[FDE] full disk encryption for NAS

[coderman]

On 1/8/07, Naveen Mamindlapalli <mamindlapalli.naveen at yahoo.co.in> wrote:
> ...
> My basic idea is to demonstrate a NAS box -product-
> with built-in disk encryption ( like truecrypt ).No
> need for the end user to care about the encryption of
> data locally on the host PC.He should simply mount it
> as a NAS drive.Here comes my doubt of Network
> Security.

use a VPN to access the NAS, like IPsec or OpenVPN.

otherwise, an active MITM attack (via ARP poisoning for example) may
expose all data to and from NAS from all clients.

best regards,