Safeguards the system by threat detection and update notifications
Specifications
Checks for available SRM and package version updates to ensure security and protect against vulnerabilities
Scans system and related network settings, and detects and removes malware for enhanced system security
Supports account and password strength detection
Automatically updates security definitions database to stay up-to-date
Firewall
Features
Manages multiple firewall rules for specific protocols and services
Specifications
Access to ports or services can be individually customized to allow/deny specific IP addresses
Internet access can be disabled for client devices
Controls the traffic of services and TCP/UDP ports
Protects your Synology Router and client devices from DDoS attacks
Supports firewall rules based on geographic regions
Supports VPN pass-through
Auto Block
Features
Automatically blocks IP addresses with a high number of failed login attempts
Specifications
IP block can be triggered based on a specified number of failed login attempts within a predefined duration
Supports customization of expiration time
Supports allow list and block list to increase management flexibility
VPN 服務
VPN Plus Server
功能
直覺化的 VPN 伺服器，可簡易建立、安全存取、順暢連線 VPN
針對多種類型的 VPN，提供集中化管理介面
即時監控及管理 VPN 連線
規格
支援自訂 WebVPN 入口頁面
支援 SSL VPN 分割通道
支援的 VPN 服務：
WebVPN
SSL VPN
遠端桌面
SSTP
OpenVPN
L2TP over IPSec
PPTP
支援 Site-to-Site VPN：
Dead Peer Detection (DPD)
Perfect Forward Secrecy (PFS)
Site-to-Site VPN 專用的 DNSSEC 驗證
支援遠端桌面協定 (RDP)：
Windows 10 企業版 (專業版)
Windows 8.1 企業版 (專業版)
Windows 7 企業版 (專業版)
支援 Virtual Network Computing (VNC)：
適用於 macOS 10.11、10.12、10.13
適用於應用程式 TightVNC 及 XVNC
用戶端應用程式支援 SSL VPN：
Synology SSL VPN Client (適用於 Windows、macOS)
VPN Plus 行動應用程式 (適用於 iOS、Android)
支援為已啟用 VPN 服務的產生網路流量報表
支援權限設定，以管理特定使用者及群組的 VPN 連線
VPN Plus (行動應用程式)
功能
提供 Synology SSL VPN 服務，讓裝置可快速、簡單、安全地存取區域網路資源
規格
基本系統需求：
Android 7 及以上版本
iOS 11 及以上版本
支援憑證為基礎的驗證及憑證管理，以強化網路連線安全
支援兩步驟驗證
多合一伺服器
File Station
功能
Synology Router 預設的檔案管理工具，可瀏覽、預覽、管理儲存的檔案及資料夾
輕鬆、安全地分享檔案
規格
支援在瀏覽器視窗間以拖拉的方式移動檔案
使用相片檢視器、影像播放器來檢視相片及影片
可與同台 Synology Router 上的其他使用者分享檔案，其方式包含分享連結及 QR Code
支援的分享檔案連結設定：
設定分享連結的有效期間，以提升安全性
透過分享連結管理員集中管理，讓使用者可以編輯、分享、移除現存的分享連結
將檔案以電子郵件附件的形式分享
支援限制使用者和群組傳輸檔案的最大可用頻寬
限制
不支援在 Internet Explorer 瀏覽器或頁籤間使用拖拉功能
DNS Server
Features
Resolution from domain names to IP addresses for devices or resources connected to the Internet or local area networks (LAN)
Master, slave, and forwarding zones that ensure high availability of DNS service
Specifications
Supported resource records: A, AAAA, CNAME, MX, NS, PTR, SPF, SRV, and TXT
Provides access control for zone transferring, DNS queries, and dynamic zone updates
Safeguards the following mechanisms via TSIG (Transfer Signature) keys:
Synchronization of DNS files
Dynamic updates from master zones
Sends recursive queries to resolve external DNS records
Supports forwarders for resolving external DNS records
Supports slave zone notifications
Supports importing and exporting zone settings and resource records
Supports split-horizon DNS, providing each client with customized DNS information
Supports forward and reverse DNS lookups
Supports exporting logs
Supports customizing the number of system resources used by DNS activities:
Maximum cache size
Maximum cache TTL (Time-to-Live)
Maximum number of recursive clients
Maximum number of TCP connections
Maximum log size
Log Center
Features
Offers an easy solution for gathering and displaying log messages on your Synology Router
Centralized log management interface and the flexible search function to help users find useful information efficiently
Specifications
Displays charts for analyzing log activities
Archives logs by specified time, number of logs, the data size, and hosts
Sends logs to another log server
Supports TCP and UDP transfer protocol
Supports BSD (RFC 3164) and IETF (RFC 5424) format
Supports secured SSL connection by importing certificates
Supports sending logs filtered by service categories or log levels
Receives logs from the other log servers
Supports TCP and UDP transfer protocol
Supports BSD (RFC 3164), IETF (RFC 5424), and other customized formats
Supports secured SSL connection by importing certificates
Receives 50 - 3,000 syslog events per second
Proactive email notification according to log level or specified keywords
Advanced log search engine filtering logs by keywords, date range, and log level
Supports exporting logs to HTML or CSV files
RADIUS Server
Features
Provides centralized authentication, authorization, and account management for wired or wireless network access
Logs events to ensure connection monitoring
Specifications
支援的授權通訊協定：EAP-MSCHAPv2、EAP-TTLS、MS-CHAP、PAP、PEAP
根據伺服器受指定的驗證來源來轉譯帳號名稱
支援多種使用者的驗證類型：
僅驗證本地使用者
僅驗證 LDAP 使用者
僅驗證網域使用者
驗證本地使用者及 LDAP 使用者
驗證本地使用者及網域使用者
支援封鎖未受允許的存取
支援匯出 HTML 格式的日誌
支援多種分隔符號以區分帳號類型 (若有重複的使用者名稱，本地使用者有最高優先權)：
@：LDAP、網域使用者
\ ：網域使用者
無分隔符號：本地、LDAP、網域使用者
Limitations
Client names must be between 1 and 32 Unicode characters
Client names do not support special characters "!"#$%&'()*+-,/:;<=>?@[]\^`{}|~"
External Access
QuickConnect
Features
Allows secure and smooth connections from mobile and PC clients to your Synology Router via the Internet without the hassle of setting up port forwarding rules