Scan to SMB Only Working with SMB 1 Enabled

[Gunnett]

Re: Scan to SMB Only Working with SMB 1 Enabled

I am able to toggle off SMB1 on the server while I've been testing.

https://support.microsoft.com/en-us/help/2696547/how-to-enable-and-disable-smbv1,-smbv2,-and-smbv3-in-windows-vista,-windows-server-2008,-windows-7,-windows-server-2008-r2,-windows-8,-and-windows-server-2012

I have experimented with the various telnet SMB settings on the Ricoh machine

I had the Ricoh C6004 working with
client auth 3 (NTLMv2 Only)
client port 445

But as soon as I turn off SMB1 on the server itself, scanning fails again.

[Cipher]

Re: Scan to SMB Only Working with SMB 1 Enabled

SMB v1 Windows Server 2000 / 2003
SMB v2 Windows Vista / Server 2008
SMB v2.1 Windows 7 / Server 2008 R2
SMB v3 Windows 8 / Server 2012
SMB v3.0.2 Windows 8.1 / Server 2012 R2
SMB v3.1.1 Windows 10 / Server 2016

Up to SMB v2.1 Windows would automatically negotiate which version of SMB to use for communication. (hence it would drop down to SMB v1 as required).
Then from SMB v3 they included the option to add backwards compatibility via add and remove Windows features (SMB 1.0 / CIFS File Sharing Support).

But your findings are the same as my findings.
Turn off SMB 1.0 / CIF and it will stop working.

So that makes Ricoh correct, they do just use the SMB v1 protocol.

The real question is does SMB v1 actually need to be turned off now?
If the customer has applied the latest Windows updates then the vulnerability has already been plugged.

[sturmtrooper]

Re: Scan to SMB Only Working with SMB 1 Enabled

SMB v1 Windows Server 2000 / 2003


The real question is does SMB v1 actually need to be turned off now?
If the customer has applied the latest Windows updates then the vulnerability has already been plugged.

Yes that particular hole has been plugged. But given the age of SMB 1.0 I think the concern that OTHER issues might come up is still valid.

[semi]

Re: Scan to SMB Only Working with SMB 1 Enabled

Yes that particular hole has been plugged. But given the age of SMB 1.0 I think the concern that OTHER issues might come up is still valid.

Any help??? RD062011m.pdf

[Cipher]

Re: Scan to SMB Only Working with SMB 1 Enabled

Yes that particular hole has been plugged. But given the age of SMB 1.0 I think the concern that OTHER issues might come up is still valid.

It is a valid point.

Hopefully Ricoh will add support for v2 and v3 at some point via firmware.

[McKenning]

Re: Scan to SMB Only Working with SMB 1 Enabled

It is a valid point.

Hopefully Ricoh will add support for v2 and v3 at some point via firmware.

I know this thread is a couple of months old, but I wanted to comment on this and other things said in this thread.

First, Ricoh is far from the only MFP manufacturer with SMB issues. Xerox and HP both have publicly stated that existing MFPs and some copiers will not support SMB v2/3. See here: http://h10032.www1.hp.com/ctg/Manual/c05547920 and here: Xerox Machines and SMBv2/V3 Scanning Support - Customer Support Forum

Second, there was a comment earlier that stated something like "Microsoft forced MFP manufacturers to use SMB v2/3". This is patently false. Reading the two links above should clear that up. If you are still curious, think about the relationship between MS and hardware copier/printer vendors. They have very little connecting them. Now, Microsoft could have and did in fact deprecate SMB v1, but that doesn't stop anyone from using it.

Sorry for the mini-rant. Just trying to make sure everyone is on the same page.

[McKenning]

Re: Scan to SMB Only Working with SMB 1 Enabled

It is a valid point.

Hopefully Ricoh will add support for v2 and v3 at some point via firmware.

I know this thread is a couple of months old, but I wanted to comment on this and other things said in this thread.

First, Ricoh is far from the only MFP manufacturer with SMB issues. Xerox and HP both have publicly stated that existing MFPs and some copiers will not support SMB v2/3. See here: http://h10032.www1.hp.com/ctg/Manual/c05547920 and here: Xerox Machines and SMBv2/V3 Scanning Support - Customer Support Forum

Second, there was a comment earlier that stated something like "Microsoft forced MFP manufacturers to use SMB v2/3". This is patently false. Reading the two links above should clear that up. If you are still curious, think about the relationship between MS and hardware copier/printer vendors. They have very little connecting them. Now, Microsoft could have and did in fact deprecate SMB v1, but that doesn't stop anyone from using it.

Sorry for the mini-rant. Just trying to make sure everyone is on the same page.

[rincat]

Re: Scan to SMB Only Working with SMB 1 Enabled

Hello guys, good night, how are you? Regarding ricoh MP 501, I saw on the Ricoh official website about the firmware update to be able to run on SMB v3, Effects of disabling SMBv1: Multifunction Printers and Laser Printers | Products & Services | Global | Ricoh, has anyone done this procedure and knows if works well? I know the post is old, but it costs nothing to try.

[slimslob]

Re: Scan to SMB Only Working with SMB 1 Enabled

Hello guys, good night, how are you? Regarding ricoh MP 501, I saw on the Ricoh official website about the firmware update to be able to run on SMB v3, Effects of disabling SMBv1: Multifunction Printers and Laser Printers | Products & Services | Global | Ricoh, has anyone done this procedure and knows if works well? I know the post is old, but it costs nothing to try.

This thread is from 3 years ago, dead and buried. That makes you a grave digger. We don't like grave diggers. Start a new thread only be sure to obey the rules. General Rule 5. "Discussion of illegal activities such as software and music piracy and other intellectual property violations are not allowed." Firmware is the intellectual property of Ricoh.