{"id":22125,"date":"2026-10-25T07:58:10","date_gmt":"2026-10-24T23:58:10","guid":{"rendered":"https:\/\/synopower.club\/?post_type=docs&#038;p=22125"},"modified":"2026-10-25T08:04:28","modified_gmt":"2026-10-25T00:04:28","password":"","slug":"synology-threat-prevention-blind-spots","status":"publish","type":"docs","link":"https:\/\/synopower.club\/ja\/docs\/synology-threat-prevention-blind-spots\/","title":{"rendered":"Synology Threat Prevention\uff1a\u691c\u77e5\u3067\u304d\u308b\u3082\u306e\u3068\u691c\u77e5\u3067\u304d\u306a\u3044\u3082\u306e"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Threat Prevention \u306f\u3001Synology NAS \u3067\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u3092\u30db\u30b9\u30c8\u3057\u3088\u3046\u3068\u6c7a\u3081\u305f\u3068\u304d\u306b\u3001\u591a\u304f\u306e\u4eba\u304c\u6700\u521d\u306b\u624b\u3092\u4f38\u3070\u3059\u30d1\u30c3\u30b1\u30fc\u30b8\u3067\u3059\u3002\u30eb\u30fc\u30bf\u30fc\u4e0a\u3067\u52d5\u4f5c\u3057\u3001\u30b7\u30fc\u30eb\u30c9\u30a2\u30a4\u30b3\u30f3\u304c\u3042\u308a\u3001\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u306b\u306f\u4f55\u767e\u3082\u306e\u653b\u6483\u304c\u30ab\u30a6\u30f3\u30c8\u3055\u308c\u308b\u305f\u3081\u3001\u516c\u958b\u30b5\u30a4\u30c8\u3092\u5b89\u5168\u306b\u4fdd\u3064\u5b58\u5728\u306e\u3088\u3046\u306b\u898b\u3048\u307e\u3059\u3002\u79c1\u305f\u3061\u306f\u4fdd\u6709\u3059\u308b\u3059\u3079\u3066\u306e\u30de\u30b7\u30f3\u306e\u624b\u524d\u306b\u3042\u308b RT6600ax \u3067\u904b\u7528\u3057\u3066\u304a\u308a\u3001\u5c0e\u5165\u3059\u308b\u4fa1\u5024\u306f\u5341\u5206\u306b\u3042\u308a\u307e\u3057\u305f\u3002\u3057\u304b\u3057\u540c\u6642\u306b\u3001\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u306e\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u306b\u3068\u3063\u3066\u306f\u3001\u307b\u3068\u3093\u3069\u610f\u5473\u3092\u306a\u3055\u306a\u3044\u3082\u306e\u3067\u3082\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u306e NAS \u30db\u30b9\u30c6\u30a3\u30f3\u30b0 101 \u306e\u8a18\u4e8b\u3067\u306f\u3001\u81ea\u793e\u306e\u30eb\u30fc\u30bf\u30fc\u3092\u958b\u304d\u3001\u5b9f\u969b\u306e 1 \u9031\u9593\u306e\u30a4\u30d9\u30f3\u30c8\u3092\u8aad\u307f\u89e3\u304d\u3001 Threat Prevention \u304c\u5bfe\u51e6\u3067\u304d\u306a\u304f\u306a\u308b\u9650\u754c\u3092\u6b63\u78ba\u306b\u793a\u3057\u307e\u3059\u3002\u305d\u306e\u969b\u3001 Threat Prevention \u3067\u306f\u691c\u77e5\u3067\u304d\u308b\u306f\u305a\u306e\u306a\u3044\u653b\u6483\u306e\u4f8b\u3068\u3057\u3066 PHP2Shell \u3092\u53d6\u308a\u4e0a\u3052\u307e\u3059\u3002<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>SynoPower Club\u30dd\u30a4\u30f3\u30c8\uff1a<\/strong> \u79c1\u306fSynology\u306e\u30b5\u30dd\u30fc\u30c8\u5074\u306b\u9577\u5e74\u643a\u308f\u3063\u3066\u304d\u307e\u3057\u305f\u304c\u3001\u300c\u3053\u306e\u653b\u6483\u3092\u6b62\u3081\u308b\u306b\u306f\u3069\u306e\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u30aa\u30f3\u306b\u3059\u308c\u3070\u3088\u3044\u304b\u300d\u3068\u3044\u3046\u8cea\u554f\u304c\u5e38\u306b\u5bc4\u305b\u3089\u308c\u307e\u3057\u305f\u3002\u305d\u308c\u306f\u6b63\u3057\u3044\u76f4\u611f\u3067\u3059\u304c\u3001\u5bfe\u8c61\u3068\u3059\u308b\u6a5f\u5668\uff08\u30dc\u30c3\u30af\u30b9\uff09\u304c\u9593\u9055\u3063\u3066\u3044\u307e\u3059\u3002\u79c1\u304c\u6700\u7d42\u7684\u306b\u7d0d\u5f97\u3067\u304d\u305f\u306e\u306f\u3001\u6a5f\u80fd\u306e\u7d39\u4ecb\u30da\u30fc\u30b8\u3067\u306f\u306a\u304f\u3001\u5f53\u793e\u81ea\u8eab\u306e\u30a4\u30d9\u30f3\u30c8\u30ea\u30b9\u30c8\u3092\u8aad\u307f\u8fbc\u3093\u3060\u6642\u3067\u3057\u305f\u3002\u4eca\u6708\u5f53\u793e\u306e\u30eb\u30fc\u30bf\u30fc\u304c\u8a18\u9332\u3057\u305f\u3059\u3079\u3066\u306e\u30a2\u30e9\u30fc\u30c8\u306f\u3001\u60aa\u610f\u306e\u3042\u308b\u30da\u30a4\u30ed\u30fc\u30c9\u3092\u6301\u3064\u30ea\u30af\u30a8\u30b9\u30c8\u3067\u306f\u306a\u304f\u3001\u8a55\u5224\uff08\u30ec\u30d4\u30e5\u30c6\u30fc\u30b7\u30e7\u30f3\uff09\u306e\u60aa\u3044\u30a2\u30c9\u30ec\u30b9\u3067\u3057\u305f\u3002\u305d\u308c\u3092\u78ba\u8a8d\u3059\u308c\u3070\u3001\u5c01\u5370\u3055\u308c\u305f\u5c01\u7b52\u306e\u4e2d\u306b\u5165\u3063\u3066\u3044\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u691c\u67fb\u3059\u308b\u3088\u3046Threat Prevention\u306b\u6c42\u3081\u308b\u3053\u3068\u306f\u306a\u304f\u306a\u308b\u3067\u3057\u3087\u3046\u3002<\/p>\n<\/blockquote>\n\n\n\n<h2 id=\"what-threat-prevention-actually-does-on-a-synology-router\" class=\"wp-block-heading\">Synology \u30eb\u30fc\u30bf\u30fc\u4e0a\u3067 Threat Prevention \u304c\u5b9f\u969b\u306b\u4f55\u3092\u884c\u3046\u304b<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention \u306f\u3001Snort \u304a\u3088\u3073 Suricata \u306e\u7cfb\u8b5c\u3092\u53d7\u3051\u7d99\u3050\u4fb5\u5165\u691c\u77e5\u30fb\u9632\u6b62\u30b7\u30b9\u30c6\u30e0\u3067\u3059\u3002\u30eb\u30fc\u30bf\u30fc\u304c\u30d1\u30b1\u30c3\u30c8\u3092\u8ee2\u9001\u3059\u308b\u969b\u306b\u30d1\u30b1\u30c3\u30c8\u3092\u8aad\u307f\u53d6\u308a\u3001\u30b7\u30b0\u30cd\u30c1\u30e3\u30bb\u30c3\u30c8\u3068\u7167\u5408\u3057\u3066\u3001\u30a2\u30e9\u30fc\u30c8\u3092\u8a18\u9332\u3059\u308b\u304b\u30d1\u30b1\u30c3\u30c8\u3092\u7834\u68c4\u3057\u307e\u3059\u3002\u5f53\u793e\u306e RT6600ax \u3067\u306f\u3001\u30b7\u30b0\u30cd\u30c1\u30e3\u30d5\u30a3\u30fc\u30c9\u3068\u3057\u3066 Emerging Threats \u30eb\u30fc\u30eb\u30bb\u30c3\u30c8\u306e\u7121\u6599\u5c64\u3067\u3042\u308b ET Open \u3092\u4f7f\u7528\u3057\u3066\u304a\u308a\u3001\u6bce\u65e5 09:00 \u306b\u66f4\u65b0\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u304c\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u305d\u306e\u8a2d\u8a08\u304b\u3089 3 \u3064\u306e\u7279\u6027\u304c\u751f\u3058\u307e\u3059\u304c\u3001\u305d\u306e\u3059\u3079\u3066\u304c\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u5185\u306e\u3069\u306e\u30c1\u30a7\u30c3\u30af\u30dc\u30c3\u30af\u30b9\u3088\u308a\u3082\u91cd\u8981\u3067\u3059\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>It can only examine packets the router <strong>forwards<\/strong>. Traffic that never crosses the routing engine is not slow to inspect, it is invisible.<\/li>\n\n<li>It can only match on bytes it can <strong>read<\/strong>\u3002Threat Prevention\u306b\u306fTLS\u30a4\u30f3\u30bf\u30fc\u30bb\u30d7\u30c8\u6a5f\u80fd\u304c\u4e00\u5207\u306a\u3044\u305f\u3081\u3001\u6697\u53f7\u5316\u3055\u308c\u305f\u30da\u30a4\u30ed\u30fc\u30c9\u306e\u5185\u5bb9\u306f\u8aad\u307f\u53d6\u308c\u307e\u305b\u3093\u3002<\/li>\n\n<li>It can only match signatures <strong>somebody else wrote<\/strong>. The interface exposes vendor classes to switch on and off, and nothing that accepts a rule you author yourself.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u3089\u306f\u3069\u308c\u3082\u6b20\u9665\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5883\u754c\u306b IPS \u3092\u914d\u7f6e\u3059\u308b\u3053\u3068\u306f\u5408\u7406\u7684\u3067\u5f79\u7acb\u3064\u3053\u3068\u3067\u3059\u3002\u9593\u9055\u3044\u306f\u3001\u5883\u754c\u90e8\u5206\u3053\u305d\u304c\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u304c\u653b\u6483\u3092\u53d7\u3051\u308b\u5834\u6240\u3067\u3042\u308b\u3068\u601d\u3044\u8fbc\u3093\u3067\u3057\u307e\u3046\u3053\u3068\u306b\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<h2 id=\"threat-prevention-vs-a-web-application-firewall\" class=\"wp-block-heading\">Threat Prevention \u3068 Web \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u9055\u3044<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u305d\u306e\u9055\u3044\u3092\u6700\u3082\u660e\u78ba\u306b\u7406\u89e3\u3059\u308b\u65b9\u6cd5\u306f\u3001 Threat Prevention \u3068 Web \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\uff08WAF\uff09\u3092\u4e26\u3079\u3001\u305d\u308c\u305e\u308c\u306e\u5224\u5b9a\u6642\u306b\u4fdd\u6301\u3057\u3066\u3044\u308b\u60c5\u5831\u304c\u4f55\u304b\u3092\u8003\u3048\u308b\u3053\u3068\u3067\u3059\u3002 Threat Prevention \u304c\u4fdd\u6301\u3057\u3066\u3044\u308b\u306e\u306f\u30d1\u30b1\u30c3\u30c8\u3067\u3059\u3002\u4e00\u65b9\u3001WAF \u304c\u4fdd\u6301\u3057\u3066\u3044\u308b\u306e\u306f\u5fa9\u53f7\u5316\u3055\u308c\u305f HTTP \u30ea\u30af\u30a8\u30b9\u30c8\u3067\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Question<\/th><th>Router IPS<\/th><th>Reverse-proxy WAF<\/th><\/tr><\/thead><tbody><tr><td>\u8d70\u308b\u5834\u6240<\/td><td>On the routing path, before TLS ends<\/td><td>At the edge, after TLS ends<\/td><\/tr><tr><td>What it inspects<\/td><td>Packet headers and any cleartext bytes<\/td><td>Method, path, headers, cookies, body<\/td><\/tr><tr><td>HTTPS traffic<\/td><td>Opaque<\/td><td>Fully readable<\/td><\/tr><tr><td>Rules you can add<\/td><td>Vendor classes on or off<\/td><td>Your own expressions, plus managed rulesets<\/td><\/tr><tr><td>Same-subnet traffic<\/td><td>Never seen<\/td><td>Not applicable, it is upstream of everything<\/td><\/tr><tr><td>Typical catch<\/td><td>Reputation hits, scans, cleartext exploits, outbound command and control<\/td><td>Injection, traversal, known CVE request shapes, credential stuffing, bots<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u3089\u306f\u7af6\u5408\u3059\u308b\u88fd\u54c1\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u540c\u3058\u901a\u4fe1\u7d4c\u8def\u306e\u7570\u306a\u308b\u30bb\u30b0\u30e1\u30f3\u30c8\u3092\u30ab\u30d0\u30fc\u3057\u3066\u304a\u308a\u3001\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u578b\u30b5\u30a4\u30c8\u306b\u5fc5\u8981\u306a\u306e\u306f\u5f8c\u8005\uff08WAF\uff09\u3067\u3059\u3002\u5f53\u793e\u3067\u306f\u4e21\u65b9\u3092\u904b\u7528\u3057\u3066\u304a\u308a\u3001\u305d\u308c\u305e\u308c\u304b\u3089\u5168\u304f\u7570\u306a\u308b\u5f79\u5272\u3092\u671f\u5f85\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<h2 id=\"reading-595-events-from-one-week-on-our-own-router\" class=\"wp-block-heading\">\u81ea\u793e\u30eb\u30fc\u30bf\u30fc\u3067\u306e 1 \u9031\u9593\u30fb595 \u4ef6\u306e\u30a4\u30d9\u30f3\u30c8\u3092\u89e3\u8aad\u3059\u308b<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">2026 \u5e74 10 \u6708 25 \u65e5\u6642\u70b9\u306b\u304a\u3051\u308b\u3001\u5f53\u793e\u672c\u756a\u30eb\u30fc\u30bf\u30fc\u306e Threat Prevention \u6982\u8981\u753b\u9762\u3067\u3059\u30027 \u65e5\u9593\u3067 595 \u4ef6\u306e\u60aa\u610f\u306e\u3042\u308b\u30a4\u30d9\u30f3\u30c8\u304c\u767a\u751f\u3057\u3001\u305d\u306e\u3046\u3061 75 \u4ef6\u304c\u300c\u9ad8\u300d\u91cd\u8981\u5ea6\u3067\u3057\u305f\u3002\u307e\u308b\u3067\u6d2a\u6c34\u3092\u9632\u3050\u58c1\u306e\u3088\u3046\u306b\u898b\u3048\u307e\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"eager\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events.webp\" alt=\"RT6600ax\u3067\u306eSynology Threat Prevention\u306e\u6982\u8981\u30027\u65e5\u9593\u3067595\u4ef6\u306e\u60aa\u610f\u306e\u3042\u308b\u30a4\u30d9\u30f3\u30c8\u3068\u3001\u6f5c\u5728\u7684\u306a\u8105\u5a01\u3092\u6301\u30641\u53f0\u306e\u30c7\u30d0\u30a4\u30b9\u3092\u793a\u3057\u3066\u3044\u307e\u3059\" class=\"wp-image-22119\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-1000x482.webp 1000w\"  fetchpriority=\"high\"\/><figcaption class=\"wp-element-caption\">\u5f53\u793e RT6600ax \u3067\u306e 7 \u65e5\u9593\u306e\u8a18\u9332\u3067\u3059\u3002\u9ad8\u91cd\u8981\u5ea6\u30a4\u30d9\u30f3\u30c8\u306e\u3059\u3079\u3066\u306f 1 \u53f0\u306e\u30c7\u30d0\u30a4\u30b9\u306b\u3088\u308b\u3082\u306e\u3067\u3042\u308a\u3001\u305d\u308c\u306f\u30a6\u30a7\u30d6\u30db\u30b9\u30c8\u3067\u306f\u306a\u304f\u30e1\u30fc\u30eb\u30b5\u30fc\u30d0\u30fc\u3067\u3057\u305f\u3002<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u305d\u306e\u753b\u9762\u306b\u3042\u308b 2 \u3064\u306e\u8a73\u7d30\u306a\u60c5\u5831\u306f\u3001\u898b\u51fa\u3057\u306e\u6570\u5024\u4ee5\u4e0a\u306e\u4fa1\u5024\u304c\u3042\u308a\u307e\u3059\u30021 \u3064\u76ee\u306f\u3001\u6f5c\u5728\u7684\u306a\u8105\u5a01\u306e\u4e0b\u306b\u8868\u793a\u3055\u308c\u3066\u3044\u308b\u30c7\u30d0\u30a4\u30b9\u304c 1 \u53f0\u306e\u307f\u3067\u3042\u308a\u3001\u305d\u308c\u304c TLS \u3092\u7d42\u7aef\u3057\u3066 MailPlus \u3092\u5b9f\u884c\u3057\u3066\u3044\u308b\u30de\u30b7\u30f3\u300cREVERSE_MAIL\u300d\u3067\u3042\u308b\u70b9\u3067\u3059\u30022 \u3064\u76ee\u306f\u3001\u7dd1\u8272\u306e\u30c1\u30a7\u30c3\u30af\u30de\u30fc\u30af\u306e\u6a2a\u306b\u3042\u308b\u30b7\u30b0\u30cd\u30c1\u30e3\u306e\u65e5\u4ed8\u3067\u3059\u3002\u3067\u306f\u30011 \u3064\u306e\u30a4\u30d9\u30f3\u30c8\u3092\u958b\u3044\u3066\u3001\u5b9f\u969b\u306b\u4f55\u304c\u691c\u51fa\u3055\u308c\u305f\u306e\u304b\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature.webp\" alt=\"\u30b9\u30c6\u30fc\u30bf\u30b9\u304c\u300cAlert\u300d\u3067\u3001IP\u30a2\u30c9\u30ec\u30b9\u306e\u307f\u306b\u30de\u30c3\u30c1\u3059\u308b\u30eb\u30fc\u30eb\u672c\u4f53\u3092\u6301\u3064ET CINS\u4f4e\u30ec\u30d4\u30e5\u30c6\u30fc\u30b7\u30e7\u30f3IP\u30b7\u30b0\u30cd\u30c1\u30e3\u3092\u793a\u3059Threat Prevention\u30a4\u30d9\u30f3\u30c8\u306e\u8a73\u7d30\" class=\"wp-image-22120\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-1000x482.webp 1000w\" \/><figcaption class=\"wp-element-caption\">\u30b7\u30b0\u30cd\u30c1\u30e3\u306e\u672c\u4f53\u304c\u6c7a\u5b9a\u7684\u306a\u8a3c\u62e0\u3067\u3059\u3002\u3053\u308c\u306f alert ip \u306b\u7d9a\u3044\u3066\u30a2\u30c9\u30ec\u30b9\u306e\u30ea\u30b9\u30c8\u3067\u59cb\u307e\u3063\u3066\u3044\u308b\u305f\u3081\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u4e2d\u8eab\u306f\u4f55\u3082\u691c\u67fb\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3002<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u5206\u985e Misc Attack\u3001\u91cd\u8981\u5ea6\u300c\u4e2d\u300d\u3001\u30b9\u30c6\u30fc\u30bf\u30b9 Alert\u3001\u30b7\u30b0\u30cd\u30c1\u30e3\u540d ET CINS Active Threat Intelligence Poor Reputation IP group 24\u3002\u30eb\u30fc\u30eb\u672c\u4f53\u3092\u958b\u304f\u3068\u3001alert ip \u3068\u305d\u308c\u306b\u7d9a\u304f\u9577\u3044\u30a2\u30c9\u30ec\u30b9\u30ea\u30b9\u30c8\u304b\u3089\u59cb\u307e\u308a\u307e\u3059\u3002\u3053\u308c\u306f\u5358\u306a\u308b\u30d6\u30ed\u30c3\u30af\u30ea\u30b9\u30c8\u306e\u7167\u5408\u3067\u3059\u3002HTTP \u30ea\u30af\u30a8\u30b9\u30c8\u306e\u3069\u306e\u90e8\u5206\u3082\u8aad\u307f\u53d6\u3089\u308c\u3066\u3044\u307e\u305b\u3093\u3002\u69cb\u9020\u4e0a\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u3067\u304d\u306a\u3044\u304b\u3089\u3067\u3059\u30022 \u3064\u76ee\u306e\u5b9b\u5148\u3067\u3042\u308b\u5f53\u793e\u306e Virtual DSM \u30db\u30b9\u30c8\u306b\u5bfe\u3059\u308b\u30a4\u30d9\u30f3\u30c8\u3082\u30b5\u30f3\u30d7\u30eb\u62bd\u51fa\u3057\u305f\u3068\u3053\u308d\u3001\u30b0\u30eb\u30fc\u30d7\u756a\u53f7\u304c\u7570\u306a\u308b\u3060\u3051\u3067\u540c\u3058\u7a2e\u985e\u306e\u30eb\u30fc\u30eb\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3057\u305f\u304c\u3063\u3066\u30011 \u9031\u9593\u306e\u6b63\u76f4\u306a\u307e\u3068\u3081\u306f\u6b21\u306e\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\u30eb\u30fc\u30bf\u30fc\u306f\u3001\u3059\u3067\u306b\u8a55\u5224\u306e\u60aa\u3044\u30a2\u30c9\u30ec\u30b9\u304b\u3089\u306e\u6570\u767e\u4ef6\u306e\u63a5\u7d9a\u3092\u8a8d\u8b58\u3057\u305f\u3060\u3051\u3067\u3059\u3002\u3053\u308c\u306f\u5b9f\u306b\u6709\u7528\u306a\u6a5f\u80fd\u3067\u3059\u3002\u3057\u304b\u3057\u3001\u30a6\u30a7\u30d6\u653b\u6483\u306e\u691c\u77e5\u3067\u306f\u306a\u304f\u3001595 \u3068\u3044\u3046\u6570\u5024\u3092\u30a6\u30a7\u30d6\u653b\u6483\u306e\u9632\u5fa1\u6570\u3068\u3057\u3066\u89e3\u91c8\u3059\u3079\u304d\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<h2 id=\"how-to-audit-threat-prevention-in-4-steps\" class=\"wp-block-heading\">Threat Prevention \u3092 4 \u3064\u306e\u30b9\u30c6\u30c3\u30d7\u3067\u76e3\u67fb\u3059\u308b\u65b9\u6cd5<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention \u3092\u5168\u9762\u7684\u306b\u4fe1\u983c\u3059\u308b\u524d\u306b\u3001\u81ea\u8eab\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3067\u5b9f\u969b\u306b\u4f55\u3092\u884c\u3063\u3066\u3044\u308b\u304b\u3092\u8abf\u3079\u308b\u305f\u3081\u306b 10 \u5206\u307b\u3069\u6642\u9593\u3092\u53d6\u3063\u3066\u304f\u3060\u3055\u3044\u3002\u4ee5\u4e0b\u306e\u30b9\u30c6\u30c3\u30d7\u306f\u3059\u3079\u3066\u8aad\u307f\u53d6\u308a\u5c02\u7528\u3067\u3042\u308a\u3001\u8a2d\u5b9a\u3092\u5909\u66f4\u3059\u308b\u3053\u3068\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n\n<div id=\"rank-math-howto\" class=\"rank-math-block\" >\n<div class=\"rank-math-howto-description\">\n\n<\/div>\n\n<div class=\"rank-math-steps\">\n<div id=\"step-1\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">Open one event and read the signature body<\/h3>\n<div class=\"rank-math-step-content\"><p>Threat Prevention\u304b\u3089\u300c\u30a4\u30d9\u30f3\u30c8\u300d\u306b\u79fb\u52d5\u3057\u3001\u3044\u305a\u308c\u304b\u306e\u30a8\u30f3\u30c8\u30ea\u30fc\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002\u8272\u4ed8\u304d\u306e\u6df1\u523b\u5ea6\u30d0\u30c3\u30b8\u306e\u5148\u306b\u3042\u308b\u300c\u30b7\u30b0\u30cd\u30c1\u30e3\u30eb\u30fc\u30eb\u300d\u30dc\u30c3\u30af\u30b9\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002alert ip\u3067\u59cb\u307e\u308b\u30eb\u30fc\u30eb\u306f\u3001\u30a2\u30c9\u30ec\u30b9\u306e\u8a55\u5224\uff08\u30ec\u30d4\u30e5\u30c6\u30fc\u30b7\u30e7\u30f3\uff09\u306e\u307f\u3067\u30de\u30c3\u30c1\u30f3\u30b0\u3057\u3066\u3044\u307e\u3059\u3002content\u3084pcre\u3092\u542b\u3080\u30eb\u30fc\u30eb\u306f\u3001\u30da\u30a4\u30ed\u30fc\u30c9\u3067\u30de\u30c3\u30c1\u30f3\u30b0\u3057\u3066\u3044\u307e\u3059\u3002Threat Prevention\u304c\u4f55\u3092\u4fdd\u8b77\u3057\u3066\u3044\u308b\u304b\u3092\u5224\u65ad\u3059\u308b\u524d\u306b\u3001\u3054\u81ea\u8eab\u306e\u30ea\u30b9\u30c8\u3067\u305d\u308c\u305e\u308c\u304c\u3044\u304f\u3064\u898b\u3064\u304b\u308b\u304b\u6570\u3048\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<\/div>\n<\/div>\n<div id=\"step-2\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\u76e3\u8996\u3055\u308c\u3066\u3044\u308b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<div class=\"rank-math-step-content\"><p>[\u8a2d\u5b9a] \u3092\u958b\u304d\u3001[\u76e3\u8996\u5bfe\u8c61\u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9] \u30c6\u30fc\u30d6\u30eb\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002\u30c1\u30a7\u30c3\u30af\u304c\u5165\u3063\u3066\u3044\u308b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306e\u307f\u304c\u691c\u67fb\u3055\u308c\u3001\u901a\u5e38\u306e\u904b\u7528\u74b0\u5883\u3067\u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306b\u9762\u3057\u305f\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u304c\u305d\u308c\u306b\u8a72\u5f53\u3057\u307e\u3059\u3002\u540c\u4e00 LAN \u30b5\u30d6\u30cd\u30c3\u30c8\u5185\u306e 2 \u3064\u306e\u30c7\u30d0\u30a4\u30b9\u9593\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306f\u3001\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3067\u306f\u306a\u304f\u30b9\u30a4\u30c3\u30c1\u30f3\u30b0\u3055\u308c\u308b\u305f\u3081\u3001\u691c\u67fb\u30a8\u30f3\u30b8\u30f3\u306b\u5230\u9054\u3059\u308b\u3053\u3068\u306f\u306a\u304f\u3001\u3053\u306e\u30da\u30fc\u30b8\u306e\u3069\u306e\u8a2d\u5b9a\u3092\u5909\u66f4\u3057\u3066\u3082\u305d\u308c\u3092\u5909\u3048\u308b\u3053\u3068\u306f\u3067\u304d\u307e\u305b\u3093\u3002<\/p>\n<\/div>\n<\/div>\n<div id=\"step-3\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\u30eb\u30fc\u30bf\u30fc\u304c\u6df7\u96d1\u3057\u3066\u3044\u308b\u3068\u304d\u306b\u4f55\u304c\u8d77\u3053\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<div class=\"rank-math-step-content\"><p>\u540c\u3058\u30d1\u30cd\u30eb\u5185\u3067\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u30e2\u30fc\u30c9\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u300c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5b89\u5b9a\u6027\u3092\u512a\u5148\u300d\u306f\u3001\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u30a8\u30f3\u30b8\u30f3\u3067\u51e6\u7406\u3067\u304d\u308b\u5bb9\u91cf\u3092\u8d85\u3048\u305f\u5834\u5408\u3001\u8d85\u904e\u5206\u304c\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3055\u308c\u305a\u306b\u305d\u306e\u307e\u307e\u901a\u904e\u3059\u308b\u3053\u3068\u3092\u610f\u5473\u3057\u307e\u3059\u3002\u300c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u512a\u5148\u300d\u306f\u3001\u4ee3\u308f\u308a\u306b\u8d85\u904e\u5206\u304c\u7834\u68c4\u3055\u308c\u308b\u3053\u3068\u3092\u610f\u5473\u3057\u307e\u3059\u3002\u524d\u8005\u306e\u9078\u629e\u80a2\u306f\u30d5\u30a7\u30a4\u30eb\u30aa\u30fc\u30d7\u30f3\u3068\u306a\u308a\u56de\u7dda\u3092\u7dad\u6301\u3057\u3001\u5f8c\u8005\u306e\u9078\u629e\u80a2\u306f\u30d5\u30a7\u30a4\u30eb\u30af\u30ed\u30fc\u30ba\u3068\u306a\u308a\u56de\u7dda\u3092\u30c0\u30a6\u30f3\u3055\u305b\u307e\u3059\u3002\u3069\u3061\u3089\u304c\u5b9f\u969b\u306b\u5fc5\u8981\u304b\u3092\u5224\u65ad\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<\/div>\n<\/div>\n<div id=\"step-4\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">Try to add a rule of your own<\/h3>\n<div class=\"rank-math-step-content\"><p>Open Self-Defined Policy. You can change the action for a signature the vendor already ships, and you can scope it by source or destination address. There is no field anywhere that accepts a signature you wrote. If your threat is newer than your signature feed, this screen is where you discover you have no way to respond.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n\n\n\n<h2 id=\"where-it-genuinely-earns-its-place\" class=\"wp-block-heading\">Threat Prevention \u304c\u771f\u306e\u4fa1\u5024\u3092\u767a\u63ee\u3059\u308b\u5834\u9762<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f53\u793e\u3067\u306f Threat Prevention \u3092\u30aa\u30f3\u306b\u3057\u7d9a\u3051\u3066\u3044\u307e\u3059\u304c\u3001\u305d\u308c\u306f\u6c17\u4f11\u3081\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u5f53\u793e\u306e\u74b0\u5883\u306b\u3042\u308b\u4ed6\u306e\u3069\u306e\u30c4\u30fc\u30eb\u3082\u4ee3\u7528\u3067\u304d\u306a\u3044 4 \u3064\u306e\u5f79\u5272\u3092\u679c\u305f\u3057\u3066\u3044\u308b\u304b\u3089\u3067\u3059\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Outbound command and control.<\/strong> This is the strongest case by far. A compromised device has to call home, that call has to leave through the router, and a good share of it is still either cleartext or aimed at a known address. Our router ships the Malware Command and Control Activity class with 3,450 of 3,498 rules enabled, and the Domain Observed Used for C2 class with 7,157 of 7,202.<\/li>\n\n<li><strong>Cleartext protocols from the internet.<\/strong> Our mail server answers on port 25, and SMTP is cleartext until STARTTLS. That is real inspectable traffic, and it is no accident that the mail host is the one device our events list keeps naming.<\/li>\n\n<li><strong>Scanning and reconnaissance.<\/strong> Port sweeps and fingerprinting are recognised by connection behaviour rather than by payload, so encryption does not hide them.<\/li>\n\n<li><strong>Visibility.<\/strong> A searchable log of who knocked and with what reputation is worth having, even when every entry is only a reputation hit. It is monitoring value, and it should be counted as monitoring value rather than as protection.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u3089 4 \u3064\u306b\u5171\u901a\u3057\u3066\u3044\u308b\u306e\u306f\u3001\u3044\u305a\u308c\u3082\u300c\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u306b\u5bfe\u3059\u308b\u653b\u6483\u3067\u306f\u306a\u3044\u300d\u3068\u3044\u3046\u70b9\u3067\u3059\u3002<\/p>\n\n\n\n<h2 id=\"why-a-site-owner-asks-threat-prevention-for-the-wrong-thing\" class=\"wp-block-heading\">\u30b5\u30a4\u30c8\u6240\u6709\u8005\u304c Threat Prevention \u306b\u8aa4\u3063\u305f\u671f\u5f85\u3092\u5bc4\u305b\u3066\u3057\u307e\u3046\u7406\u7531<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NAS \u3067\u30b5\u30a4\u30c8\u3092\u30db\u30b9\u30c8\u3059\u308b\u5834\u5408\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u7d4c\u8def\u306b\u306f\u901a\u5e38\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304c\u542b\u307e\u308c\u307e\u3059\u3002\u5f53\u793e\u306e\u69cb\u6210\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u306a\u3063\u3066\u304a\u308a\u3001\u3053\u306e\u69cb\u9020\u81ea\u4f53\u304c\u3059\u3079\u3066\u3092\u6c7a\u5b9a\u3065\u3051\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The visitor reaches <strong>Cloudflare<\/strong>, which answers most requests from cache and inspects the rest in cleartext.<\/li>\n\n<li>What is left crosses the <strong>router<\/strong>\u3001\u305d\u3053\u3067Threat Prevention\u306b\u898b\u3048\u308b\u306e\u306f\u6697\u53f7\u5316\u3055\u308c\u305fTLS\u30b9\u30c8\u30ea\u30fc\u30e0\u3060\u3051\u3067\u3042\u308a\u3001\u305d\u308c\u4ee5\u4e0a\u306e\u3082\u306e\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/li>\n\n<li>\u305d\u306e <strong>reverse proxy NAS<\/strong> terminates TLS and forwards plain HTTP to the machine that runs the site.<\/li>\n\n<li>That last hop is on the <strong>same subnet<\/strong>, so the frame goes through a switch and the router is not in the path.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u30894\u884c\u3092\u5408\u308f\u305b\u3066\u8aad\u3080\u3068\u3001\u843d\u3068\u3057\u7a74\u306f\u660e\u767d\u3067\u3059\u3002\u30ea\u30af\u30a8\u30b9\u30c8\u304c\u8aad\u307f\u53d6\u308a\u53ef\u80fd\u306a\u5f62\u5f0f\u3067\u5b58\u5728\u3059\u308b\u552f\u4e00\u306e\u30bb\u30b0\u30e1\u30f3\u30c8\u306f\u6700\u5f8c\u306e\u30db\u30c3\u30d7\u3067\u3042\u308a\u3001\u305d\u308c\u3053\u305d\u304c\u30eb\u30fc\u30bf\u30fc\u304c\u76e3\u8996\u3067\u304d\u306a\u3044\u552f\u4e00\u306e\u30bb\u30b0\u30e1\u30f3\u30c8\u3067\u3059\u3002\u30eb\u30fc\u30bf\u30fc\u304c\u76e3\u8996\u3067\u304d\u308b\u3059\u3079\u3066\u306e\u5834\u6240\u306b\u304a\u3044\u3066\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u306f\u6697\u53f7\u5316\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u3088\u3046\u306a\u77db\u76fe\u3092\u89e3\u6c7a\u3059\u308b\u30c1\u30a7\u30c3\u30af\u30dc\u30c3\u30af\u30b9\u306f\u5b58\u5728\u305b\u305a\u3001Threat Prevention \u304c\u6c88\u9ed9\u3057\u3066\u3044\u308b\u304b\u3089\u3068\u3044\u3063\u3066\u5931\u6557\u3057\u3066\u3044\u308b\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u69cb\u9020\u7684\u306b\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u3067\u304d\u306a\u3044\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306b\u3064\u3044\u3066\u6b63\u78ba\u306b\u5831\u544a\u3057\u3066\u3044\u308b\u306e\u3067\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u304c\u3001Threat Prevention \u3092\u7279\u5b9a\u306e\u30b5\u30a4\u30c8\u306b\u5411\u3051\u3055\u305b\u3066\u3082\u6a5f\u80fd\u3057\u306a\u3044\u7406\u7531\u3067\u3082\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u30d1\u30c3\u30b1\u30fc\u30b8\u306f\u30db\u30b9\u30c8\u540d\u3067\u306f\u306a\u304f\u3001\u30eb\u30fc\u30bf\u30fc\u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9\u306b\u30d0\u30a4\u30f3\u30c9\u3055\u308c\u3066\u3044\u307e\u3059\u3002Host \u30d8\u30c3\u30c0\u30fc\u3092\u4e00\u5207\u53c2\u7167\u3057\u306a\u3044\u305f\u3081\u3001\u63a5\u7d9a\u304c\u3069\u306e\u30b5\u30a4\u30c8\u306b\u5c5e\u3057\u3066\u3044\u308b\u304b\u3068\u3044\u3046\u6982\u5ff5\u304c\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces.webp\" alt=\"\u76e3\u8996\u5bfe\u8c61\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u304c\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306b\u76f4\u9762\u3059\u308b\u30dd\u30fc\u30c8\u306b\u5236\u9650\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5b89\u5b9a\u6027\u512a\u5148\u30e2\u30fc\u30c9\u3001\u304a\u3088\u3073ET Open\u30b7\u30b0\u30cd\u30c1\u30e3\u30bd\u30fc\u30b9\u3092\u793a\u3059Threat Prevention\u306e\u8a2d\u5b9a\" class=\"wp-image-22121\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-1000x482.webp 1000w\" \/><figcaption class=\"wp-element-caption\">\u76e3\u8996\u5bfe\u8c61\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u304c Threat Prevention \u306e\u5168\u30b9\u30b3\u30fc\u30d7\u3067\u3059\u3002\u305d\u306e\u4e0b\u306b\u3042\u308b\u30c7\u30d5\u30a9\u30eb\u30c8\u30e2\u30fc\u30c9\u3068\u3001\u6700\u4e0b\u90e8\u306b\u3042\u308b\u30b7\u30b0\u30cd\u30c1\u30e3\u30bd\u30fc\u30b9\u306b\u6ce8\u76ee\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/figcaption><\/figure>\n\n\n\n<h2 id=\"three-reasons-php2shell-was-invisible-at-the-router\" class=\"wp-block-heading\">PHP2Shell \u304c\u30eb\u30fc\u30bf\u30fc\u3067\u691c\u77e5\u3067\u304d\u306a\u304b\u3063\u305f3\u3064\u306e\u7406\u7531<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CVE-2026-109618 \u304a\u3088\u3073 CVE-2026-109619 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u305f\u8a8d\u8a3c\u524d\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u306e\u30da\u30a2\u3067\u3042\u308b PHP2Shell \u306f\u30012026\u5e7410\u670820\u65e5\u306b\u6d41\u51fa\u3057\u3001\u7fcc\u65e5\u306b\u30a2\u30c3\u30d7\u30b9\u30c8\u30ea\u30fc\u30e0\u3067\u30d1\u30c3\u30c1\u304c\u9069\u7528\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u308c\u306f\u307e\u3055\u306b\u30eb\u30fc\u30bf\u30fc\u306e IPS \u304c\u5438\u53ce\u3057\u3066\u304f\u308c\u308b\u3053\u3068\u3092\u4eba\u3005\u304c\u671f\u5f85\u3059\u308b\u7a2e\u985e\u306e\u653b\u6483\u3067\u3059\u304c\u3001\u306a\u305c\u305d\u308c\u304c\u4e0d\u53ef\u80fd\u3060\u3063\u305f\u306e\u304b\u3092\u5177\u4f53\u7684\u306b\u8aac\u660e\u3059\u308b\u4fa1\u5024\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u7b2c\u4e00\u306b\u3001\u30eb\u30fc\u30bf\u30fc\u304c\u76e3\u8996\u3059\u308b\u3059\u3079\u3066\u306e\u30bb\u30b0\u30e1\u30f3\u30c8\u3067\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u6697\u53f7\u5316\u3055\u308c\u3066\u3044\u305f\u3053\u3068\u3067\u3059\u3002<\/strong> The exploit lives in the HTTP request, and the HTTP request only exists in the clear after TLS has been terminated, which happens downstream of the router on a hop the router never carries.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u7b2c\u4e8c\u306b\u3001\u6709\u52b9\u5316\u3059\u3079\u304dThreat Prevention\u306e\u30b7\u30b0\u30cd\u30c1\u30e3\u304c\u5b58\u5728\u3057\u307e\u305b\u3093\u3002<\/strong> We checked again on 25 October 2026 and found no published Snort or Emerging Threats rule for either CVE. Our feed is ET Open, the free tier, which lags the commercial set, and the Self-Defined Policy screen accepts no rule of your own. So even an operator who knew precisely what to match for had nowhere to put it.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy.webp\" alt=\"Threat Prevention\u306e\u300c\u30e6\u30fc\u30b6\u30fc\u5b9a\u7fa9\u30dd\u30ea\u30b7\u30fc\u300d\u753b\u9762\u3002\u7a7a\u306e\u72b6\u614b\u3067\u3001\u300c\u7de8\u96c6\u300d\u3068\u300c\u524a\u9664\u300d\u306e\u307f\u304c\u5229\u7528\u53ef\u80fd\u3067\u3042\u308a\u3001\u65b0\u3057\u3044\u30b7\u30b0\u30cd\u30c1\u30e3\u3092\u4f5c\u6210\u3059\u308b\u30aa\u30d7\u30b7\u30e7\u30f3\u306f\u3042\u308a\u307e\u305b\u3093\" class=\"wp-image-22123\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-1000x482.webp 1000w\" \/><figcaption class=\"wp-element-caption\">Self-Defined Policy \u306f\u3001\u30d9\u30f3\u30c0\u30fc\u304c\u3059\u3067\u306b\u63d0\u4f9b\u3057\u3066\u3044\u308b\u30b7\u30b0\u30cd\u30c1\u30e3\u306b\u5bfe\u3059\u308b\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u8abf\u6574\u3059\u308b\u3082\u306e\u3067\u3059\u3002\u81ea\u5206\u3067\u4f5c\u6210\u3057\u305f\u30eb\u30fc\u30eb\u3092\u5165\u529b\u3059\u308b\u30d5\u30a3\u30fc\u30eb\u30c9\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u7b2c\u4e09\u306b\u3001\u305d\u3057\u3066\u6700\u3082\u6839\u672c\u7684\u306a\u7406\u7531\u3068\u3057\u3066\u3001\u3053\u306e\u653b\u6483\u306b\u306f\u4e00\u81f4\u3055\u305b\u308b\u3079\u304d\u30da\u30a4\u30ed\u30fc\u30c9\u306e\u5f62\u72b6\u304c\u5b58\u5728\u3057\u306a\u3044\u3053\u3068\u3067\u3059\u3002<\/strong> The chain takes two requests. The first has to push PHP into exhausting its memory limit, which makes the engine abandon a request through a path that skips cleanup and leaves some global state behind. The second request is ordinary, and it is the one that reaches a stale pointer and turns into code execution.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The first request is defined by how much memory it consumes, not by any sequence of bytes, and a large upload, a huge JSON body, a deep array and a long string in a regular expression all qualify. The second carries no malicious bytes at all. An IPS decides per packet and per flow. It has no model of a worker process carrying contaminated state from one request into the next, which is precisely where this bug lives.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u306f\u307e\u305f\u3001\u5f53\u6642\u666e\u53ca\u3057\u3066\u3044\u305f\u56de\u907f\u7b56\u306e\u9650\u754c\u3082\u793a\u3057\u3066\u3044\u307e\u3059\u3002\u305d\u306e\u56de\u907f\u7b56\u3068\u306f\u3001PHP \u8a2d\u5b9a\u3067 session.upload_progress \u3092\u30aa\u30d5\u306b\u3059\u308b\u3053\u3068\u3067\u3057\u305f\u3002\u78ba\u304b\u306b2\u3064\u76ee\u306e CVE \u306b\u5230\u9054\u3059\u308b\u305f\u3081\u306e\u6587\u66f8\u5316\u3055\u308c\u305f1\u3064\u306e\u65b9\u6cd5\u3092\u53d6\u308a\u9664\u304f\u3053\u3068\u304c\u3067\u304d\u3001\u3069\u3046\u3057\u3066\u3082\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3067\u304d\u306a\u3044\u30de\u30b7\u30f3\u306b\u304a\u3044\u3066\u306f\u3001\u4f55\u3082\u3057\u306a\u3044\u3088\u308a\u306f\u30de\u30b7\u3067\u3059\u3002\u3057\u304b\u3057\u3001\u3053\u308c\u306f\u6839\u672c\u7684\u306a\u4fee\u6b63\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u30e1\u30e2\u30ea\u67af\u6e07\u306f\u305d\u306e1\u3064\u306e\u6a5f\u80fd\u7d4c\u7531\u3060\u3051\u3067\u5230\u9054\u3067\u304d\u308b\u3082\u306e\u3067\u306f\u306a\u304f\u3001\u3053\u306e\u8a2d\u5b9a\u306f CVE-2026-109618 \u306b\u306f\u307e\u3063\u305f\u304f\u5f71\u97ff\u3057\u307e\u305b\u3093\u3002\u5f53\u793e\u3067\u306f\u3053\u308c\u3092\u6b63\u78ba\u306b1\u53f0\u306e\u30db\u30b9\u30c8\u3067\u306e\u5834\u5f53\u305f\u308a\u7684\u306a\u5fdc\u6025\u51e6\u7f6e\u3068\u3057\u3066\u4f7f\u7528\u3057\u3001\u89e3\u6c7a\u7b56\u3067\u306f\u306a\u304f\u7336\u4e88\u671f\u9593\u3068\u3057\u3066\u6271\u3044\u307e\u3057\u305f\u3002\u30d1\u30c3\u30c1\u9069\u7528\u306e\u8a73\u7d30\u306a\u7d4c\u7def\u306f\u3001\u5f53\u793e\u306e <a href=\"https:\/\/synopower.club\/ja\/synology-php2shell-emergency-patch\/\">PHP2Shell write-up<\/a>.<\/p>\n\n\n\n<h2 id=\"fail-open-by-design-and-the-day-it-cost-us-our-mail\" class=\"wp-block-heading\">\u8a2d\u8a08\u4e0a\u306e\u30d5\u30a7\u30a4\u30eb\u30aa\u30fc\u30d7\u30f3\u3001\u305d\u3057\u3066\u30e1\u30fc\u30eb\u304c\u88ab\u5bb3\u3092\u53d7\u3051\u305f\u65e5<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention \u3092\u4fe1\u983c\u3067\u304d\u308b\u5236\u5fa1\u6a5f\u69cb\u3068\u3057\u3066\u6271\u3046\u524d\u306b\u3001\u77e5\u3063\u3066\u304a\u304f\u3079\u304d\u30d7\u30ed\u30d1\u30c6\u30a3\u304c\u3082\u30461\u3064\u3042\u308a\u307e\u3059\u3002\u63a8\u5968\u3055\u308c\u308b\u30c7\u30d5\u30a9\u30eb\u30c8\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u5b89\u5b9a\u6027\u3092\u512a\u5148\u30e2\u30fc\u30c9\u3067\u3042\u308a\u3001\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9\u306b\u306f\u305d\u306e\u610f\u5473\u304c\u9060\u66f2\u8868\u73fe\u306a\u3057\u306b\u660e\u8a18\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u51e6\u7406\u80fd\u529b\u3092\u8d85\u3048\u305f\u5834\u5408\u3001\u4fdd\u7559\u4e2d\u306e\u30d1\u30b1\u30c3\u30c8\u306f\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306a\u3057\u3067\u30d0\u30a4\u30d1\u30b9\u3055\u308c\u307e\u3059\u3002\u3082\u30461\u3064\u306e\u9078\u629e\u80a2\u3067\u3042\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u512a\u5148\u30e2\u30fc\u30c9\u3067\u306f\u3001\u4ee3\u308f\u308a\u306b\u30d1\u30b1\u30c3\u30c8\u3092\u30c9\u30ed\u30c3\u30d7\u3057\u3001\u554f\u984c\u304c\u89e3\u6c7a\u3055\u308c\u308b\u307e\u3067\u63a5\u7d9a\u304c\u4e0d\u5b89\u5b9a\u306b\u306a\u308b\u3053\u3068\u3092\u8b66\u544a\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u306f\u5bb6\u5ead\u7528\u30eb\u30fc\u30bf\u30fc\u3068\u3057\u3066\u306f\u8ce2\u660e\u306a\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u3059\u3002\u3057\u304b\u3057\u3001\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3057\u305f\u3044\u30d5\u30e9\u30c3\u30c9\u653b\u6483\u305d\u306e\u3082\u306e\u304c\u51e6\u7406\u80fd\u529b\u3092\u8d85\u3048\u308b\u539f\u56e0\u3068\u306a\u308b\u305f\u3081\u3001Threat Prevention \u304c\u6700\u3082\u5f37\u529b\u3067\u3042\u3063\u3066\u307b\u3057\u3044\u307e\u3055\u306b\u305d\u306e\u77ac\u9593\u306b\u6700\u3082\u5f31\u304f\u306a\u308b\u3053\u3068\u3092\u610f\u5473\u3057\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f53\u793e\u306b\u306f\u3082\u30461\u3064\u306e\u5931\u6557\u30e2\u30fc\u30c9\u306e\u8a18\u9332\u3082\u3042\u308a\u307e\u3059\u30022026\u5e748\u67082\u65e5\u3001\u4f55\u8005\u304b\u304c Linux \u306b\u5bfe\u3057\u3066\u306f\u5168\u304f\u6a5f\u80fd\u3057\u306a\u3044 Windows PHP-CGI \u306e\u8106\u5f31\u6027\u3092\u7a81\u304f\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3067\u3001\u5f53\u793e\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092 116 \u56de\u653b\u6483\u3057\u307e\u3057\u305f\u3002Threat Prevention \u306f\u81ea\u8eab\u306e\u72b6\u614b\u3092\u56fa\u5b9a\u5316\u3057\u3066\u3057\u307e\u3046\u307b\u3069\u591a\u304f\u306e\u30d1\u30b1\u30c3\u30c8\u3092\u30c9\u30ed\u30c3\u30d7\u3057\u3001\u9632\u885b\u3057\u3066\u3044\u305f\u306f\u305a\u306e\u81ea\u30de\u30b7\u30f3\u304b\u3089\u306e\u30a2\u30a6\u30c8\u30d0\u30a6\u30f3\u30c9\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u307e\u3067\u3082\u62d2\u5426\u3057\u59cb\u3081\u307e\u3057\u305f\u3002\u5f53\u793e\u306e\u30e1\u30fc\u30eb\u30ad\u30e5\u30fc\u306f\u505c\u6b62\u3057\u3001\u305d\u306e\u75c7\u72b6\u306f\u307e\u3055\u306b DNS \u30a8\u30e9\u30fc\u306e\u3088\u3046\u306b\u898b\u3048\u307e\u3057\u305f\u3002\u30eb\u30fc\u30bf\u30fc\u3092\u518d\u8d77\u52d5\u3059\u308b\u3053\u3068\u3067\u89e3\u6c7a\u3057\u307e\u3057\u305f\u3002\u30d7\u30ed\u30ad\u30b7\u306b\u306f\u4f55\u3082\u5c4a\u304b\u306a\u304b\u3063\u305f\u305f\u3081\u3001\u30d7\u30ed\u30ad\u30b7\u306e\u30a2\u30af\u30bb\u30b9\u30ed\u30b0\u306b\u306f\u4f55\u3082\u8868\u793a\u3055\u308c\u307e\u305b\u3093\u3067\u3057\u305f\u3002\u69cb\u9020\u7684\u306b\u6210\u529f\u3059\u308b\u306f\u305a\u306e\u306a\u3044\u653b\u6483\u304c\u3001\u305d\u308c\u3092\u963b\u6b62\u3059\u308b\u306f\u305a\u3060\u3063\u305f\u3082\u306e\u3092\u4ecb\u3057\u3066\u3001\u7d50\u679c\u7684\u306b\u5f53\u793e\u306e\u969c\u5bb3\u3092\u5f15\u304d\u8d77\u3053\u3057\u305f\u306e\u3067\u3059\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list.webp\" alt=\"\u30af\u30e9\u30b9\u3054\u3068\u306e\u6709\u52b9\u6570\u304c\u8868\u793a\u3055\u308c\u305fThreat Prevention\u306e\u300c\u30af\u30e9\u30b9\u3068\u30b7\u30b0\u30cd\u30c1\u30e3\u300d\u30ea\u30b9\u30c8\uff086,010\u30eb\u30fc\u30eb\u4e2d5,928\u30eb\u30fc\u30eb\u306e\u300cWeb Application Attack\u300d\u3092\u542b\u3080\uff09\" class=\"wp-image-22122\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-1000x482.webp 1000w\" \/><figcaption class=\"wp-element-caption\">\u53f3\u5074\u306b\u6709\u52b9\u5316\u3055\u308c\u305f\u6570\u304c\u8868\u793a\u3055\u308c\u3066\u3044\u308b\u30af\u30e9\u30b9\u30ec\u30d9\u30eb\u306e\u30b9\u30a4\u30c3\u30c1\u3002\u3053\u308c\u304c\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0\u9818\u57df\u306e\u5168\u5bb9\u3067\u3059\u3002<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u305d\u306e\u30ea\u30b9\u30c8\u306e\u6709\u52b9\u5316\u30ab\u30a6\u30f3\u30c8\u306b\u76ee\u3092\u901a\u3057\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002Web Application Attack \u3067\u306f 6,010 \u30eb\u30fc\u30eb\u4e2d 5,928 \u30eb\u30fc\u30eb\u304c\u30a2\u30af\u30c6\u30a3\u30d6\u306b\u306a\u3063\u3066\u304a\u308a\u3001\u95a2\u5fc3\u306e\u3042\u308b\u30af\u30e9\u30b9\u5168\u4f53\u3067\u540c\u69d8\u306e\u5272\u5408\u3092\u793a\u3057\u3066\u3044\u307e\u3059\u3002\u30af\u30e9\u30b9\u3092\u30aa\u30f3\u306b\u3057\u3066\u3082\u3001\u305d\u306e\u4e2d\u306e\u3059\u3079\u3066\u306e\u30eb\u30fc\u30eb\u304c\u30aa\u30f3\u306b\u306a\u308b\u308f\u3051\u3067\u306f\u306a\u304f\u3001\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9\u306b\u306f\u6b8b\u308a\u306e\u3069\u306e\u30eb\u30fc\u30eb\u304c\u4e0d\u8db3\u3057\u3066\u3044\u308b\u304b\u3092\u78ba\u8a8d\u3059\u308b\u65b9\u6cd5\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<h2 id=\"put-a-proxy-in-front-then-lock-the-origin-to-it\" class=\"wp-block-heading\">\u524d\u9762\u306b\u30d7\u30ed\u30ad\u30b7\u3092\u914d\u7f6e\u3057\u3001\u30aa\u30ea\u30b8\u30f3\u3092\u305d\u3053\u306b\u30ed\u30c3\u30af\u3059\u308b<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NAS\u304b\u3089\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u3092\u914d\u4fe1\u3059\u308b\u5834\u5408\u3001\u30eb\u30fc\u30bf\u30fc\u3067\u306f\u4e0d\u53ef\u80fd\u306a\u5f79\u5272\u3092\u679c\u305f\u3059\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u304c\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7WAF\u3067\u3059\u3002\u5f53\u793e\u3067\u306fCloudflare\u3092\u4f7f\u7528\u3057\u3066\u3044\u307e\u3059\u304c\u3001\u305d\u306e\u7406\u7531\u306f\u30d6\u30e9\u30f3\u30c9\u3067\u306f\u306a\u304f\u914d\u7f6e\u4f4d\u7f6e\u306b\u3042\u308a\u307e\u3059\u3002TLS\u306f\u30a8\u30c3\u30b8\u3067\u7d42\u4e86\u3059\u308b\u305f\u3081\u3001\u5224\u65ad\u304c\u4e0b\u3055\u308c\u308b\u77ac\u9593\u306b\u30ea\u30af\u30a8\u30b9\u30c8\u5168\u4f53\u3092\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u30e1\u30bd\u30c3\u30c9\u3001\u30d1\u30b9\u3001\u30af\u30a8\u30ea\u3001\u30d8\u30c3\u30c0\u30fc\u3001\u30af\u30c3\u30ad\u30fc\u3001\u30dc\u30c7\u30a3\u306e\u3059\u3079\u3066\u304c\u30eb\u30fc\u30eb\u3067\u5229\u7528\u53ef\u80fd\u3067\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u305d\u306e\u305f\u3081\u3001PHP2Shell\u306e\u4fdd\u8b77\u306f\u30eb\u30fc\u30bf\u30fc\u3067\u306f\u306a\u304f\u305d\u3061\u3089\u306b\u9069\u7528\u3055\u308c\u307e\u3057\u305f\u3002CVE\u304c\u516c\u958b\u3055\u308c\u305f\u969b\u3001\u30de\u30cd\u30fc\u30b8\u30c9\u30eb\u30fc\u30eb\u30bb\u30c3\u30c8\u306f2\u65e5\u4ee5\u5185\u306b\u3053\u306e\u30da\u30a2\u306b\u5bfe\u3057\u30667\u3064\u306e\u30eb\u30fc\u30eb\u3092\u8ffd\u52a0\u3057\u3001\u5f53\u793e\u304c\u81ea\u793e\u306e\u30b3\u30f3\u30c6\u30ca\u306e\u518d\u69cb\u7bc9\u3092\u7d42\u3048\u308b\u524d\u306b\u3001\u904b\u7528\u3057\u3066\u3044\u308b4\u3064\u3059\u3079\u3066\u306e\u30be\u30fc\u30f3\u3067\u6709\u52b9\u5316\u3055\u308c\u307e\u3057\u305f\u3002Threat Prevention\u306e\u30d5\u30a3\u30fc\u30c9\u306b\u306f\u540c\u7b49\u306e\u30eb\u30fc\u30eb\u304c\u4e00\u5207\u767b\u5834\u305b\u305a\u30015\u65e5\u7d4c\u3063\u305f\u6642\u70b9\u3067\u3082\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u53ef\u80fd\u306a\u30d1\u30d6\u30ea\u30c3\u30af\u306eSnort\u3084Emerging Threats\u306e\u30eb\u30fc\u30eb\u306f\u5b58\u5728\u3057\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306e\u9078\u629e\u4ee5\u4e0a\u306b\u91cd\u8981\u306a\u6ce8\u610f\u4e8b\u9805\u304c1\u3064\u3042\u308a\u307e\u3059\u3002\u524d\u9762\u306e\u30d7\u30ed\u30ad\u30b7\u306f\u3001\u305d\u308c\u3092\u8fc2\u56de\u3067\u304d\u306a\u3044\u5834\u5408\u306b\u306e\u307f\u52b9\u679c\u3092\u767a\u63ee\u3057\u307e\u3059\u3002\u30aa\u30ea\u30b8\u30f3\u30a2\u30c9\u30ec\u30b9\u304c\u30d1\u30d6\u30ea\u30c3\u30af\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306b\u76f4\u63a5\u5fdc\u7b54\u3059\u308b\u5834\u5408\u3001\u305d\u308c\u3092\u767a\u898b\u3057\u305f\u4eba\u306f\u8a2d\u5b9a\u3057\u305f\u3059\u3079\u3066\u306e\u30a8\u30c3\u30b8\u30eb\u30fc\u30eb\u3092\u30b9\u30ad\u30c3\u30d7\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002\u30aa\u30ea\u30b8\u30f3\u306e\u30dd\u30fc\u30c8443\u3092\u30d7\u30ed\u30ad\u30b7\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7bc4\u56f2\u306b\u5236\u9650\u3057\u3001\u305d\u306e\u7bc4\u56f2\u3092\u30cf\u30fc\u30c9\u30b3\u30fc\u30c7\u30a3\u30f3\u30b0\u3059\u308b\u306e\u3067\u306f\u306a\u304f\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306e\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u304b\u3089\u53d6\u5f97\u3057\u3001\u30a2\u30c9\u30ec\u30b9\u304b\u3089\u76f4\u63a5\u30b5\u30a4\u30c8\u306b\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3057\u3066\u5236\u9650\u304c\u6a5f\u80fd\u3057\u3066\u3044\u308b\u304b\u691c\u8a3c\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u5f53\u793e\u306e\u3088\u308a\u5e83\u7bc4\u306a\u69cb\u6210\u3001\u304a\u3088\u3073\u3053\u306e\u5c64\u306e\u5f8c\u308d\u306b\u3042\u308b4\u3064\u306e\u5c64\u306b\u3064\u3044\u3066\u306f\u3001\u4ee5\u4e0b\u3067\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002 <a href=\"https:\/\/synopower.club\/ja\/docs\/synology-nas-security-public-website\/\">the five layers we run<\/a>.<\/p>\n\n\n\n<h2 id=\"threat-prevention-limits-and-security-notes\" class=\"wp-block-heading\">Threat Prevention\u306e\u5236\u9650\u4e8b\u9805\u3068\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6ce8\u610f\u70b9<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention\u306f\u30eb\u30fc\u30bf\u30fc\u4e0a\u306b\u5916\u90e8\u30b9\u30c8\u30ec\u30fc\u30b8\u3092\u5fc5\u8981\u3068\u3057\u3001\u3059\u3079\u3066\u306e\u30e2\u30c7\u30eb\u3067\u5229\u7528\u3067\u304d\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u305f\u3081\u3001\u5c0e\u5165\u3092\u8a08\u753b\u3059\u308b\u524d\u306b\u3054\u4f7f\u7528\u306e\u30cf\u30fc\u30c9\u30a6\u30a7\u30a2\u306e\u30b5\u30dd\u30fc\u30c8\u72b6\u6cc1\u3092\u3054\u78ba\u8a8d\u304f\u3060\u3055\u3044\u3002\u307e\u305f\u3001\u3053\u306e\u30a8\u30f3\u30b8\u30f3\u306f\u30eb\u30fc\u30bf\u30fc\u3067\u6700\u3082\u8ca0\u8377\u306e\u304b\u304b\u308b\u51e6\u7406\u3067\u3042\u308a\u3001\u30b3\u30f3\u30b7\u30e5\u30fc\u30de\u30fc\u5411\u3051\u88fd\u54c1\u3067\u306f\u30b9\u30eb\u30fc\u30d7\u30c3\u30c8\u306e\u30dc\u30c8\u30eb\u30cd\u30c3\u30af\u306b\u6700\u3082\u306a\u308a\u3084\u3059\u3044\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3059\u3002\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u4e0a\u306e\u6570\u5024\u3092\u9d5c\u5451\u307f\u306b\u305b\u305a\u3001\u5c0e\u5165\u524d\u5f8c\u3067\u6e2c\u5b9a\u3092\u884c\u3063\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6982\u8981\u753b\u9762\u306e\u3059\u3079\u3066\u306e\u6570\u5024\u306f\u3001\u963b\u6b62\u3055\u308c\u305f\u653b\u6483\u306e\u56de\u6570\u3067\u306f\u306a\u304f\u3001\u30b7\u30b0\u30cd\u30c1\u30e3\u306e\u4e00\u81f4\u56de\u6570\u3068\u3057\u3066\u6271\u3063\u3066\u304f\u3060\u3055\u3044\u3002\u3053\u306e2\u3064\u306f\u53cc\u65b9\u306e\u610f\u5473\u3067\u7570\u306a\u308a\u307e\u3059\u3002\u6210\u679c\u3092\u4e0a\u3052\u308b\u3053\u3068\u306e\u306a\u3044\u30b9\u30ad\u30e3\u30ca\u30fc\u306b\u5bfe\u3059\u308b\u30ec\u30d4\u30e5\u30c6\u30fc\u30b7\u30e7\u30f3\u306e\u30d2\u30c3\u30c8\u306f\u5408\u8a08\u3092\u5897\u5927\u3055\u305b\u3001\u30ed\u30b0\u304c\u9759\u304b\u306a1\u9031\u9593\u3067\u3042\u3063\u3066\u3082\u3001\u30a8\u30f3\u30b8\u30f3\u304c\u8aad\u307f\u53d6\u308c\u306a\u3044HTTPS\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306b\u3064\u3044\u3066\u306f\u4f55\u3082\u8a3c\u660e\u3057\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention\u3067\u306f\u3001\u91cd\u8981\u5ea6\u3068\u540c\u3058\u304f\u3089\u3044\u30b9\u30c6\u30fc\u30bf\u30b9\u304c\u91cd\u8981\u3067\u3059\u3002\u300c\u9ad8\u30ea\u30b9\u30af\u30d1\u30b1\u30c3\u30c8\u3092\u81ea\u52d5\u7684\u306b\u30c9\u30ed\u30c3\u30d7\u300d\u306f\u9ad8\u30e9\u30f3\u30af\u306e\u7bc4\u56f2\u306b\u306e\u307f\u4f5c\u7528\u3059\u308b\u305f\u3081\u3001\u4e2d\u7a0b\u5ea6\u306e\u91cd\u8981\u5ea6\u306e\u30a8\u30f3\u30c8\u30ea\u30fc\u306f\u8a18\u9332\u3055\u308c\u3066\u8ee2\u9001\u3055\u308c\u307e\u3059\u3002\u300c\u8b66\u544a\u300d\u3068\u8868\u793a\u3055\u308c\u3066\u3044\u308b\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306f\u3001\u30d1\u30b1\u30c3\u30c8\u304c\u914d\u4fe1\u3055\u308c\u305f\u3053\u3068\u3092\u4f1d\u3048\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u30b7\u30b0\u30cd\u30c1\u30e3\u30d5\u30a3\u30fc\u30c9\u306f\u30b5\u30d7\u30e9\u30a4\u30c1\u30a7\u30fc\u30f3\u3067\u3059\u3002ET Open\u306f\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u306b\u5f93\u3063\u3066\u66f4\u65b0\u3055\u308c\u3001\u5546\u7528\u30eb\u30fc\u30eb\u30bb\u30c3\u30c8\u3088\u308a\u9045\u308c\u3066\u63d0\u4f9b\u3055\u308c\u308b\u305f\u3081\u3001\u516c\u958b\u304b\u3089\u6570\u65e5\u7d4c\u3063\u305f\u8106\u5f31\u6027\u306b\u5bfe\u3057\u3066\u3082\u4f55\u3082\u914d\u4fe1\u3055\u308c\u306a\u3044\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3002\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u304c\u6700\u65b0\u3067\u3042\u308b\u3068\u5831\u544a\u3059\u308b\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u306f\u3001\u305d\u308c\u304c\u30d5\u30a3\u30fc\u30c9\u3068\u4e00\u81f4\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u5831\u544a\u3057\u3066\u3044\u308b\u306e\u3067\u3042\u308a\u3001\u73fe\u5728\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u5185\u5bb9\u3092\u30d5\u30a3\u30fc\u30c9\u304c\u30ab\u30d0\u30fc\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u5831\u544a\u3057\u3066\u3044\u308b\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u3089\u306f\u3069\u308c\u3082\u30d1\u30c3\u30c1\u9069\u7528\u306b\u4ee3\u308f\u308b\u3082\u306e\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u3053\u3053\u3067\u53d6\u308a\u4e0a\u3052\u305f\u5404\u30ec\u30a4\u30e4\u30fc\u306f\u3001\u8106\u5f31\u6027\u3092\u5b9f\u969b\u306b\u4fee\u6b63\u3059\u308b\u4f5c\u696d\uff08\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u66f4\u65b0\uff09\u307e\u3067\u306e\u6642\u9593\u3092\u7a3c\u3050\u3082\u306e\u306b\u904e\u304e\u307e\u305b\u3093\u3002PHP2Shell\u306e\u5834\u5408\u3001\u305d\u308c\u306f\u65b0\u3057\u3044PHP\u30d1\u30c3\u30b1\u30fc\u30b8\u3068\u518d\u69cb\u7bc9\u3055\u308c\u305f\u30b3\u30f3\u30c6\u30ca\u3092\u610f\u5473\u3057\u3001\u305d\u308c\u306b\u4ee3\u308f\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5236\u5fa1\u306f\u5b58\u5728\u3057\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6700\u5f8c\u306b\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u52e7\u544a\u3092\u8aad\u3093\u3060\u5f8c\u306b\u3059\u3079\u3066\u306e\u30af\u30e9\u30b9\u3092\u6709\u52b9\u306b\u3057\u305f\u304f\u306a\u308b\u885d\u52d5\u3092\u6291\u3048\u3066\u304f\u3060\u3055\u3044\u3002\u300cMisc activity\uff08\u305d\u306e\u4ed6\u306e\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\uff09\u300d\u306e\u3088\u3046\u306a\u30af\u30e9\u30b9\u306b\u306f\u4fa1\u5024\u306e\u4f4e\u3044\u30eb\u30fc\u30eb\u304c\u4f55\u5343\u500b\u3082\u542b\u307e\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u307b\u3068\u3093\u3069\u304c\u30ce\u30a4\u30ba\u3092\u767a\u751f\u3055\u305b\u3001\u5f79\u7acb\u3064\u30af\u30e9\u30b9\u304c\u5fc5\u8981\u3068\u3059\u308b\u51e6\u7406\u80fd\u529b\u3092\u6d88\u8cbb\u3057\u307e\u3059\u3002\u7121\u8996\u3059\u308b\u3053\u3068\u3092\u899a\u3048\u3066\u3057\u307e\u3046\u3088\u3046\u306a\u9a12\u304c\u3057\u3044\u30a4\u30d9\u30f3\u30c8\u30ea\u30b9\u30c8\u3088\u308a\u3082\u3001\u5b9f\u969b\u306b\u76ee\u3092\u901a\u3059\u9759\u304b\u3067\u8abf\u6574\u3055\u308c\u305f\u30a4\u30d9\u30f3\u30c8\u30ea\u30b9\u30c8\u306e\u65b9\u304c\u306f\u308b\u304b\u306b\u512a\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n<h2 id=\"frequently-asked-questions\" class=\"wp-block-heading\">\u3088\u304f\u3042\u308b\u8cea\u554f<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list\">\n<div id=\"faq-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Threat Prevention\u306f\u79c1\u306eNAS\u3067\u30db\u30b9\u30c8\u3055\u308c\u3066\u3044\u308bWeb\u30b5\u30a4\u30c8\u3092\u4fdd\u8b77\u3057\u307e\u3059\u304b\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u307b\u3068\u3093\u3069\u4fdd\u8b77\u3057\u307e\u305b\u3093\u3002\u307e\u305f\u540d\u524d\u304b\u3089\u9023\u60f3\u3055\u308c\u308b\u3088\u3046\u306a\u65b9\u6cd5\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002Web\u30b5\u30a4\u30c8\u306fHTTPS\u7d4c\u7531\u3067\u63d0\u4f9b\u3055\u308c\u3001Threat Prevention\u306fTLS\u30a4\u30f3\u30bf\u30fc\u30bb\u30d7\u30c8\u3092\u884c\u308f\u306a\u3044\u305f\u3081\u3001\u30eb\u30fc\u30bf\u30fc\u304b\u3089\u898b\u3048\u308b\u7bc4\u56f2\u3067\u306f\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u5185\u5bb9\u306f\u4e0d\u900f\u660e\uff08\u6697\u53f7\u5316\u3055\u308c\u305f\u307e\u307e\uff09\u3067\u3059\u3002\u4e00\u822c\u7684\u306a\u69cb\u6210\u3067\u306f\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u306f\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304cTLS\u3092\u7d42\u7aef\u3057\u305f\u5f8c\u306b\u521d\u3081\u3066\u8aad\u307f\u53d6\u308a\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002\u305d\u306e\u30db\u30c3\u30d7\u306f\u901a\u5e38\u540c\u3058\u30b5\u30d6\u30cd\u30c3\u30c8\u4e0a\u306b\u3042\u308b\u305f\u3081\u3001\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3067\u306f\u306a\u304f\u30b9\u30a4\u30c3\u30c1\u30f3\u30b0\u3055\u308c\u3001\u30eb\u30fc\u30bf\u30fc\u3092\u901a\u904e\u3059\u308b\u3053\u3068\u306f\u3042\u308a\u307e\u305b\u3093\u3002Web\u30b5\u30a4\u30c8\u306b\u306f\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7WAF\u3092\u4f7f\u7528\u3057\u3001Threat Prevention\u306f\u304c\u5f97\u610f\u3068\u3059\u308b\u7528\u9014\u306b\u5229\u7528\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Which option should I switch on to stop a specific CVE?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Usually none, because the answer depends on whether the vendor shipped a signature for it at all. Open Self-Defined Policy and you will find you can change the action on an existing signature but cannot add one of your own. If no rule exists in the feed, there is nothing to enable, and for a vulnerability a few days old that is the normal case.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Why does my event list only name one or two devices?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Because those are the devices receiving traffic the engine can actually read. On our network it is consistently the mail server, which answers cleartext SMTP on port 25. A web host behind a reverse proxy produces few entries not because it is attacked less, but because its traffic is encrypted at every point the router inspects.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-4\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Threat Prevention\u306fLAN\u4e0a\u306e\u30c7\u30d0\u30a4\u30b9\u9593\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u691c\u67fb\u3057\u307e\u3059\u304b\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>No. Two devices in the same subnet reach each other through a switch, and the router is not in that path, so the packets are never offered to the inspection engine. The Monitored Interfaces table in Settings shows the real scope, and no option there extends it to same-subnet traffic.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-5\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Threat Prevention\u3092\u6709\u52b9\u306e\u307e\u307e\u306b\u3057\u3066\u304a\u3044\u3066\u3082\u5b89\u5168\u3067\u3059\u304b\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Yes, with one caveat worth knowing. The recommended default passes traffic through unfiltered when the engine is saturated, which keeps your line up at the cost of inspection. The opposite mode drops that traffic instead. We have also had the engine wedge under a flood of harmless exploit attempts and start refusing a server&#8217;s outbound traffic, which cost us a mail outage, so include the router in your list of suspects when a machine goes quiet.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-6\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Threat Prevention\u306fPHP2Shell\u306b\u5bfe\u3057\u3066\u5c11\u3057\u306f\u5f79\u306b\u7acb\u3061\u307e\u3057\u305f\u304b\uff1f<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>No, and three separate reasons each would have been enough on their own. The traffic was encrypted everywhere the router looks, no Snort or Emerging Threats signature was published for either CVE, and the exploit has no payload shape to match because the first request is defined by the memory it consumes and the second looks completely ordinary. The fix was new PHP packages, with a reverse-proxy WAF covering the gap in the meantime.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-7\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Is disabling session.upload_progress enough on an unpatchable host?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>It helps and it is not enough. Switching it off removes one documented route to CVE-2026-109619, which is worth doing on a host you truly cannot update, but memory exhaustion is reachable by other means and the setting does nothing for CVE-2026-109618. Treat it as borrowed time and plan the package update.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-8\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">What should I buy or configure first for a NAS-hosted site?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\u30b5\u30a4\u30c8\u306e\u524d\u306b\u30de\u30cd\u30fc\u30b8\u30c9\u30eb\u30fc\u30eb\u30bb\u30c3\u30c8\u3092\u5099\u3048\u305f\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092\u914d\u7f6e\u3057\u3001\u30dd\u30fc\u30c8443\u304c\u305d\u306e\u30d7\u30ed\u30ad\u30b7\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u306e\u307f\u5fdc\u7b54\u3059\u308b\u3088\u3046\u306b\u30aa\u30ea\u30b8\u30f3\u3092\u5236\u9650\u3057\u307e\u3059\u3002\u3053\u308c\u30892\u3064\u306e\u30b9\u30c6\u30c3\u30d7\u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u3053\u3068\u3067\u3001\u691c\u67fb\u30dd\u30a4\u30f3\u30c8\u304c\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u8aad\u307f\u53d6\u308c\u308b\u5834\u6240\u306b\u79fb\u52d5\u3057\u3001\u305d\u308c\u3092\u7121\u52b9\u5316\u3057\u3066\u3057\u307e\u3046\u30d0\u30a4\u30d1\u30b9\u304c\u6392\u9664\u3055\u308c\u307e\u3059\u3002\u305d\u306e\u5f8c\u3082\u3001\u30a2\u30a6\u30c8\u30d0\u30a6\u30f3\u30c9\u306e\u30b3\u30de\u30f3\u30c9\uff06\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\uff08C2\uff09\u3084\u5e73\u6587\u30b5\u30fc\u30d3\u30b9\u306a\u3069\u3001\u5b9f\u969b\u306b\u52b9\u679c\u3092\u767a\u63ee\u3059\u308b\u5834\u9762\u306e\u305f\u3081\u306bThreat Prevention\u3092\u6709\u52b9\u306b\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<h2 id=\"references-and-video-walkthroughs\" class=\"wp-block-heading\">\u53c2\u8003\u8cc7\u6599\u3068\u30d3\u30c7\u30aa\u30c1\u30e5\u30fc\u30c8\u30ea\u30a2\u30eb<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u8a18\u3067\u8ff0\u3079\u305f\u3059\u3079\u3066\u306e\u4e00\u6b21\u60c5\u5831\u6e90\u3068\u3001\u6642\u9593\u3092\u5272\u304f\u4fa1\u5024\u306e\u3042\u308b3\u3064\u306e\u30a6\u30a9\u30fc\u30af\u30b9\u30eb\u30fc\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/kb.synology.com\/en-global\/SRM\/help\/ThreatPrevention\/threatprevention_desc\" target=\"_blank\" rel=\"noreferrer noopener\">Synology\u30ca\u30ec\u30c3\u30b8\u30bb\u30f3\u30bf\u30fc\uff1aThreat Prevention<\/a> covers requirements, modes and model support.<\/li>\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_26_14\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-26:14<\/a> lists the fixed PHP package versions for DSM, including the 7.4 build.<\/li>\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/company\/news\/article\/php2shell\/Synology%20Statement%20on%20PHP2Shell%20Vulnerabilities\" target=\"_blank\" rel=\"noreferrer noopener\">Synology Statement on PHP2Shell<\/a> names the affected packages and the one that needs a manual update.<\/li>\n\n<li><a href=\"https:\/\/developers.cloudflare.com\/waf\/managed-rules\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Cloudflare WAF managed rules<\/a> explains how managed rulesets are versioned and deployed.<\/li>\n\n<li><a href=\"https:\/\/www.cloudflare.com\/ips\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Cloudflare\u306eIP\u30a2\u30c9\u30ec\u30b9\u7bc4\u56f2<\/a> is the endpoint to read when locking an origin to the proxy instead of hard-coding addresses.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"SRM Threat Prevention \u2013 \u30ea\u30a2\u30eb\u30bf\u30a4\u30e0\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4fdd\u8b77\u306e\u89e3\u8aac\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/yT_xGpxGF7k?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">SRM Threat Prevention \u306e\u89e3\u8aac\uff08\u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4e0a\u306e\u3069\u3053\u306b\u914d\u7f6e\u3055\u308c\u308b\u304b\u3092\u542b\u3080\uff09<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Threat Prevention\u3092\u6709\u52b9\u306b\u3057\u305f\u72b6\u614b\u3067\u306eSynology\u30eb\u30fc\u30bf\u30fc\u306e\u901f\u5ea6\u30c6\u30b9\u30c8\u3002\" width=\"1200\" height=\"900\" src=\"https:\/\/www.youtube.com\/embed\/wuuRthcZQ_E?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">Threat Prevention \u3092\u6709\u52b9\u306b\u3057\u305f\u5834\u5408\u306e\u30b9\u30eb\u30fc\u30d7\u30c3\u30c8\u30c6\u30b9\u30c8\uff08\u8ab0\u3082\u8a00\u53ca\u3057\u306a\u3044\u30b3\u30b9\u30c8\uff09<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Protecting Your Public Websites with Cloudflare WAF\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/NbEo8p2Hvt8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u8aad\u307f\u53d6\u308b\u30ec\u30a4\u30e4\u30fc\u3067\u3042\u308b WAF \u306b\u3088\u308b\u516c\u958b\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u4fdd\u8b77\u306b\u95a2\u3059\u308b Cloudflare \u306e\u89e3\u8aac<\/figcaption><\/figure>","protected":false},"excerpt":{"rendered":"<p>Threat Prevention is the package most people reach for the moment they decide to host a website on a Synology NAS. It sits on the router, it has a shield icon, and its dashboard counts attacks in the hundreds, so it looks like the thing that keeps a public site safe. We run it on an RT6600ax in front of every machine we own, and it has been worth having. It is also, for a self-hosted website, almost entirely beside the point. This NAS Hosting 101 article opens our own router, reads a real week of events out of it, and shows exactly where Threat Prevention stops being able to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":22124,"comment_status":"open","ping_status":"closed","template":"","meta":{"_eb_attr":"","_xspeed_no_cache":false,"_xspeed_expiry_hours":0,"footnotes":""},"doc_category":[197],"doc_tag":[],"class_list":["post-22125","docs","type-docs","status-publish","has-post-thumbnail","hentry","doc_category-nas-hosting-101"],"year_month":"2026-10","word_count":3684,"total_views":"43","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Adair Hsu","author_nicename":"adairpk17","author_url":"https:\/\/synopower.club\/ja\/author\/adairpk17\/"},"doc_category_info":[{"term_name":"NAS Hosting 101","term_url":"https:\/\/synopower.club\/ja\/docs-category\/nas-hosting-101\/"}],"doc_tag_info":[],"_links":{"self":[{"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/docs\/22125","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/comments?post=22125"}],"version-history":[{"count":2,"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/docs\/22125\/revisions"}],"predecessor-version":[{"id":22127,"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/docs\/22125\/revisions\/22127"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/media\/22124"}],"wp:attachment":[{"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/media?parent=22125"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/doc_category?post=22125"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/synopower.club\/ja\/wp-json\/wp\/v2\/doc_tag?post=22125"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}