Security Recommendations
Follow these best practices to administer TrueNAS securely.
- Modifying the base TrueNAS firmware image is unsupported and can create security issues.
- Keep TrueNAS up-to-date with the most recent updates for your supported version.
- Upgrade to new major releases promptly consistent with the deployment use case.
- Disable any network services when not in use.
- Restrict the TrueNAS web UI, IPMI, and any other management interfaces to private subnets away from untrusted users, or keep them disconnected when not in active use.
- Configure Syslog settings to send logs to an external server (CORE | SCALE).
- In TrueNAS 24.04 (Dragonfish) or later, locally monitor and review audit logs using the Audit screen.
- In the System > Advanced Settings, always keep Show Text Console without Password Prompt set to Disabled.
NVMe-oF Subsystems
NVMe over TCP is incompatible with VMware ESXi environments. TrueNAS uses the Linux kernel NVMe over TCP target driver, which lacks support for “fused commands” required by VMware ESXi. This is an upstream kernel limitation that prevents path initialization in ESXi environments.
You can access the NVMe-of service screen from the: