Disabled SMB1 protocol on U4 device

krunal · Post by **krunal** » Fri Jun 12, 2020 10:34

Hi Team

I am a novice user. Hoping someone can help me.

Does anyone know how can I disabled SMB1 protocol in U4 device. My device is on DHCP IP address. And I have installed Putty.

I just can't figure out how to do it. Can someone please help. Any help will be appreciated.

Regards
Krunal

MrQuade · Post by **MrQuade** » Fri Jun 12, 2020 12:11

To disable smb1 for the shared movie folder, you need to edit /etc/samba/smb_user.conf and add

[Global]
min protocol = SMB2

Mount points created on the U4 are made with version 2.1 by default.

You may also want to make sure that you are running the latest 19.3 firmware.

Why do you want to do this anyway?

krunal · Post by **krunal** » Fri Jun 12, 2020 12:32

Thanks Mr Quade.

Our work uses Beyonwiz and there is an security audit requirement to turn off SMB 1 protocol for security reasons. I will try your steps and see if I can get this actioned.

Regards
Krunal

peteru · Post by **peteru** » Fri Jun 12, 2020 14:49

Unless you have a specific need to have SMB enabled, you may want to disable the Samba service alltogether.

However, you need to take a bigger picture at your security requirements. If your policy dictates that you need to disable SMB1, then your security people would be probably shocked and horrified to find what OpenWebif gives you. It is possible to lock down a Beyonwiz, but it will be a bit of work for someone familiar with Linux embedded networking (i.e. not a Ubuntu system admin)