Owners manual

15 Chapter 5: Enhance Connection Security
This chapter introduces various security features to protect your Synology Router and connected client devices
from potential cyber threats and unwanted information leakage.
Secure Your Connections
SRM can secure the Internet connection in the following ways.
HTTP and HTTPS
HTTP is the unsecured, common protocol for web browsers to communicate with web servers. As the secured
version of HTTP, HTTPS protects your Synology Router and client devices' communication from being
intercepted.
By default, SRM provides HTTP and HTTPS connections. You may change the HTTP/HTTPS ports to avoid
malicious attacks.
To change the HTTP/HTTPS ports, go to
Control Panel
>
System
>
SRM Settings
.
• Default HTTP URL: Synology_Router_IP_Address:8000
Example: 192.168.1.1:8000
• Default HTTPS URL: Synology_Router_IP_Address:8001
Example: 192.168.1.1:8001
HTTPS-related Settings
Go to
Control Panel
>
System
>
SRM Settings
:
•
Automatically redirect HTTP connections to HTTPS
: All the Internet connections via HTTP will be switched
to HTTPS to access SRM.
•
Enable HSTS
: Only HTTPS connections to SRM are allowed.
DoS Protection
DoS (Denial of Service) attacks bombard a network with numerous requests, overloading the target’s networking
or computing resources. The targeted network suffers from degraded Internet connectivity and increased system
resource usage during the attack.
To enable DoS protection, go to
Network Center
>
Security
>
General
.
VPN Pass-through
When a VPN server exists behind your Synology Router, you can allow specic types of VPN client trafc (PPTP,
L2TP, and IPSec) for pass-through to reach the server.
To enable the pass-through function, go to
Network Center
>
Security
>
General
.
Enhance Connection Security
5
Chapter