{"id":18374,"date":"2022-09-07T14:27:00","date_gmt":"2022-09-07T12:27:00","guid":{"rendered":"https:\/\/www.firewallhardware.it\/una-strategia-di-difesa-da-ransomware-come-il-cryptolocker\/"},"modified":"2022-09-07T15:53:41","modified_gmt":"2022-09-07T13:53:41","slug":"truenas-ransomware-defense","status":"publish","type":"post","link":"https:\/\/blog.miniserver.it\/en\/truenas\/truenas-ransomware-defense\/","title":{"rendered":"How to Protect Yourself from Ransomware with TrueNAS"},"content":{"rendered":"\n<p>In this article we will explain how to defend against Ransomware, such as the Cryptolocker, using some of the properties of TrueNAS.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Software environment<\/h3>\n\n\n\n<p>We&#8217;re using TrueNAS\u00a011.2-X on an <a href=\"https:\/\/www.miniserver.store\/server-nas\/open-nas-tower-b1\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Open NAS Tower B1.<\/strong><\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Introduction<\/h3>\n\n\n\n<p>A <strong>ransomware<\/strong> is a type of <strong>malware<\/strong> that limits the access of the device it infects, requiring a ransom to pay to remove the limitation. For example, some forms of ransomware, such as cryptolockers block the system and <strong>instruct the user to pay<\/strong> to unlock the system, while others <strong>encrypt<\/strong> the user&#8217;s files asking to pay to bring back the encrypted files in the clear.<\/p>\n\n\n\n<p>It is almost always impossible to access the data, sometimes even paying the ransom, and it will therefore be necessary to use a Backup system to return to being productive.<\/p>\n\n\n\n<p>To do this we will proceed as follows:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>We configure the SMB service, and the number of shares needed; possibly access policies (strongly recommended)<\/li><li>We will use the potential of TrueNAS<\/li><li> in order to schedule periodic snapshots.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Configuration<\/h3>\n\n\n\n<p><strong>Creation of the Dataset<\/strong><\/p>\n\n\n\n<p>We create our dataset to share, which for TrueNAS are nothing but folders, which will be created within the pool.<\/p>\n\n\n\n<p>To create our dataset it is necessary to go to <strong>Storage<\/strong> -> <strong>Pools<\/strong> -> select the desired pool (in our case &#8220;MASTER&#8221;) -> <strong>Add Dataset<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"352\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/\/TrueNAS-Dataset-1024x352.png\" alt=\"\" class=\"wp-image-25728\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-200x69.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-400x138.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-600x206.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-768x264.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-800x275.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-983x338.png 983w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-1024x352.png 1024w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-1200x413.png 1200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset-1536x528.png 1536w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Dataset.png 1666w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Created our dataset (named &#8220;Data&#8221;) we can now modify the permissions under &#8220;Edit Permissions&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"962\" height=\"598\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/OpenNAS-Share-Type.png\" alt=\"\" class=\"wp-image-25730\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/OpenNAS-Share-Type-200x124.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/OpenNAS-Share-Type-400x249.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/OpenNAS-Share-Type-544x338.png 544w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/OpenNAS-Share-Type-600x373.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/OpenNAS-Share-Type-768x477.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/OpenNAS-Share-Type-800x497.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/OpenNAS-Share-Type.png 962w\" sizes=\"(max-width: 962px) 100vw, 962px\" \/><\/figure>\n\n\n\n<p>We choose the user owner and the group (in our case User &#8220;John&#8221; and Group &#8220;John&#8221;).<\/p>\n\n\n\n<p>We can put a tick on &#8220;Apply permissions recursively&#8221; if we want the permissions to be applied also to the sub-folders.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"961\" height=\"810\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively.png\" alt=\"\" class=\"wp-image-25736\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-200x169.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-400x337.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-401x338.png 401w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-600x506.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-768x647.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-800x674.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively.png 961w\" sizes=\"(max-width: 961px) 100vw, 961px\" \/><\/figure>\n\n\n\n<p>We can create local users if necessary, to assign access rights by going to <strong>Accounts<\/strong> -> <strong>Users<\/strong> -> <strong>Add<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"961\" height=\"810\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-1.png\" alt=\"\" class=\"wp-image-25739\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-1-200x169.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-1-400x337.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-1-401x338.png 401w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-1-600x506.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-1-768x647.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-1-800x674.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Apply-permissions-recursively-1.png 961w\" sizes=\"(max-width: 961px) 100vw, 961px\" \/><\/figure>\n\n\n\n<p><strong>NOTE<\/strong><\/p>\n\n\n\n<p><strong>TrueNAS <\/strong>supports integration with these directory services:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/cdn-www.ixsystems.com\/documentation\/freenas\/11.3-U5\/directoryservices.html#active-directory\" target=\"_blank\" rel=\"noopener\">Active Directory<\/a> (for Windows 2000 and later networks)<\/li><li><a href=\"https:\/\/cdn-www.ixsystems.com\/documentation\/freenas\/11.3-U5\/directoryservices.html#ldap\" target=\"_blank\" rel=\"noopener\">LDAP<\/a><\/li><li><a href=\"https:\/\/cdn-www.ixsystems.com\/documentation\/freenas\/11.3-U5\/directoryservices.html#nis\" target=\"_blank\" rel=\"noopener\">NIS<\/a><\/li><\/ul>\n\n\n\n<p>Active Directory (AD) is a service for sharing resources in a Windows network. AD can be configured on a Windows server running Windows Server 2000 (or later) or on a Unix-like operating system that runs <a href=\"https:\/\/wiki.samba.org\/index.php\/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Provisioning_a_Samba_Active_Directory\" target=\"_blank\" rel=\"noopener noreferrer\">Samba version 4<\/a>. Since AD provides authentication and authorization services for users on a network, it is not necessary to recreate the same user accounts on the TrueNAS system.<\/p>\n\n\n\n<p> You can then configure the Active Directory service so that account information, and imported users, can be authorized to access SMB shares on the TrueNAS system.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"684\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/\/TrueNAS-Active-DIrectory-1024x684.png\" alt=\"\" class=\"wp-image-25741\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-200x134.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-400x267.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-506x338.png 506w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-600x401.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-768x513.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-800x534.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-1024x684.png 1024w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-1200x801.png 1200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory-1536x1026.png 1536w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Active-DIrectory.png 1571w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>SMB service<\/strong><\/p>\n\n\n\n<p>As a first step to create a share it is necessary to enable the SMB service with the following procedure: <strong>Services<\/strong> -> <strong>SMB<\/strong> by checking &#8220;running&#8221; and &#8220;Start Automatically&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"550\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/\/TrueNAS-Services-1024x550.png\" alt=\"\" class=\"wp-image-25743\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-200x108.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-400x215.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-600x323.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-629x338.png 629w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-768x413.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-800x430.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-1024x550.png 1024w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-1200x645.png 1200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services-1536x826.png 1536w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Services.png 1678w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>It is sufficient to leave everything as default by default. Eventually we can put a tick on &#8220;Enable SMB1 support&#8221; if we were to interface with older systems that only support the SMB V1 protocol. For security reasons we advise you not to enable it unless absolutely necessary.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"955\" height=\"815\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrurNAS-SMB.png\" alt=\"\" class=\"wp-image-25745\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrurNAS-SMB-200x171.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrurNAS-SMB-396x338.png 396w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrurNAS-SMB-400x341.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrurNAS-SMB-600x512.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrurNAS-SMB-768x655.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrurNAS-SMB-800x683.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrurNAS-SMB.png 955w\" sizes=\"(max-width: 955px) 100vw, 955px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"437\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/\/TrueNAS-Sharing-1024x437.png\" alt=\"\" class=\"wp-image-25747\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-200x85.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-400x171.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-600x256.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-768x328.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-792x338.png 792w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-800x342.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-1024x437.png 1024w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-1200x512.png 1200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing-1536x656.png 1536w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Sharing.png 1677w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>Sharing creation<\/strong><\/p>\n\n\n\n<p>Let&#8217;s go under <strong>Sharing<\/strong> -> <strong>Windows (SMB) Shares<\/strong> -> <strong>ADD<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"550\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/\/TrueNAS-TASks-1024x550.png\" alt=\"\" class=\"wp-image-25751\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-200x108.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-400x215.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-600x323.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-629x338.png 629w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-768x413.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-800x430.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-1024x550.png 1024w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-1200x645.png 1200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-1536x826.png 1536w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks.png 1678w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>We choose the dateset that we created earlier (in our case named &#8220;Data&#8221;).<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"970\" height=\"635\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Data.png\" alt=\"\" class=\"wp-image-25749\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Data-200x131.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Data-400x262.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Data-516x338.png 516w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Data-600x393.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Data-768x503.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Data-800x524.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Data.png 970w\" sizes=\"(max-width: 970px) 100vw, 970px\" \/><\/figure>\n\n\n\n<p><strong>Automatic Snapshot configuration and scheduling<\/strong><\/p>\n\n\n\n<p>Snapshots are an interesting feature of the ZFS file system. After the initial snapshot, the new snapshots do not actually copy the new \/ added \/ modified files, but take a &#8220;differential&#8221; of the original snapshot resulting in a massive reduction in the size of the subsequent new snapshots, taking less time to record new snapshots and then improve the system performance.<\/p>\n\n\n\n<p>Snapshots can be understood as &#8220;photographs&#8221; that capture the status of the data up to a certain instant of time. This data will then be kept until all snapshots are deleted.<\/p>\n\n\n\n<p>If all the snapshots, which protect that data are removed, you will obviously lose the history of the changes remaining therefore with the data at present.<\/p>\n\n\n\n<p>You can return to the most recent snapshot by cloning or rolling back.<\/p>\n\n\n\n<p><em>&#8220;Think of snapshots as a fast and efficient process for restoring a file \/ directory in a previous \/ original version or in a state.&#8221;<\/em><\/p>\n\n\n\n<p>We can return to any &#8220;cloning&#8221; snapshot [term used by TrueNAS &#8211; ed]. Cloning is like &#8220;mounting&#8221; a snapshot in a new location (you need to provide the path on the file system).<\/p>\n\n\n\n<p>After creating a test dataset, we will configure a periodic snapshot for this dataset. Then we will add \/ modify files and roll back \/ clone to the state \/ previous version of the data status.<\/p>\n\n\n\n<p>It is immediately clear how useful this process can be when our data is compromised or even worse if it is encrypted by a Ransomware.<\/p>\n\n\n\n<p>Let&#8217;s start by configuring an automatic snapshot creation task.<\/p>\n\n\n\n<p>Let&#8217;s go to <strong>Task <\/strong>-> Periodic Snapshot Task -> <strong>ADD<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"550\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/\/TrueNAS-TASks-1024x550.png\" alt=\"\" class=\"wp-image-25751\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-200x108.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-400x215.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-600x323.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-629x338.png 629w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-768x413.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-800x430.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-1024x550.png 1024w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-1200x645.png 1200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks-1536x826.png 1536w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-TASks.png 1678w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>We can configure:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>The whole Pool or the dataset that interests us.<\/li><li>The lifetime of the snapshot (&#8220;Snapshot Lifetime&#8221;).<\/li><li>The beginning and end of the time frame in which to take snapshots.<\/li><li>How often to take the snapshot (&#8220;Interval&#8221;).<\/li><li>The days of the week in which to perform the task.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"960\" height=\"492\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-MasterData.png\" alt=\"\" class=\"wp-image-25753\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-MasterData-200x103.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-MasterData-400x205.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-MasterData-600x308.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-MasterData-660x338.png 660w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-MasterData-768x394.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-MasterData-800x410.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-MasterData.png 960w\" sizes=\"(max-width: 960px) 100vw, 960px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"170\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-PS.png\" alt=\"\" class=\"wp-image-25755\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-PS-200x33.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-PS-400x66.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-PS-600x100.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-PS-768x128.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-PS-800x133.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-PS.png 1024w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>In order to manage the snapshots we have created, we need to go to <strong>Storage<\/strong> -> <strong>Snapshot<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"552\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/\/TrueNAS-Snapshots-1024x552.png\" alt=\"\" class=\"wp-image-25757\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-200x108.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-400x216.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-600x323.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-627x338.png 627w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-768x414.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-800x431.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-1024x552.png 1024w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-1200x647.png 1200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots-1536x828.png 1536w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Snapshots.png 1676w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Each dataset \/ pool will have its own snapshot and we will be able to choose which one to restore.<\/p>\n\n\n\n<p>To restore the snapshot we can follow 2 roads:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Execute a clone: restore the snapshot in a portion of the file system and therefore storage that we are going to dedicate. In this case no other changes will be made but we will have a situation in which the snapshot will be restored parallel to the &#8220;current status&#8221;.<\/li><li>Rollback: restore the snapshot by overwriting it to the current state of the dataset data to which it refers. Pay attention to the fact that all changes subsequent to the creation of the snapshot will be lost, as will all the snapshots created after the restored snapshot.<\/li><\/ul>\n\n\n\n<p><strong>Clone<\/strong><\/p>\n\n\n\n<p>Click on the 3 balls of the snapshot we want to clone and select &#8220;Clone&#8221;.<\/p>\n\n\n\n<p>At this point we will be asked to select the path where we want the clone to be restored.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"967\" height=\"168\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-CLone.png\" alt=\"\" class=\"wp-image-25759\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-CLone-200x35.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-CLone-400x69.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-CLone-600x104.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-CLone-768x133.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-CLone-800x139.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-CLone.png 967w\" sizes=\"(max-width: 967px) 100vw, 967px\" \/><\/figure>\n\n\n\n<p>For example, we can create it within our shared dataset to be able to access it remotely and make a more convenient consultation.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"232\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Pools.png\" alt=\"\" class=\"wp-image-25761\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Pools-200x45.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Pools-400x91.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Pools-600x136.png 600w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Pools-768x174.png 768w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Pools-800x181.png 800w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TrueNAS-Pools.png 1024w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>Rollback<\/strong><\/p>\n\n\n\n<p>Click on the 3 balls of the snapshot that we want to clone and select &#8220;Rollback&#8221;<\/p>\n\n\n\n<p>We will therefore be warned of the consequences and irreversibility of the process.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"595\" height=\"238\" src=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TRueNAS-Warning.png\" alt=\"\" class=\"wp-image-25763\" srcset=\"https:\/\/blog.miniserver.it\/wp-content\/uploads\/TRueNAS-Warning-200x80.png 200w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TRueNAS-Warning-400x160.png 400w, https:\/\/blog.miniserver.it\/wp-content\/uploads\/TRueNAS-Warning.png 595w\" sizes=\"(max-width: 595px) 100vw, 595px\" \/><\/figure>\n\n\n\n<p>Once a snapshot has been rolled back it should be considered that the permissions in the restored snapshot are also restored.<\/p>\n\n\n\n<p><strong>CONCLUSION<\/strong><\/p>\n\n\n\n<p>Being able to rely on a certain number of snapshots can be very useful if our data is compromised by Ransomware like Cryptolocker or by other elements that could alter them.<\/p>\n\n\n\n<p>As a method it might be more convenient to first make a snapshot clone, perhaps in an isolated storage or in the event that all our data is encrypted, so that we can consult the content and decide whether to roll back the desired datasets.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>How to choose the right hardware to take advantage of all the features of FreeNAS.<\/p>\n","protected":false},"author":11,"featured_media":25775,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[231],"tags":[232],"class_list":["post-18374","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-truenas","tag-freenas-en"],"_links":{"self":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/18374","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/comments?post=18374"}],"version-history":[{"count":21,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/18374\/revisions"}],"predecessor-version":[{"id":25778,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/18374\/revisions\/25778"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/media\/25775"}],"wp:attachment":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/media?parent=18374"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/categories?post=18374"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/tags?post=18374"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}