Require smbv2 signing
neiltorda
98 Posts
January 6, 2024, 9:35 pmQuote from neiltorda on January 6, 2024, 9:35 pmper a security remediation request we are being asked to require smb signing. It appears that by default Petasan cifs shares enable signing, but do not require it.
Is there preferred method to enable this globally for all shares, currently configured as well as new shares by default going forward.
Thanks,
Neil
per a security remediation request we are being asked to require smb signing. It appears that by default Petasan cifs shares enable signing, but do not require it.
Is there preferred method to enable this globally for all shares, currently configured as well as new shares by default going forward.
Thanks,
Neil
admin
2,930 Posts
January 7, 2024, 8:29 amQuote from admin on January 7, 2024, 8:29 amYou could enable global settings in CIFS Settings under Advanced
You could enable global settings in CIFS Settings under Advanced
neiltorda
98 Posts
January 7, 2024, 3:30 pmQuote from neiltorda on January 7, 2024, 3:30 pmThanks! I added the config setting to the global section of smb.conf and our scanning software is now happy about that.
Thanks! I added the config setting to the global section of smb.conf and our scanning software is now happy about that.
Last edited on January 7, 2024, 4:52 pm by neiltorda · #3
Require smbv2 signing
neiltorda
98 Posts
Quote from neiltorda on January 6, 2024, 9:35 pmper a security remediation request we are being asked to require smb signing. It appears that by default Petasan cifs shares enable signing, but do not require it.
Is there preferred method to enable this globally for all shares, currently configured as well as new shares by default going forward.
Thanks,
Neil
per a security remediation request we are being asked to require smb signing. It appears that by default Petasan cifs shares enable signing, but do not require it.
Is there preferred method to enable this globally for all shares, currently configured as well as new shares by default going forward.
Thanks,
Neil
admin
2,930 Posts
Quote from admin on January 7, 2024, 8:29 amYou could enable global settings in CIFS Settings under Advanced
You could enable global settings in CIFS Settings under Advanced
neiltorda
98 Posts
Quote from neiltorda on January 7, 2024, 3:30 pmThanks! I added the config setting to the global section of smb.conf and our scanning software is now happy about that.
Thanks! I added the config setting to the global section of smb.conf and our scanning software is now happy about that.