Upnp And Security; The Nas's Services And Upnp; Configure Upnp Router - ZyXEL Communications NAS326-2T User Manual

8.5.2 UPnP and Security

UPnP's automated nature makes it easier to use than manually configuring firewall and NAT rules, but it
is also less secure. Using UPnP may make your network more susceptible to snooping and hacking
attacks.

8.5.3 The NAS's Services and UPnP

This section introduces the NAS's services which an Internet gateway can use UPnP to allow access to
and from the Internet.
CIFS (Windows File Sharing)
Common Internet File System (CIFS) is a standard protocol supported by most operating systems in order
to share files across the network. Using UPnP port mapping for CIFS allows users to connect from the
Internet and use programs like Windows Explorer to access the NAS's shares to copy files from the NAS,
delete files on the NAS, or upload files to the NAS from the Internet.
If you configure UPnP port mapping to allow CIFS access from the WAN but cannot get it to work, you
may also have to configure the Internet gateway to also allow NetBIOS traffic. See
page 147 for more on CIFS.
FTP
File Transfer Protocol is a standard file transfer service used on the Internet. Using UPnP port mapping for
FTP allows remote users to use FTP from the Internet to access the NAS's shares. A user with read and
write access to a share can copy files from the share, delete files from the share, or upload files to the
share. See Section 10.6 on page 162
you may want to use a different WAN port number (instead of the default of port 21) to make it more
secure. Remember to tell the remote users to use the custom port number when using FTP to access the
NAS.
HTTP (Web Configurator)
You can use UPnP port mapping to allow access to the NAS's management screens. If you use UPnP to
allow web configurator access from the WAN, you may want to use a different WAN port number
(instead of the default of port 80) to make it more secure. Remember to use the custom port number
when accessing the NAS's web configurator from the Internet.
HTTP (Web Published Shares)
This is the NAS's web publishing feature that lets people access files using a web browser without having
to log into the Web Configurator. Use UPnP port mapping to allow access to these files from the Internet
without having to enter a user name or password. See
publishing.

8.5.4 Configure UPnP Router

UPnP allows access to your NAS through a UPnP router. Click Network > UPnP Port Mapping > UPnP Router
to check if the NAS has found a UPnP router on the network.
Chapter 8 Control Panel: Network
for more on FTP. If you use UPnP to allow FTP access from the WAN,
NAS Series User's Guide
140
Section 10.8 on page 167
Windows/CIFS on
for more on web