What’s the Best Way to Securely Open Ports for NAS Access with a Large Team?

It can be pretty tricky managing a team that's partly remote, especially with sensitive media work. Exposing your NAS to the internet feels risky and could lead to data loss. I’d definitely recommend setting up a VPN. It adds a layer of security that you’ll appreciate in the long run.

Requiring contractors to pay for Google Drive accounts can be problematic. Instead, think about providing a company-wide solution to avoid potential legal issues down the line. You could set up shared drives funded by the company itself.

Have you thought about using something like Media Shuttle or File Catalyst? They're designed to handle large video files and might be a better fit for your team's uploads without needing to expose your NAS.

Instead of opening all those ports, why not utilize Synology's QuickConnect? It allows you to access your NAS remotely without the hassle of VPNs and works well with the Synology Drive client.

Using a reverse HTTPS proxy with multi-factor authentication might be another effective way to secure access without opening ports. This way, your setup remains safe, while users can still easily upload their files.