your system updated while minimizing disruptions to services. For example, you might set security updates to apply immediately while delaying other updates until a convenient time. For a NAS that’s designed to run continuously, this granular control is a valuable feature.

5. Solid Core Features

For its first foray into the NAS market, UniFi has done an excellent job at providing all the core features users expect from a modern NAS. The UNAS Pro excels in basic NAS functionality, such as file storage, folder creation, and permission management. Its a very straight forward system to understand and use, as well as a very responsive GUI (especially for the internal hardware it has being so modest). Whether backing up to another NAS or a cloud service, browsing files/folders on the fly, managing active shares quickly – the process is straightforward and reliable.

RAID support is available out of the box, allowing users to configure their drives for performance, redundancy, or a balance of both. While the hardware might not be top-tier, UniFi has ensured that its software nails down the fundamentals, providing reliable performance for small businesses and home users.

6. 10GbE Connectivity

At this price point, the inclusion of a 10GbE networking port is a significant advantage. Many NAS devices in this price range only include 1GbE or, at best, 2.5GbE networking. The 10GbE port on the UniFi UNAS Pro enables much faster data transfer rates, particularly for users dealing with large file transfers such as video production teams, graphic designers, or those needing to back up multiple systems simultaneously. For small businesses that need faster network throughput without breaking the bank, the UNAS Pro is an excellent option.

7. Seamless UniFi Ecosystem Integration

The UniFi UNAS Pro integrates seamlessly with the broader UniFi product ecosystem. If you’re already using UniFi routers, switches, or access points, the UNAS Pro can be managed alongside these devices through the same UniFi controller interface.

This makes it easy to monitor and manage all your network infrastructure from a single dashboard. For businesses already invested in UniFi, this integration adds significant value and simplifies network management.

8. Very Easy Snapshot and Backup Management

The UNAS Pro’s snapshot management is another highlight. It allows for easy setup and quick recovery of snapshots, making it a powerful tool for backing up and restoring data.

Whether you’re scheduling automatic snapshots or manually backing up your most important files, the system is responsive and reliable. Data can also be backed up to a cloud service like Google Drive, adding flexibility to your data management strategy.

Cons of the UniFi UNAS Pro NAS

1. Modest Hardware Specifications

Despite its many strengths, the UniFi UNAS Pro’s hardware can feel somewhat underwhelming, especially for more demanding users. The device is powered by a quad-core ARM Cortex-A57 processor, which is capable but not nearly as powerful as the Intel or AMD x86 processors found in higher-end NAS devices.

Specification	Details
Brand	UniFi (from Ubiquiti)
Model	UniFi UNAS Professional Rackmount NAS
Dimensions	442.4 x 325 x 43.7 mm (17.4 x 12.8 x 1.7 inches)
Weight	Without Rackmount Brackets: 5.11 kg (11.27 lb)
	With Rackmount Brackets: 5.20 kg (11.46 lb)
Enclosure Characteristics	SGCC Steel
Processor	Quad-Core ARM Cortex-A57 at 1.7 GHz
System Memory	8GB DDR4
On-Board Flash Storage	SPI NOR 32 MB, USB Flash 8 GB
Power Supply	200W Lipet Internal
Max. Power Consumption	160W
Max. Power Budget for Drives	135W
Power Method	(1) Universal AC Input
	(1) RPS DC Input
Power Supply	100-240VAC, 50/60 Hz, 2A
Networking Interfaces	(1) 10/100/1000 Mbps RJ45 Ethernet
	(1) 1/10 Gbps SFP+ Ethernet
Management Interface	Ethernet In-Band Management
ESD/EMP Protection	Air: ±12kV, Contact: ±8kV
Operating Temperature	-5 to 40° C (23 to 104° F)
Operating Humidity	5 – 95% Non-condensing
LED Indicators	System: (1) Power, Blue/White

While the ARM processor is energy-efficient and suitable for basic tasks like file storage, it lacks the muscle required for more demanding workloads like virtualization, media transcoding, or running complex applications.

For users who need to perform CPU-intensive tasks or run multiple concurrent operations, the ARM architecture could be a limiting factor. Although it’s understandable that UniFi opted for ARM to keep costs down, this choice might alienate users looking for a high-performance solution.

2. Limited Expandability

One of the most significant downsides of the UniFi UNAS Pro is its lack of expandability. While the 7-bay design offers substantial storage out of the box, there are no options for expanding the system beyond that. The device lacks PCIe slots for adding features like SSD caching, additional networking interfaces, or other hardware upgrades. Additionally, the 8GB of DDR4 RAM is non-upgradable, which means users are stuck with the default memory capacity—limiting the NAS’s potential to handle more intensive applications or larger numbers of users.

This lack of scalability could be a dealbreaker for businesses or IT professionals who expect their storage needs to grow over time and want a system that can grow with them.

3. Single Storage Pool

Unlike more advanced NAS systems that allow users to create multiple storage pools, the UniFi UNAS Pro is limited to a single storage pool. This limitation could be problematic for users who want to segregate different types of data or use different storage media, such as SSDs for high-speed access and HDDs for bulk storage. While the system does allow for RAID configurations, the lack of flexibility in storage pool management could be a downside for more advanced users who need granular control over their storage environments.

4. No Redundant Power Supply

For businesses that require constant uptime, the lack of a redundant power supply on the UniFi UNAS Pro is a significant shortcoming. While the device does support an external uninterruptible power supply (UPS), it lacks the built-in redundancy that is common in many higher-end NAS systems. Redundant power supplies are critical in ensuring that hardware failures don’t lead to extended downtime. Without this feature, the UNAS Pro may not be suitable for mission-critical environments where uptime is a priority.

5. Lack of UniFi Protect Support

A surprising omission in the UniFi UNAS Pro is its lack of support for UniFi Protect, UniFi’s popular video surveillance platform. UniFi Protect is available on other UniFi hardware such as the Dream Machine and UNVR systems, but it cannot be installed on the UNAS Pro. This is a missed opportunity, especially for users who might want to centralize their storage and surveillance needs on a single device. While future software updates may address this, the current lack of Protect support limits the device’s versatility, particularly for small businesses or homeowners looking to consolidate network and surveillance management.

6. Absence of Popular NAS Apps and Virtualization

Compared to more established NAS solutions like QNAP or Synology, the UniFi UNAS Pro falls short when it comes to app availability. There’s no support for popular applications like Plex or Docker, which limits its utility for users who want to run media servers, manage smart home devices, or deploy containerized applications. This absence is particularly noticeable when compared to NAS solutions from other brands that have built extensive app ecosystems over many years. Additionally, the lack of virtualization support makes the UNAS Pro less appealing for businesses that need to run virtual machines or isolated environments for development and testing. While this might not matter to users looking for simple storage solutions, it’s a glaring omission for power users.

While the UniFi UNAS Pro covers the basics well, it lacks many of the advanced features that have become standard in more mature NAS systems. There’s no support for containerization, virtual environments, or advanced SaaS integrations like Google Workspace or Office 365. These high-end features are often essential for businesses with complex workflows or larger teams. The absence of these capabilities makes the UNAS Pro less competitive for users who need more than basic file storage and backups.

7. Limited OS Client Tools and File Syncing

Although the UNAS Pro offers a web interface and easy-to-use file sharing features, it lacks the more sophisticated client tools available on competing NAS platforms. For instance, Synology Drive and QNAP QSync offer robust client tools that allow users to sync files across multiple devices or manage their NAS more comprehensively from their desktop, without any need to engage with the system dashboard or the NAS GUI itself – with all file synchronization happening in the background whilst they only interact with their native OS file manager. By contrast, the UniFi UNAS Pro’s file syncing tools are fairly limited and although mapping via SMB and similar is possible, there is little to no live sync tools at launch, which could be frustrating for users looking for more advanced file management capabilities. I really think this is something that UniFi will remedy in time, but at least right now, this is absent to the same degree as their new NAS competitors.

Should You Buy the UniFi UNAS Pro NAS?

The UniFi UNAS Pro is a compelling entry into the NAS market, offering excellent value for money, ease of use, and seamless integration with the UniFi ecosystem. For users looking for a simple, reliable NAS solution that can handle basic storage tasks and backups, the UNAS Pro is a great option, particularly at its competitive price point of $499. However, the device’s limitations in hardware scalability, application support, and advanced features mean that it may not be the best choice for power users or businesses with more complex needs – at least at launch. If you’re already invested in UniFi’s ecosystem and only need a NAS for fundamental storage and backups, the UNAS Pro is a solid choice. But for users seeking greater flexibility, more advanced features, or the ability to scale their storage, other NAS systems from QNAP or Synology may be a better fit.

I feel like a bit of a broken record in this review, and I keep repeating the same two words in conjunction with the UniFi UNAS Pro—fundamentals and consistency! It’s pretty clear that UniFi has prioritized the need for this system to perfectly complement their existing UniFi ecosystem and make it a true part of their hardware portfolio. In doing so, it has resulted in them focusing considerably on the fundamental storage requirements of a NAS system and making sure that these are as good as they possibly can be out of the gate. To this end, I would say that UniFi has unquestionably succeeded. The cracks in the surface begin once you start comparing this system with other offerings in the market right now—which is inevitably what users are going to do and have been doing since the first indications of a UniFi NAS system were being rumored. It may seem tremendously unfair to compare the newly released UniFi NAS with solutions from vendors that have had more than 20 years of experience in this field, but for a business that wants to fully detach themselves from the cloud and wants true user-friendly but highly featured control of their network operations, comparison is inevitable! The UniFi UNAS Pro is an excellent choice for users seeking a budget-friendly, easy-to-use NAS solution with solid core features and strong integration into the UniFi ecosystem. However, for those needing more advanced capabilities or future-proof scalability, it may be worth exploring other options in the NAS market.

BUILD QUALITY - 10/10

HARDWARE - 7/10

PERFORMANCE - 7/10

PRICE - 9/10

VALUE - 8/10

8.2

PROS

Nails down the fundamentals of NAS Storage very well
Easy to use GUI and well suited in the UniFi Ecosystem/UX
Complete Offline Use is supported
Use of a UI account is NOT compulsory
Excellently deployed Snapshot Features
10GbE out-the-box
Open HDD Compatibility, but also 1st party options too
Backup and Restoration Options Nailed down perfectly
Very power efficient and CPU/, Memory utilization rarely high
Compact, Quite and well designed chassis
The LCD controls are completely \'different level\' compared to other brands in the market
Promised competitive pricing
FAST deployment (3-5mins tops)
Reactive Storage expandability and easy-to-understand storage failover options
Mobile app deployment is intuitive/fast
Feels stable, secure and reliable at all times
Performance is respectable (considering SATA Bay count and CPU) but also sustained performance is very good
Single screen dashboard is clear and intuitive
Ditto for the native file explorer

CONS

7 Bays is a bit unusual, plus feels like the existing UNVR with different firmware
Additional App installation (eg. \'Protect\') not currently supported. So no container support for 3rd party apps
Network Controls are limited
Works at it\'s best in an existing UniFi managed network, feels a little limited in \'standalone\'
Multiple storage pools not supported (nor is RAID 0)
Lack of Scheduled On/Off
Lack of redundant PSU
Only 1 10Gb port and 1x 1GbE, no USBs for expanded storage or an expansion

Where to Buy a Product
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤

DEAL WATCH – Is It On Offer Right Now? These Offers are Checked Daily

SUBSCRIBE TO OUR NEWSLETTER
[contact-form-7]
Join Inner Circle

Want to follow specific category? Also Read...ALL the Ubiquiti / UniFi BlackBlack Friday 2024 - Data StoraBlack Friday 2024 - Data StoraUniFI UNAS Pro NAS Drive SoftwWeek 43 Tech Roundup - UniFi FUniFI UNAS Pro NAS Software DeUniFi UNAS Pro - FIRST TIME SEUniFi UNAS Pro - COMPLETE SETUQNAP vs UniFi UNAS Pro NAS ComQNAP vs UniFi UNAS Pro – WHI Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

With the ongoing development of private NAS servers, many users are seeking to move their personal or business data away from third-party cloud services. You might expect that each new generation of NAS devices would be increasingly powerful. While it’s true that there are more capable devices on the market, there is also a growing demand for efficiency. As we approach a point where electricity bills are a concern, alongside the powerhouse units that make headlines, we see systems designed to offer maximum performance on a minimal hardware footprint. These products promise lower price tags, reduced running costs, and robust support, making them attractive for a wide range of users.

Into this evolving landscape steps the QNAP TS-632X, an ARM-powered NAS that boasts dual 10GbE connectivity, support for ECC memory, and PCIe expandability. The idea that this system can manage even half of what it promises while running on a power-efficient ARM CPU is impressive. We first encountered this system at the Computex 2024 trade show in Taipei, where it immediately caught our eye due to its impressive feature set. But now that it’s available, does it live up to the hype? Is this lean, mean 10G NAS machine capable of handling your data storage needs? Let’s dive in and find out.

QNAP TS-632X Review – Quick Conclusion

The QNAP TS-632X is not a NAS that will win awards for sheer processing power, but that was never its purpose. As one of the most capable ARM-powered NAS devices available, it provides a compelling mix of features at a competitive price point. For $699-$749, you get a 6-bay NAS with dual 10GbE ports, support for ECC memory, and PCIe expandability, offering a scalable solution perfect for small to medium businesses or advanced home users who need high-speed data access. However, there are some caveats. The lack of ECC memory in the base model feels like a missed opportunity, and the ARM processor does limit some high-end applications. Write speeds could also be better, but as long as you’re aware of these limitations, the TS-632X delivers on its promises without overextending itself. With thoughtful design and a focus on energy efficiency, it’s a refreshing option in a market crowded with less impressive ARM-based devices. For users who need efficient, reliable storage with excellent network capabilities and scalability, the TS-632X is a solid choice. It may not handle the most demanding tasks, but it excels in providing consistent, reliable performance for everyday NAS functions, making it a worthy addition to any small office or home setup.

SOFTWARE - 8/10

HARDWARE - 8/10

PERFORMANCE - 7/10

PRICE - 9/10

VALUE - 10/10

8.4

PROS

Dual 10GbE Ports: Provides high-speed network connectivity, enabling fast data transfer and reducing backup times, which is great for businesses with heavy data flow.
Energy Efficiency: Powered by an ARM-based processor, the TS-632X offers low power consumption, making it ideal for 24/7 operation without significantly impacting electricity bills.
Support for ECC Memory: Offers enhanced data integrity by supporting ECC (Error-Correcting Code) memory, reducing the risk of data corruption, which is crucial for critical data storage.
Scalability: Includes a PCIe slot for expansion, allowing users to add additional network cards or SSDs, making it adaptable to growing network demands.
Affordable Pricing: Priced competitively between $699-$749, it offers a strong set of features without breaking the bank, providing excellent value for small to medium businesses.
Compact Design: Its tower form factor and relatively small footprint make it easy to fit into a variety of environments, from small offices to home setups.
Quiet Operation: Even when fully loaded, the TS-632X operates quietly, making it suitable for use in noise-sensitive environments like offices or shared spaces.
Versatile Storage Options: Supports both 3.5-inch HDDs and 2.5-inch SSDs, providing flexibility in balancing cost and performance for different storage needs.
Robust Software Ecosystem: Runs on QNAP\'s QTS operating system, which includes a wide range of apps for backup, synchronization, multimedia management, and more, catering to various business and personal needs.
Eco-Friendly Packaging: Uses fully recyclable packaging materials, demonstrating QNAP\'s commitment to sustainability and reducing environmental impact.

CONS

Base Model Lacks ECC Memory: Although the TS-632X supports ECC memory, the base model does not include it, requiring users to purchase additional RAM to take advantage of this feature.
Limited Processing Power: The ARM processor, while energy-efficient, limits the NAS\'s ability to handle resource-intensive tasks such as virtualization and high-end multimedia transcoding.
Only Two-Year Warranty: The standard warranty is relatively short for a device targeted at business use, where a longer warranty period (e.g., three years) would be more appropriate.
Write Performance Could Be Better: While read speeds are impressive, write speeds are somewhat lower, which might be a limitation for users who need high write throughput for applications like live video editing or large-scale data ingestion.

Where to Buy a Product
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤

DEAL WATCH – Is It On Offer Right Now? These Offers are Checked Daily

QNAP TS-632X NAS Review – Packaging

Typically, I would gloss over packaging details in reviews since most users don’t find them particularly relevant, and packaging is usually a one-time interaction before it ends up as waste. However, QNAP’s approach to the TS-632X packaging is worth noting. The company has made significant strides in using eco-friendly materials, which are entirely recyclable. From the protective framework to the wrapping materials, everything is designed to be environmentally friendly.

This shift is a notable improvement because one of the main challenges with recyclable packaging is durability. Recyclable materials often can’t withstand the rigors of international shipping, leading to potential damage to the internal hardware. Such damage might not be immediately apparent, potentially causing long-term data loss if issues arise days, weeks, or even months after initial use. Kudos to QNAP for investing in robust, recyclable packaging that still protects the device during transit.

QNAP TS-632X NAS Review – Hardware Specifications

Before diving into the performance and capabilities of the TS-632X, it’s essential to understand what this device offers in terms of hardware. Here’s a detailed look at the key specifications:

QNAP TS-632X NAS Review – Performance and Features

The TS-632X stands out primarily due to its impressive network connectivity. Equipped with two 10GbE SFP+ ports and two 2.5GbE Ethernet ports, it provides up to 25Gbps of network bandwidth straight out of the box.

This high level of connectivity is vital for businesses that need to handle multiple simultaneous data streams or require high-speed data transfers. Moreover, the presence of a PCIe slot allows users to install additional network cards, further enhancing the system’s scalability. This feature makes the TS-632X highly adaptable, enabling users to upgrade their setup as their network demands grow.

Powered by an Annapurna Labs AL524 ARM quad-core processor running at 2.0GHz per core, the TS-632X is designed to be power-efficient while still providing adequate performance for typical NAS tasks. This ARM processor is not aimed at heavy computational tasks or graphic-intensive applications but is optimized for efficient data handling and low power consumption, making it ideal for 24/7 operation.

In tests with four 24TB drives in RAID 5, the device showed impressive energy efficiency, consuming just 26.2 watts on average during idle periods and around 54-55 watts under heavy load. These figures are excellent for a 6-bay NAS, ensuring that it remains cost-effective to run even in demanding environments.

Limitations of the ARM Processor?

While the TS-632X performs well for most NAS tasks, it’s important to recognize the limitations of its ARM processor. This system is not designed for heavy-duty applications like virtualization, Plex transcoding, or running resource-intensive Docker containers. Users looking for a NAS that can handle these tasks might need to consider a model with an x86 processor. However, for file storage, data backup, and light application hosting, the TS-632X offers robust performance without excessive power consumption.

Memory Configuration?

The TS-632X comes with 4GB of DDR4 RAM, which is sufficient for standard NAS operations. However, it can be upgraded to 16GB, allowing it to handle more demanding applications or a higher number of simultaneous users. A notable feature is its support for ECC (Error-Correcting Code) memory, which is rare in ARM-based systems. ECC memory is crucial for environments where data integrity is paramount, as it helps detect and correct internal data corruption.

Unfortunately, the base model does not come with ECC memory, which feels like a missed opportunity. For a small additional cost, QNAP could have included ECC RAM, enhancing the system’s reliability right out of the box.

QNAP TS-632X NAS Review – Noise Levels

Given that the TS-632X is designed for small office or home use, noise levels are a critical consideration. Thanks to its ARM architecture and efficient cooling design, the TS-632X operates quietly.

When equipped with SSDs, the noise level drops to a whisper-quiet 22 dB during idle operation. Even with traditional hard drives, noise levels remain manageable, peaking at around 35-38 dB during intensive operations. This makes the TS-632X suitable for environments where noise could be a distraction, such as in a home office or a shared workspace.

QNAP TS-632X NAS Review – Real-World Performance

To evaluate the real-world performance of the TS-632X, we conducted a series of tests using both HDDs and SSDs. With four 24TB HDDs in RAID 5, the device achieved read speeds of up to 520 MB/s and write speeds of approximately 298 MB/s in various test scenarios.

While these speeds are impressive for an ARM-based NAS with HDDs, they don’t fully utilize the 10GbE connections. However, this performance is more than adequate for typical NAS tasks, such as file storage, backup, and media streaming.

Switching to SSDs significantly improved performance. With six 500GB SATA SSDs in a RAID 5 configuration, the TS-632X reached read speeds of up to 1.4 GB/s, with write speeds peaking at 538 MB/s. But in CrystalDisk we were able to hit 2GB/s.

These figures indicate that the TS-632X can handle more demanding tasks, such as video editing and large-scale data transfers, with ease. The dual 10GbE ports and support for SMB Multichannel ensure that multiple users can access data simultaneously without bottlenecks, making it an excellent choice for collaborative work environments.

QNAP TS-632X NAS Review – QTS NAS OS

The TS-632X runs on QNAP’s QTS operating system, a versatile and user-friendly platform that offers a wide range of applications. From backup and synchronization tools like Qsync and Hybrid Backup Sync to multimedia management with QuMagie, QTS provides a comprehensive suite of tools for managing and securing data. Although QTS on the TS-632X lacks support for some of the more demanding applications available on x86-based QNAP devices, it still covers about 70-80% of the QNAP App Center offerings. This includes essential business tools like QVR Elite for surveillance and various cloud backup solutions, making it suitable for most small business needs.

QNAP TS-632X NAS Review Conclusion

The QNAP TS-632X is not going to blow anyone’s socks off anytime soon in terms of power, and that was never really the point, was it? This might comfortably be the most capable ARM-powered NAS I have ever seen (at least in desktop form), and it is a genuinely impressive feat that QNAP managed to do this for this price tag and at this scale. The $699-$749 price tag is already pretty competitive for a 6-bay expandable desktop NAS. Once you factor in that this device features two 10GbE ethernet connections to really open up that network bandwidth, and a PCIe expansion slot that lets you choose further bandwidth expansions, further storage expansions, or a little bit of both with those QNAP QM2 expansion cards, you have an impressively scalable solution here.I can  only really give QNAP half points for its support of ECC memory here, as even though that is impressive for an ARM system, the fact that they don’t include ECC memory in the baseline model somewhat undercuts this advantage. QNAP has done a lot of work here optimizing their software as much as they can to do what it can on such a modest processor. And although QTS seemingly runs better here than I’ve seen it run on most ARM-powered NAS devices, the execution is still by no means flawless. They have had to clip its wings ever so slightly, removing some applications that were simply too demanding and need x86 processor support, or streamlining some other applications to be better suited to this rather more power-conservative environment. The majority of software issues I encountered were arguably in the early stages of setup, as the demands on the system hardware were at peak, but to be fair, these did alleviate over time as more domestic and pedestrian day-to-day usage became the norm.

Likewise, performance over the 10GbE connections on this device was not a huge surprise, given the processor, but that does mean that those of you considering this box for live file editing over 10GbE or for constantly updating databases might find this system a little lackluster. Whereas, those that need access to an existing database as quickly as possible, or are considerably more focused on read rather than write operations, are not going to have any problems, given the almost complete dual 10GbE saturation we achieved in some of our tests (and fair play to QNAP for not hiding their lower write performance numbers on their own product pages either). As long as you understand the implications of an ARM CPU on more vigorous write workloads, there is going to be very little that disappoints you in this system. It delivers on practically every one of its promises, and it does so without harming your energy bill much either. With so many subpar ARM NAS systems on the market, it is genuinely refreshing to be able to talk about one in such positive ways!

Need More Help Choosing the right NAS?

Choosing the right data storage solution for your needs can be very intimidating and it’s never too late to ask for help. With options ranging from NAS to DAS, Thunderbolt to SAS and connecting everything up so you can access all your lovely data at the touch of a button can be a lot simpler than you think. If you want some tips, guidance or help with everything from compatibility to suitability of a solution for you, why not drop me a message below and I will get back to you as soon as possible with what you should go for, its suitability and the best place to get it. This service is designed without profit in mind and in order to help you with your data storage needs, so I will try to answer your questions as soon as possible.

SUBSCRIBE TO OUR NEWSLETTER
[contact-form-7]
Join Inner Circle

Get an alert every time something gets added to this specific article!

NOTIFY ME

Want to follow specific category? Also Read...Week 51 Tech Round-Up – QNAPLocal AI and NAS Drives - IS TMinisforum MGA1 Docking StatioFAQ for DIY NAS Builds: EverytRecommended ATX Motherboards fRecommended ATX Motherboards fN305 6-Bay 10GbE NAS MotherboaCWWK Q670 8-Bay Gen5 NAS vPro Flashstor Gen 2 NAS ReviewHexOS NAS Software - Review of Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you. Need Help? Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry. [contact-form-7] TRY CHAT Terms and Conditions

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

 

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.

WE LOVE COFFEE

 

With the ongoing development of private NAS servers, many users are seeking to move their personal or business data away from third-party cloud services. You might expect that each new generation of NAS devices would be increasingly powerful. While it’s true that there are more capable devices on the market, there is also a growing demand for efficiency. As we approach a point where electricity bills are a concern, alongside the powerhouse units that make headlines, we see systems designed to offer maximum performance on a minimal hardware footprint. These products promise lower price tags, reduced running costs, and robust support, making them attractive for a wide range of users.

Into this evolving landscape steps the QNAP TS-632X, an ARM-powered NAS that boasts dual 10GbE connectivity, support for ECC memory, and PCIe expandability. The idea that this system can manage even half of what it promises while running on a power-efficient ARM CPU is impressive. We first encountered this system at the Computex 2024 trade show in Taipei, where it immediately caught our eye due to its impressive feature set. But now that it’s available, does it live up to the hype? Is this lean, mean 10G NAS machine capable of handling your data storage needs? Let’s dive in and find out.

QNAP TS-632X Review – Quick Conclusion

The QNAP TS-632X is not a NAS that will win awards for sheer processing power, but that was never its purpose. As one of the most capable ARM-powered NAS devices available, it provides a compelling mix of features at a competitive price point. For $699-$749, you get a 6-bay NAS with dual 10GbE ports, support for ECC memory, and PCIe expandability, offering a scalable solution perfect for small to medium businesses or advanced home users who need high-speed data access. However, there are some caveats. The lack of ECC memory in the base model feels like a missed opportunity, and the ARM processor does limit some high-end applications. Write speeds could also be better, but as long as you’re aware of these limitations, the TS-632X delivers on its promises without overextending itself. With thoughtful design and a focus on energy efficiency, it’s a refreshing option in a market crowded with less impressive ARM-based devices. For users who need efficient, reliable storage with excellent network capabilities and scalability, the TS-632X is a solid choice. It may not handle the most demanding tasks, but it excels in providing consistent, reliable performance for everyday NAS functions, making it a worthy addition to any small office or home setup.

SOFTWARE - 8/10

HARDWARE - 8/10

PERFORMANCE - 7/10

PRICE - 9/10

VALUE - 10/10

8.4

PROS

Dual 10GbE Ports: Provides high-speed network connectivity, enabling fast data transfer and reducing backup times, which is great for businesses with heavy data flow.
Energy Efficiency: Powered by an ARM-based processor, the TS-632X offers low power consumption, making it ideal for 24/7 operation without significantly impacting electricity bills.
Support for ECC Memory: Offers enhanced data integrity by supporting ECC (Error-Correcting Code) memory, reducing the risk of data corruption, which is crucial for critical data storage.
Scalability: Includes a PCIe slot for expansion, allowing users to add additional network cards or SSDs, making it adaptable to growing network demands.
Affordable Pricing: Priced competitively between $699-$749, it offers a strong set of features without breaking the bank, providing excellent value for small to medium businesses.
Compact Design: Its tower form factor and relatively small footprint make it easy to fit into a variety of environments, from small offices to home setups.
Quiet Operation: Even when fully loaded, the TS-632X operates quietly, making it suitable for use in noise-sensitive environments like offices or shared spaces.
Versatile Storage Options: Supports both 3.5-inch HDDs and 2.5-inch SSDs, providing flexibility in balancing cost and performance for different storage needs.
Robust Software Ecosystem: Runs on QNAP\'s QTS operating system, which includes a wide range of apps for backup, synchronization, multimedia management, and more, catering to various business and personal needs.
Eco-Friendly Packaging: Uses fully recyclable packaging materials, demonstrating QNAP\'s commitment to sustainability and reducing environmental impact.

CONS

Base Model Lacks ECC Memory: Although the TS-632X supports ECC memory, the base model does not include it, requiring users to purchase additional RAM to take advantage of this feature.
Limited Processing Power: The ARM processor, while energy-efficient, limits the NAS\'s ability to handle resource-intensive tasks such as virtualization and high-end multimedia transcoding.
Only Two-Year Warranty: The standard warranty is relatively short for a device targeted at business use, where a longer warranty period (e.g., three years) would be more appropriate.
Write Performance Could Be Better: While read speeds are impressive, write speeds are somewhat lower, which might be a limitation for users who need high write throughput for applications like live video editing or large-scale data ingestion.

Where to Buy a Product
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤

DEAL WATCH – Is It On Offer Right Now? These Offers are Checked Daily

QNAP TS-632X NAS Review – Packaging

Typically, I would gloss over packaging details in reviews since most users don’t find them particularly relevant, and packaging is usually a one-time interaction before it ends up as waste. However, QNAP’s approach to the TS-632X packaging is worth noting. The company has made significant strides in using eco-friendly materials, which are entirely recyclable. From the protective framework to the wrapping materials, everything is designed to be environmentally friendly.

This shift is a notable improvement because one of the main challenges with recyclable packaging is durability. Recyclable materials often can’t withstand the rigors of international shipping, leading to potential damage to the internal hardware. Such damage might not be immediately apparent, potentially causing long-term data loss if issues arise days, weeks, or even months after initial use. Kudos to QNAP for investing in robust, recyclable packaging that still protects the device during transit.

QNAP TS-632X NAS Review – Hardware Specifications

Before diving into the performance and capabilities of the TS-632X, it’s essential to understand what this device offers in terms of hardware. Here’s a detailed look at the key specifications:

QNAP TS-632X NAS Review – Performance and Features

The TS-632X stands out primarily due to its impressive network connectivity. Equipped with two 10GbE SFP+ ports and two 2.5GbE Ethernet ports, it provides up to 25Gbps of network bandwidth straight out of the box.

This high level of connectivity is vital for businesses that need to handle multiple simultaneous data streams or require high-speed data transfers. Moreover, the presence of a PCIe slot allows users to install additional network cards, further enhancing the system’s scalability. This feature makes the TS-632X highly adaptable, enabling users to upgrade their setup as their network demands grow.

Powered by an Annapurna Labs AL524 ARM quad-core processor running at 2.0GHz per core, the TS-632X is designed to be power-efficient while still providing adequate performance for typical NAS tasks. This ARM processor is not aimed at heavy computational tasks or graphic-intensive applications but is optimized for efficient data handling and low power consumption, making it ideal for 24/7 operation.

In tests with four 24TB drives in RAID 5, the device showed impressive energy efficiency, consuming just 26.2 watts on average during idle periods and around 54-55 watts under heavy load. These figures are excellent for a 6-bay NAS, ensuring that it remains cost-effective to run even in demanding environments.

Limitations of the ARM Processor?

While the TS-632X performs well for most NAS tasks, it’s important to recognize the limitations of its ARM processor. This system is not designed for heavy-duty applications like virtualization, Plex transcoding, or running resource-intensive Docker containers. Users looking for a NAS that can handle these tasks might need to consider a model with an x86 processor. However, for file storage, data backup, and light application hosting, the TS-632X offers robust performance without excessive power consumption.

Memory Configuration?

The TS-632X comes with 4GB of DDR4 RAM, which is sufficient for standard NAS operations. However, it can be upgraded to 16GB, allowing it to handle more demanding applications or a higher number of simultaneous users. A notable feature is its support for ECC (Error-Correcting Code) memory, which is rare in ARM-based systems. ECC memory is crucial for environments where data integrity is paramount, as it helps detect and correct internal data corruption.

Unfortunately, the base model does not come with ECC memory, which feels like a missed opportunity. For a small additional cost, QNAP could have included ECC RAM, enhancing the system’s reliability right out of the box.

QNAP TS-632X NAS Review – Noise Levels

Given that the TS-632X is designed for small office or home use, noise levels are a critical consideration. Thanks to its ARM architecture and efficient cooling design, the TS-632X operates quietly.

When equipped with SSDs, the noise level drops to a whisper-quiet 22 dB during idle operation. Even with traditional hard drives, noise levels remain manageable, peaking at around 35-38 dB during intensive operations. This makes the TS-632X suitable for environments where noise could be a distraction, such as in a home office or a shared workspace.

QNAP TS-632X NAS Review – Real-World Performance

To evaluate the real-world performance of the TS-632X, we conducted a series of tests using both HDDs and SSDs. With four 24TB HDDs in RAID 5, the device achieved read speeds of up to 520 MB/s and write speeds of approximately 298 MB/s in various test scenarios.

While these speeds are impressive for an ARM-based NAS with HDDs, they don’t fully utilize the 10GbE connections. However, this performance is more than adequate for typical NAS tasks, such as file storage, backup, and media streaming.

Switching to SSDs significantly improved performance. With six 500GB SATA SSDs in a RAID 5 configuration, the TS-632X reached read speeds of up to 1.4 GB/s, with write speeds peaking at 538 MB/s. But in CrystalDisk we were able to hit 2GB/s.

These figures indicate that the TS-632X can handle more demanding tasks, such as video editing and large-scale data transfers, with ease. The dual 10GbE ports and support for SMB Multichannel ensure that multiple users can access data simultaneously without bottlenecks, making it an excellent choice for collaborative work environments.

QNAP TS-632X NAS Review – QTS NAS OS

The TS-632X runs on QNAP’s QTS operating system, a versatile and user-friendly platform that offers a wide range of applications. From backup and synchronization tools like Qsync and Hybrid Backup Sync to multimedia management with QuMagie, QTS provides a comprehensive suite of tools for managing and securing data. Although QTS on the TS-632X lacks support for some of the more demanding applications available on x86-based QNAP devices, it still covers about 70-80% of the QNAP App Center offerings. This includes essential business tools like QVR Elite for surveillance and various cloud backup solutions, making it suitable for most small business needs.

QNAP TS-632X NAS Review Conclusion

The QNAP TS-632X is not going to blow anyone’s socks off anytime soon in terms of power, and that was never really the point, was it? This might comfortably be the most capable ARM-powered NAS I have ever seen (at least in desktop form), and it is a genuinely impressive feat that QNAP managed to do this for this price tag and at this scale. The $699-$749 price tag is already pretty competitive for a 6-bay expandable desktop NAS. Once you factor in that this device features two 10GbE ethernet connections to really open up that network bandwidth, and a PCIe expansion slot that lets you choose further bandwidth expansions, further storage expansions, or a little bit of both with those QNAP QM2 expansion cards, you have an impressively scalable solution here.I can  only really give QNAP half points for its support of ECC memory here, as even though that is impressive for an ARM system, the fact that they don’t include ECC memory in the baseline model somewhat undercuts this advantage. QNAP has done a lot of work here optimizing their software as much as they can to do what it can on such a modest processor. And although QTS seemingly runs better here than I’ve seen it run on most ARM-powered NAS devices, the execution is still by no means flawless. They have had to clip its wings ever so slightly, removing some applications that were simply too demanding and need x86 processor support, or streamlining some other applications to be better suited to this rather more power-conservative environment. The majority of software issues I encountered were arguably in the early stages of setup, as the demands on the system hardware were at peak, but to be fair, these did alleviate over time as more domestic and pedestrian day-to-day usage became the norm.

Likewise, performance over the 10GbE connections on this device was not a huge surprise, given the processor, but that does mean that those of you considering this box for live file editing over 10GbE or for constantly updating databases might find this system a little lackluster. Whereas, those that need access to an existing database as quickly as possible, or are considerably more focused on read rather than write operations, are not going to have any problems, given the almost complete dual 10GbE saturation we achieved in some of our tests (and fair play to QNAP for not hiding their lower write performance numbers on their own product pages either). As long as you understand the implications of an ARM CPU on more vigorous write workloads, there is going to be very little that disappoints you in this system. It delivers on practically every one of its promises, and it does so without harming your energy bill much either. With so many subpar ARM NAS systems on the market, it is genuinely refreshing to be able to talk about one in such positive ways!

Need More Help Choosing the right NAS?

Choosing the right data storage solution for your needs can be very intimidating and it’s never too late to ask for help. With options ranging from NAS to DAS, Thunderbolt to SAS and connecting everything up so you can access all your lovely data at the touch of a button can be a lot simpler than you think. If you want some tips, guidance or help with everything from compatibility to suitability of a solution for you, why not drop me a message below and I will get back to you as soon as possible with what you should go for, its suitability and the best place to get it. This service is designed without profit in mind and in order to help you with your data storage needs, so I will try to answer your questions as soon as possible.

SUBSCRIBE TO OUR NEWSLETTER
[contact-form-7]
Join Inner Circle

Get an alert every time something gets added to this specific article!

NOTIFY ME

Want to follow specific category? Also Read...Week 51 Tech Round-Up – QNAPProtect Your QNAP NAS: VulneraBlack Friday 2024 - Data StoraBlack Friday 2024 - Data StoraQNAP TS-433eU NAS – A Deep DQNAP vs UniFi UNAS Pro NAS ComQNAP vs UniFi UNAS Pro – WHIAmazon Prime Big Deal Day OctoQNAP TS-632X NAS Review10 Historic NAS Ransomware and Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you. Need Help? Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry. [contact-form-7] TRY CHAT Terms and Conditions

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

 

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.

WE LOVE COFFEE

 

A little over a month ago, HexOS (the NAS software that has been in quiet development, first publicly addressed on LTT back in Dec 2022 and covered HERE on NC) popped it’s head up above the parapet to tell users a little more about what it is trying to be, trying to solve and how it plans to do it. Details were still pretty light on the ground and so I reached out to the guys at HexOS to ask if they would be open to a user Q&A about their product, to which they happily agreed. This article is the results of that Q&A and 3+ weeks of question collecting from numerous sources (more on that in a bit). This article represents the official responses to those questions, as well as the hour long youtube video that contains a brief setup demo of HexOS, as well as extended answers to all those questions (and a bunch of extra ones thrown in by me on the fly). Additionally, since the recent news on HexOS becoming public, other public posts have emerged by both HexOS and their partner ‘iXsystems’ (AKA TrueNAS), which you can read below:

Useful References and Links:

• TrueNAS / iXsystems Announcement About HexOS Partnership – HERE
• Recent Post on HexOS about their product – HERE
• Signup here for updates on HexOS Beta News – HERE

So, let’s get to the results of that Q&A / AMA.

HexOS User Q&A – The TL;DR:

Jonathan from HexOS provided a detailed look at the platform’s integration with TrueNAS SCALE, emphasizing its mission to simplify home server management for both casual users and content creators. HexOS aims to streamline the experience by curating applications, ensuring that users have an easy-to-navigate system that doesn’t require deep technical knowledge. However, for those who need more advanced features, the full TrueNAS SCALE web UI is just a click away, allowing users to dive deeper into customization if they choose. Remote access is handled through the HexOS Command Deck, which offers secure, straightforward management without directly interacting with user data. Backup features are robust, with options for server-to-server, OS-native agents, encrypted cloud backups, and a buddy backup feature, allowing users to store data on a friend’s HexOS server for added security. Although the HexOS UI is designed to be fully responsive and work well on mobile devices, features like a dedicated mobile app, in-system HexOS control UI, and additional client app tools are planned but will only be confirmed after the 1.0 release.

In terms of pricing, HexOS is set to offer a lifetime license option, making it a one-time purchase for users, though other pricing models are still being discussed and finalized. The platform is on track for a beta release in Q3 2024, during which a select group of users will be able to test out the system and provide feedback. One of the key strengths of HexOS is its flexibility; users can easily switch back to managing their systems directly through TrueNAS SCALE without any complicated conversions or additional steps, ensuring that they are never locked into the HexOS ecosystem if they decide they need something different. Initially, support will be offered through community-driven channels like forums and Discord, but there are longer-term plans to introduce premium support options, offering more personalized help for those who need it. These premium options, along with other post-launch developments, are part of a broader roadmap that HexOS plans to explore after the 1.0 release, ensuring that the platform continues to evolve based on user needs and feedback.

User Questions About HexOS – IMPORTANT

Below are the questions that were put to Jonathan Pannozzo, CEO of Estek and co-developer of HexOS. The Interview was conducted on Thursday 8th August 2024, and comprised questions that were provided by users on an earlier YouTube Short, recent news video, social posts, NASCompares Inner Circle and over email. Additionally, questions were submitted to HexOS 3 days before the interview, to ensure that responses could be sufficiently researched. The full interview was recorded and published on YouTube (video below, with much further detail on each question, more questions were added on-the-fly and is chapterized) and a short demonstration was also provided on how HexOS conducted an initial system setup. Thanks again to Jon for his time in answering the questions.

I really cannot stress enough HOW MUCH MORE detail the questions are answered in the video, as well as how many more questions are added by me, so I recommend you grab a coffee/beer and watch it.

The hour long recording of the call can watched here (or embedded below):

Video Chapters

00:00 – The Start 01:46 – HexOS Setup Demo 06:45 – Pool Config Recommendations? 07:21 – Compatibility and Verification? 08:44 – Why Online? 18:48 – Default Folder and Permissions? 20:13 – is HexOS REALLY an OS? 24:14 – How Much of TrueNAS Scale is Controllable? 26:06 – TrueNAS Clean Install? Scale to Hex Migration? 28:31 – How Much of TrueNAS Scale is Controllable or Fixed in HexOS? 30:04 – App Repositories? 31:08 – Remote Access and Transmission? 32:24 – Advanced Access when needed? 33:26 – How much control/freedom does HexOS have in TrueNAS Scale development? 34:47 – Containers 35:36 – Buddy Backups? 37:11 – Permission Controls and Maintenace 39:11 – Why should tech-savvy people care about HexOS? 42:21 – TrueNAS Security Updates 44:20 – Mobile client app? 45:01 – TrueNAS devs collaboration? 46:55 – Mixed Drive deployment 49:29 – Backup Agents? 51:32 – Boot drive wasted space? 55:35 – Price models and Licencing 57:37 – Support 58:18 – Leaving HexOS? 01:01:00 – Beta?

Below are each question and the official consolidated response from Jon/HexOS on each. Thanks again to users for supplying so many questions and I hope they represented the bulk of the queries that were sent. Selected user Qs (represented by their @ usernames) often represented numerous other similar questions and were chosen without prejudice…well..apart from @Eddiethewebguy’s one…

@Eddiethewebguy (consolidation of about 20 Qs)

HexOS’ name suggests that this is an Operating System, but everything upto this point suggests this is a layer on top of TrueNAS scale. Is HexOS really an OS or is it just a skin?

Unlike Microsoft, Linux makes defining an operating system more complicated.  All Linux-based OSes make use of the Linux kernel.  Without the kernel, it isn’t Linux.  However, the kernel is used by many different platforms like Ubuntu, Debian, Red Hat, etc.  These are typically referred to as “Distributions.”  Further still, there are plenty of projects that build off of these distributions to create their own unique offerings.  TrueNAS SCALE and SteamOS are both based on Debian Linux as an example.  Yet while we refer to Debian as a distribution, many would also call it an OS.  So when can you really call yourself an OS vs. a distribution vs. something else entirely?  We think what you call it is dependent on what you’re ultimately shipping to the user to install.  In our case, we’re shipping an entire OS.

And we are most definitely not a “skin”.  Skins are more or less just alternative presentations of the UI/UX, but generally do not completely reimagine the product.  They also don’t provide ancillary services or features separate from the original software.

We are a combination of simplified UI, automations, workflows, and managed services to make owning a home server easy.  Skins don’t do that.

The main reason we call ourselves an OS is because it’s a lot easier to explain than, “well we’re actually a managed services platform for a Linux-based variant of the Debian distribution known as TrueNAS SCALE.”  And to the user’s we’re targeting, these details don’t really matter.

@servern0mix

How Much of the TrueNAS SCALE Backend are we talking about? Does HexOS give me access to all the features of TrueNAS Scale, but in a most user friendly fashion?

While the entirety of TrueNAS SCALE is available to us, we are very focused on features valued by home users and content creators. It’s not in our mission to translate every feature from the SCALE webUI into HexOS. And remember, the SCALE webUI is just a click away for any missing TrueNAS features that you require.

@pent10s

How much is going to be silent-backend TrueNAS/ZFS Feature set and how much is going to be user-controlled? (eg ZFS Snapshots, Encryption)

We see snapshots being either time or event driven, but one of those events could be a manual snapshot taken by a user. Encryption in some cases will be automatic, such as when a user wants to backup data to a buddy.

@huncli88

Will applications that are available to simply download and install be curated, or will HexOS have access to the same repositories as TrueNAS Scale?

We are definitely curating applications, and non-curated apps could be loaded through the SCALE webUI, like any other advanced feature. The ability to install non-curated apps through the HexOS UI is TBD.

@Cr Vaughan Williams, Bendigo Councillor

Can HexOS be installed on an existing install of TrueNAS Scale.. Or will it need to be a clean install.

As of now, we will only apply to new installations, but a future roadmap consideration would be the ability to adopt an existing SCALE deployment

@Fanboy41

How to they plan to implement remote access?

Local DNS is an awful UX for the non-IT savvy. Depending on the device type, you may need to append “.local” to the hostname. Browsers get picky sometimes when you don’t type the “https://” first when entering a hostname, thinking you’re just entering a search term. And even if you get an SSL self-signed cert, you still have to go through that browser nag security warning when connecting via https. And let’s not forget about IP address changes and flushing of the local DNS cache. Us IT-savvy folk know how to deal with all of these challenges. We’ve been dealing with them since our first self-hosted solution when we were just wee lads. But we’re trying to bring this solution to a wider audience that doesn’t have that experience and that means solving for those problems. It’s the same reason why we use the HexOS connector. Sure we could tell users “Go open this port on your firewall and forward it to this LAN IP” but for the customers we’re going after, we’ll have lost their interest after hearing “port” and “firewall.”

Doing things this way allows us to provide updates to the underlying OS directly from TrueNAS (iX). We will provide a custom ISO that connects servers to our HexOS Command Deck and ensure that persists through OS updates from TrueNAS directly. We do intend to gatekeep the update process in our UI to give us a chance to test new releases from TrueNAS before allowing our community to update en masse, but if you wanted to be brave, you could drop to the SCALE webUI and update directly as it would pull from the same source. More than likely everything will continue to work in the HexOS UI, but “Ye be warned…”

The TrueNAS SCALE UI is always available locally.

We’re not stepping in the data path directly, just management, so your data and privacy stays local to you. In addition, if the Internet goes down, all your apps and data are still available to users on the LAN. And as a benefit to us, management traffic is incredibly lightweight compared to data, making this very scalable in our infrastructure. We’re also not ruling out providing some type of local UI in the future, though it would be severely gimped compared to anything we build on the Command Deck. Basic “replace failed drives, stop/start apps and vms, etc.” only. And it would only be available after the initial configuration was complete (likely as a Docker container). Further still, it is not an objective for us prior to 1.0.

And while I completely understand the skepticism of vendor lock-in, we have none. Users always can ditch HexOS for native TrueNAS SCALE. It is on-us to keep delivering enough value to keep our users on our platform, because there is nothing we’re doing to force them to stay, even with a hosted UI/UX for management.

@haydenlong3764

How granular will we be able to go within HexOS? I like simplicity, but if I cannot dig deep when I need to it will be more annoying than useful. From the images posted it seems like it might be “baby’s first NAS” oriented, will this be useful for people who are new to this space but still interested in tinkering?

While our priority is definitely on making things easy, the SCALE webUI and CLI are always there for most advanced user needs

@Robbieonthetube (Yes, it’s me, sue me. This was a common statement)

How much development freedom does HexOS Have? For example, a flexible RAID system comparable to Synology Hybrid RAID, or an easy migration tool for users who want to carry over from an existing 3rd party NAS environment – These are not in TrueNAS Scale, but are their plans for, or the freedom for HexOS, to develop features/functions like these?

We do not have any immediate plans to implement alternative storage solutions. We are also not limited by the SCALE API in terms of providing additional functionality. The partnership agreement between TrueNAS and HexOS doesn’t impede our development path, or limit us from building additional functionality outside of what is available in SCALE itself.

@captain_magnus

Which of these will be supported; Podman, Kubernetes, Incus?

Kubernetes is being deprecated in favor of Docker Compose, which has been public knowledge for some time now. Beyond that, all I can say is that we are working with TrueNAS and they are planning some big improvements which will be announced in the near future.

@Josef Tegnér

Is any mirror functionality planned? I.e me and my HexOS friend give eachother space on our eachothers server (for offsite backup.).

Yes!  In fact this was one of Linus’ most important features that he has wanted from us. It is on our roadmap.

@snowwild3445

Application certification and maintenance, security etc – will users have functionally, yet user friendly controls of app permissions (akin to an app on a google phone, with it’s permission settings?).

Our vision for apps is to make the platform transparent to the user and the experience akin to that of a smartphone. We also want to personally curate a catalog of apps for users to be able to trust and rely upon for the long-haul. Curation to us means a lot more than just building and maintaining a container. It means integrating the actual storage/server/app workflows together. As an example, say you need an app to manage your media library like Plex. Plex needs a media library to exist.  A place where you will put your media files. We don’t want to ask the user to first create that place if it doesn’t already exist. Instead, we can script the process of creating folders where necessary or mapping to existing folders if they exist. This concept also applies to upgrading your system. Say you add a dedicated GPU.  Upon restarting, we can detect that new hardware and suggest possible uses (e.g. acceleration for your existing media server transcoding or attaching it to a virtual machine).

@praetorxyn

If I am capable of using TrueNAS Scale / Docker / etc. already, is there any reason for me to care about this? In other words, how would the developers pitch HexOS to tech savvy people?

One of the reasons Eric and I set out to build HexOS was so that we would have a solution we could comfortably recommend to our friends and family that aren’t IT-minded. We see a huge difference between being “tech savvy” and “IT savvy”. A tech savvy person may be able to build their own PC but not necessarily their own server. Concepts like RAID, parity, caching, etc. can be difficult to understand and most users just want something that works. While you may not be a user, if you value your own setup and want your less IT-centric friends and family to be able to gain similar values, recommend HexOS to them!

@DavidJones-pi8rl

I was originally a QNAP NAS device user then moved to unraid about 6 years ago. A key reason was the security issues seemed to keep appearing multiple times a year in the late 2010’s. How is HexOS going to balance continues feature updates versus without compromising security and ensuring user trust is kept.

We’re all too familiar with issues that multiple vendors have had and continue to have relating to timely security, bugfix, and general updates.Th is is one of the benefits of and reasons we partnered with TrueNAS. They have decades of experience and a great track record of consistently delivering timely security and maintenance updates for their platforms. And all HexOS stable releases will be based on stable TrueNAS releases, ensuring…well…stability!

@lucasmedeiros2471

Will it have its own mobile app?

The entire UI/UX has a responsive design and we do have plans for mobile apps for both iOS and Android. This is especially important to us for users that want to use their home server also as a PC.

@Spreadie 

Is this a standalone overlay for Scale, or are they working with TrueNAS devs? If they are collaborating with devs, will they have any input on driver development direction?

We announced our partnership with TrueNAS at the end of July and we absolutely communicate and coordinate with them on a regular basis. While we have some influence on roadmap, we are incredibly happy with the direction of SCALE’s development and so far our requests have been few and far between. We haven’t had any need to push for any driver-specific development.

@andreas.grundler

One of the advantages of Unraid over TrueNas is that you can use hard disks of different sizes. Will there be something similar with HexOS?

We have no intention of supporting the mixing and matching of drive sizes. Doing so comes with significant sacrifices to performance and functionality. Unraid themselves seem to acknowledge this given the recent change to demote the array to optional functionality, disabled by default. We intend to publish a blog in the future to serve as a competitive analysis against other players in our space, Unraid being one. In it, we will dive much deeper into the shortcomings and flaws of the mix/match drives feature.

@DarrenReidAu

Will there be a simple backup solution with agents for all major OSes including Linux (eg, Ubuntu/Debian based distros)?

Users can expect to leverage backup functionality in three primary ways:

• Backing up data from one HexOS server to another.
• Backing up data from devices using native OS agents (Windows Backup / Time Machine)
• Backing up data to an encrypted cloud storage solution. Anything beyond those primary solutions is outside the scope of our roadmap to 1.0.

Anything beyond those primary solutions is outside the scope of our roadmap to 1.0. That said, we won’t rule out native apps for major OSes as a future roadmap item.

@fedrr

Will HexOS allow partitioning install drive not to waste whole ssd for boot pool? Or allow creation of datasets on boot pool? Or is it just using Truenas as basis that does not provide such functionality out of the box?

No plans to change how TrueNAS partitions boot devices at this time.

@jereyfmoses

How will HexOS fund itself going forward? Dontations? Licence fees? If so, any word on the pricing?

We’re not ready to confirm pricing today, but we can reveal a few details. HexOS will be sold as a lifetime subscription. This lifetime subscription would include features such as:

• The HexOS Command Deck (deck.hexos.com)
• Our setup and configuration wizard
• Anywhere management access
• Email notifications
• Folders, users, and storage management
• Apps and VMs

More detailed information on our licensing and pricing will be revealed soon.

@ma77evalet

Support Model? How will end users get support and will it arrive with free/tiered pricing? Community Support, Admins etc, free?

Free support for HexOS will be obtainable through community channels such as our forums and discord server which will be launching soon. Longer-term we do have plans to offer premium support options, but we’re not ready to reveal details at this time and these options would not launch until sometime after our 1.0 release.

@LordApophis100

Will there be an upgrade path to vanilla Scale if a user “outgrows” HexOS and wants more control/advanced features?

Users can disconnect from HexOS at any time they want and continue managing their system through TrueNAS SCALE directly, no upgrade or conversion required. That said, many TrueNAS SCALE features can be used in conjunction with HexOS, though there may be some limitations. If you disconnect from HexOS, you still have to cancel your subscription to Turbo should you have one.

@martyn334

ETA on any beta?

We’re still on target to get our first test users in Q3. More details on the beta are also coming soon.

Thank you once again for Jonathan’s time for the interview and we look forward to seeing the beta launch. You can sign up for news of the HexOS beta via the page below (takes you to Hexos.com):

SUBSCRIBE TO OUR NEWSLETTER
[contact-form-7]
Join Inner Circle

Want to follow specific category? Also Read...HexOS NAS Software - Review ofHexOS AMA - User Questions AnsWhat is HexOS? A Truly User-FrHexOS (on TrueNAS SCALE) and t Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

Where to Buy a Product
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤

If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you. Anything you purchase on the day you click on our links will generate a small commission which is used to run the website. Here is a link for Amazon and B&H. You can also get me a Ko-fi or old school Paypal. Thanks! To find out more about how to support this advice service check HERE   If you need to fix or configure a NAS, check Fiver   Have you thought about helping others with your knowledge? Find Instructions Here  

WE LOVE COFFEE

Or support us by using our affiliate links on Amazon UK and Amazon US

     

A little over a month ago, HexOS (the NAS software that has been in quiet development, first publicly addressed on LTT back in Dec 2022 and covered HERE on NC) popped it’s head up above the parapet to tell users a little more about what it is trying to be, trying to solve and how it plans to do it. Details were still pretty light on the ground and so I reached out to the guys at HexOS to ask if they would be open to a user Q&A about their product, to which they happily agreed. This article is the results of that Q&A and 3+ weeks of question collecting from numerous sources (more on that in a bit). This article represents the official responses to those questions, as well as the hour long youtube video that contains a brief setup demo of HexOS, as well as extended answers to all those questions (and a bunch of extra ones thrown in by me on the fly). Additionally, since the recent news on HexOS becoming public, other public posts have emerged by both HexOS and their partner ‘iXsystems’ (AKA TrueNAS), which you can read below:

Useful References and Links:

• TrueNAS / iXsystems Announcement About HexOS Partnership – HERE
• Recent Post on HexOS about their product – HERE
• Signup here for updates on HexOS Beta News – HERE

So, let’s get to the results of that Q&A / AMA.

HexOS User Q&A – The TL;DR:

Jonathan from HexOS provided a detailed look at the platform’s integration with TrueNAS SCALE, emphasizing its mission to simplify home server management for both casual users and content creators. HexOS aims to streamline the experience by curating applications, ensuring that users have an easy-to-navigate system that doesn’t require deep technical knowledge. However, for those who need more advanced features, the full TrueNAS SCALE web UI is just a click away, allowing users to dive deeper into customization if they choose. Remote access is handled through the HexOS Command Deck, which offers secure, straightforward management without directly interacting with user data. Backup features are robust, with options for server-to-server, OS-native agents, encrypted cloud backups, and a buddy backup feature, allowing users to store data on a friend’s HexOS server for added security. Although the HexOS UI is designed to be fully responsive and work well on mobile devices, features like a dedicated mobile app, in-system HexOS control UI, and additional client app tools are planned but will only be confirmed after the 1.0 release.

In terms of pricing, HexOS is set to offer a lifetime license option, making it a one-time purchase for users, though other pricing models are still being discussed and finalized. The platform is on track for a beta release in Q3 2024, during which a select group of users will be able to test out the system and provide feedback. One of the key strengths of HexOS is its flexibility; users can easily switch back to managing their systems directly through TrueNAS SCALE without any complicated conversions or additional steps, ensuring that they are never locked into the HexOS ecosystem if they decide they need something different. Initially, support will be offered through community-driven channels like forums and Discord, but there are longer-term plans to introduce premium support options, offering more personalized help for those who need it. These premium options, along with other post-launch developments, are part of a broader roadmap that HexOS plans to explore after the 1.0 release, ensuring that the platform continues to evolve based on user needs and feedback.

User Questions About HexOS – IMPORTANT

Below are the questions that were put to Jonathan Pannozzo, CEO of Estek and co-developer of HexOS. The Interview was conducted on Thursday 8th August 2024, and comprised questions that were provided by users on an earlier YouTube Short, recent news video, social posts, NASCompares Inner Circle and over email. Additionally, questions were submitted to HexOS 3 days before the interview, to ensure that responses could be sufficiently researched. The full interview was recorded and published on YouTube (video below, with much further detail on each question, more questions were added on-the-fly and is chapterized) and a short demonstration was also provided on how HexOS conducted an initial system setup. Thanks again to Jon for his time in answering the questions.

I really cannot stress enough HOW MUCH MORE detail the questions are answered in the video, as well as how many more questions are added by me, so I recommend you grab a coffee/beer and watch it.

The hour long recording of the call can watched here (or embedded below):

Video Chapters

00:00 – The Start 01:46 – HexOS Setup Demo 06:45 – Pool Config Recommendations? 07:21 – Compatibility and Verification? 08:44 – Why Online? 18:48 – Default Folder and Permissions? 20:13 – is HexOS REALLY an OS? 24:14 – How Much of TrueNAS Scale is Controllable? 26:06 – TrueNAS Clean Install? Scale to Hex Migration? 28:31 – How Much of TrueNAS Scale is Controllable or Fixed in HexOS? 30:04 – App Repositories? 31:08 – Remote Access and Transmission? 32:24 – Advanced Access when needed? 33:26 – How much control/freedom does HexOS have in TrueNAS Scale development? 34:47 – Containers 35:36 – Buddy Backups? 37:11 – Permission Controls and Maintenace 39:11 – Why should tech-savvy people care about HexOS? 42:21 – TrueNAS Security Updates 44:20 – Mobile client app? 45:01 – TrueNAS devs collaboration? 46:55 – Mixed Drive deployment 49:29 – Backup Agents? 51:32 – Boot drive wasted space? 55:35 – Price models and Licencing 57:37 – Support 58:18 – Leaving HexOS? 01:01:00 – Beta?

Below are each question and the official consolidated response from Jon/HexOS on each. Thanks again to users for supplying so many questions and I hope they represented the bulk of the queries that were sent. Selected user Qs (represented by their @ usernames) often represented numerous other similar questions and were chosen without prejudice…well..apart from @Eddiethewebguy’s one…

@Eddiethewebguy (consolidation of about 20 Qs)

HexOS’ name suggests that this is an Operating System, but everything upto this point suggests this is a layer on top of TrueNAS scale. Is HexOS really an OS or is it just a skin?

Unlike Microsoft, Linux makes defining an operating system more complicated.  All Linux-based OSes make use of the Linux kernel.  Without the kernel, it isn’t Linux.  However, the kernel is used by many different platforms like Ubuntu, Debian, Red Hat, etc.  These are typically referred to as “Distributions.”  Further still, there are plenty of projects that build off of these distributions to create their own unique offerings.  TrueNAS SCALE and SteamOS are both based on Debian Linux as an example.  Yet while we refer to Debian as a distribution, many would also call it an OS.  So when can you really call yourself an OS vs. a distribution vs. something else entirely?  We think what you call it is dependent on what you’re ultimately shipping to the user to install.  In our case, we’re shipping an entire OS.

And we are most definitely not a “skin”.  Skins are more or less just alternative presentations of the UI/UX, but generally do not completely reimagine the product.  They also don’t provide ancillary services or features separate from the original software.

We are a combination of simplified UI, automations, workflows, and managed services to make owning a home server easy.  Skins don’t do that.

The main reason we call ourselves an OS is because it’s a lot easier to explain than, “well we’re actually a managed services platform for a Linux-based variant of the Debian distribution known as TrueNAS SCALE.”  And to the user’s we’re targeting, these details don’t really matter.

@servern0mix

How Much of the TrueNAS SCALE Backend are we talking about? Does HexOS give me access to all the features of TrueNAS Scale, but in a most user friendly fashion?

While the entirety of TrueNAS SCALE is available to us, we are very focused on features valued by home users and content creators. It’s not in our mission to translate every feature from the SCALE webUI into HexOS. And remember, the SCALE webUI is just a click away for any missing TrueNAS features that you require.

@pent10s

How much is going to be silent-backend TrueNAS/ZFS Feature set and how much is going to be user-controlled? (eg ZFS Snapshots, Encryption)

We see snapshots being either time or event driven, but one of those events could be a manual snapshot taken by a user. Encryption in some cases will be automatic, such as when a user wants to backup data to a buddy.

@huncli88

Will applications that are available to simply download and install be curated, or will HexOS have access to the same repositories as TrueNAS Scale?

We are definitely curating applications, and non-curated apps could be loaded through the SCALE webUI, like any other advanced feature. The ability to install non-curated apps through the HexOS UI is TBD.

@Cr Vaughan Williams, Bendigo Councillor

Can HexOS be installed on an existing install of TrueNAS Scale.. Or will it need to be a clean install.

As of now, we will only apply to new installations, but a future roadmap consideration would be the ability to adopt an existing SCALE deployment

@Fanboy41

How to they plan to implement remote access?

Local DNS is an awful UX for the non-IT savvy. Depending on the device type, you may need to append “.local” to the hostname. Browsers get picky sometimes when you don’t type the “https://” first when entering a hostname, thinking you’re just entering a search term. And even if you get an SSL self-signed cert, you still have to go through that browser nag security warning when connecting via https. And let’s not forget about IP address changes and flushing of the local DNS cache. Us IT-savvy folk know how to deal with all of these challenges. We’ve been dealing with them since our first self-hosted solution when we were just wee lads. But we’re trying to bring this solution to a wider audience that doesn’t have that experience and that means solving for those problems. It’s the same reason why we use the HexOS connector. Sure we could tell users “Go open this port on your firewall and forward it to this LAN IP” but for the customers we’re going after, we’ll have lost their interest after hearing “port” and “firewall.”

Doing things this way allows us to provide updates to the underlying OS directly from TrueNAS (iX). We will provide a custom ISO that connects servers to our HexOS Command Deck and ensure that persists through OS updates from TrueNAS directly. We do intend to gatekeep the update process in our UI to give us a chance to test new releases from TrueNAS before allowing our community to update en masse, but if you wanted to be brave, you could drop to the SCALE webUI and update directly as it would pull from the same source. More than likely everything will continue to work in the HexOS UI, but “Ye be warned…”

The TrueNAS SCALE UI is always available locally.

We’re not stepping in the data path directly, just management, so your data and privacy stays local to you. In addition, if the Internet goes down, all your apps and data are still available to users on the LAN. And as a benefit to us, management traffic is incredibly lightweight compared to data, making this very scalable in our infrastructure. We’re also not ruling out providing some type of local UI in the future, though it would be severely gimped compared to anything we build on the Command Deck. Basic “replace failed drives, stop/start apps and vms, etc.” only. And it would only be available after the initial configuration was complete (likely as a Docker container). Further still, it is not an objective for us prior to 1.0.

And while I completely understand the skepticism of vendor lock-in, we have none. Users always can ditch HexOS for native TrueNAS SCALE. It is on-us to keep delivering enough value to keep our users on our platform, because there is nothing we’re doing to force them to stay, even with a hosted UI/UX for management.

@haydenlong3764

How granular will we be able to go within HexOS? I like simplicity, but if I cannot dig deep when I need to it will be more annoying than useful. From the images posted it seems like it might be “baby’s first NAS” oriented, will this be useful for people who are new to this space but still interested in tinkering?

While our priority is definitely on making things easy, the SCALE webUI and CLI are always there for most advanced user needs

@Robbieonthetube (Yes, it’s me, sue me. This was a common statement)

How much development freedom does HexOS Have? For example, a flexible RAID system comparable to Synology Hybrid RAID, or an easy migration tool for users who want to carry over from an existing 3rd party NAS environment – These are not in TrueNAS Scale, but are their plans for, or the freedom for HexOS, to develop features/functions like these?

We do not have any immediate plans to implement alternative storage solutions. We are also not limited by the SCALE API in terms of providing additional functionality. The partnership agreement between TrueNAS and HexOS doesn’t impede our development path, or limit us from building additional functionality outside of what is available in SCALE itself.

@captain_magnus

Which of these will be supported; Podman, Kubernetes, Incus?

Kubernetes is being deprecated in favor of Docker Compose, which has been public knowledge for some time now. Beyond that, all I can say is that we are working with TrueNAS and they are planning some big improvements which will be announced in the near future.

@Josef Tegnér

Is any mirror functionality planned? I.e me and my HexOS friend give eachother space on our eachothers server (for offsite backup.).

Yes!  In fact this was one of Linus’ most important features that he has wanted from us. It is on our roadmap.

@snowwild3445

Application certification and maintenance, security etc – will users have functionally, yet user friendly controls of app permissions (akin to an app on a google phone, with it’s permission settings?).

Our vision for apps is to make the platform transparent to the user and the experience akin to that of a smartphone. We also want to personally curate a catalog of apps for users to be able to trust and rely upon for the long-haul. Curation to us means a lot more than just building and maintaining a container. It means integrating the actual storage/server/app workflows together. As an example, say you need an app to manage your media library like Plex. Plex needs a media library to exist.  A place where you will put your media files. We don’t want to ask the user to first create that place if it doesn’t already exist. Instead, we can script the process of creating folders where necessary or mapping to existing folders if they exist. This concept also applies to upgrading your system. Say you add a dedicated GPU.  Upon restarting, we can detect that new hardware and suggest possible uses (e.g. acceleration for your existing media server transcoding or attaching it to a virtual machine).

@praetorxyn

If I am capable of using TrueNAS Scale / Docker / etc. already, is there any reason for me to care about this? In other words, how would the developers pitch HexOS to tech savvy people?

One of the reasons Eric and I set out to build HexOS was so that we would have a solution we could comfortably recommend to our friends and family that aren’t IT-minded. We see a huge difference between being “tech savvy” and “IT savvy”. A tech savvy person may be able to build their own PC but not necessarily their own server. Concepts like RAID, parity, caching, etc. can be difficult to understand and most users just want something that works. While you may not be a user, if you value your own setup and want your less IT-centric friends and family to be able to gain similar values, recommend HexOS to them!

@DavidJones-pi8rl

I was originally a QNAP NAS device user then moved to unraid about 6 years ago. A key reason was the security issues seemed to keep appearing multiple times a year in the late 2010’s. How is HexOS going to balance continues feature updates versus without compromising security and ensuring user trust is kept.

We’re all too familiar with issues that multiple vendors have had and continue to have relating to timely security, bugfix, and general updates.Th is is one of the benefits of and reasons we partnered with TrueNAS. They have decades of experience and a great track record of consistently delivering timely security and maintenance updates for their platforms. And all HexOS stable releases will be based on stable TrueNAS releases, ensuring…well…stability!

@lucasmedeiros2471

Will it have its own mobile app?

The entire UI/UX has a responsive design and we do have plans for mobile apps for both iOS and Android. This is especially important to us for users that want to use their home server also as a PC.

@Spreadie 

Is this a standalone overlay for Scale, or are they working with TrueNAS devs? If they are collaborating with devs, will they have any input on driver development direction?

We announced our partnership with TrueNAS at the end of July and we absolutely communicate and coordinate with them on a regular basis. While we have some influence on roadmap, we are incredibly happy with the direction of SCALE’s development and so far our requests have been few and far between. We haven’t had any need to push for any driver-specific development.

@andreas.grundler

One of the advantages of Unraid over TrueNas is that you can use hard disks of different sizes. Will there be something similar with HexOS?

We have no intention of supporting the mixing and matching of drive sizes. Doing so comes with significant sacrifices to performance and functionality. Unraid themselves seem to acknowledge this given the recent change to demote the array to optional functionality, disabled by default. We intend to publish a blog in the future to serve as a competitive analysis against other players in our space, Unraid being one. In it, we will dive much deeper into the shortcomings and flaws of the mix/match drives feature.

@DarrenReidAu

Will there be a simple backup solution with agents for all major OSes including Linux (eg, Ubuntu/Debian based distros)?

Users can expect to leverage backup functionality in three primary ways:

• Backing up data from one HexOS server to another.
• Backing up data from devices using native OS agents (Windows Backup / Time Machine)
• Backing up data to an encrypted cloud storage solution. Anything beyond those primary solutions is outside the scope of our roadmap to 1.0.

Anything beyond those primary solutions is outside the scope of our roadmap to 1.0. That said, we won’t rule out native apps for major OSes as a future roadmap item.

@fedrr

Will HexOS allow partitioning install drive not to waste whole ssd for boot pool? Or allow creation of datasets on boot pool? Or is it just using Truenas as basis that does not provide such functionality out of the box?

No plans to change how TrueNAS partitions boot devices at this time.

@jereyfmoses

How will HexOS fund itself going forward? Dontations? Licence fees? If so, any word on the pricing?

We’re not ready to confirm pricing today, but we can reveal a few details. HexOS will be sold as a lifetime subscription. This lifetime subscription would include features such as:

• The HexOS Command Deck (deck.hexos.com)
• Our setup and configuration wizard
• Anywhere management access
• Email notifications
• Folders, users, and storage management
• Apps and VMs

More detailed information on our licensing and pricing will be revealed soon.

@ma77evalet

Support Model? How will end users get support and will it arrive with free/tiered pricing? Community Support, Admins etc, free?

Free support for HexOS will be obtainable through community channels such as our forums and discord server which will be launching soon. Longer-term we do have plans to offer premium support options, but we’re not ready to reveal details at this time and these options would not launch until sometime after our 1.0 release.

@LordApophis100

Will there be an upgrade path to vanilla Scale if a user “outgrows” HexOS and wants more control/advanced features?

Users can disconnect from HexOS at any time they want and continue managing their system through TrueNAS SCALE directly, no upgrade or conversion required. That said, many TrueNAS SCALE features can be used in conjunction with HexOS, though there may be some limitations. If you disconnect from HexOS, you still have to cancel your subscription to Turbo should you have one.

@martyn334

ETA on any beta?

We’re still on target to get our first test users in Q3. More details on the beta are also coming soon.

Thank you once again for Jonathan’s time for the interview and we look forward to seeing the beta launch. You can sign up for news of the HexOS beta via the page below (takes you to Hexos.com):

SUBSCRIBE TO OUR NEWSLETTER
[contact-form-7]
Join Inner Circle

Want to follow specific category? Also Read...HexOS NAS Software - Review ofHexOS AMA - User Questions AnsWhat is HexOS? A Truly User-FrHexOS (on TrueNAS SCALE) and t Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

As someone who has long relied on Network Attached Storage (NAS) devices for both personal and professional use, I’ve come to appreciate the convenience and functionality they offer. These devices provide a centralized and easily accessible repository for my important data, making them indispensable tools in my digital life. However, with this convenience comes a significant risk: the ever-present threat of cyberattacks. Over the past 15 years, we’ve seen numerous high-profile security incidents targeting NAS devices, underscoring the vulnerabilities inherent in these systems.

In this article, I want to take a closer look at some of the most significant security breaches that have impacted NAS devices from major brands like QNAP, Synology, Asustor, Terramaster, Western Digital, Netgear, and Buffalo. I’ll delve into each incident, exploring the specific vulnerabilities that were exploited, the methods used by attackers, and the devastating impacts on users and organizations. To make this information more accessible, I’ll provide user-friendly explanations that demystify the technical details, helping even those without a technical background understand how these attacks were carried out. Beyond recounting these incidents, I aim to identify commonalities among the attacks, highlighting recurring themes and valuable lessons we can all learn from. Finally, I’ll offer comprehensive recommendations on settings, setup options, and security measures that we can implement to protect our NAS devices from similar threats. By understanding these past incidents and adopting proactive security measures, we can better safeguard our valuable data and ensure the integrity of our NAS systems against future cyber threats.

Which NAS Security Settings Should You Focus On (TL;DR)?

Enhance your NAS device’s security by keeping firmware updated, using strong passwords, enabling multi-factor authentication, disabling unnecessary services, and using VPNs. Implement firewalls, IP access control, and regularly monitor logs. Ensure backups, use antivirus software, encrypt connections, set user permissions, and disable default admin accounts. Employ auto block for failed logins, utilize security scanning apps, limit client access with tools like Tailscale, disable SSH when not in use, and disable unused network protocols.

By implementing these suggested security measures, you can greatly enhance the protection of your NAS device against various cyber threats.

1. QNAP NAS Devices and QLocker Ransomware (2021)

• Vulnerability: Exploited the SQL injection vulnerability in QNAP Photo Station.
• CVE: CVE-2020-36195
• Vulnerability Explained: A SQL injection vulnerability occurs when an attacker can insert or “inject” malicious SQL code into a query through an input field or parameter. In the case of QNAP’s Photo Station, the application didn’t properly sanitize user inputs, allowing attackers to manipulate database queries. This manipulation gave attackers unauthorized access to the NAS system. They used this access to execute commands that should have been restricted, effectively bypassing normal authentication controls. This type of vulnerability is particularly dangerous because it can provide attackers with full control over the database and, by extension, potentially the entire system.
• Exploitation: Attackers exploited a SQL injection vulnerability in the Photo Station app to gain unauthorized access and used 7-Zip to encrypt files.
• User-Friendly Explanation: Imagine you have a house with a poorly designed lock on one of the windows (the Photo Station app). The attackers found this weak spot and used a special tool (SQL injection) to open the window and sneak inside. Once inside, they didn’t steal anything right away. Instead, they put all your valuable items into strong, locked boxes (using 7-Zip to encrypt the files) and took the keys with them. Now, you can’t access any of your valuables unless you pay them to get the keys back (paying the ransom). They demanded the payment in Bitcoin, which is like asking for payment in an untraceable form of digital cash.
• Brand Impacted: QNAP
• Impact: Thousands of QNAP NAS devices were affected, with users unable to access their files unless they paid the ransom in Bitcoin. Reports indicate that over 1,000 devices were infected within the first few days of the attack. The total financial impact on users was significant, as the ransom demands ranged from $200 to $1,200 per device. The attack caused widespread disruption, with many users losing access to critical data.
• Resolution: QNAP released security updates to patch the vulnerabilities and provided instructions for mitigating the attack.
• Link: QNAP Security Advisory
• Link: Official QNAP Response and Suggestions for Mitigation

2. Synology NAS Devices and SynoLocker Ransomware (2014)

• Vulnerability: Targeted vulnerabilities in DSM software, particularly outdated firmware and weak passwords.
• CVE: Not specified.
• Vulnerability Explained: The vulnerabilities in Synology’s DiskStation Manager (DSM) software were primarily due to outdated firmware and weak passwords. Outdated firmware often contains known security flaws that have been patched in later versions, but if not updated, these flaws remain exploitable. Weak passwords are easily guessed or cracked using brute-force attacks, where attackers systematically try all possible password combinations until the correct one is found. These vulnerabilities made it relatively easy for attackers to gain unauthorized access to Synology NAS devices, especially those that were not properly secured.
• Exploitation: Attackers used brute-force methods and exploited known vulnerabilities in outdated DSM software to encrypt files and demand ransom.
• User-Friendly Explanation: Think of your NAS as a safe in your home. The attackers used two main strategies to break in. First, they used brute-force attacks, which is like trying millions of different combinations on the safe’s lock (password) until it opens. Second, they exploited known vulnerabilities in the DSM software, similar to using a master key that fits because of a flaw in the safe’s design (old software bugs). Once they got in, they didn’t steal anything outright. Instead, they locked everything inside the safe with their own lock and told you that you need to pay them (ransom) to get the new combination to open it.
• Brand Impacted: Synology
• Impact: Thousands of Synology NAS devices were encrypted, causing significant disruption and data loss. The attack highlighted the importance of updating firmware and using strong, unique passwords. Users reported substantial financial losses and operational downtime, with ransom demands typically around $350 to $400 in Bitcoin. This attack prompted many users to reevaluate their security practices and invest in better protection measures.
• Resolution: Synology released security updates and tools to help users check their systems and advised on strengthening security settings.
• Link: Synology Security Advisory
• Link: Official Synology Response and Suggestions for Mitigation

3. QNAP, Asustor, and Terramaster NAS Devices and DeadBolt Ransomware (2022)

• Vulnerability: Targeted unspecified vulnerabilities in NAS firmware.
• CVE: Not specified.
• Vulnerability Explained: The exact vulnerabilities exploited by DeadBolt ransomware were not publicly disclosed, but they likely involved flaws in the NAS firmware or application software that allowed unauthorized access. Such vulnerabilities can include weak authentication mechanisms, unpatched software bugs, or misconfigurations that leave the system exposed to external attacks. These types of vulnerabilities can be exploited to gain administrative access, allowing attackers to execute arbitrary commands, including deploying ransomware.
• Exploitation: Attackers exploited vulnerabilities in the NAS firmware to gain unauthorized access and encrypt users’ files.
• User-Friendly Explanation: Picture your NAS as a highly secure filing cabinet. The attackers discovered secret weaknesses (unspecified vulnerabilities) in the cabinet’s lock system that weren’t known to the public. They exploited these weaknesses to sneak into the cabinet. Once inside, they didn’t take the documents but instead locked them in new folders with padlocks and took the keys with them. Now, if you want to access your documents, you need to pay the attackers to get the keys to these new padlocks. The ransom was typically requested in Bitcoin, a form of digital currency that is hard to trace.
• Brands Impacted: QNAP, Asustor, Terramaster
• Impact: Significant number of NAS users across these brands found their files encrypted and were unable to access them without paying the ransom. The DeadBolt ransomware was particularly widespread, affecting thousands of devices globally. Reports indicated that over 3,600 QNAP devices alone were compromised. The financial impact was substantial, with ransom demands often exceeding $1,000 per device. This attack caused major disruptions for both personal and business users, highlighting the critical need for robust security measures and regular updates.
• Resolution: QNAP, Asustor, and Terramaster released firmware updates and provided steps for users to secure their devices. They also advised users to disconnect their NAS from the internet when not in use and to implement strong security practices.
• Links: Our Article on ‘Are NAS Drives Safe?‘ which covers each incident in more detail + video links

4. WD My Book Live Devices Wiped by Exploit (2021)

• Vulnerability: Remote command execution vulnerability in My Book Live firmware.
• CVE: CVE-2018-18472
• Vulnerability Explained: Remote command execution vulnerabilities allow attackers to run arbitrary commands on a device from a remote location. This specific vulnerability (CVE-2018-18472) was due to a flaw in the My Book Live firmware that allowed unauthorized users to send commands to the device over the internet. These commands could be used to perform actions such as factory resetting the device, deleting all stored data. Such vulnerabilities are critical because they provide full control over the device to the attacker without requiring physical access.
• Exploitation: Attackers exploited the vulnerability to perform remote factory resets, wiping data from the devices.
• User-Friendly Explanation: Imagine your NAS is like a digital storage box that holds all your important files. The attackers found an old flaw (CVE-2018-18472) that allowed them to send a command from far away (remote command execution) telling the box to reset itself to the way it was when it was brand new. This reset deleted all the data stored inside, similar to wiping everything off a computer when you restore it to factory settings. Because of this command, all your files were erased, causing significant distress and data loss.
• Brand Impacted: Western Digital
• Impact: Thousands of users reported complete data loss, causing significant distress. The attack was widespread, affecting users globally. Estimates suggest that tens of thousands of devices were potentially vulnerable, with a significant portion being affected. The total impact included not only the loss of personal and business data but also the trust in the security of Western Digital products.
• Resolution: Western Digital advised users to disconnect devices from the internet and offered data recovery services and discounts on newer products.
• Link: Western Digital Advisory

5. QNAP NAS Devices and eCh0raix Ransomware (2019)

• Vulnerability: Exploited weak passwords and vulnerabilities in QNAP firmware.
• CVE: CVE-2019-7192, CVE-2019-7193
• Vulnerability Explained: The eCh0raix ransomware exploited two primary vulnerabilities in QNAP devices: weak passwords and specific software flaws. CVE-2019-7192 and CVE-2019-7193 were vulnerabilities that allowed attackers to bypass authentication and gain administrative access to the NAS. Weak passwords compounded the issue by making it easier for attackers to perform brute-force attacks, systematically guessing passwords until they found the correct one. Once inside, the attackers could deploy ransomware to encrypt files.
• Exploitation: The ransomware used brute-force attacks and exploited known firmware vulnerabilities to encrypt files and demand ransom.
• User-Friendly Explanation: Imagine your NAS as a secure vault. The attackers used two main methods to get in. First, they used brute-force attacks, which is like trying every possible combination to guess the password of your vault (weak passwords). Second, they took advantage of known software bugs (CVE-2019-7192 and CVE-2019-7193) that had not been fixed, similar to using a skeleton key that works because of a design flaw. Once inside, they locked all your files with their own locks and demanded money (ransom) to provide the keys to unlock them.
• Brand Impacted: QNAP
• Impact: Many QNAP NAS users found their files encrypted, leading to operational downtime and data accessibility issues. The attack impacted thousands of users worldwide, with ransom demands typically around $600 to $1,000 in Bitcoin. The financial burden on users and businesses was significant, as many had to pay the ransom or face permanent data loss. The attack highlighted the need for better password practices and timely software updates.
• Resolution: QNAP released firmware updates, advised on using strong passwords, enabling two-factor authentication, and updating systems.
• Link: QNAP Security Advisory

6. Synology NAS Devices and Bitcoin Miner Malware

• Vulnerability: Exploited outdated DSM software.
• CVE: CVE-2013-6955
• Vulnerability Explained: The vulnerability in Synology’s DSM software (CVE-2013-6955) allowed attackers to gain unauthorized access to the NAS devices. This specific flaw was related to inadequate input validation, which let attackers run arbitrary commands on the device. The attackers exploited this to install cryptocurrency mining software, which used the device’s resources to mine Bitcoin. This kind of malware doesn’t steal data but hijacks the system’s processing power, leading to reduced performance and potential hardware damage due to overheating.
• Exploitation: Attackers installed cryptocurrency mining malware on devices, utilizing system resources for Bitcoin mining.
• User-Friendly Explanation: Think of your NAS as a computer that runs software to manage files. The attackers found an old software bug (CVE-2013-6955) that let them sneak in and install a program that forces your NAS to work extra hard, like making a computer solve complex puzzles to create digital coins called Bitcoins. This process uses a lot of the NAS’s processing power, making it slow and possibly causing it to overheat, similar to how a computer might slow down and get hot if it’s running too many programs at once.
• Brand Impacted: Synology
• Impact: Reduced performance, potential overheating, and increased electricity costs for users. The attack affected thousands of Synology devices globally. Users reported significant drops in performance, and some devices even experienced hardware failures due to the increased load and heat. The financial impact included increased electricity bills and costs associated with hardware repair or replacement.
• Resolution: Synology released updates to patch vulnerabilities, remove malware, and advised on regular updates and security monitoring.
• Link: Synology Official Post and eTeknix Article

7. WD My Cloud Security Incident (2023)

• Vulnerability: Unauthorized access to Western Digital in-house servers.
• CVE: Not specified.
• Vulnerability Explained: The security incident involved an unauthorized infiltration of Western Digital’s in-house servers, which managed WD My Cloud devices. Attackers exploited a vulnerability within the server infrastructure, leading to a breach that compromised sensitive data and potentially manipulated device functions. This vulnerability was linked to insufficient security protocols and inadequate monitoring, allowing attackers to access and control server operations without authorization.
• Exploitation: Attackers infiltrated Western Digital’s servers, compromising sensitive data and potentially affecting the functionality and security of WD My Cloud devices.
• User-Friendly Explanation: Imagine the WD My Cloud as a secure vault where you keep your important files. The attackers found a way to break into the main control system of this vault (Western Digital’s servers). Once inside, they could access sensitive information and possibly control how the vault operated. This is like thieves breaking into the control room of a bank vault, gaining access to all the safes and the ability to manipulate the vault’s systems.
• Brand Impacted: Western Digital
• Impact: Compromised security, potential data breaches, and loss of user trust. The attack affected numerous WD My Cloud users globally, exposing sensitive information and causing significant inconvenience due to the disabled cloud services. Users faced operational disruptions, especially those who depended solely on remote access. The incident underscored the importance of comprehensive server security measures and the necessity for users to configure local access options as a contingency plan.
• Resolution: Western Digital implemented robust security enhancements, released patches to address the vulnerabilities, and restored cloud services once the environment was secured. They also advised users on best practices for securing their devices and data, including enabling local/LAN access to ensure uninterrupted access in case of future incidents.
• Link: Western Digital Advisory and Public Disclosure on Business Wire

(Click HERE or Below to Learn More about the WD Cyber Incident)

8. Buffalo NAS Devices and Persistent XSS Vulnerabilities (2017)

• Vulnerability: Multiple persistent XSS vulnerabilities in the web interface.
• CVE: Not specified.
• Vulnerability Explained: Cross-site scripting (XSS) vulnerabilities occur when an application allows users to inject malicious scripts into web pages viewed by others. In Buffalo NAS devices, these persistent XSS vulnerabilities allowed attackers to inject scripts into the web interface that would execute whenever an authorized user accessed the page. This could lead to unauthorized actions performed on behalf of the user, theft of session cookies, and other malicious activities. The flaws were due to inadequate input validation and sanitization in the web application.
• Exploitation: Attackers injected malicious scripts into the web interface, potentially gaining access to sensitive information.
• User-Friendly Explanation: Think of your NAS’s web interface as a control panel you access through a browser. The attackers found a way to insert malicious code (scripts) into this control panel, which would run when you or others accessed the panel. This is like someone sneaking into a control room and installing hidden cameras to watch and capture sensitive information whenever you use the controls, potentially stealing passwords, personal data, or other sensitive information.
• Brand Impacted: Buffalo
• Impact: Risk of data theft and unauthorized access, compromising device security. The vulnerabilities affected many users globally, although exact numbers were not disclosed. The primary risk was the theft of sensitive information, which could be used for further attacks or identity theft. The incident highlighted the need for better web application security in NAS devices.
• Resolution: Buffalo released firmware updates to address XSS vulnerabilities and advised users to update firmware regularly.
• Link: Buffalo Security Advisory and CVE listings

9. Netgear ReadyNAS Devices and Remote Code Execution Vulnerability (2016)

• Vulnerability: Critical remote code execution vulnerability in ReadyNAS devices.
• CVE: CVE-2016-1524
• Vulnerability Explained: Remote code execution vulnerabilities like CVE-2016-1524 allow attackers to run arbitrary code on a device from a remote location. This specific vulnerability was due to inadequate input validation and poor access control in the ReadyNAS firmware. Attackers could exploit this flaw to send specially crafted requests that would execute commands on the device without proper authorization. This level of access could be used to steal data, modify configurations, or install malware.
• Exploitation: Attackers executed arbitrary code on affected ReadyNAS devices, leading to potential data theft and system compromise.
• User-Friendly Explanation: Imagine your NAS as a secure storage unit. The attackers found a flaw (CVE-2016-1524) that allowed them to send commands to the NAS from a remote location, as if they had a remote control that could do anything. This meant they could make the NAS perform any actions they wanted, such as stealing files, changing settings, or installing harmful programs, without needing physical access to the device.
• Brand Impacted: Netgear
• Impact: Compromised security, potential data breaches, and unauthorized control over devices. The vulnerability affected a significant number of Netgear ReadyNAS devices globally. The potential for data theft and system compromise was high, leading to a considerable security risk for users.
• Resolution: Netgear released firmware updates and guidelines on securing ReadyNAS devices.
• Link: Netgear Security Advisory

10. Drobo NAS Devices and Vulnerabilities in Web Interface (2015)

• Vulnerability: Weak authentication mechanisms and potential command injection flaws in the web interface.
• CVE: Not specified.
• Vulnerability Explained: The vulnerabilities in Drobo NAS devices’ web interface included weak authentication mechanisms and command injection flaws. Weak authentication mechanisms made it easier for attackers to bypass login protections, gaining unauthorized access. Command injection flaws allowed attackers to execute arbitrary commands on the device by injecting malicious input into web forms or URLs. These vulnerabilities were due to poor input validation and inadequate security controls in the web application.
• Exploitation: Attackers exploited these vulnerabilities to gain unauthorized access and execute malicious commands.
• User-Friendly Explanation: Think of your NAS’s web interface as the login screen to access your secure storage. The attackers discovered flaws in the authentication process, making it easier for them to bypass security checks (weak authentication mechanisms). Additionally, they found ways to send harmful commands through the interface (command injection flaws), similar to tricking the system into executing their instructions. This allowed them to gain control over the NAS and perform malicious activities, such as stealing data or damaging the system.
• Brand Impacted: Drobo
• Impact: Risk of unauthorized access, data breaches, and system compromise. The vulnerabilities affected many Drobo NAS users, putting their data at risk. The incident underscored the importance of robust web application security and strong authentication mechanisms.
• Resolution: Drobo released firmware updates to address vulnerabilities and advised on best practices for securing devices.
• Link: An article on 15 Different Drobo Vulnerabilities

What Have All of these NAS Security Incidents Have in Common?

All these NAS security incidents share several common elements. Firstly, they all involve exploiting vulnerabilities in firmware or software that was either outdated or had inherent flaws. Attackers took advantage of these weaknesses to gain unauthorized access, highlighting the critical importance of keeping firmware and software up to date. Many NAS devices were targeted because their users had not applied the latest security patches, leaving them vulnerable to known exploits. Secondly, weak or compromised authentication mechanisms were a recurring theme. Many attacks succeeded because of weak passwords, brute-force attacks, or poor authentication practices. This underscores the need for strong, unique passwords and multi-factor authentication (MFA) to provide an additional layer of security. Brute-force attacks and weak password policies allowed attackers to easily gain access to NAS devices, facilitating the deployment of ransomware, malware, or unauthorized command execution.

Lastly, the impact of these incidents was significantly exacerbated by the interconnected nature of NAS devices. Many users had their NAS devices directly connected to the internet without adequate security measures, making them easy targets for remote attacks. This highlights the importance of securing network access and employing best practices for internet-connected devices. Implementing proper firewall settings, VPNs, and avoiding unnecessary exposure to the internet can greatly reduce the risk of such attacks.

Conclusion – Lock it DOWN!

To protect your NAS from these types of attacks, it is essential to implement a robust security setup. Start by ensuring that your NAS firmware and all installed applications are always up to date. Regularly check for updates from the manufacturer and apply them as soon as they are available. These updates often include patches for known vulnerabilities that could otherwise be exploited by attackers. Strong authentication measures are also crucial. Use complex, unique passwords for your NAS device and any associated accounts. Enable multi-factor authentication (MFA) wherever possible to add an extra layer of security. MFA requires users to provide two or more verification factors to gain access, making it much harder for attackers to compromise your device even if they manage to obtain your password. Securing network access is another key aspect. Avoid exposing your NAS directly to the internet. If remote access is necessary, use a Virtual Private Network (VPN) to create a secure connection to your NAS. Configure your firewall to block unauthorized access and only allow trusted IP addresses if possible. Disabling unnecessary services and ports can also minimize potential entry points for attackers. Regularly review and update these settings to adapt to new security threats. By following these recommendations and staying vigilant about security practices, you can significantly reduce the risk of your NAS device being compromised. Regular monitoring, prompt application of updates, and robust authentication and network security measures are essential to safeguarding your data and maintaining the integrity of your NAS system.

How to Automatically Get Updated When Synology and QNAP NAS Vulnerabilities are Reported

Pretty much ALL of the brands in NAS, Data Storage and Cloud services have these security advisory pages, but the idea of checking these pages manually (i.e. bookmark etc) every day, week or month is too much of a hassle for many. On the other hand, they all arrive with an RSS feed link that allows users to subscribe to updates BUT many users are not even aware of how to apply an RSS feed (it’s a complex XML feed of text that needs to be injected into an appropriate RSS feed client/agent – so yeah, hardly noob friendly). So, in order to make this 1000x easier, I have (and by me, I mean Eddie the Web Guy spent time on it and I made this article!) made this page that will be constantly updated with the latest vulnerabilities reported on the popular NAS brands and storage-related manufacturers. It is still being built (so more brands are being added) but it will allow you to just chuck your email address below (will not be used for profit or spamming etc) and then you will get an alter EVERY TIME a new security vulnerability is updated by the brands (this is automated, so it will appear here as soon as it appears on the respective security advisory page). Additionally, there will be links back to the brand/manufacturer site so you can find out more about individual exploits and vulnerabilities, how they work, what they do and (most importantly) give you a better idea of whether you should update your NAS/Storage system or not.

Click Below to Visit the FULL Article

Join Inner Circle

Want to follow specific category? Also Read...Week 51 Tech Round-Up – QNAPLocal AI and NAS Drives - IS TFAQ for DIY NAS Builds: EverytRecommended ATX Motherboards fRecommended ATX Motherboards fWeek 49 Tech Round-Up - SynolN305 6-Bay 10GbE NAS MotherboaCWWK Q670 8-Bay Gen5 NAS vPro Flashstor Gen 2 NAS ReviewHexOS NAS Software - Review of Subscribe

You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

As someone who has long relied on Network Attached Storage (NAS) devices for both personal and professional use, I’ve come to appreciate the convenience and functionality they offer. These devices provide a centralized and easily accessible repository for my important data, making them indispensable tools in my digital life. However, with this convenience comes a significant risk: the ever-present threat of cyberattacks. Over the past 15 years, we’ve seen numerous high-profile security incidents targeting NAS devices, underscoring the vulnerabilities inherent in these systems.

In this article, I want to take a closer look at some of the most significant security breaches that have impacted NAS devices from major brands like QNAP, Synology, Asustor, Terramaster, Western Digital, Netgear, and Buffalo. I’ll delve into each incident, exploring the specific vulnerabilities that were exploited, the methods used by attackers, and the devastating impacts on users and organizations. To make this information more accessible, I’ll provide user-friendly explanations that demystify the technical details, helping even those without a technical background understand how these attacks were carried out. Beyond recounting these incidents, I aim to identify commonalities among the attacks, highlighting recurring themes and valuable lessons we can all learn from. Finally, I’ll offer comprehensive recommendations on settings, setup options, and security measures that we can implement to protect our NAS devices from similar threats. By understanding these past incidents and adopting proactive security measures, we can better safeguard our valuable data and ensure the integrity of our NAS systems against future cyber threats.

Which NAS Security Settings Should You Focus On (TL;DR)?

Enhance your NAS device’s security by keeping firmware updated, using strong passwords, enabling multi-factor authentication, disabling unnecessary services, and using VPNs. Implement firewalls, IP access control, and regularly monitor logs. Ensure backups, use antivirus software, encrypt connections, set user permissions, and disable default admin accounts. Employ auto block for failed logins, utilize security scanning apps, limit client access with tools like Tailscale, disable SSH when not in use, and disable unused network protocols.

By implementing these suggested security measures, you can greatly enhance the protection of your NAS device against various cyber threats.

1. QNAP NAS Devices and QLocker Ransomware (2021)

• Vulnerability: Exploited the SQL injection vulnerability in QNAP Photo Station.
• CVE: CVE-2020-36195
• Vulnerability Explained: A SQL injection vulnerability occurs when an attacker can insert or “inject” malicious SQL code into a query through an input field or parameter. In the case of QNAP’s Photo Station, the application didn’t properly sanitize user inputs, allowing attackers to manipulate database queries. This manipulation gave attackers unauthorized access to the NAS system. They used this access to execute commands that should have been restricted, effectively bypassing normal authentication controls. This type of vulnerability is particularly dangerous because it can provide attackers with full control over the database and, by extension, potentially the entire system.
• Exploitation: Attackers exploited a SQL injection vulnerability in the Photo Station app to gain unauthorized access and used 7-Zip to encrypt files.
• User-Friendly Explanation: Imagine you have a house with a poorly designed lock on one of the windows (the Photo Station app). The attackers found this weak spot and used a special tool (SQL injection) to open the window and sneak inside. Once inside, they didn’t steal anything right away. Instead, they put all your valuable items into strong, locked boxes (using 7-Zip to encrypt the files) and took the keys with them. Now, you can’t access any of your valuables unless you pay them to get the keys back (paying the ransom). They demanded the payment in Bitcoin, which is like asking for payment in an untraceable form of digital cash.
• Brand Impacted: QNAP
• Impact: Thousands of QNAP NAS devices were affected, with users unable to access their files unless they paid the ransom in Bitcoin. Reports indicate that over 1,000 devices were infected within the first few days of the attack. The total financial impact on users was significant, as the ransom demands ranged from $200 to $1,200 per device. The attack caused widespread disruption, with many users losing access to critical data.
• Resolution: QNAP released security updates to patch the vulnerabilities and provided instructions for mitigating the attack.
• Link: QNAP Security Advisory
• Link: Official QNAP Response and Suggestions for Mitigation

2. Synology NAS Devices and SynoLocker Ransomware (2014)

• Vulnerability: Targeted vulnerabilities in DSM software, particularly outdated firmware and weak passwords.
• CVE: Not specified.
• Vulnerability Explained: The vulnerabilities in Synology’s DiskStation Manager (DSM) software were primarily due to outdated firmware and weak passwords. Outdated firmware often contains known security flaws that have been patched in later versions, but if not updated, these flaws remain exploitable. Weak passwords are easily guessed or cracked using brute-force attacks, where attackers systematically try all possible password combinations until the correct one is found. These vulnerabilities made it relatively easy for attackers to gain unauthorized access to Synology NAS devices, especially those that were not properly secured.
• Exploitation: Attackers used brute-force methods and exploited known vulnerabilities in outdated DSM software to encrypt files and demand ransom.
• User-Friendly Explanation: Think of your NAS as a safe in your home. The attackers used two main strategies to break in. First, they used brute-force attacks, which is like trying millions of different combinations on the safe’s lock (password) until it opens. Second, they exploited known vulnerabilities in the DSM software, similar to using a master key that fits because of a flaw in the safe’s design (old software bugs). Once they got in, they didn’t steal anything outright. Instead, they locked everything inside the safe with their own lock and told you that you need to pay them (ransom) to get the new combination to open it.
• Brand Impacted: Synology
• Impact: Thousands of Synology NAS devices were encrypted, causing significant disruption and data loss. The attack highlighted the importance of updating firmware and using strong, unique passwords. Users reported substantial financial losses and operational downtime, with ransom demands typically around $350 to $400 in Bitcoin. This attack prompted many users to reevaluate their security practices and invest in better protection measures.
• Resolution: Synology released security updates and tools to help users check their systems and advised on strengthening security settings.
• Link: Synology Security Advisory
• Link: Official Synology Response and Suggestions for Mitigation

3. QNAP, Asustor, and Terramaster NAS Devices and DeadBolt Ransomware (2022)

• Vulnerability: Targeted unspecified vulnerabilities in NAS firmware.
• CVE: Not specified.
• Vulnerability Explained: The exact vulnerabilities exploited by DeadBolt ransomware were not publicly disclosed, but they likely involved flaws in the NAS firmware or application software that allowed unauthorized access. Such vulnerabilities can include weak authentication mechanisms, unpatched software bugs, or misconfigurations that leave the system exposed to external attacks. These types of vulnerabilities can be exploited to gain administrative access, allowing attackers to execute arbitrary commands, including deploying ransomware.
• Exploitation: Attackers exploited vulnerabilities in the NAS firmware to gain unauthorized access and encrypt users’ files.
• User-Friendly Explanation: Picture your NAS as a highly secure filing cabinet. The attackers discovered secret weaknesses (unspecified vulnerabilities) in the cabinet’s lock system that weren’t known to the public. They exploited these weaknesses to sneak into the cabinet. Once inside, they didn’t take the documents but instead locked them in new folders with padlocks and took the keys with them. Now, if you want to access your documents, you need to pay the attackers to get the keys to these new padlocks. The ransom was typically requested in Bitcoin, a form of digital currency that is hard to trace.
• Brands Impacted: QNAP, Asustor, Terramaster
• Impact: Significant number of NAS users across these brands found their files encrypted and were unable to access them without paying the ransom. The DeadBolt ransomware was particularly widespread, affecting thousands of devices globally. Reports indicated that over 3,600 QNAP devices alone were compromised. The financial impact was substantial, with ransom demands often exceeding $1,000 per device. This attack caused major disruptions for both personal and business users, highlighting the critical need for robust security measures and regular updates.
• Resolution: QNAP, Asustor, and Terramaster released firmware updates and provided steps for users to secure their devices. They also advised users to disconnect their NAS from the internet when not in use and to implement strong security practices.
• Links: Our Article on ‘Are NAS Drives Safe?‘ which covers each incident in more detail + video links

4. WD My Book Live Devices Wiped by Exploit (2021)

• Vulnerability: Remote command execution vulnerability in My Book Live firmware.
• CVE: CVE-2018-18472
• Vulnerability Explained: Remote command execution vulnerabilities allow attackers to run arbitrary commands on a device from a remote location. This specific vulnerability (CVE-2018-18472) was due to a flaw in the My Book Live firmware that allowed unauthorized users to send commands to the device over the internet. These commands could be used to perform actions such as factory resetting the device, deleting all stored data. Such vulnerabilities are critical because they provide full control over the device to the attacker without requiring physical access.
• Exploitation: Attackers exploited the vulnerability to perform remote factory resets, wiping data from the devices.
• User-Friendly Explanation: Imagine your NAS is like a digital storage box that holds all your important files. The attackers found an old flaw (CVE-2018-18472) that allowed them to send a command from far away (remote command execution) telling the box to reset itself to the way it was when it was brand new. This reset deleted all the data stored inside, similar to wiping everything off a computer when you restore it to factory settings. Because of this command, all your files were erased, causing significant distress and data loss.
• Brand Impacted: Western Digital
• Impact: Thousands of users reported complete data loss, causing significant distress. The attack was widespread, affecting users globally. Estimates suggest that tens of thousands of devices were potentially vulnerable, with a significant portion being affected. The total impact included not only the loss of personal and business data but also the trust in the security of Western Digital products.
• Resolution: Western Digital advised users to disconnect devices from the internet and offered data recovery services and discounts on newer products.
• Link: Western Digital Advisory

5. QNAP NAS Devices and eCh0raix Ransomware (2019)

• Vulnerability: Exploited weak passwords and vulnerabilities in QNAP firmware.
• CVE: CVE-2019-7192, CVE-2019-7193
• Vulnerability Explained: The eCh0raix ransomware exploited two primary vulnerabilities in QNAP devices: weak passwords and specific software flaws. CVE-2019-7192 and CVE-2019-7193 were vulnerabilities that allowed attackers to bypass authentication and gain administrative access to the NAS. Weak passwords compounded the issue by making it easier for attackers to perform brute-force attacks, systematically guessing passwords until they found the correct one. Once inside, the attackers could deploy ransomware to encrypt files.
• Exploitation: The ransomware used brute-force attacks and exploited known firmware vulnerabilities to encrypt files and demand ransom.
• User-Friendly Explanation: Imagine your NAS as a secure vault. The attackers used two main methods to get in. First, they used brute-force attacks, which is like trying every possible combination to guess the password of your vault (weak passwords). Second, they took advantage of known software bugs (CVE-2019-7192 and CVE-2019-7193) that had not been fixed, similar to using a skeleton key that works because of a design flaw. Once inside, they locked all your files with their own locks and demanded money (ransom) to provide the keys to unlock them.
• Brand Impacted: QNAP
• Impact: Many QNAP NAS users found their files encrypted, leading to operational downtime and data accessibility issues. The attack impacted thousands of users worldwide, with ransom demands typically around $600 to $1,000 in Bitcoin. The financial burden on users and businesses was significant, as many had to pay the ransom or face permanent data loss. The attack highlighted the need for better password practices and timely software updates.
• Resolution: QNAP released firmware updates, advised on using strong passwords, enabling two-factor authentication, and updating systems.
• Link: QNAP Security Advisory