FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
alif
Staff
Staff

 

Description This article talks about the Server Message Block (SMB) protocol support.
Scope  
Solution

On all FortiGate models, SMBv2 is enabled by default for SSL VPN.

 

Client PCs can access the SMBv2 server using SSL VPN web mode only.

 

The default settings under SSL VPN settings define SMBv2 as minimum and SMBv3 as maximum.

 

# config vpn ssl web portal
    edit portal-name
        set smb-min-version smbv2
        set smb-max-version smbv3
    next
end

 

However, SMBv1 support can be configured if required.

 

FGT (portal-name) # set smb-min-version ?
smbv1     SMB version 1.
smbv2     SMB version 2.
smbv3     SMB version 3.

 

FortiOS has issued an PSIRT advisory FG-IR-17-103 and disables SMBv1 support.

 

Related links.

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/935045/smbv2-support-ssl-vpn

https://www.fortiguard.com/psirt/FG-IR-17-103

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/488541/windows-file-sharing-cifs

 

Contributors