b1ggjoe
Regular Contributor
Hey Everyone,
So I've been slowly re-doing my entire Home Network. I've been updating my Network Hardware along with other improvements in order to accommodate all of my 'Smart Devices', along with my new and slowly improving Home Theater goals.
As of tonight, here's a sample of what I have:
1. - Gigabit Fiber enters my home through a CenturyLink Modem (10.x.x.x).
2. - Orbi Router sits behind the CenturyLink Modem (192.168.8.x). The Orbi is FANTASTIC and all of my Smart Devices connect to either the Orbi Router or one of the 2x Satellites via WiFi.
Here's where I need some direction:
I have a brand-new QNAP NAS with about 20TBs of Storage (RAID 5). The problem here, is that I want to use this QNAP NAS as both my SOHO File Storage backup NAS, as well as to store all of my Blue-Ray RIPS/Remux files so that I can stream the movies from this QNAP NAS to either my NVIDIA Shield TV in one room, or to one of my Amazon Fire TV 4K sticks in other rooms.
So on the one hand I have important files/docs that I wish to safeguard and secure. On the other, I also have all of these movies and a growing collection that I also want to store on the QNAP NAS as well as stream from (Not so important).
I'm not entirely sure on the best way to design my small network so that the QNAP NAS will be secure in the event that my Home Network is hijacked/hacked yet I want to be able to stream movies trouble-free.
I know that the Orbi does support VLANs.
I also have a brand-new ZyXEL 24-port Managed Switch that also supports VLANs among other features.
I have an older SonicWALL TZ210 Router/Firewall.
So my questions are:
1. - Would it be a good idea to insert another Router/Firewall or dedicated Firewall appliance into this scenario, in order to add another layer of protection to the NAS?
If the answer is 'YES', would I be ok with using this older SonicWALL TZ210? I was going to renew the security updates but I just found out that it will be EOL this month. Or would I better off with a small Firewall appliance such as either a SOPHOS XG 85 / Untangle u25x /pfSense SG-1000 or SG-3100?
2. - Regardless of which appliance I use, where exactly or how exactly should I position it within the overall Network topology?
For example; I was thinking of having it just sit between the Orbi and the QNAP NAS. That way, if someone were to gain access and get passed the ORBI...they couldn't just easily walk into the QNAP NAS.
3. - Or would it be better to just implement some VLAN magic? Or both, a Firewall appliance + VLAN magic?
Random Notes:
- The NAS is a QNAP TVS-473, so it does have 4x Gigabit RJ45 ports.
- The NAS will be physically right next to all of the network equipment mentioned above. So there's a lot I can do with regard to physically connecting the NAS to either the Firewall appliance or the ZyXEL switch or even the ORBI for that matter, if going the VLAN direction.
Any help would be greatly appreciated.
Thank you!!
BJ
So I've been slowly re-doing my entire Home Network. I've been updating my Network Hardware along with other improvements in order to accommodate all of my 'Smart Devices', along with my new and slowly improving Home Theater goals.
As of tonight, here's a sample of what I have:
1. - Gigabit Fiber enters my home through a CenturyLink Modem (10.x.x.x).
2. - Orbi Router sits behind the CenturyLink Modem (192.168.8.x). The Orbi is FANTASTIC and all of my Smart Devices connect to either the Orbi Router or one of the 2x Satellites via WiFi.
Here's where I need some direction:
I have a brand-new QNAP NAS with about 20TBs of Storage (RAID 5). The problem here, is that I want to use this QNAP NAS as both my SOHO File Storage backup NAS, as well as to store all of my Blue-Ray RIPS/Remux files so that I can stream the movies from this QNAP NAS to either my NVIDIA Shield TV in one room, or to one of my Amazon Fire TV 4K sticks in other rooms.
So on the one hand I have important files/docs that I wish to safeguard and secure. On the other, I also have all of these movies and a growing collection that I also want to store on the QNAP NAS as well as stream from (Not so important).
I'm not entirely sure on the best way to design my small network so that the QNAP NAS will be secure in the event that my Home Network is hijacked/hacked yet I want to be able to stream movies trouble-free.
I know that the Orbi does support VLANs.
I also have a brand-new ZyXEL 24-port Managed Switch that also supports VLANs among other features.
I have an older SonicWALL TZ210 Router/Firewall.
So my questions are:
1. - Would it be a good idea to insert another Router/Firewall or dedicated Firewall appliance into this scenario, in order to add another layer of protection to the NAS?
If the answer is 'YES', would I be ok with using this older SonicWALL TZ210? I was going to renew the security updates but I just found out that it will be EOL this month. Or would I better off with a small Firewall appliance such as either a SOPHOS XG 85 / Untangle u25x /pfSense SG-1000 or SG-3100?
2. - Regardless of which appliance I use, where exactly or how exactly should I position it within the overall Network topology?
For example; I was thinking of having it just sit between the Orbi and the QNAP NAS. That way, if someone were to gain access and get passed the ORBI...they couldn't just easily walk into the QNAP NAS.
3. - Or would it be better to just implement some VLAN magic? Or both, a Firewall appliance + VLAN magic?
Random Notes:
- The NAS is a QNAP TVS-473, so it does have 4x Gigabit RJ45 ports.
- The NAS will be physically right next to all of the network equipment mentioned above. So there's a lot I can do with regard to physically connecting the NAS to either the Firewall appliance or the ZyXEL switch or even the ORBI for that matter, if going the VLAN direction.
Any help would be greatly appreciated.
Thank you!!
BJ