SAN vs. NAS security
I've heard you have to worry more about security with network-attached storage (NAS) vs. storage area network (SAN). Why? And, is there anything you can do to ensure NAS security?

    Requires Free Membership to View

    Login

    When you register for SearchSMBStorage.com, you’ll also receive targeted emails from my team of award-winning editorial writers. Your company has different needs from that of an enterprise, and it’s our goal to keep you informed on the hottest topics, the latest news and the biggest challenges that are unique to your job.

    Rich Castagna, Editorial Director

    By submitting your registration information to SearchSMBStorage.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSMBStorage.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

 

NAS is not necessarily less secure than a SAN; NAS security is just done differently. With a SAN, you are getting volumes (or LUNs) served up to operating systems for usage. Those LUNs can have file systems on them or databases or some other direct usage. The security is at the SAN level, controlling the access to the LUN, and at the server operating system (and application) level, controlling the users who have access to the data.

For NAS security, the file system (or file systems) are on the NAS device and the access to the file system and the files within the file system is controlled by the privileges that are assigned (typically called access control lists). If the privileges are set up correctly (either manually or through system control such as Active Directory), users that are not authorized are denied access.

This was first published in November 2010

Back to top