Hey P4P'ers!
Quick question - I have several clients who abide religiously by the NIST standards for IT security. As a result, there are several of my clients that are currently working to disable SMB 1 on their servers and workstations - as per guidelines for upcoming audits. For a few of my clients, this has caused some headaches and they've re-enabled them for the time being.
Moreover, with the recent security issues brought about by SMB 1 hackers, this has got to be something that is forthcoming with most clients. Is anyone else having this same issue? What resolutions are out there for this?
I fully understand capture products can do this (eCopy, Autostore), but really this should be supported by the hardware manufacturers, right?
Does anyone have an idea of which brands can truly scan SMB 2 or 3? I have tested a few that 'claim' to support SMB 2 or 3, but when you truly disable SMB 1 via Windows Powershell on W2k12, W2k8, etc - surprise, they stop working.
Any insight you can provide is greatly appreciated (whether posted or PM).
Thanks!
SM