Secure Network for Smart Home

  1. Solutions

Secure Network for Smart Home

The number of connected devices in a household has become a serious challenge to cybersecurity. Attacks can happen to any one of them – baby monitors, home alarm systems, network-attached storage systems – and lead to privacy breaches, data losses, or even physical damages. See how to safeguard your property in the Internet era with Synology Router.

Wi-Fi router: A better route to cybersecurity

“If you're looking to build a robust, non-compromising, secure home network, this is the router to get.” Learn more

Keep your whole family safe

No matter how cautious we are, it's sometimes not possible to stop every family member from clicking on that phishing link or sharing Wi-Fi password with others. Now, Synology Router will always be there for them.

  • Threat intelligence: Built-in security filters alert users when they're heading to a malicious website. The databases are automatically updated to keep up with the latest threats.
  • Web privacy: No browsing history is sent to the cloud for analysis.1 The additional support for DNS over HTTPS ensures no attackers or even your ISPs can eavesdrop on which sites you visit.
  • Secure Wi-Fi: You can prevent unknown devices from connecting to your family Wi-Fi – guest Wi-Fi will still be available for guests. The next-gen Wi-Fi standard, WPA3, also equips you with better defenses against brute-force attacks.
Keep your whole family safe

“I don't feel safe on the Internet anymore without this router.”

Amazon customer

Manage the Internet of Things

The IoT devices are often the weakest link in a smart home. They work 24/7 in the background (without us paying much attention to), and we have fewer ways to protect them – the best of which is to do it at the network level.

  • Threat Prevention: This package makes the business-grade intrusion prevention technology available to every household, silently dropping any suspicious packet with no human intervention required.2 Learn more
  • Traffic monitoring: A common symptom of a compromised device is an unusually high amount of traffic (such as from your smart speaker). Keep yourself informed via the regular reports or real-time dashboard, and block any dubious device with just one click.
  • Location-based firewall: Concerned about connections from or to places where most cyberattacks originate? You can block the whole country/region just to be safe.
Manage the Internet of Things

“This may be my favorite router now when it comes to parental controls. Synology, in my opinion, is years ahead now of anybody that I'd consider to be their competitors in this space.”

Willie Howe Technology

Protect kids until they're ready

Some things do not pose a security risk but are dangerous to the little ones nonetheless: adult or violent content, or simply too much time online. The profile-based parental controls help you set up different Internet policies for children of different ages. Watch the video

  • Internet filtering

    Decide which types of websites (gambling, dating, social networks, etc.) are not allowed – or allowed only during a specific time. Hide explicit search results on Google, Bing, or YouTube.

  • Time management

    Set time limits and schedules. Encourage your kids to use their time wisely, and reserve some quality time for family.

  • Activity report

    Gain insights into how a kid is exploring the world. Pause his devices if it's time to talk, or reward him with extra hours if he's behaving well.

Get started

  • Synology Router RT2600ac: In addition to being one of the top-rated routers for performance and security, it also works with Synology MR2200ac to bring mesh Wi-Fi to everywhere in the house. Learn more
  • Synology Router Manager: The award-winning operating system that powers every Synology Router. Find out what else it has to offer
Get started
  1. Some other products carry out all or part of the security analysis in the cloud. In comparison, Synology Router regularly downloads domain/IP blacklists and performs the filtering locally. An optional feature, Google Safe Browsing, runs the first round of security checks locally on the router. If a website fails the checks, this specific URL is then sent to Google for verification. This feature needs to be enabled by users separately.
  2. Available on Synology RT2600ac. An external storage device (USB drive or SD card) is required.
  • Network Center
  • Wireless Control
  • Security Advisor
  • Firewall
  • Auto Block
  • Safe Access
  • Threat Prevention 
  • VPN Plus Server
  • File Station
  • Media Server
  • DNS Server

Network Center

Wide Area Network (WAN) support

  • Internet connection types include static IP, PPPoE, DHCP client and DS-Lite
  • VPN connection types include PPTP, OpenVPN, and L2TP over IPSec
  • Supports network load-balance and fail-over
  • Access the Internet via 3G/4G dongle (compatibility list)
  • Access the Internet via USB Tethering (compatibility list)

Local Area Network (LAN) support

  • Supports DHCP reservation with DHCP server
  • Supports static network routing and policy network routing
  • Supports IPv4 forwarding with UPnP protocol and static rules
  • Supports DMZ hosting, port forwarding, and port triggering rules

Traffic Control

  • Fully control the Internet access by device
  • Application layer QoS by device
  • Supports traffic monitor for network traffic live view
  • Supports traffic reports to keep track of network access trends

IPv6 Support

  • Connection types include native IPv6, 6in4, 6to4, 6rd, DS-Lite, DHCPv6-PD, IPv6 Relay (pass-through) and FLET’s IPV6 Service
  • IPv6 auto configuration includes SLAAC, DHCPv6 and SLAAC + DHCPv6

IPTV / VoIP

  • Supports VLAN tag customization
  • Supports IGMP snooping and IGMP proxy

Other Network Services

  • DNS Server
  • DNS Relay
  • DDNS
  • QuickConnect
  • NTP
  • SNMP
  • SSH
  • FTP
  • SAMBA

Operation Modes

  • Wireless Router mode
  • Wireless Access Point mode (AP mode)
  • Wireless Client mode (only supported on RT1900ac)
  • Wireless Distribution System (WDS, only supported on RT2600ac)

Wireless Control

Overview

  • Network status monitor includes real-time statuses and transmission rates of your Wi-Fi, Guest Network, Wi-Fi points, and connected devices

Wireless

  • Supports flexible tri-band configurations (only available on MR2200ac)
  • Supports band steering and roaming
  • Supports security standards including Wi-Fi Enhanced Open (OWE), WEP, WPA/WPA2-Personal, WPA/WPA2-Enterprise, WPA2-Personal, WPA2-Enterprise, WPA2/WPA3-Personal, WPA3-Personal and WPA3-Enterprise (only available on RT2600ac & MR2200ac)
  • Supports DFS channels by country
  • Supports 802.11k, 802.11v, 802.11r (only available on RT2600ac & MR2200ac)
  • Supports Wi-Fi Protected Setup (WPS)

Wi-Fi Point (only available on RT2600ac & MR2200ac)

  • Supports additional and removable Wi-Fi points in the network
  • Centralized Wi-Fi system management
  • Supports network topology to monitor the Wi-Fi system as a whole
  • Supports transmission tests between the primary Wi-Fi point and other Wi-Fi points
  • Provides real-time Wi-Fi transmission rates of all Wi-Fi points
  • Provides transmission rates from connected devices to each Wi-Fi point

Guest Network support

  • Supports Wi-Fi portal page customization
  • Supports network access scheduling
  • Supports password rotation
  • Supports smart connect

MAC Filter

  • Allow or block devices with the corresponding MAC addresses

Security Advisor

  • Supports malware detection and removal
  • Supports security scans for account and password, network, and system
  • Supports version checks for SRM and installed packages

Firewall

  • Supports access allowance and denial of selected ports or services on specific IP addresses
  • Supports geographical firewall rules
  • Internet access can be disabled for connected devices
  • Supports traffic control of services and TCP/UDP ports
  • Supports DDoS protection
  • Supports VPN pass-through

Auto Block

  • Supports access block after a specified number of attempts
  • Supports customization of expiration time
  • Supports black and white list

Safe Access

  • Supports User Profile to manage specific connected devices
  • Supports Network Profile to manage the connected devices in your local and guest network
  • Supports Internet access time management with Internet Schedule, Time Quota, Pause, and Rewards
  • Supports Access Request for users to ask permission to browse specific websites
  • Supports Web Filter to protect users from inappropriate websites
  • Supports Safe Search on Google, Bing, and YouTube
  • Integrates up-to-date Google Safe Browsing and the Threat Intelligence Database to ensure Internet security
  • Supports Internet usage reports

Note

  • Learn more about how to enable Google Safe Browsing here.

Threat Prevention 

  • Supports network invasions detection
  • Supports self-defined class and signature policy
  • Supports details of malicious events
  • Supports scheduled signature updates
  • Supports notifications via Email, SMS, and push notification services
  • Supports auto-drop of high-risk packets
  • Supports geographical distribution of malicious sources
  • Supports limitation of storage usage of log files
  • Support the configuration of backup and restoration

VPN Plus Server

  • Supports VPN services including WebVPN, SSL VPN, SSTP, OpenVPN, L2TP over IPSec, and PPTP
  • Supports portal page customization for WebVPN
  • Supports split tunnel for SSL VPN
  • Client application support for SSL VPN
    • Synology SSL VPN Client (for Windows/macOS/Linux)
    • VPN Plus mobile app (for iOS/Android)
  • Supports Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS), and DNSSEC Validation for Site-to-Site VPN
  • Supports Remote Desktop
    • Remote Desktop Protocol (RDP) is supported in Windows 10 Enterprise (Professional), Windows 8.1 Enterprise (Professional), Windows 7 Enterprise (Professional)
    • Virtual Network Computing (VNC) is supported in macOS 10.11, 10.12, and 10.13, along with the application support in TightVNC and XVNC.
  • Supports real-time monitoring and connection management
  • Supports traffic reports for activated VPN services
  • Supports permission settings to allow VPN connections for selected users and groups
  • Licenses
    • Client VPN Access License: One free license has been installed on each VPN Plus
    • Site-to-Site VPN License: Each VPN Plus supported Synology product is eligible for a one-time 30-day free trial
  • Check the maximum connections for different models

File Station

  • Drag and drop files between browser windows
  • WebDAV/WebDAV over HTTPS/FTP/SFTP client
  • Share files with other users on the same Synology SRM
  • Search files according to various criteria
  • Index various types of files for a more effective and efficient search result
  • Thumbnail and list views
  • Compress/extract archived files
  • Remote Folder supports mounting folders on other SMB file servers
  • Photo Viewer and Video Player to view photos and videos
  • Set speed limits for specific users or groups
  • Transfer Logs
  • Create sharing links to allow people without SRM user credentials to access folders and files
  • Create file request to easily collect files from others
  • Supports Recycle Bin

Media Server

  • Works as a DLNA-compliant Digital Media Server (DMS) and streams media to DLNA-certified products.
  • Supported audio formats: AAC, AIFF, APE, DSD, FLAC, M4A, Apple Lossless, MP3, Ogg Vorbis, PCM, WAV, WMA, WMA VBR, WMA PRO, WMA Lossless (The actual playback capabilities may vary depending on the DLNA/UPnP client)
  • Supported video formats: 3GP, 3G2, ASF, AVI, DAT, DivX, DVR-MS, FLV, ISO, M2T, M2TS, M4V, MKV, MP4, MPEG1, MPEG2, MPEG4, MTS, MOV, QT, SWF, TP, TRP, TS, VOB, WMV,XviD, RMVB (The actual playback capabilities may vary depending on the DLNA/UPnP client)
  • Supported image formats : BMP, JPG (jpe, jpeg), GIF, ICO, PNG, PSD, TIF (tiff), UFO
  • MKV video transcoding (H.264 video remux) support for SONY TV and PS3
  • Transcoding APE/FLAC/OGG/AIFF/AAC/ALAC audio
  • Customizable DLNA menu

System Requirements

  • Supports DLNA-certified Digital Media Player products

DNS Server

  • Master and slave zones
  • Forward and reverse domain resolution
  • NS, A, AAAA, CNAME, MX, SPF, SRV, TXT, PTR records
  • TSIG (Transfer Signature) keys
  • Split-horizon DNS

Notes:

  1. Please note that the figures marked in asterisks are derived from the Synology lab by using high-performance client computers with optimized network settings, and could vary in different environments.