Set up Zero trust for company

Zero Trust
1

Hi bro,

I got email from Cloudflare with 15 minutes setup Cloudflare Zero Trust, but I was with it for 3 days, my colleague with it 2 days, but we could not setup it successfully.

My company has NAS, I need to setup to allow users work from home can access NAS via SMB (mapped network drive) and via website. We also had email from Workspace.

Anyone had real world setup this? Thank you very much.

Regards,
Hoc Nguyen

2

This is a good direction for you to follow:

1 Like
3

Thank you Eric for your respond. Let me check this. Hope this help :smiley:

4

Sorry @erictung , I am still stucking on this.
My local network is 192.168.1.0/24, my NAS is 192.168.1.48. User need to access SMB on this NAS. They also has network drive (Z:) connect to NAS.

Follow your advice, I set like this:

Create link for access
Settings > General Settings > Team Domain
**mstarcorp** .cloudflareaccess.com

Creating a team
Home > Access > Access Group > Add group

Creating a tunnel (Docker)
Install cloudflared on NAS Synology follow this tutorial
Link: yt.com/watch?v=5IrtNxfzH1o
This also create a tunnel, I did not create tunnel anymore.

Removing my subnet from excluded IPs in Split Tunnel
Exclude mode: 192.168.1.0/24 not in the list

Adding my network to Private Networks
Access > Application > Private network point to 192.168.1.48
Link: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/private-net/connect-private-networks/#2-recommended-filter-network-traffic-with-gateway

Configure device enrollment permissions to see who can enroll to WARP
Settings > Device enrollment > manage

Proxy is enabled (Settings->Network->Firewall->Proxy)
Yes

Ask users to enroll to WARP
Yes

After all the configuration:

  • I can access my NAS via webpage, link to DSM without open any port - as the video tutorial above.
  • I still cannot access my NAS via SMB - on NAS: 192.168.1.48

Can you help me check if I miss something?

Regards,
Hoc Nguyen

5

Now I can access my NAS at the company via Cloudflare WARP app on Windows, using Private Network. Here is the docs, from A to Z (in Vietnamese, just a few words) for those who want to use this feature to replace VPN. The only thing I am confuse is the speed of connection. I cannot test it right now.

Thank you @erictung for help with clue.
How to setup Zero Trust access SMB data on NAS