NAS security?

I currently operate a NAS dedicated to backing up critical work files and databases from various virtual machines on our server. The NAS has the capability to function as a messaging server.

In terms of security considerations, Should I use a virtual machine on the server to host the messaging server or employ the NAS itself to host the messaging server, necessitating the inclusion of either the server or the NAS in all VLANs requiring access to this service?

As …

critical cybersecurity databases files function host machine machines messaging nas security server terms virtual virtual machine virtual machines work