ALERT: Datto Drive Cloud service will no longer be available as of July 1, 2019. For more information, see our end-of-life article. If you'd like to migrate your data to Datto Workplace, see our migration guide.
To learn how to download your Datto Drive Cloud data, please visit this article.

SIRIS, ALTO, and NAS: Backing up an External Share with NAS Guard



This article explains how to use the NAS Guard feature available on Datto SIRIS, Datto ALTO, and Datto NAS.


  • Datto SIRIS
  • Datto ALTO
  • Datto NAS


The NAS Guard feature allows you to use your Datto appliance to back up an SMB share from any system, and then replicate the snapshots to the cloud.


NAS Guard does not natively support external share names which contain spaces. Datto recommends renaming these shares if possible. If you need to protect a share with spaces in its name, contact Datto Technical Support for assistance.


1. Access the Datto appliance GUI. Navigate to File Share → Network Attached Storage.

  • If no shares exist on the Datto appliance, you will see the Create Share Wizard. You must create at least one share to be able to proceed with the steps provided in this article.

When the Your Shares page displays proceed to Step 2.

2. Click Backup External Share.

Figure 1: Backup External Share (click to enlarge)

3. You will see the Select System prompt. Enter a name for the share in the Share Name field.

4. Fill in the SMB Address. This value should be the fully-qualified path of the share as it exists in the production environment.

5. From the Retain NTFS File Permissions dropdown, select Yes or No.

  • If you select Yes, the files and folders in the NAS share will back up with all ACLs preserved. Choosing this option may increase backup times.

6. Fill in the Credentials field if necessary. Datto strongly recommends using the credentials of a system administrator who has full access to all of the content in the share. Using a restricted account can prevent your Datto appliance from being able to read and perform a complete backup of the share's file structure.

Check the Connect as a Guest box if no credentials needed to access and connect to the share.

7. Click Next.

Figure 2: Select System (click to enlarge)

6. Create a Local Snapshot & Retention schedule for the share. Then, click Next.


Figure 3: Set Local Snapshot & Retention (click to enlarge)

7. Create a Cloud Snapshot & Retention schedule for the share. Then, click Next.

Figure 4: Set Cloud Snapshot & Retention (click to enlarge)

8. Review the summary, and then click Finish.

Figure 5: Review & Confirm (click to enlarge)

9. Your share will now back up to the Datto appliance according to the schedule you set.

Figure 6: Protected NAS share (click to enlarge)


Q: Is there a limitation to share size?
A: The current share size limit is 16 TB. If the NAS appliance or share you will be protecting is smaller than that or lacks the free space, the working share size will also be lower. The share on the Datto appliance cannot resize after you create it.

Q: If my share is on a domain, should I join the Datto appliance the domain?
A: Yes, you will need to join the Datto appliance to the domain as well. Doing so will allow the Datto appliance to connect to the external share using domain credentials.

Q: Are the share name and username I enter case-sensitive?
A: It is a best-practice to respect casing for the share name and username. Although some systems will disregard casing, others may not.

Q: Does NAS Guard preserve Unix permissions?
A: Depending on your environment, NAS Guard may or may not be able to preserve Unix permissions. Datto strongly recommends testing a restore to verify the preservation of user permissions.

Q: How would I add a group as read-only for a share?
A: Permissions within the share will reflect the permissions on the external share. There should be no need to re-create them on the Datto appliance.

Q: Which Datto appliances can use this feature?
A: Currently, any appliance running the latest version of Datto IRIS except for ALTO 1.

Q: Do I need to install anything on my hardware to back up my share?
A: You do not need to install any software. The Datto appliance will not make any modifications to the share during the pairing or backup processes. All external shares mount on the Datto appliance as read-only.

Q: What are my restore options?
You can mount file restores with or without NTFS permissions of snapshots from the Restore tab of the Datto appliance. You can also create file restores from the Recovery Launchpad.

Q: Is there a limit to the number of shares I can have on the Datto appliance?
A: There is currently no limit, although the collective size of the shares would determine how many you could add.

Q: Is there a way I can put a limit on share sizes?
A: Datto appliance determines the limit for the share's size during the initial pairing. Any restriction on the overall usage of the share would depend on how much change happens in the backups and the management of retention settings to limit global growth.

Additional Resources

Was this article helpful?

2 out of 3 found this helpful

You must sign in before voting on this article.

Want to talk about it? Have a feature request?

Head on over to our Community Forum or get live help.