Microsoft proziva i sramoti dobavljače softvera koji još uvijek zahtijevaju podršku za SMB v1
6 min. čitati
Ažurirano
Pročitajte našu stranicu za otkrivanje kako biste saznali kako možete pomoći MSPoweruseru da održi urednički tim Čitaj više
Google nije jedina tvrtka koja još uvijek izdaje softver koji zahtijeva da stari SMB v1 protokol za dijeljenje datoteka bude dostupan na Windows mreži.
Zapravo, širok raspon aplikacija još uvijek zahtijeva ovaj naslijeđeni protokol, koji je Microsoft zastario od 2014., a koji Microsoft potpuno onemogućuje u sljedećoj verziji sustava Windows 10.
Microsoft je sada uzeo imena i sramotu dobavljača softvera, te je napravio popis aplikacija koje treba ažurirati.
Popis uključuje:
Dobavljač – Proizvod – Dokumentacija
- Aerokošnica - HiveManager, HiveOS (pridruživanje domeni) - https://community.aerohive.com/aerohive/topics/unable-to-join-activedirectory-with-smbv1-disabled-on-domain-controller
- Aruba - Clearpass, kada koristite MSCHAP za pridruživanje domeni - https://community.arubanetworks.com/t5/Security/Clearpass-V6-6-2-SMB-version-supported/td-p/296384
- AVM – Fritz! Box – https://www.avforums.com/threads/windows-10-network-share-problem.2043190/page-2#post-23956280
- Barracuda - SSL VPN - https://campus.barracuda.com/product/sslvpn/article/SSLVPN/CreateNetworkPlace/
- Barracuda – Sigurnosne kopije Web Security Gatewaya – https://community.barracudanetworks.com/forums.php?url=/topic/29561-backup-via-smb/
- Kanon (& Océ) - Pisači putem “print to share” - https://support.usa.canon.com/kb/index?page=content&id=ART143573& https://files.lfpp.csa.canon.com/media/Assets/PDFs/TSS/external/WF_PrintDrivers/Documentation/Oce_LF_Systems_Connectivity_information_for_Windows_environment_Administration_guide_en.GB.pdf
- Cisco - Sigurnosni uređaj za web/WSAv – https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuo70696/?referring_site=bugquickviewredir & https://supportforums.cisco.com/discussion/13295496/wsav-supports-smbv1-only
- Cisco - Usluge širokog područja primjene/WAAS 5.0 i stariji - http://www.cisco.com/c/en/us/td/docs/app_ntwk_services/waas/waas/v501/release/notes/ws501xrn.html
- Pristup podacima - naslijeđeni Dataflex ugrađeni DB (dobavljač također nudi mnoge alternativne načine da ne treba SMB1) –http://www.dataaccess.com/KBasePublic/Files/2476.Tuning%20Microsoft%20Networks%20for%20the%20Legacy%20Embedded%20Database_PDF_FMT.PDF
- F5 - RDP klijentski pristupnik, Microsoft Exchange proxy – https://support.f5.com/csp/article/K55889450
- Forcepoint (Raytheon) - “neki proizvodi Forcepoint”, proxy provjera autentičnosti Content Gatewaya - https://support.forcepoint.com/KBArticle?id=000012832
- HP - Razni pisači (mnogi podržavaju SMB2) - http://h10032.www1.hp.com/ctg/Manual/c05547920
- HPE - ArcSight (Legacy Unified Connector, ne najnovija verzija) - https://community.saas.hpe.com/t5/ArcSight-Connectors/SmartConnector-for-Microsoft-Windows-Event-Log-Native/ta-p/1585123?attachment-id=59177
- IBM - NetServer V7R2 ili niži – http://www-01.ibm.com/support/docview.wss?uid=nas8N1011878
- IBM - QRadar upravitelj ranjivosti 7.2.x ili starija (7.3 je ažurirana) – http://www-01.ibm.com/support/docview.wss?uid=swg22004178
- Poslovni softver Infusion - Infuzija (zahtijeva onemogućavanje SMB2) - https://www.infusionsoftware.co.nz/support/download-documentation/manuals-support-notes/infusion-software-upgrade-notes/streamFile
- Lexmark - Firmware eSF 2.x i eSF 3.x višenamjenski uređaji (skeniranje na mrežu) - http://support.lexmark.com/index?page=content&id=FA716&locale=en&userlocale=EN_US
- Linux kernela - CIFS klijent 2.5.42 do 3.5.x (3.7 dodana prva implementacija SMB2 klijenta) - https://wiki.samba.org/index.php/LinuxCIFSKernel
- McAfee - Web Gateway - https://kc.mcafee.com/corporate/index?page=content&id=KB89350
- microsoft – Windows XP, Windows Server 2003 (i stariji), Windows Embedded Standard 2009
- MYOB - Accountants Office & Accountants Enterprise (navodi zahtjev za onemogućavanje oportunističkog zaključavanja, tj. opciju ponašanja SMB1)- https://www.myob.com/au/accountants-and-partners/support/minimum-system-requirements
- NetApp - Verzije ONTAP-a prije 8.3.2P5, 9.0P1 i 9.1 zahtijevaju SMB1 za pridruživanje domeni (ne klijentske veze). ONTAP 8.3.2P5, 9.0P1, 9.1 umjesto toga može koristiti SMB2 za pridruživanje domeni, kao i klijentske veze putem SMB2 & 3, a ONTAP 9.2 omogućuje potpuno onemogućavanje svih SMB1 veza - http://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=786189& https://averageguyx.blogspot.com/2017/06/does-ontap-need-smb1-no.html?m=1
- netgear - ReadyNAS (kada se koristi kao cilj sigurnosne kopije) - https://kb.netgear.com/24923/ReadyNAS-OS-6-SMB-Plus-App
- Proročanstvo - Solaris 11.3 i stariji - http://docs.oracle.com/cd/E86824_01/html/E54775/smb-4.html
- Pulse Secure - PCS uređaji s 8.1R9 / 8.2R4 i nižim ili PPS uređaji s 5.1R9 / 5.3R4 i nižim - https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB40602/?q=smb&l=en_US&fs=Search&pn=1&atype=
- QNAP – svi uređaji za pohranu koji koriste firmware niži od 4.1 – https://www.qnap.com/en-us/support/con_show.php?cid=11
- RedHat - RHEL 5, RHEL 6 spajanje domene; Najraniji dokumentirani SMB2+ CIFS klijent nalazi se u RedHat 7.2 (https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.2_Release_Notes/file_systems.html); RedHat poslužitelj pruža Samba, pogledajte Samba bilješku u nastavku - https://access.redhat.com/solutions/3037961
- Ricoh (Ricoh/Savin/Gestetner/Lanier) - svi MFP pisači (podržava skeniranje u mapu, sigurnosno kopiranje faksa u mapu, prosljeđivanje faksa) osim SP C220S / C222SF, SP C231SF / C232SF, SP C240SF / C242SF, SP C250SF / C252SF, SP 3400SF / 3410 - Announce-19-05-17-WannaCry-Ransomware-and-SMB-v1.0-exploit
- RSA - Authentication Manager Server – https://community.rsa.com/thread/191171
- Samba - verzije starije od 3.5.0 (napomena: sve podržan verzije Sambe podržavaju SMB2+, vidi https://wiki.samba.org/index.php/Samba_Release_Planning#Discontinued) - https://wiki.samba.org/index.php/Samba_3.6_Features_added/changed#SMB2_support & https://wiki.samba.org/index.php/Samba_3.5_Features_added/changed#Protocol_changes
- oštar - Podskup MFP pisača (mnogi podržavaju SMB2 i 3) - https://msdnshared.blob.core.windows.net/media/2017/06/sharp2017.pdf
- Sonos - Bežični zvučnici - https://en.community.sonos.com/setting-up-sonos-228990/sonos-support-for-smb-20-protocol-6739642/index1.html
- Sophos - Sophos UTM, Sophos XG vatrozid, Sophos Web Appliance - https://community.sophos.com/kb/en-us/126733 & https://community.sophos.com/kb/en-us/126757
- SUSE - SUSE Linux Enterprise Server 11 i stariji (napomena: 10 i starije verzije nisu podržane, bez obzira) – https://www.suse.com/support/kb/doc/?id=7019892
- Synology - Diskstation Manager (upravljanje, a ne veza s klijentom) - https://www.synology.com/en-us/knowledgebase/DSM/tutorial/File_Sharing/Why_do_I_receive_an_error_message_when_trying_to_join_a_Windows_Domain_with_my_Synology_NAS
- Thompson Reuters - CS Professional Suite - http://cs.thomsonreuters.com/ua/acct_pr/csa/cs_us_en/kb/how-to-disable-opportunistic-locking-or-file-caching.htm
- Tintri - Tintri OS, Tintri Global Center - https://knowledge.tintri.com/Internal/KB_Drafts/FAQ_-Technical_Service_Bulletin_Document_No._TSB-05242017-01_–_Reduced_Severity
- VMware Vcenter VMware vCenter Server Appliance, VMware vRealize Automation Identity Appliance - https://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2134063&sliceId=1&docTypeID=DT_KB_1_1&dialogID=479220377&stateId=0 (napomena: koraci za konfiguriranje SMB2 za VCenter, barem na najnovijim verzijama, sve dok VMware ne ažurira svoju KB – https://virtualizationnation.com/2017/04/17/enabling-vcenter-server-appliance-vcsa-to-use-smb2/)
- VMware - Stariji od ESXI 6.0 - https://communities.vmware.com/message/2663902#2663902 & https://communities.vmware.com/message/2668266#2668266
- Worldox - Worldox GX3 DMS (SMB1 se preporučuje, ali podržava SMB2 u nekim okolnostima; imajte na umu da je GX3 na kraju životnog vijeka, po dobavljaču) - https://knowledgebase.worldox.com/wp-content/uploads/2015/09/Worldox-and-SMB-White-Paper.pdf
- Zeroks - SMB skeniranje tijeka rada na pisačima koji ne koriste ConnectKey firmware, kao što su modeli WC75XX) - http://forum.support.xerox.com/t5/Copying-Faxing-Scanning/Xerox-Machines-and-SMBv2-V3-Scanning-Support/td-p/204802/highlight/true/page/2
Microsoft redovito ažurira popis, koji nije opsežan i prima podneske na [e-pošta zaštićena] ili cvrkut @nerdpyle s hashtagom #Još uvijek trebaSMB1.
Pogledajte najnovija verzija popisa ovdje.