Technical Tip: FortiGate SSL VPN - SMBv2 support

[alif]

Description	This article talks about the Server Message Block (SMB) protocol support.
Scope
Solution	On all FortiGate models, SMBv2 is enabled by default for SSL VPN. Client PCs can access the SMBv2 server using SSL VPN web mode only. The default settings under SSL VPN settings define SMBv2 as minimum and SMBv3 as maximum. # config vpn ssl web portal     edit portal-name         set smb-min-version smbv2         set smb-max-version smbv3     next end However, SMBv1 support can be configured if required. FGT (portal-name) # set smb-min-version ? smbv1     SMB version 1. smbv2     SMB version 2. smbv3     SMB version 3. FortiOS has issued an PSIRT advisory FG-IR-17-103 and disables SMBv1 support. Related links. https://docs.fortinet.com/document/fortigate/6.2.0/new-features/935045/smbv2-support-ssl-vpn https://www.fortiguard.com/psirt/FG-IR-17-103 https://docs.fortinet.com/document/fortigate/6.0.0/handbook/488541/windows-file-sharing-cifs