(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Synology DiskStation DS223
|
|
Security Grade
Calculator v
|
Synology DiskStation DS223
Release Date: 2023-02-08 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Headless 2-bay NAS with a Kensington lock slot and a recessed reset button; no recurring physical-tampering incidents known. Physical access allows drive removal, so site physical security matters.
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
Synology continuously publishes DSM security advisories (Critical/Important), e.g. multiple 2026 bulletins; the DSM platform is a frequent CVE target, mitigated by regular patches.
|
| Prior attacks
|
None
|
🔗 Proof
|
No DS223-specific mass-compromise event was confirmed in this bounded review; absence of evidence is not proof of absence, and NAS platforms are actively targeted.
|
| Updatability
|
Very common
|
🔗 Proof
|
https://www.synology.com/en-global/security/advisory DSM receives frequent updates; Security Advisor scans for DSM/package updates and weak settings, and Synology maintains an active advisory channel with resolved patches.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
DSM integrates with Active Directory, Synology/Google LDAP, SSO (OIDC, SAML 2.0, CAS) and Kerberos v5 for external authentication and privilege mapping.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Supports HTTPS with TLS 1.1/1.2/1.3, SMB3 transport encryption, FTP over TLS, SFTP/SSH and Let's Encrypt certificates; QuickConnect can run end-to-end encrypted.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
DSM offers AES-256-encrypted shared folders with an AES-NI hardware engine and Key Manager; encryption is optional per folder rather than forced at rest.
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Full local user/group management (up to 256 local users on this model), granular privileges, quotas, password strength/expiration policies, plus domain/LDAP user integration.
|
| Authentication
|
Secure
|
🔗 Proof
|
DSM login supports two-step verification, configurable password strength/expiration rules, an automatic logout timer and suspicious-IP alerts via Security Advisor.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Auto Block bans IP addresses after a configurable threshold of failed logins across DSM, SSH, FTP and other services, with block/allow lists; Account Protection adds per-client rules.
|
| Event logging
|
Access event logged
|
🔗 Proof
|
Log Center records system and access events, forwards to remote syslog servers (BSD/IETF formats, SSL), and offers SMB transfer logging of file operations.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Initial DSM setup forces creation of a dedicated administrator account and password (no shared usable default headless); password strength and expiration rules are configurable afterward.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Synology DiskStation Manager (DSM), Linux-based (Companion App: Synology mobile apps — DS finder, Synology Photos, DS file, Synology Drive (iOS/Android))
|
| Hardware (CPU / GPU)
|
CPU: Realtek RTD1619B, quad-core 64-bit, 1.7 GHz • GPU: Not applicable (no GPU listed in official hardware spec; headless NAS)
|
| Memory & Storage
|
Memory: 2 GB DDR4 non-ECC • Storage: 2 drive bays (3.5-inch SATA HDD / 2.5-inch SATA SSD), diskless; up to 40 TB raw; Btrfs/ext4
|
| Power, Battery & Charging
|
Battery: Not applicable (mains-powered; USB UPS support optional) • Power: 60 W external AC adapter; 100–240 V AC, 50/60 Hz; 17.34 W operating / 4.08 W hibernation • Charging: Not applicable
|
| Display & Camera
|
Display: Not applicable (no screen; brightness-adjustable front status LEDs only) • Camera: Not applicable
|
| Sound & Connectivity
|
Sound: Not applicable (no built-in speaker) • Connectivity: 1× Gigabit RJ-45 Ethernet; 3× USB 3.2 Gen 1; no built-in Wi-Fi
|
| Physical (Dimensions & Mass)
|
Dimensions: 165 mm × 108 mm × 232.7 mm (H × W × D) • Mass: 1.28 kg
|
The DS223 is an entry-level 2-bay home/SOHO NAS running Synology DSM, assessed from its official hardware spec, the 8 Feb 2023 US launch press release, the Synology security advisory channel and the DSM technical specifications, verified 2026-10-25. Classification reflects the stock DSM management plane and onboard security features; optional packages, WAN-facing hardening and UPS deployments are out of scope. No DS223-specific incident history was enumerated beyond the vendor advisory index.
