{"id":22125,"date":"2026-10-25T07:58:10","date_gmt":"2026-10-24T23:58:10","guid":{"rendered":"https:\/\/synopower.club\/?post_type=docs&#038;p=22125"},"modified":"2026-10-25T08:04:28","modified_gmt":"2026-10-25T00:04:28","password":"","slug":"synology-threat-prevention-blind-spots","status":"publish","type":"docs","link":"https:\/\/synopower.club\/ko\/docs\/synology-threat-prevention-blind-spots\/","title":{"rendered":"Synology Threat Prevention: \uac10\uc9c0\ud560 \uc218 \uc788\ub294 \uac83\uacfc \uac10\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uac83"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Threat Prevention\uc740 \ub300\ub2e4\uc218\uc758 \uc0ac\ub78c\ub4e4\uc774 Synology NAS\uc5d0\uc11c \uc6f9\uc0ac\uc774\ud2b8\ub97c \ud638\uc2a4\ud305\ud558\uae30\ub85c \uacb0\uc815\ud558\ub294 \uc21c\uac04 \uac00\uc7a5 \uba3c\uc800 \ucc3e\ub294 \ud328\ud0a4\uc9c0\uc785\ub2c8\ub2e4. \ub77c\uc6b0\ud130\uc5d0 \uc0c1\uc8fc\ud558\uba70 \ubc29\ud328 \uc544\uc774\ucf58\uc774 \uc788\uace0 \ub300\uc2dc\ubcf4\ub4dc\uc5d0\ub294 \uc218\ubc31 \uac74\uc758 \uacf5\uaca9\uc774 \uc9d1\uacc4\ub418\ubbc0\ub85c \uacf5\uac1c \uc0ac\uc774\ud2b8\ub97c \uc548\uc804\ud558\uac8c \uc9c0\ucf1c\uc8fc\ub294 \ub3c4\uad6c\ucc98\ub7fc \ubcf4\uc785\ub2c8\ub2e4. \uc800\ud76c\ub294 \ubcf4\uc720\ud55c \ubaa8\ub4e0 \uae30\uae30 \uc55e\uc5d0 \uc788\ub294 RT6600ax\uc5d0\uc11c \uc774 \ud328\ud0a4\uc9c0\ub97c \uc2e4\ud589\ud558\uace0 \uc788\uc73c\uba70, \uc0ac\uc6a9\ud560 \ub9cc\ud55c \uac00\uce58\uac00 \uc788\uc5c8\uc2b5\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \uc140\ud504 \ud638\uc2a4\ud305 \uc6f9\uc0ac\uc774\ud2b8\uc758 \uc785\uc7a5\uc5d0\uc11c\ub294 \uc774 \ud328\ud0a4\uc9c0\uac00 \ubcf8\uc9c8\uc5d0\uc11c \uac70\uc758 \uc644\uc804\ud788 \ubc97\uc5b4\ub098 \uc788\uae30\ub3c4 \ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ubc88 NAS Hosting 101 \ubb38\uc11c\uc5d0\uc11c\ub294 \uc800\ud76c \ub77c\uc6b0\ud130\ub97c \uc5f4\uc5b4 \uc2e4\uc81c \uc77c\uc8fc\uc77c\uac04\uc758 \uc774\ubca4\ud2b8\ub97c \uc77d\uc5b4\ubcf4\uace0, Threat Prevention\uc774 \ubcfc \uc218 \uc5c6\uc5c8\ub358 \uacf5\uaca9\uc758 \uc0ac\ub840\ub85c PHP2Shell\uc744 \uc0ac\uc6a9\ud558\uc5ec Threat Prevention\uc774 \uc5b4\ub514\uc11c\ubd80\ud130 \ub3c4\uc6c0\uc744 \uc904 \uc218 \uc5c6\ub294\uc9c0 \uc815\ud655\ud788 \ubcf4\uc5ec\ub4dc\ub9bd\ub2c8\ub2e4.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>SynoPower Club \ud3ec\uc778\ud2b8:<\/strong> \uc800\ub294 Synology \uc9c0\uc6d0 \ubd80\uc11c\uc5d0\uc11c \uc624\ub798 \uc77c\ud588\uc73c\uba70, \"\uc774 \uacf5\uaca9\uc744 \ub9c9\uc73c\ub824\uba74 \uc5b4\ub5a4 \uc635\uc158\uc744 \ucf1c\uc57c \ud558\ub098\uc694?\"\ub77c\ub294 \uc9c8\ubb38\uc744 \ub04a\uc784\uc5c6\uc774 \ubc1b\uc558\uc2b5\ub2c8\ub2e4. \uc774\ub294 \uc62c\ubc14\ub978 \ubcf8\ub2a5\uc774\uc9c0\ub9cc \uc798\ubabb\ub41c \ub300\uc0c1\uc744 \ud5a5\ud55c \uac83\uc774\uc5c8\uc2b5\ub2c8\ub2e4. \uc81c\uac00 \ub9c8\uce68\ub0b4 \uae68\ub2eb\uac8c \ub41c \uacc4\uae30\ub294 \uae30\ub2a5 \uc18c\uac1c \ud398\uc774\uc9c0 \ub300\uc2e0 \uc6b0\ub9ac \uc790\uc2e0\uc758 \uc774\ubca4\ud2b8 \ubaa9\ub85d\uc744 \uc77d\uc5c8\uc744 \ub54c\uc600\uc2b5\ub2c8\ub2e4. \uc774\ubc88 \ub2ec\uc5d0 \uc6b0\ub9ac \uacf5\uc720\uae30\uac00 \uae30\ub85d\ud55c \ubaa8\ub4e0 \uc54c\ub9bc\uc740 \uc545\uc131 \ud398\uc774\ub85c\ub4dc\uac00 \ud3ec\ud568\ub41c \uc694\uccad\uc774 \uc544\ub2c8\ub77c \ud3c9\ud310\uc774 \ub098\uc05c \uc8fc\uc18c\uc600\uc2b5\ub2c8\ub2e4. \uc774 \uc0ac\uc2e4\uc744 \uc774\ud574\ud558\uace0 \ub098\uba74, Threat Prevention\uc5d0 \ubd09\uc778\ub41c \ubd09\ud22c\uc5d0 \ub2f4\uae34 \ud2b8\ub798\ud53d\uc744 \uac80\uc0ac\ud574 \ub2ec\ub77c\uace0 \uc694\uad6c\ud558\ub294 \uac83\uc744 \uba48\ucd94\uac8c \ub429\ub2c8\ub2e4.<\/p>\n<\/blockquote>\n\n\n\n<h2 id=\"what-threat-prevention-actually-does-on-a-synology-router\" class=\"wp-block-heading\">Threat Prevention\uc774 Synology \ub77c\uc6b0\ud130\uc5d0\uc11c \uc2e4\uc81c\ub85c \ud558\ub294 \uc77c<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention\uc740 Snort \ubc0f Suricata \uacc4\ubcf4\ub97c \uae30\ubc18\uc73c\ub85c \uad6c\ucd95\ub41c \uce68\uc785 \ud0d0\uc9c0 \ubc0f \ubc29\uc9c0 \uc2dc\uc2a4\ud15c(IDPS)\uc785\ub2c8\ub2e4. \ub77c\uc6b0\ud130\uac00 \ud328\ud0b7\uc744 \uc804\ub2ec\ud560 \ub54c \ud328\ud0b7\uc744 \uc77d\uace0 \uc2dc\uadf8\ub2c8\ucc98 \uc138\ud2b8\uc640 \ube44\uad50\ud558\uc5ec \uacbd\uace0\ub97c \uae30\ub85d\ud558\uac70\ub098 \ud328\ud0b7\uc744 \ucc28\ub2e8\ud569\ub2c8\ub2e4. \uc800\ud76c RT6600ax\uc758 \uc2dc\uadf8\ub2c8\ucc98 \ud53c\ub4dc\ub294 Emerging Threats \uaddc\uce59 \uc138\ud2b8\uc758 \ubb34\ub8cc \uacc4\uce35\uc778 ET Open\uc774\uba70, \ub9e4\uc77c 09:00\uc5d0 \uc815\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub7ec\ud55c \uc124\uacc4 \uad6c\uc870\uc5d0\uc11c \uc138 \uac00\uc9c0 \ud2b9\uc131\uc774 \ub3c4\ucd9c\ub418\uba70, \uc774 \uc138 \uac00\uc9c0 \ubaa8\ub450 \uc778\ud130\ud398\uc774\uc2a4\uc758 \uadf8 \uc5b4\ub5a4 \uccb4\ud06c\ubc15\uc2a4\ubcf4\ub2e4 \uc911\uc694\ud569\ub2c8\ub2e4:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>It can only examine packets the router <strong>forwards<\/strong>. Traffic that never crosses the routing engine is not slow to inspect, it is invisible.<\/li>\n\n<li>It can only match on bytes it can <strong>read<\/strong>Threat Prevention\uc5d0\ub294 TLS \uac00\ub85c\ucc44\uae30 \uae30\ub2a5\uc774 \uc804\ud600 \uc5c6\uc73c\ubbc0\ub85c \uc554\ud638\ud654\ub41c \ud398\uc774\ub85c\ub4dc\ub294 \ubd88\ud22c\uba85\ud569\ub2c8\ub2e4.<\/li>\n\n<li>It can only match signatures <strong>somebody else wrote<\/strong>. The interface exposes vendor classes to switch on and off, and nothing that accepts a rule you author yourself.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uadf8 \uc911 \uc5b4\ub290 \uac83\ub3c4 \uacb0\ud568\uc774 \uc544\ub2d9\ub2c8\ub2e4. \ub124\ud2b8\uc6cc\ud06c \uacbd\uacc4\uc5d0 IPS\ub97c \ub450\ub294 \uac83\uc740 \ud569\ub9ac\uc801\uc774\uace0 \uc720\uc6a9\ud55c \uc77c\uc785\ub2c8\ub2e4. \uc2e4\uc218\ud558\ub294 \ubd80\ubd84\uc740 \uacbd\uacc4 \uc601\uc5ed\uc774 \uc6f9\uc0ac\uc774\ud2b8\uac00 \uacf5\uaca9\ubc1b\ub294 \uc704\uce58\ub77c\uace0 \uc9c0\ub808 \uc9d0\uc791\ud558\ub294 \uac83\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"threat-prevention-vs-a-web-application-firewall\" class=\"wp-block-heading\">Threat Prevention vs \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc29\ud654\ubcbd<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uadf8 \ucc28\uc774\ub97c \ud655\uc778\ud558\ub294 \uac00\uc7a5 \uba85\ud655\ud55c \ubc29\ubc95\uc740 Threat Prevention\uc744 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc29\ud654\ubcbd(WAF)\uacfc \ube44\uad50\ud574 \ub193\uace0, \uac01 \uc2dc\uc2a4\ud15c\uc774 \ud310\ub2e8\uc744 \ub0b4\ub9b4 \ub54c \ubb34\uc5c7\uc744 \uac00\uc9c0\uace0 \uc788\ub294\uc9c0 \ud655\uc778\ud574\ubcf4\ub294 \uac83\uc785\ub2c8\ub2e4. Threat Prevention\uc740 \ud328\ud0b7\uc744 \ubcf4\uc720\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. WAF\ub294 \ubcf5\ud638\ud654\ub41c HTTP \uc694\uccad\uc744 \ubcf4\uc720\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Question<\/th><th>Router IPS<\/th><th>Reverse-proxy WAF<\/th><\/tr><\/thead><tbody><tr><td>\uadf8\uac83\uc774 \ub2ec\ub9ac\ub294 \uacf3<\/td><td>On the routing path, before TLS ends<\/td><td>At the edge, after TLS ends<\/td><\/tr><tr><td>What it inspects<\/td><td>Packet headers and any cleartext bytes<\/td><td>Method, path, headers, cookies, body<\/td><\/tr><tr><td>HTTPS traffic<\/td><td>Opaque<\/td><td>Fully readable<\/td><\/tr><tr><td>Rules you can add<\/td><td>Vendor classes on or off<\/td><td>Your own expressions, plus managed rulesets<\/td><\/tr><tr><td>Same-subnet traffic<\/td><td>Never seen<\/td><td>Not applicable, it is upstream of everything<\/td><\/tr><tr><td>Typical catch<\/td><td>Reputation hits, scans, cleartext exploits, outbound command and control<\/td><td>Injection, traversal, known CVE request shapes, credential stuffing, bots<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\ub450 \uc81c\ud488\uc740 \uacbd\uc7c1 \uad00\uacc4\uac00 \uc544\ub2d9\ub2c8\ub2e4. \ub3d9\uc77c\ud55c \uc5ec\uc815\uc758 \uc11c\ub85c \ub2e4\ub978 \uad6c\uac04\uc744 \ub2f4\ub2f9\ud558\uba70, \uc140\ud504 \ud638\uc2a4\ud305 \uc0ac\uc774\ud2b8\uc5d0\ub294 \uccab \ubc88\uc9f8\ubcf4\ub2e4 \ub450 \ubc88\uc9f8 \uc81c\ud488\uc774 \ud6e8\uc52c \ub354 \ud544\uc694\ud569\ub2c8\ub2e4. \uc800\ud76c\ub294 \ub450 \uc81c\ud488\uc744 \ubaa8\ub450 \uc6b4\uc601\ud558\uba70, \uac01\uac01\uc5d0\uc11c \uc644\uc804\ud788 \ub2e4\ub978 \uc5ed\ud560\uc744 \uae30\ub300\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"reading-595-events-from-one-week-on-our-own-router\" class=\"wp-block-heading\">\uc790\uc0ac \ub77c\uc6b0\ud130\uc5d0\uc11c \uc77c\uc8fc\uc77c\uac04 \ubc1c\uc0dd\ud55c 595\uac74\uc758 \uc774\ubca4\ud2b8 \ubd84\uc11d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">2026\ub144 10\uc6d4 25\uc77c \uae30\uc900 \uc800\ud76c \uc6b4\uc601 \ub77c\uc6b0\ud130\uc758 Threat Prevention \uac1c\uc694 \ud654\uba74\uc785\ub2c8\ub2e4. 7\uc77c \ub3d9\uc548 595\uac74\uc758 \uc545\uc131 \uc774\ubca4\ud2b8\uac00 \ubc1c\uc0dd\ud588\uc73c\uba70, \uadf8\uc911 75\uac74\uc740 \uc2ec\uac01\ub3c4\uac00 \ub192\uc74c(High)\uc774\uc5c8\uc2b5\ub2c8\ub2e4. \ub9c8\uce58 \ud64d\uc218\ub97c \ub9c9\uc544\ub0b4\ub294 \uc7a5\ubcbd\ucc98\ub7fc \ubcf4\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"eager\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events.webp\" alt=\"RT6600ax\uc5d0\uc11c\uc758 Synology Threat Prevention \uac1c\uc694 (7\uc77c \ub3d9\uc548 595\uac1c\uc758 \uc545\uc131 \uc774\ubca4\ud2b8 \ubc0f \uc7a0\uc7ac\uc801 \uc704\ud611\uc774 \uc788\ub294 \uc7a5\uce58 1\uac1c \ud45c\uc2dc)\" class=\"wp-image-22119\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-overview-595-events-1000x482.webp 1000w\"  fetchpriority=\"high\"\/><figcaption class=\"wp-element-caption\">\uc790\uc0ac RT6600ax\uc5d0\uc11c\uc758 7\uc77c\uac04 \uae30\ub85d\uc785\ub2c8\ub2e4. \ud558\ub098\uc758 \uae30\uae30\uac00 \ubaa8\ub4e0 \ub192\uc740 \uc2ec\uac01\ub3c4 \uc774\ubca4\ud2b8\ub97c \ucc28\uc9c0\ud558\uace0 \uc788\uc73c\uba70, \ud574\ub2f9 \uae30\uae30\ub294 \uc6f9 \ud638\uc2a4\ud2b8\uac00 \uc544\ub2cc \uba54\uc77c \uc11c\ubc84\uc785\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\ud574\ub2f9 \ud654\uba74\uc758 \ub450 \uac00\uc9c0 \uc138\ubd80 \uc0ac\ud56d\uc740 \ud5e4\ub4dc\ub77c\uc778 \uc22b\uc790\ubcf4\ub2e4 \ub354 \uc911\uc694\ud55c \uc758\ubbf8\ub97c \uc9c0\ub2d9\ub2c8\ub2e4. \uccab\uc9f8\ub294 \uc7a0\uc7ac\uc801 \uc704\ud611 \ubaa9\ub85d\uc5d0 \ub2e8 \ud558\ub098\uc758 \uae30\uae30\ub9cc \ub098\ud0c0\ub098\uba70, \uadf8\uac83\uc740 TLS\ub97c \uc885\ub8cc\ud558\uace0 MailPlus\ub97c \uc2e4\ud589\ud558\ub294 \uae30\uae30\uc778 REVERSE_MAIL\uc774\ub77c\ub294 \uc810\uc785\ub2c8\ub2e4. \ub458\uc9f8\ub294 \ub179\uc0c9 \uccb4\ud06c \ud45c\uc2dc \uc606\uc758 \uc2dc\uadf8\ub2c8\ucc98 \ub0a0\uc9dc\uc785\ub2c8\ub2e4. \uc774\uc81c \ub2e8\uc77c \uc774\ubca4\ud2b8\ub97c \uc5f4\uc5b4 \uc2e4\uc81c\ub85c \uc5b4\ub5a4 \uaddc\uce59\uc774 \uc791\ub3d9\ud588\ub294\uc9c0 \uc77d\uc5b4\ubcf4\uc2ed\uc2dc\uc624.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature.webp\" alt=\"\uc0c1\ud0dc\uac00 \uacbd\uace0(Alert)\uc774\uace0 IP \uc8fc\uc18c\uc5d0\ub9cc \ub9e4\uce6d\ub418\ub294 \uaddc\uce59 \ubcf8\ubb38\uc774 \uc788\ub294 ET CINS \ub098\uc05c \ud3c9\ud310 IP \uc2dc\uadf8\ub2c8\ucc98\ub97c \ubcf4\uc5ec\uc8fc\ub294 Threat Prevention \uc774\ubca4\ud2b8 \uc138\ubd80 \uc815\ubcf4\" class=\"wp-image-22120\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-event-ip-reputation-signature-1000x482.webp 1000w\" \/><figcaption class=\"wp-element-caption\">\uc2dc\uadf8\ub2c8\ucc98 \ubcf8\ubb38\uc774 \uacb0\uc815\uc801\uc778 \ud78c\ud2b8\uc785\ub2c8\ub2e4. alert ip\ub85c \uc2dc\uc791\ud558\uace0 \uadf8 \ub4a4\uc5d0 IP \uc8fc\uc18c \ubaa9\ub85d\uc774 \uc774\uc5b4\uc9c0\ubbc0\ub85c, \uc694\uccad \ub0b4\ubd80\uc758 \uc5b4\ub5a4 \uc694\uc18c\ub3c4 \uac80\uc0ac\ub418\uc9c0 \uc54a\uc558\uc74c\uc744 \uc54c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\ubd84\ub958 Misc Attack, \uc2ec\uac01\ub3c4 Medium, \uc0c1\ud0dc Alert, \uc2dc\uadf8\ub2c8\ucc98 \uc774\ub984 ET CINS Active Threat Intelligence Poor Reputation IP group 24. \uaddc\uce59 \ubcf8\ubb38\uc744 \uc5f4\uc5b4\ubcf4\uba74 alert ip\ub85c \uc2dc\uc791\ud558\uace0 \uae34 IP \uc8fc\uc18c \ubaa9\ub85d\uc774 \ub098\uc635\ub2c8\ub2e4. \uc774\ub294 \ube14\ub85d\ub9ac\uc2a4\ud2b8 \uc870\ud68c\uc785\ub2c8\ub2e4. HTTP \uc694\uccad\uc758 \uadf8 \uc5b4\ub5a4 \ubd80\ubd84\ub3c4 \uc77d\ud788\uc9c0 \uc54a\uc558\ub294\ub370, \uc77d\uc744 \uc218 \uc788\ub294 \uad6c\uc870\uac00 \uc544\ub2c8\uc5c8\uae30 \ub54c\ubb38\uc785\ub2c8\ub2e4. \ub450 \ubc88\uc9f8 \ub300\uc0c1\uc778 Virtual DSM \ud638\uc2a4\ud2b8\ub97c \uc0c1\ub300\ub85c \uc774\ubca4\ud2b8\ub97c \uc0d8\ud50c\ub9c1\ud588\uc744 \ub54c\ub3c4 \uadf8\ub8f9 \ubc88\ud638\ub9cc \ub2e4\ub978 \ub3d9\uc77c\ud55c \uc720\ud615\uc758 \uaddc\uce59\uc744 \ud655\uc778\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub530\ub77c\uc11c \uc77c\uc8fc\uc77c\uac04\uc758 \uc194\uc9c1\ud55c \uc694\uc57d\uc740 \uc774\ub807\uc2b5\ub2c8\ub2e4: \ub77c\uc6b0\ud130\ub294 \uc774\ubbf8 \ub300\uc678\uc801 \ud3c9\ud310\uc774 \uc88b\uc9c0 \uc54a\uc740 \uc8fc\uc18c\ub85c\ubd80\ud130 \uc628 \uc218\ubc31 \uac74\uc758 \uc5f0\uacb0\uc744 \uc778\uc2dd\ud588\uc2b5\ub2c8\ub2e4. \uc774\ub294 \uc9c4\uc815\uc73c\ub85c \uc720\uc6a9\ud569\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \uc774\ub294 \uc6f9 \uacf5\uaca9 \ud0d0\uc9c0\uac00 \uc544\ub2c8\uba70, 595\ub77c\ub294 \uc22b\uc790\ub97c \uc6f9 \uacf5\uaca9 \ud0d0\uc9c0 \uac74\uc218\uc778 \uac83\ucc98\ub7fc \ud574\uc11d\ud574\uc11c\ub294 \uc548 \ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"how-to-audit-threat-prevention-in-4-steps\" class=\"wp-block-heading\">4\ub2e8\uacc4\ub85c Threat Prevention \uc810\uac80\ud558\uae30<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention\uc744 \uc804\uc801\uc73c\ub85c \uc2e0\ub8b0\ud558\uae30 \uc804\uc5d0 10\ubd84\uc744 \ud22c\uc790\ud558\uc5ec \uc790\uccb4 \ub124\ud2b8\uc6cc\ud06c\uc5d0\uc11c \uc2e4\uc81c\ub85c \uc5b4\ub5a4 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub294\uc9c0 \ud655\uc778\ud574\ubcf4\uc2ed\uc2dc\uc624. \uc544\ub798\uc758 \ubaa8\ub4e0 \ub2e8\uacc4\ub294 \uc77d\uae30 \uc804\uc6a9\uc774\uba70 \uc544\ubb34\uac83\ub3c4 \ubcc0\uacbd\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n<div id=\"rank-math-howto\" class=\"rank-math-block\" >\n<div class=\"rank-math-howto-description\">\n\n<\/div>\n\n<div class=\"rank-math-steps\">\n<div id=\"step-1\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\uc774\ubca4\ud2b8 \ud558\ub098\ub97c \uc5f4\uace0 \uc2dc\uadf8\ub2c8\ucc98 \ubcf8\ubb38\uc744 \uc77d\uc2b5\ub2c8\ub2e4.<\/h3>\n<div class=\"rank-math-step-content\"><p>Threat Prevention\uc73c\ub85c \uc774\ub3d9\ud55c \ub2e4\uc74c \uc774\ubca4\ud2b8\ub85c \uc774\ub3d9\ud558\uc5ec \ud56d\ubaa9\uc744 \ud074\ub9ad\ud558\uc138\uc694. \uc0c9\uc0c1\uc73c\ub85c \ud45c\uc2dc\ub41c \uc704\ud5d8\ub3c4 \ubc30\uc9c0 \ub108\uba38\uc758 \uc11c\uba85 \uaddc\uce59 \uc0c1\uc790\ub97c \ud655\uc778\ud558\uc138\uc694. alert ip\ub85c \uc2dc\uc791\ud558\ub294 \uaddc\uce59\uc740 \uc8fc\uc18c \ud3c9\ud310\ub9cc\uc73c\ub85c \ub9e4\uce6d\ub429\ub2c8\ub2e4. content \ub610\ub294 pcre\uac00 \ud3ec\ud568\ub41c \uaddc\uce59\uc740 \ud398\uc774\ub85c\ub4dc\ub97c \uae30\ubc18\uc73c\ub85c \ub9e4\uce6d\ub429\ub2c8\ub2e4. Threat Prevention\uc774 \ubb34\uc5c7\uc744 \ubcf4\ud638\ud558\uace0 \uc788\ub294\uc9c0 \ud310\ub2e8\ud558\uae30 \uc804\uc5d0 \uc790\uc2e0\uc758 \ubaa9\ub85d\uc5d0\uc11c \uac01 \uc720\ud615\uc774 \uba87 \uac1c\ub098 \uc788\ub294\uc9c0 \ud655\uc778\ud574 \ubcf4\uc138\uc694.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-2\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\uc5b4\ub5a4 \uc778\ud130\ud398\uc774\uc2a4\uac00 \ubaa8\ub2c8\ud130\ub9c1\ub418\ub294\uc9c0 \ud655\uc778<\/h3>\n<div class=\"rank-math-step-content\"><p>\uc124\uc815\uc744 \uc5f4\uace0 Monitored Interfaces(\ubaa8\ub2c8\ud130\ub9c1 \ub300\uc0c1 \uc778\ud130\ud398\uc774\uc2a4) \ud14c\uc774\ube14\uc744 \ud655\uc778\ud558\uc2ed\uc2dc\uc624. \uc5ec\uae30\uc5d0 \uccb4\ud06c\ub41c \uc778\ud130\ud398\uc774\uc2a4\ub9cc \uac80\uc0ac\ub418\uba70, \uc77c\ubc18\uc801\uc778 \ubc30\ud3ec \ud658\uacbd\uc5d0\uc11c\ub294 \uc778\ud130\ub137\uacfc \uc5f0\uacb0\ub41c \uc778\ud130\ud398\uc774\uc2a4\uac00 \uc774\uc5d0 \ud574\ub2f9\ud569\ub2c8\ub2e4. \ub3d9\uc77c\ud55c LAN \uc11c\ube0c\ub137\uc5d0 \uc788\ub294 \ub450 \uc7a5\uce58 \uac04\uc758 \ud2b8\ub798\ud53d\uc740 \ub77c\uc6b0\ud305\ub418\uc9c0 \uc54a\uace0 \uc2a4\uc704\uce6d\ub418\ubbc0\ub85c \uac80\uc0ac \uc5d4\uc9c4\uc5d0 \ub3c4\ub2ec\ud558\uc9c0 \uc54a\uc73c\uba70, \uc774 \ud398\uc774\uc9c0\uc758 \uc5b4\ub5a4 \uc124\uc815\uc73c\ub85c\ub3c4 \uc774\ub97c \ubcc0\uacbd\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-3\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\ub77c\uc6b0\ud130\uac00 \ubc14\uc060 \ub54c \uc5b4\ub5a4 \uc77c\uc774 \uc77c\uc5b4\ub098\ub294\uc9c0 \uc54c\uc544\ubcf4\uc138\uc694<\/h3>\n<div class=\"rank-math-step-content\"><p>\ub3d9\uc77c\ud55c \ud328\ub110\uc5d0\uc11c \uae30\ubcf8 \ubaa8\ub4dc\ub97c \ud655\uc778\ud558\uc2ed\uc2dc\uc624. \ub124\ud2b8\uc6cc\ud06c \uc548\uc815\uc131 \uc6b0\uc120\uc740 \ud2b8\ub798\ud53d\uc774 \uc5d4\uc9c4\uc5d0\uc11c \ucc98\ub9ac\ud560 \uc218 \uc788\ub294 \uc6a9\ub7c9\uc744 \ucd08\uacfc\ud560 \ub54c \ucd08\uacfc\ubd84\uc774 \ud544\ud130\ub9c1\ub418\uc9c0 \uc54a\uace0 \uadf8\ub300\ub85c \ud1b5\uacfc\ub428\uc744 \uc758\ubbf8\ud569\ub2c8\ub2e4. \ubcf4\uc548 \uc6b0\uc120\uc740 \ub300\uc2e0 \ucd08\uacfc\ubd84\uc774 \ucc28\ub2e8\ub428\uc744 \uc758\ubbf8\ud569\ub2c8\ub2e4. \ud55c \uac00\uc9c0 \uc120\ud0dd\uc740 \ud398\uc77c \uc624\ud508(fail-open)\ub418\uc5b4 \ud68c\uc120 \uc5f0\uacb0\uc744 \uc720\uc9c0\ud558\uace0, \ub2e4\ub978 \uc120\ud0dd\uc740 \ud398\uc77c \ud074\ub85c\uc988(fail-closed)\ub418\uc5b4 \ud68c\uc120 \uc5f0\uacb0\uc744 \ucc28\ub2e8\ud569\ub2c8\ub2e4. \uc2e4\uc81c\ub85c \uc5b4\ub5a4 \ubc29\uc2dd\uc744 \uc6d0\ud558\ub294\uc9c0 \uacb0\uc815\ud558\uc2ed\uc2dc\uc624.<\/p>\n<\/div>\n<\/div>\n<div id=\"step-4\" class=\"rank-math-step\">\n<h3 class=\"rank-math-step-title\">\uc790\uc2e0\ub9cc\uc758 \uaddc\uce59\uc744 \ucd94\uac00\ud574 \ubcf4\uc138\uc694<\/h3>\n<div class=\"rank-math-step-content\"><p>Open Self-Defined Policy. You can change the action for a signature the vendor already ships, and you can scope it by source or destination address. There is no field anywhere that accepts a signature you wrote. If your threat is newer than your signature feed, this screen is where you discover you have no way to respond.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n\n\n\n<h2 id=\"where-it-genuinely-earns-its-place\" class=\"wp-block-heading\">Threat Prevention\uc774 \uc81c \uc5ed\ud560\uc744 \ud1a1\ud1a1\ud788 \ud558\ub294 \ubd84\uc57c<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc800\ud76c\ub294 \ubbf8\uc2e0\uc774\ub098 \ub9f9\uc2e0 \ub54c\ubb38\uc5d0 Threat Prevention\uc744 \ucf1c\ub450\ub294 \uac83\uc774 \uc544\ub2d9\ub2c8\ub2e4. \uc800\ud76c \uc778\ud504\ub77c \uc2a4\ud0dd\uc758 \ub2e4\ub978 \uc5b4\ub5a4 \ub3c4\uad6c\ub3c4 \ub300\uccb4\ud560 \uc218 \uc5c6\ub294 4\uac00\uc9c0 \uc791\uc5c5\uc744 \uc774 \ud328\ud0a4\uc9c0\uac00 \uc218\ud589\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Outbound command and control.<\/strong> This is the strongest case by far. A compromised device has to call home, that call has to leave through the router, and a good share of it is still either cleartext or aimed at a known address. Our router ships the Malware Command and Control Activity class with 3,450 of 3,498 rules enabled, and the Domain Observed Used for C2 class with 7,157 of 7,202.<\/li>\n\n<li><strong>Cleartext protocols from the internet.<\/strong> Our mail server answers on port 25, and SMTP is cleartext until STARTTLS. That is real inspectable traffic, and it is no accident that the mail host is the one device our events list keeps naming.<\/li>\n\n<li><strong>Scanning and reconnaissance.<\/strong> Port sweeps and fingerprinting are recognised by connection behaviour rather than by payload, so encryption does not hide them.<\/li>\n\n<li><strong>Visibility.<\/strong> A searchable log of who knocked and with what reputation is worth having, even when every entry is only a reputation hit. It is monitoring value, and it should be counted as monitoring value rather than as protection.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 4\uac00\uc9c0 \uc791\uc5c5\uc758 \uacf5\ud1b5\uc810\uc740 \uadf8 \uc911 \uc5b4\ub290 \uac83\ub3c4 \uc6f9\uc0ac\uc774\ud2b8\uc5d0 \ub300\ud55c \uc9c1\uc811\uc801\uc778 \uacf5\uaca9\uc774 \uc544\ub2c8\ub77c\ub294 \uc810\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"why-a-site-owner-asks-threat-prevention-for-the-wrong-thing\" class=\"wp-block-heading\">\uc0ac\uc774\ud2b8 \uc18c\uc720\uc790\uac00 Threat Prevention\uc5d0 \uc798\ubabb\ub41c \uae30\ub300\ub97c \ud558\ub294 \uc774\uc720<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NAS\uc5d0\uc11c \uc0ac\uc774\ud2b8\ub97c \ud638\uc2a4\ud305\ud560 \ub54c \uc694\uccad \uacbd\ub85c\uc5d0\ub294 \uc77c\ubc18\uc801\uc73c\ub85c \ub9ac\ubc84\uc2a4 \ud504\ub85d\uc2dc\uac00 \ud3ec\ud568\ub429\ub2c8\ub2e4. \uc800\ud76c\uc758 \uacbd\ub85c \uad6c\uc870\ub294 \ub2e4\uc74c\uacfc \uac19\uc73c\uba70, \uc774 \uad6c\uc870\uac00 \ubaa8\ub4e0 \uac83\uc744 \uacb0\uc815\uc9d3\uc2b5\ub2c8\ub2e4:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The visitor reaches <strong>Cloudflare<\/strong>, which answers most requests from cache and inspects the rest in cleartext.<\/li>\n\n<li>What is left crosses the <strong>router<\/strong>, \uc5ec\uae30\uc11c Threat Prevention\uc740 \uc554\ud638\ud654\ub41c TLS \uc2a4\ud2b8\ub9bc\ub9cc \ubcfc \uc218 \uc788\uc744 \ubfd0 \uadf8 \uc774\uc0c1\uc740 \ubcf4\uc9c0 \ubabb\ud569\ub2c8\ub2e4.<\/li>\n\n<li>\uadf8\ub9cc\ud07c <strong>reverse proxy NAS<\/strong> terminates TLS and forwards plain HTTP to the machine that runs the site.<\/li>\n\n<li>That last hop is on the <strong>same subnet<\/strong>, so the frame goes through a switch and the router is not in the path.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \ub124 \uc904\uc744 \ud568\uaed8 \uc77d\uc73c\uba74 \ud568\uc815\uc774 \ubd84\uba85\ud574\uc9d1\ub2c8\ub2e4. \uc694\uccad\uc774 \uc77d\uc744 \uc218 \uc788\ub294 \ud615\ud0dc\ub85c \uc874\uc7ac\ud558\ub294 \uc720\uc77c\ud55c \uad6c\uac04\uc740 \ucd5c\uc885 \ud649\ubfd0\uc774\uba70, \uc774\ub294 \ub77c\uc6b0\ud130\uac00 \uad00\ucc30\ud560 \uc218 \uc5c6\ub294 \uc720\uc77c\ud55c \uad6c\uac04\uc785\ub2c8\ub2e4. \ub77c\uc6b0\ud130\uac00 \uad00\ucc30\ud560 \uc218 \uc788\ub294 \ubaa8\ub4e0 \uacf3\uc5d0\uc11c \uc694\uccad\uc740 \uc554\ud638\ud654\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ubaa8\uc21c\uc744 \ud574\uacb0\ud558\ub294 \uccb4\ud06c\ubc15\uc2a4\ub294 \uc5c6\uc73c\uba70, Threat Prevention\uc774 \uc870\uc6a9\ud558\ub2e4\uace0 \ud574\uc11c \uc791\ub3d9\uc5d0 \uc2e4\ud328\ud55c \uac83\uc774 \uc544\ub2d9\ub2c8\ub2e4. \uad6c\uc870\uc801\uc73c\ub85c \uc77d\uc744 \uc218 \uc5c6\ub294 \ud2b8\ub798\ud53d\uc5d0 \ub300\ud574 \uc815\ud655\ud558\uac8c \ubcf4\uace0\ud558\uace0 \uc788\uc744 \ubfd0\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\uac83\uc774 Threat Prevention\uc744 \ud2b9\uc815 \uc0ac\uc774\ud2b8\ub85c \uc9c0\uc815\ud574\ub3c4 \uc791\ub3d9\ud558\uc9c0 \uc54a\ub294 \uc774\uc720\uc774\uae30\ub3c4 \ud569\ub2c8\ub2e4. \uc774 \ud328\ud0a4\uc9c0\ub294 \ud638\uc2a4\ud2b8 \uc774\ub984\uc774 \uc544\ub2c8\ub77c \ub77c\uc6b0\ud130 \uc778\ud130\ud398\uc774\uc2a4\uc5d0 \ubc14\uc778\ub529\ub429\ub2c8\ub2e4. Host \ud5e4\ub354\ub97c \uc804\ud600 \ubcfc \uc218 \uc5c6\uae30 \ub54c\ubb38\uc5d0 \uc5f0\uacb0\uc774 \uc5b4\ub5a4 \uc0ac\uc774\ud2b8\uc5d0 \uc18d\ud574 \uc788\ub294\uc9c0\uc5d0 \ub300\ud55c \uac1c\ub150\uc774 \uc5c6\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces.webp\" alt=\"\uc778\ud130\ub137\uc5d0 \uc5f0\uacb0\ub41c \ud3ec\ud2b8\ub85c \uc81c\ud55c\ub41c \ubaa8\ub2c8\ud130\ub9c1 \uc778\ud130\ud398\uc774\uc2a4, \ub124\ud2b8\uc6cc\ud06c \uc548\uc815\uc131 \uc6b0\uc120\uc21c\uc704 \ubaa8\ub4dc \ubc0f ET Open \uc2dc\uadf8\ub2c8\ucc98 \uc18c\uc2a4\ub97c \ubcf4\uc5ec\uc8fc\ub294 Threat Prevention \uc124\uc815\" class=\"wp-image-22121\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-settings-monitored-interfaces-1000x482.webp 1000w\" \/><figcaption class=\"wp-element-caption\">Monitored Interfaces\ub294 Threat Prevention\uc758 \uc804\uccb4 \ubc94\uc704\uc785\ub2c8\ub2e4. \uc544\ub798\uc758 \uae30\ubcf8 \ubaa8\ub4dc\uc640 \ub9e8 \uc544\ub798\uc758 \uc2dc\uadf8\ub2c8\ucc98 \uc18c\uc2a4\ub97c \ucc38\uace0\ud558\uc138\uc694.<\/figcaption><\/figure>\n\n\n\n<h2 id=\"three-reasons-php2shell-was-invisible-at-the-router\" class=\"wp-block-heading\">PHP2Shell\uc774 \ub77c\uc6b0\ud130\uc5d0\uc11c \uac10\uc9c0\ub418\uc9c0 \uc54a\uc740 \uc138 \uac00\uc9c0 \uc774\uc720<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CVE-2026-109618 \ubc0f CVE-2026-109619\ub85c \ucd94\uc801\ub418\ub294 \uc778\uc99d \uc804 \uc6d0\uaca9 \ucf54\ub4dc \uc2e4\ud589 \ucde8\uc57d\uc810 \uc30d\uc778 PHP2Shell\uc740 2026\ub144 10\uc6d4 20\uc77c\uc5d0 \uc720\ucd9c\ub418\uc5c8\uc73c\uba70 \ub2e4\uc74c \ub0a0 \uc5c5\uc2a4\ud2b8\ub9bc\uc5d0\uc11c \ud328\uce58\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ub294 \ub9ce\uc740 \uc0ac\ub78c\ub4e4\uc774 \ub77c\uc6b0\ud130 IPS\uac00 \ub9c9\uc544\uc8fc\uae30\ub97c \uae30\ub300\ud558\ub294 \ubc14\ub85c \uadf8\ub7f0 \ubb38\uc81c\uc774\uba70, \uc65c \ubc29\uc5b4\ud560 \uc218 \uc5c6\uc5c8\ub294\uc9c0 \uba85\ud655\ud788 \uc9da\uc5b4\ubcfc \ud544\uc694\uac00 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uccab\uc9f8, \ub77c\uc6b0\ud130\uac00 \uac10\uc2dc\ud558\ub294 \ubaa8\ub4e0 \uad6c\uac04\uc5d0\uc11c \ud2b8\ub798\ud53d\uc774 \uc554\ud638\ud654\ub418\uc5b4 \uc788\uc5c8\uc2b5\ub2c8\ub2e4.<\/strong> The exploit lives in the HTTP request, and the HTTP request only exists in the clear after TLS has been terminated, which happens downstream of the router on a hop the router never carries.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\ub458\uc9f8, \ud65c\uc131\ud654\ud560 \uc218 \uc788\ub294 Threat Prevention \uc2dc\uadf8\ub2c8\ucc98\uac00 \uc874\uc7ac\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/strong> We checked again on 25 October 2026 and found no published Snort or Emerging Threats rule for either CVE. Our feed is ET Open, the free tier, which lags the commercial set, and the Self-Defined Policy screen accepts no rule of your own. So even an operator who knew precisely what to match for had nowhere to put it.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy.webp\" alt=\"\uc0c8\ub85c \uc791\uc131 \uc635\uc158 \uc5c6\uc774 \ud3b8\uc9d1 \ubc0f \uc0ad\uc81c\ub9cc \uac00\ub2a5\ud55c \ube44\uc5b4 \uc788\ub294 Threat Prevention\uc758 \uc0ac\uc6a9\uc790 \uc815\uc758 \uc815\ucc45 \ud654\uba74\" class=\"wp-image-22123\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-self-defined-policy-1000x482.webp 1000w\" \/><figcaption class=\"wp-element-caption\">Self-Defined Policy\ub294 \ubca4\ub354\uac00 \uc774\ubbf8 \uc81c\uacf5\ud55c \uc2dc\uadf8\ub2c8\ucc98\uc5d0 \ub300\ud55c \uc791\uc5c5\uc744 \uc870\uc815\ud569\ub2c8\ub2e4. \uc0ac\uc6a9\uc790\uac00 \uc9c1\uc811 \uc791\uc131\ud55c \uaddc\uce59\uc744 \uc785\ub825\ud560 \uc218 \uc788\ub294 \ud544\ub4dc\ub294 \uc5c6\uc2b5\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uc14b\uc9f8, \uac00\uc7a5 \uadfc\ubcf8\uc801\uc778 \uc774\uc720\ub85c \uc774 \uacf5\uaca9\uc5d0\ub294 \uc77c\uce58\uc2dc\ud0ac \ud398\uc774\ub85c\ub4dc \ud615\ud0dc\uac00 \uc5c6\uc2b5\ub2c8\ub2e4.<\/strong> The chain takes two requests. The first has to push PHP into exhausting its memory limit, which makes the engine abandon a request through a path that skips cleanup and leaves some global state behind. The second request is ordinary, and it is the one that reaches a stale pointer and turns into code execution.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uccab \ubc88\uc9f8 \uc694\uccad\uc740 \ubc14\uc774\ud2b8 \uc2dc\ud000\uc2a4\uac00 \uc544\ub2c8\ub77c \uc5bc\ub9c8\ub098 \ub9ce\uc740 \uba54\ubaa8\ub9ac\ub97c \uc18c\ube44\ud558\ub294\uc9c0\uc5d0 \uc758\ud574 \uc815\uc758\ub418\uba70, \ub300\uc6a9\ub7c9 \uc5c5\ub85c\ub4dc, \uac70\ub300\ud55c JSON \ubcf8\ubb38, \uae4a\uc740 \ubc30\uc5f4, \uc815\uaddc\uc2dd\uc758 \uae34 \ubb38\uc790\uc5f4 \ubaa8\ub450 \ud574\ub2f9\ub429\ub2c8\ub2e4. \ub450 \ubc88\uc9f8 \uc694\uccad\uc5d0\ub294 \uc545\uc131 \ubc14\uc774\ud2b8\uac00 \uc804\ud600 \ud3ec\ud568\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. IPS\ub294 \ud328\ud0b7\ubcc4 \ubc0f \ud50c\ub85c\uc6b0\ubcc4\ub85c \uacb0\uc815\ud569\ub2c8\ub2e4. \uc774\uc804 \uc694\uccad\uc5d0\uc11c \ub2e4\uc74c \uc694\uccad\uc73c\ub85c \uc624\uc5fc\ub41c \uc0c1\ud0dc\ub97c \uc804\ub2ec\ud558\ub294 \uc6cc\ucee4 \ud504\ub85c\uc138\uc2a4\uc758 \ubaa8\ub378\uc744 \uac00\uc9c0\uace0 \uc788\uc9c0 \uc54a\uc73c\uba70, \ubc14\ub85c \uc5ec\uae30\uc5d0 \uc774 \ubc84\uadf8\uac00 \uc874\uc7ac\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub610\ud55c \uc774\ub294 \ub2f9\uc2dc \ub110\ub9ac \uc54c\ub824\uc84c\ub358 \uc644\ud654 \uc870\uce58\uc758 \ud55c\uacc4\ub97c \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. \uadf8 \uc870\uce58\ub294 PHP \uad6c\uc131\uc5d0\uc11c session.upload_progress\ub97c \ub044\ub294 \uac83\uc774\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ub294 \ub450 \ubc88\uc9f8 CVE\uc5d0 \ub3c4\ub2ec\ud558\ub294 \uc798 \uc124\uba85\ub41c \ud55c \uac00\uc9c0 \ubc29\ubc95\uc744 \uc81c\uac70\ud574\uc8fc\uba70, \uc2e4\uc81c\ub85c \ud328\uce58\ud560 \uc218 \uc5c6\ub294 \uae30\uae30\uc5d0\uc11c\ub294 \uc548 \ud558\ub294 \uac83\ubcf4\ub2e4 \ub0ab\uc2b5\ub2c8\ub2e4. \ud558\uc9c0\ub9cc \uc774\ub294 \uadfc\ubcf8\uc801\uc778 \ud574\uacb0\ucc45\uc774 \uc544\ub2d9\ub2c8\ub2e4. \uba54\ubaa8\ub9ac \uc18c\ubaa8\ub294 \uadf8 \ud55c \uac00\uc9c0 \uae30\ub2a5\uc73c\ub85c\ub9cc \ubc1c\uc0dd\ud558\ub294 \uac83\uc774 \uc544\ub2c8\uba70, \uc774 \uc124\uc815\uc740 CVE-2026-109618\uacfc \uc804\ud600 \ubb34\uad00\ud569\ub2c8\ub2e4. \uc6b0\ub9ac\ub294 \ub2e8 \ud558\ub098\uc758 \ud638\uc2a4\ud2b8\uc5d0\uc11c \uc784\uc2dc\ubc29\ud3b8\uc73c\ub85c \uc774 \ubc29\ubc95\uc744 \uc0ac\uc6a9\ud588\uace0, \uc774\ub97c \ud574\uacb0\ucc45\uc774 \uc544\ub2cc \uc2dc\uac04\uc744 \ubc88 \uac83\uc73c\ub85c \uac04\uc8fc\ud588\uc2b5\ub2c8\ub2e4. \ud328\uce58 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ub2f9\uc0ac\uc758 <a href=\"https:\/\/synopower.club\/ko\/synology-php2shell-emergency-patch\/\">PHP2Shell write-up<\/a>.<\/p>\n\n\n\n<h2 id=\"fail-open-by-design-and-the-day-it-cost-us-our-mail\" class=\"wp-block-heading\">\uc124\uacc4\uc0c1 Fail Open\uc758 \ud5c8\uc810, \uadf8\ub9ac\uace0 \uba54\uc77c \uc11c\ube44\uc2a4 \uc7a5\uc560\ub97c \uacaa\uc740 \ub0a0<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention\uc744 \uc2e0\ub8b0\ud560 \uc218 \uc788\ub294 \uc81c\uc5b4 \uc7a5\uce58\ub85c \ucc98\ub9ac\ud558\uae30 \uc804\uc5d0 \uc54c\uc544\ub450\uc5b4\uc57c \ud560 \uc18d\uc131\uc774 \ud558\ub098 \ub354 \uc788\uc2b5\ub2c8\ub2e4. \uad8c\uc7a5\ub418\ub294 \uae30\ubcf8 \ubaa8\ub4dc\ub294 \ub124\ud2b8\uc6cc\ud06c \uc548\uc815\uc131 \uc6b0\uc120 \ubaa8\ub4dc\uc774\uba70, \uc778\ud130\ud398\uc774\uc2a4\ub294 \ub3cc\ub824 \ub9d0\ud558\uc9c0 \uc54a\uace0 \uadf8 \uc758\ubbf8\ub97c \ubc1d\ud788\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ud2b8\ub798\ud53d\uc774 \ucc98\ub9ac \uc6a9\ub7c9\uc744 \ucd08\uacfc\ud558\uba74 \ub300\uae30 \uc911\uc778 \ud328\ud0b7\uc774 \ud544\ud130\ub9c1 \uc5c6\uc774 \uc6b0\ud68c\ub429\ub2c8\ub2e4. \ub300\uc548\uc778 \ubcf4\uc548 \uc6b0\uc120 \ubaa8\ub4dc\ub294 \ub300\uc2e0 \uc774\ub7ec\ud55c \ud328\ud0b7\uc744 \ucc28\ub2e8(drop)\ud558\uace0 \ubb38\uc81c\uac00 \ud574\uacb0\ub420 \ub54c\uae4c\uc9c0 \uc5f0\uacb0\uc774 \ubd88\uc548\uc815\ud560 \uac83\uc774\ub77c\uace0 \uacbd\uace0\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub294 \uac00\uc815\uc6a9 \ub77c\uc6b0\ud130\uc5d0 \ud569\ub9ac\uc801\uc778 \uae30\ubcf8\uac12\uc785\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \uc774\ub294 \uac00\uc7a5 \uac15\ub825\ud558\uac8c \uc791\ub3d9\ud558\uae30\ub97c \ubc14\ub77c\ub294 \ubc14\ub85c \uadf8 \uc21c\uac04\uc5d0 Threat Prevention\uc774 \uac00\uc7a5 \uc57d\ud574\uc9c4\ub2e4\ub294 \uac83\uc744 \uc758\ubbf8\ud569\ub2c8\ub2e4. \ud2b8\ub798\ud53d \ud3ed\uc8fc(flood)\ub294 \ud544\ud130\ub9c1\ud558\uace0 \uc2f6\uc740 \ub300\uc0c1\uc778 \ub3d9\uc2dc\uc5d0 \uc6a9\ub7c9\uc744 \ucd08\uacfc\ud558\uac8c \ub9cc\ub4dc\ub294 \uc6d0\uc778\uc774\uae30 \ub54c\ubb38\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub2e4\ub978 \uc624\ub958 \ubaa8\ub4dc\ub3c4 \uae30\ub85d\uc5d0 \ub0a8\uc544 \uc788\uc2b5\ub2c8\ub2e4. 2026\ub144 8\uc6d4 2\uc77c, \ub204\uad70\uac00 Linux\uc5d0\uc11c\ub294 \uc804\ud600 \uc791\ub3d9\ud560 \uc218 \uc5c6\ub294 Windows PHP-CGI \ubc84\uadf8 \uc775\uc2a4\ud50c\ub85c\uc787\uc73c\ub85c \ub2f9\uc0ac\uc758 \uc5ed\ubc29\ud5a5 \ud504\ub85d\uc2dc\ub97c 116\ud68c \uacf5\uaca9\ud588\uc2b5\ub2c8\ub2e4. Threat Prevention\uc740 \uc790\uc2e0\uc758 \uc0c1\ud0dc\uac00 \uaf2c\uc77c \uc815\ub3c4\ub85c \ub9ce\uc740 \ud328\ud0b7\uc744 \uc0ad\uc81c(drop)\ud55c \ub2e4\uc74c, \uc790\uc2e0\uc774 \ubc29\uc5b4\ud558\uace0 \uc788\ub358 \ubc14\ub85c \uadf8 \uae30\uae30\uc758 \uc544\uc6c3\ubc14\uc6b4\ub4dc \ud2b8\ub798\ud53d\uc870\ucc28 \uac70\ubd80\ud558\uae30 \uc2dc\uc791\ud588\uc2b5\ub2c8\ub2e4. \uba54\uc77c \ud050\uac00 \uba48\ucdc4\uace0 \uc99d\uc0c1\uc740 DNS \uc624\ub958\uc640 \ub611\uac19\uc558\uc2b5\ub2c8\ub2e4. \ub77c\uc6b0\ud130\ub97c \uc7ac\ubd80\ud305\ud558\ub2c8 \ud574\uacb0\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \ud504\ub85d\uc2dc\uc5d0\ub294 \uc544\ubb34\uac83\ub3c4 \ub3c4\ub2ec\ud558\uc9c0 \uc54a\uc558\uae30 \ub54c\ubb38\uc5d0 \ud504\ub85d\uc2dc \uc561\uc138\uc2a4 \ub85c\uadf8\uc5d0\ub294 \uc544\ubb34\uac83\ub3c4 \ub098\ud0c0\ub098\uc9c0 \uc54a\uc558\uc2b5\ub2c8\ub2e4. \uad6c\uc870\uc801\uc73c\ub85c \uc131\uacf5\ud560 \uc218 \uc5c6\uc5c8\ub358 \uacf5\uaca9\uc774\uc5c8\uc74c\uc5d0\ub3c4 \ubd88\uad6c\ud558\uace0, \uacf5\uaca9\uc744 \ub9c9\uc544\uc57c \ud560 \uc7a5\uce58 \ub54c\ubb38\uc5d0 \uc2dc\uc2a4\ud15c \uc911\ub2e8\uc774 \ubc1c\uc0dd\ud558\uace0 \ub9d0\uc558\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1400\" height=\"675\" sizes=\"auto, (max-width: 1400px) 100vw, 1400px\" src=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list.webp\" alt=\"6,010\uac1c \uaddc\uce59 \uc911 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacf5\uaca9(Web Application Attack) 5,928\uac1c\ub97c \ud3ec\ud568\ud558\uc5ec \ud074\ub798\uc2a4\ubcc4 \ud65c\uc131\ud654 \uc218\ub7c9\uc774 \ud45c\uc2dc\ub41c Threat Prevention\uc758 \ud074\ub798\uc2a4 \ubc0f \uc2dc\uadf8\ub2c8\ucc98 \ubaa9\ub85d\" class=\"wp-image-22122\" srcset=\"https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list.webp 1400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-300x145.webp 300w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-1024x494.webp 1024w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-768x370.webp 768w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-18x9.webp 18w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-600x289.webp 600w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-400x193.webp 400w, https:\/\/synopower.club\/wp-content\/uploads\/2026\/10\/synology-threat-prevention-class-signature-list-1000x482.webp 1000w\" \/><figcaption class=\"wp-element-caption\">\uc624\ub978\ucabd\uc5d0 \ud65c\uc131\ud654\ub41c \uac1c\uc218\uac00 \ud45c\uc2dc\ub41c \ud074\ub798\uc2a4 \uc218\uc900 \uc2a4\uc704\uce58\uc785\ub2c8\ub2e4. \uc774\uac83\uc774 \ud29c\ub2dd \uac00\ub2a5\ud55c \uc804\ubd80\uc785\ub2c8\ub2e4.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\ubaa9\ub85d\uc5d0 \uc788\ub294 \ud65c\uc131\ud654 \uac1c\uc218\ub97c \uc0b4\ud3b4\ubcf4\uc138\uc694. Web Application Attack\uc740 6,010\uac1c \uaddc\uce59 \uc911 5,928\uac1c\uac00 \ud65c\uc131 \uc0c1\ud0dc\ub85c \ud45c\uc2dc\ub418\uba70, \uad00\uc2ec \uc788\ub294 \ub2e4\ub978 \ud074\ub798\uc2a4\uc5d0\uc11c\ub3c4 \ube44\uc728\uc774 \ube44\uc2b7\ud569\ub2c8\ub2e4. \ud074\ub798\uc2a4\ub97c \ucf20\ub2e4\uace0 \ud574\uc11c \ub0b4\ubd80\uc758 \ubaa8\ub4e0 \uaddc\uce59\uc774 \ucf1c\uc9c0\ub294 \uac83\uc740 \uc544\ub2c8\uba70, \uc778\ud130\ud398\uc774\uc2a4\uc5d0\uc11c\ub294 \ub204\ub77d\ub41c \ub098\uba38\uc9c0 \uaddc\uce59\uc774 \ubb34\uc5c7\uc778\uc9c0 \ud655\uc778\ud560 \ubc29\ubc95\uc744 \uc81c\uacf5\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"put-a-proxy-in-front-then-lock-the-origin-to-it\" class=\"wp-block-heading\">\uc804\uba74\uc5d0 \ud504\ub85d\uc2dc\ub97c \ub450\uace0 \uc6d0\ubcf8 \uc11c\ubc84 \uc811\uadfc \uc81c\ud55c\ud558\uae30<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NAS\uc5d0\uc11c \uc6f9\uc0ac\uc774\ud2b8\ub97c \uc81c\uacf5\ud558\ub294 \uacbd\uc6b0 \ub77c\uc6b0\ud130\uac00 \ud560 \uc218 \uc5c6\ub294 \uc5ed\ud560\uc744 \uc218\ud589\ud558\ub294 \uc81c\uc5b4 \uae30\ub2a5\uc740 \ub9ac\ubc84\uc2a4 \ud504\ub85d\uc2dc WAF\uc785\ub2c8\ub2e4. \uc800\ud76c\ub294 Cloudflare\ub97c \uc0ac\uc6a9\ud558\uba70, \uadf8 \uc774\uc720\ub294 \ube0c\ub79c\ub4dc\ubcf4\ub2e4\ub294 \uc704\uce58 \ub54c\ubb38\uc785\ub2c8\ub2e4. TLS\uac00 \uc5e3\uc9c0\uc5d0\uc11c \uc885\ub8cc\ub418\ubbc0\ub85c \ucc28\ub2e8 \uc5ec\ubd80\ub97c \uacb0\uc815\ud558\ub294 \uc21c\uac04 \uc804\uccb4 \uc694\uccad\uc744 \uc77d\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uba54\uc11c\ub4dc, \uacbd\ub85c, \ucffc\ub9ac, \ud5e4\ub354, \ucfe0\ud0a4 \ubc0f \ubcf8\ubb38 \ubaa8\ub450 \uaddc\uce59\uc5d0 \ud65c\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\uac83\uc774 \ubc14\ub85c PHP2Shell \ubc29\uc5b4 \uae30\ub2a5\uc774 \ub77c\uc6b0\ud130\uac00 \uc544\ub2cc \ud504\ub85d\uc2dc\uc5d0 \uba3c\uc800 \uc801\uc6a9\ub41c \uc774\uc720\uc785\ub2c8\ub2e4. CVE\uac00 \uacf5\uac1c\ub418\uc5c8\uc744 \ub54c \uad00\ub9ac\ud615 \uaddc\uce59 \uc138\ud2b8\ub294 \uc774\ud2c0 \ub0b4\uc5d0 \ub450 \ucde8\uc57d\uc810\uc5d0 \ub300\ud55c 7\uac1c \uaddc\uce59\uc744 \ud655\ubcf4\ud588\uace0, \uc800\ud76c\uac00 \uc790\uccb4 \ucee8\ud14c\uc774\ub108 \uc7ac\ube4c\ub4dc\ub97c \uc644\ub8cc\ud558\uae30 \uc804\uc5d0 \uc800\ud76c\uac00 \uc6b4\uc601\ud558\ub294 4\uac1c \uc874 \ubaa8\ub450\uc5d0 \uc801\uc6a9\ub418\uc5c8\uc2b5\ub2c8\ub2e4. Threat Prevention \ud53c\ub4dc\uc5d0\ub294 \uc774\uc640 \ub3d9\ub4f1\ud55c \uaddc\uce59\uc774 \uc804\ud600 \ub098\ud0c0\ub098\uc9c0 \uc54a\uc558\uc73c\uba70, 5\uc77c\uc774 \uc9c0\ub09c \ud6c4\uc5d0\ub3c4 \uc124\uce58 \uac00\ub2a5\ud55c \uacf5\uac1c Snort \ub610\ub294 Emerging Threats \uaddc\uce59\uc774 \uc5ec\uc804\ud788 \uc5c6\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc81c\uacf5\uc5c5\uccb4 \uc120\ud0dd\ubcf4\ub2e4 \ub354 \uc911\uc694\ud55c \uacbd\uace0 \uc0ac\ud56d\uc774 \ud558\ub098 \uc788\uc2b5\ub2c8\ub2e4. \uc804\uba74 \ud504\ub85d\uc2dc\ub294 \uc6b0\ud68c\ud560 \uc218 \uc5c6\ub294 \uacbd\uc6b0\uc5d0\ub9cc \ud6a8\uacfc\uac00 \uc788\uc2b5\ub2c8\ub2e4. \uc6d0\ubcf8 \uc8fc\uc18c\uac00 \uacf5\uc6a9 \uc778\ud130\ub137\uc5d0 \uc9c1\uc811 \uc751\ub2f5\ud558\uba74 \uc774\ub97c \ubc1c\uacac\ud55c \ub204\uad6c\ub098 \uc791\uc131\ub41c \ubaa8\ub4e0 \uc5e3\uc9c0 \uaddc\uce59\uc744 \uac74\ub108\ub6f0\uac8c \ub429\ub2c8\ub2e4. \uc6d0\ubcf8 \uc11c\ubc84\uc758 \ud3ec\ud2b8 443\uc744 \ud504\ub85d\uc2dc \ub124\ud2b8\uc6cc\ud06c \ubc94\uc704\ub85c \uc81c\ud55c\ud558\uace0, \ud574\ub2f9 \ubc94\uc704\ub97c \ud558\ub4dc\ucf54\ub529\ud558\uae30\ubcf4\ub2e4 \uc81c\uacf5\uc5c5\uccb4 \uc5d4\ub4dc\ud3ec\uc778\ud2b8\uc5d0\uc11c \ub3d9\uc801\uc73c\ub85c \uac00\uc838\uc624\uba70, \uc8fc\uc18c\ub85c \uc9c1\uc811 \uc0ac\uc774\ud2b8\uc5d0 \uc694\uccad\uc744 \ubcf4\ub0b4 \uc81c\ud55c\uc774 \uc81c\ub300\ub85c \ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud558\uc138\uc694. \ub2f9\uc0ac\uc758 \uc804\uccb4 \uad6c\uc131 \ubc0f \uc774 \ub808\uc774\uc5b4 \ub4a4\uc5d0 \uc788\ub294 4\uac1c \ub808\uc774\uc5b4\ub294 \ub2e4\uc74c\uc5d0 \uc124\uba85\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. <a href=\"https:\/\/synopower.club\/ko\/docs\/synology-nas-security-public-website\/\">the five layers we run<\/a>.<\/p>\n\n\n\n<h2 id=\"threat-prevention-limits-and-security-notes\" class=\"wp-block-heading\">Threat Prevention \uc81c\ud55c \uc0ac\ud56d \ubc0f \ubcf4\uc548 \ucc38\uace0 \uc0ac\ud56d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention\uc740 \ub77c\uc6b0\ud130\uc5d0 \uc678\ubd80 \uc800\uc7a5 \uc7a5\uce58\uac00 \ud544\uc694\ud558\uba70 \ubaa8\ub4e0 \ubaa8\ub378\uc5d0\uc11c \uc9c0\uc6d0\ub418\ub294 \uac83\uc740 \uc544\ub2c8\ubbc0\ub85c \uc774\ub97c \uc911\uc2ec\uc73c\ub85c \uacc4\ud68d\uc744 \uc138\uc6b0\uae30 \uc804\uc5d0 \ud558\ub4dc\uc6e8\uc5b4 \uc9c0\uc6d0 \uc5ec\ubd80\ub97c \ud655\uc778\ud558\uc138\uc694. \ub610\ud55c \uc774 \uc5d4\uc9c4\uc740 \ub77c\uc6b0\ud130\uc5d0\uc11c \uac00\uc7a5 \ub9ce\uc740 \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub294 \uc694\uc18c\uc774\uba70, \uc18c\ube44\uc790\uc6a9 \uc81c\ud488\uc5d0\uc11c\ub294 \ucc98\ub9ac\ub7c9 \uc81c\ud55c(\ubcd1\ubaa9)\uc774 \ub420 \uac00\ub2a5\uc131\uc774 \uac00\uc7a5 \ub192\uc740 \uad6c\uc131 \uc694\uc18c\uc785\ub2c8\ub2e4. \ub9c8\ucf00\ud305 \uc218\uce58\ub97c \uc2e0\ub8b0\ud558\uae30\ubcf4\ub2e4 \uc801\uc6a9 \uc804\ud6c4\ub97c \uce21\uc815\ud574 \ubcf4\uc138\uc694.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uac1c\uc694 \ud654\uba74\uc758 \ubaa8\ub4e0 \uc22b\uc790\ub294 \ucc28\ub2e8\ub41c \uacf5\uaca9 \ud69f\uc218\uac00 \uc544\ub2c8\ub77c \uc2dc\uadf8\ub2c8\ucc98 \uc77c\uce58 \ud69f\uc218\ub85c \ucde8\uae09\ud558\uc138\uc694. \uc774 \ub450 \uac00\uc9c0\ub294 \uc11c\ub85c \ub2e4\ub985\ub2c8\ub2e4. \uc544\ubb34\uac83\ub3c4 \uc131\uacf5\ud558\uc9c0 \ubabb\ud588\uc744 \uc2a4\uce90\ub108\uc5d0 \ub300\ud55c \ud3c9\ud310 \uac10\uc9c0 \uac74\uc218\ub294 \ucd1d\uacc4\ub97c \ubd80\ud480\ub9ac\uace0, \ud3c9\uc628\ud55c \ud55c \uc8fc\uac00 \uc9c0\ub0ac\ub2e4\uace0 \ud574\uc11c \uc5d4\uc9c4\uc774 \uc77d\uc744 \uc218 \uc5c6\ub294 HTTPS \ud2b8\ub798\ud53d\uc5d0 \ub300\ud55c \uc548\uc804\uc744 \ubcf4\uc7a5\ud574\uc8fc\uc9c0\ub294 \uc54a\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Threat Prevention\uc5d0\uc11c\ub294 \uc2ec\uac01\ub3c4\ub9cc\ud07c\uc774\ub098 \uc0c1\ud0dc\uac00 \uc911\uc694\ud569\ub2c8\ub2e4. \"\uace0\uc704\ud5d8 \ud328\ud0b7 \uc790\ub3d9 \ub4dc\ub86d\"\uc740 \uace0\uc704\ud5d8 \ub300\uc5ed\uc5d0\ub9cc \uc791\ub3d9\ud558\ubbc0\ub85c \uc911\uac04 \uc2ec\uac01\ub3c4 \ud56d\ubaa9\uc740 \uae30\ub85d\ub418\uace0 \uc804\ub2ec\ub429\ub2c8\ub2e4. \uc778\ud130\ud398\uc774\uc2a4\uc5d0 Alert(\uacbd\uace0)\ub77c\uace0 \ud45c\uc2dc\ub418\uba74 \ud328\ud0b7\uc774 \uc804\ub2ec\ub418\uc5c8\uc74c\uc744 \uc758\ubbf8\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc2dc\uadf8\ub2c8\ucc98 \ud53c\ub4dc\ub294 \ud558\ub098\uc758 \uacf5\uae09\ub9dd\uc785\ub2c8\ub2e4. ET Open\uc740 \uc77c\uc815\uc5d0 \ub530\ub77c \uc5c5\ub370\uc774\ud2b8\ub418\uba70 \uc0c1\uc6a9 \uaddc\uce59 \uc138\ud2b8\ubcf4\ub2e4 \ub4a4\ucc98\uc9c0\uace0, \uba70\uce60 \ub41c \ucde8\uc57d\uc810\uc5d0 \ub300\ud574 \uc544\ubb34\ub7f0 \uaddc\uce59\ub3c4 \uc81c\uacf5\ud558\uc9c0 \uc54a\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \ucd5c\uc2e0 \uc0c1\ud0dc\ub77c\uace0 \ubcf4\uace0\ud558\ub294 \ub300\uc2dc\ubcf4\ub4dc\ub294 \ud53c\ub4dc\uc640 \uc77c\uce58\ud55c\ub2e4\ub294 \uc758\ubbf8\uc77c \ubfd0, \ud604\uc7ac \uc545\uc6a9\ub418\uace0 \uc788\ub294 \uc704\ud611\uc744 \ud53c\ub4dc\uac00 \ud3ec\ud568\ud558\uace0 \uc788\ub2e4\ub294 \uc758\ubbf8\ub294 \uc544\ub2d9\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uc911 \uc5b4\ub5a4 \uac83\ub3c4 \ud328\uce58\ub97c \ub300\uccb4\ud560 \uc218\ub294 \uc5c6\uc2b5\ub2c8\ub2e4. \uc5ec\uae30\uc11c \ub17c\uc758\ub41c \ubaa8\ub4e0 \ub808\uc774\uc5b4\ub294 \ucde8\uc57d\uc810\uc744 \uc2e4\uc81c\ub85c \ud574\uacb0\ud558\ub294 \uc720\uc77c\ud55c \ubc29\ubc95\uc778 \uc601\ud5a5\ubc1b\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uc5c5\ub370\uc774\ud2b8\ub97c \uc704\ud55c \uc2dc\uac04\uc744 \ubc8c\uc5b4\uc904 \ubfd0\uc785\ub2c8\ub2e4. PHP2Shell\uc758 \uacbd\uc6b0 \uc774\ub294 \uc0c8\ub85c\uc6b4 PHP \ud328\ud0a4\uc9c0\uc640 \ub2e4\uc2dc \ube4c\ub4dc\ub41c \ucee8\ud14c\uc774\ub108\ub97c \uc758\ubbf8\ud588\uc73c\uba70, \uadf8 \uc5b4\ub5a4 \ub124\ud2b8\uc6cc\ud06c \uc81c\uc5b4\ub3c4 \uc774\ub97c \ub300\uc2e0\ud560 \uc218 \uc5c6\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ub9c8\uc9c0\ub9c9\uc73c\ub85c, \ubcf4\uc548 \uad8c\uace0\ub97c \uc77d\uc740 \ud6c4 \ubaa8\ub4e0 \ud074\ub798\uc2a4\ub97c \ud65c\uc131\ud654\ud558\ub824\ub294 \uc720\ud639\uc744 \ucc38\uc73c\uc2ed\uc2dc\uc624. Misc activity\uc640 \uac19\uc740 \ud074\ub798\uc2a4\uc5d0\ub294 \uc8fc\ub85c \ub178\uc774\uc988\ub97c \uc0dd\uc131\ud558\uace0 \uc720\uc6a9\ud55c \ud074\ub798\uc2a4\uc5d0 \ud544\uc694\ud55c \uc6a9\ub7c9\uc744 \uc18c\ubaa8\ud558\ub294 \uc218\ucc9c \uac1c\uc758 \uc800\uac00\uce58 \uaddc\uce59\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. \uc2e4\uc81c\ub85c \ud655\uc778\ud558\uac8c \ub418\ub294 \uc870\uc6a9\ud558\uace0 \uc798 \uc870\uc815\ub41c \uc774\ubca4\ud2b8 \ubaa9\ub85d\uc774 \uacb0\uad6d \ubb34\uc2dc\ud558\uac8c \ub418\ub294 \uc2dc\ub044\ub7ec\uc6b4 \ubaa9\ub85d\ubcf4\ub2e4 \ub0ab\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 id=\"frequently-asked-questions\" class=\"wp-block-heading\">\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list\">\n<div id=\"faq-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Threat Prevention\uc774 \uc81c NAS\uc5d0 \ud638\uc2a4\ud305\ub41c \uc6f9\uc0ac\uc774\ud2b8\ub97c \ubcf4\ud638\ud574\uc8fc\ub098\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\uac70\uc758 \ubd88\uac00\ub2a5\ud558\uba70, \uc774\ub984\uc774 \uc554\uc2dc\ud558\ub294 \ubc29\uc2dd\uc73c\ub85c\ub294 \ubcf4\ud638\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc6f9\uc0ac\uc774\ud2b8\ub294 HTTPS\ub97c \ud1b5\ud574 \uc81c\uacf5\ub418\uba70 Threat Prevention\uc740 TLS \uac00\ub85c\ucc44\uae30\ub97c \uc218\ud589\ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c \uacf5\uc720\uae30\uac00 \ubcfc \uc218 \uc788\ub294 \ubc94\uc704 \ub0b4\uc5d0\uc11c \uc694\uccad \ub0b4\uc6a9\uc740 \ubd88\ud22c\uba85\ud569\ub2c8\ub2e4. \uc77c\ubc18\uc801\uc778 \uad6c\uc131\uc5d0\uc11c\ub294 \uc5ed\ubc29\ud5a5 \ud504\ub85d\uc2dc\uac00 TLS\ub97c \uc885\ub8cc\ud55c \ud6c4\uc5d0\uc57c \uc694\uccad\uc744 \uc77d\uc744 \uc218 \uc788\uac8c \ub418\uba70, \ud574\ub2f9 \ud649\uc740 \ubcf4\ud1b5 \ub3d9\uc77c\ud55c \uc11c\ube0c\ub137\uc5d0 \uc788\uc73c\ubbc0\ub85c \ub77c\uc6b0\ud305\uc774 \uc544\ub2cc \uc2a4\uc704\uce6d\ub418\uc5b4 \uacf5\uc720\uae30\ub97c \uac70\uce58\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc6f9\uc0ac\uc774\ud2b8\uc5d0\ub294 \uc5ed\ubc29\ud5a5 \ud504\ub85d\uc2dc WAF\ub97c \uc0ac\uc6a9\ud558\uace0, Threat Prevention\uc740 \ubcf8\ub798 \uc798\ud558\ub294 \uc6a9\ub3c4\ub85c \uc720\uc9c0\ud558\uc138\uc694.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Which option should I switch on to stop a specific CVE?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Usually none, because the answer depends on whether the vendor shipped a signature for it at all. Open Self-Defined Policy and you will find you can change the action on an existing signature but cannot add one of your own. If no rule exists in the feed, there is nothing to enable, and for a vulnerability a few days old that is the normal case.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Why does my event list only name one or two devices?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Because those are the devices receiving traffic the engine can actually read. On our network it is consistently the mail server, which answers cleartext SMTP on port 25. A web host behind a reverse proxy produces few entries not because it is attacked less, but because its traffic is encrypted at every point the router inspects.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-4\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Threat Prevention\uc774 \ub0b4 LAN \uc7a5\uce58 \uac04\uc758 \ud2b8\ub798\ud53d\uc744 \uac80\uc0ac\ud558\ub098\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>No. Two devices in the same subnet reach each other through a switch, and the router is not in that path, so the packets are never offered to the inspection engine. The Monitored Interfaces table in Settings shows the real scope, and no option there extends it to same-subnet traffic.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-5\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Threat Prevention\uc744 \ud65c\uc131\ud654\ud574 \ub450\uc5b4\ub3c4 \uc548\uc804\ud55c\uac00\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>Yes, with one caveat worth knowing. The recommended default passes traffic through unfiltered when the engine is saturated, which keeps your line up at the cost of inspection. The opposite mode drops that traffic instead. We have also had the engine wedge under a flood of harmless exploit attempts and start refusing a server&#8217;s outbound traffic, which cost us a mail outage, so include the router in your list of suspects when a machine goes quiet.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-6\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Threat Prevention\uc774 PHP2Shell\uc744 \ubc29\uc5b4\ud558\ub294 \ub370 \uc870\uae08\uc774\ub77c\ub3c4 \ub3c4\uc6c0\uc774 \ub418\uc5c8\ub098\uc694?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>No, and three separate reasons each would have been enough on their own. The traffic was encrypted everywhere the router looks, no Snort or Emerging Threats signature was published for either CVE, and the exploit has no payload shape to match because the first request is defined by the memory it consumes and the second looks completely ordinary. The fix was new PHP packages, with a reverse-proxy WAF covering the gap in the meantime.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-7\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">Is disabling session.upload_progress enough on an unpatchable host?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>It helps and it is not enough. Switching it off removes one documented route to CVE-2026-109619, which is worth doing on a host you truly cannot update, but memory exhaustion is reachable by other means and the setting does nothing for CVE-2026-109618. Treat it as borrowed time and plan the package update.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-8\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question\">What should I buy or configure first for a NAS-hosted site?<\/h3>\n<div class=\"rank-math-answer\">\n\n<p>\uc0ac\uc774\ud2b8 \uc55e\uc5d0 \uad00\ub9ac\ud615 \uaddc\uce59 \uc138\ud2b8\uac00 \ud3ec\ud568\ub41c \uc5ed\ubc29\ud5a5 \ud504\ub85d\uc2dc\ub97c \ubc30\uce58\ud55c \ub2e4\uc74c, \ud3ec\ud2b8 443\uc774 \ud574\ub2f9 \ud504\ub85d\uc2dc \ub124\ud2b8\uc6cc\ud06c\uc5d0\ub9cc \uc751\ub2f5\ud558\ub3c4\ub85d \uc624\ub9ac\uc9c4\uc744 \uc81c\ud55c\ud558\uc138\uc694. \uc774 \ub450 \ub2e8\uacc4\ub97c \ud568\uaed8 \uc801\uc6a9\ud558\uba74 \uac80\uc0ac \uc9c0\uc810\uc774 \uc694\uccad\uc744 \uc77d\uc744 \uc218 \uc788\ub294 \uc704\uce58\ub85c \uc774\ub3d9\ud558\uace0 \uc774\ub97c \ubb34\ub825\ud654\ud558\ub294 \uc6b0\ud68c \uacbd\ub85c\uac00 \uc81c\uac70\ub429\ub2c8\ub2e4. \uadf8 \ud6c4\uc5d0\ub3c4 \uc544\uc6c3\ubc14\uc6b4\ub4dc \uba85\ub839 \ubc0f \uc81c\uc5b4(C&amp;C) \ubc0f \ud3c9\ubb38 \uc11c\ube44\uc2a4\ub97c \uc704\ud574 Threat Prevention\uc744 \uacc4\uc18d \ud65c\uc131\ud654\ud574 \ub450\uc138\uc694. \uc774\uac83\uc774 \ubc14\ub85c Threat Prevention\uc774 \uc2e4\uc81c\ub85c \uc81c \uc5ed\ud560\uc744 \ud558\ub294 \ubd80\ubd84\uc785\ub2c8\ub2e4.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<h2 id=\"references-and-video-walkthroughs\" class=\"wp-block-heading\">\ucc38\uace0 \uc790\ub8cc \ubc0f \ube44\ub514\uc624 \ud29c\ud1a0\ub9ac\uc5bc<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\uc704\uc5d0\uc11c \uc124\uba85\ud55c \ubaa8\ub4e0 \ub0b4\uc6a9\uc758 \uae30\ubcf8 \ucd9c\ucc98\uc640 \uc2dc\uac04\uc744 \ub4e4\uc5ec \ubcfc \ub9cc\ud55c 3\uac00\uc9c0 \uac00\uc774\ub4dc\uc785\ub2c8\ub2e4.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/kb.synology.com\/en-global\/SRM\/help\/ThreatPrevention\/threatprevention_desc\" target=\"_blank\" rel=\"noreferrer noopener\">Synology \uc9c0\uc2dd \uc13c\ud130: Threat Prevention<\/a> covers requirements, modes and model support.<\/li>\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/security\/advisory\/Synology_SA_26_14\" target=\"_blank\" rel=\"noreferrer noopener\">Synology-SA-26:14<\/a> lists the fixed PHP package versions for DSM, including the 7.4 build.<\/li>\n\n<li><a href=\"https:\/\/www.synology.com\/en-global\/company\/news\/article\/php2shell\/Synology%20Statement%20on%20PHP2Shell%20Vulnerabilities\" target=\"_blank\" rel=\"noreferrer noopener\">Synology Statement on PHP2Shell<\/a> names the affected packages and the one that needs a manual update.<\/li>\n\n<li><a href=\"https:\/\/developers.cloudflare.com\/waf\/managed-rules\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Cloudflare WAF managed rules<\/a> explains how managed rulesets are versioned and deployed.<\/li>\n\n<li><a href=\"https:\/\/www.cloudflare.com\/ips\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">\ud074\ub77c\uc6b0\ub4dc\ud50c\ub808\uc5b4 IP \ubc94\uc704<\/a> is the endpoint to read when locking an origin to the proxy instead of hard-coding addresses.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"SRM Threat Prevention \u2013 \uc2e4\uc2dc\uac04 \ub124\ud2b8\uc6cc\ud06c \ubcf4\ud638 \uc124\uba85\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/yT_xGpxGF7k?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">\ud328\ud0a4\uc9c0\uac00 \ub124\ud2b8\uc6cc\ud06c\uc758 \uc5b4\ub514\uc5d0 \uc704\uce58\ud558\ub294\uc9c0\ub97c \ud3ec\ud568\ud55c SRM Threat Prevention \uc124\uba85<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Threat Prevention\uc774 \ud65c\uc131\ud654\ub41c Synology \uacf5\uc720\uae30 \uc18d\ub3c4 \ud14c\uc2a4\ud2b8.\" width=\"1200\" height=\"900\" src=\"https:\/\/www.youtube.com\/embed\/wuuRthcZQ_E?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">\uc544\ubb34\ub3c4 \ub9d0\ud574\uc8fc\uc9c0 \uc54a\ub294 \ub300\uac00\uc778 Threat Prevention\uc774 \ud65c\uc131\ud654\ub41c \uc0c1\ud0dc\uc5d0\uc11c\uc758 \ucc98\ub9ac\ub7c9 \ud14c\uc2a4\ud2b8<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Protecting Your Public Websites with Cloudflare WAF\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/NbEo8p2Hvt8?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">\uc694\uccad\uc744 \uc77d\ub294 \ub808\uc774\uc5b4\uc778 WAF\ub85c \uacf5\uac1c \uc6f9\uc0ac\uc774\ud2b8\ub97c \ubcf4\ud638\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c Cloudflare\uc758 \uc124\uba85<\/figcaption><\/figure>","protected":false},"excerpt":{"rendered":"<p>Threat Prevention is the package most people reach for the moment they decide to host a website on a Synology NAS. It sits on the router, it has a shield icon, and its dashboard counts attacks in the hundreds, so it looks like the thing that keeps a public site safe. We run it on [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":22124,"comment_status":"open","ping_status":"closed","template":"","meta":{"_eb_attr":"","_xspeed_no_cache":false,"_xspeed_expiry_hours":0,"footnotes":""},"doc_category":[197],"doc_tag":[],"class_list":["post-22125","docs","type-docs","status-publish","has-post-thumbnail","hentry","doc_category-nas-hosting-101"],"year_month":"2026-10","word_count":3684,"total_views":"43","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Adair Hsu","author_nicename":"adairpk17","author_url":"https:\/\/synopower.club\/ko\/author\/adairpk17\/"},"doc_category_info":[{"term_name":"NAS Hosting 101","term_url":"https:\/\/synopower.club\/ko\/docs-category\/nas-hosting-101\/"}],"doc_tag_info":[],"_links":{"self":[{"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/docs\/22125","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/comments?post=22125"}],"version-history":[{"count":2,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/docs\/22125\/revisions"}],"predecessor-version":[{"id":22127,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/docs\/22125\/revisions\/22127"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/media\/22124"}],"wp:attachment":[{"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/media?parent=22125"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/doc_category?post=22125"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/synopower.club\/ko\/wp-json\/wp\/v2\/doc_tag?post=22125"}],"curies":[{"name":"\uc6cc\ub4dc\ud504\ub808\uc2a4","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}