Re: White Privilege, clear cut.
With a properly configured on the router connecting you to the internet, the ports used by all SMB versions can be closed to any and all unwanted external internet traffic. That would mean that any bad actor attempting to exploit the SMBv1 vulnerability would have to already be inside your local network. If that is the case you have lot more problems than the SMBv1 vulnerability. In addition, you can configure security on a Server 2019 to only allow access to ports and services, SMB is a service, to specific devices on the network by IP address and MAC. If the MFP is the only thing allowed to use SMBv1, no problem.
With a properly configured on the router connecting you to the internet, the ports used by all SMB versions can be closed to any and all unwanted external internet traffic. That would mean that any bad actor attempting to exploit the SMBv1 vulnerability would have to already be inside your local network. If that is the case you have lot more problems than the SMBv1 vulnerability. In addition, you can configure security on a Server 2019 to only allow access to ports and services, SMB is a service, to specific devices on the network by IP address and MAC. If the MFP is the only thing allowed to use SMBv1, no problem.
Comment