Is it safe to disable SMB v1 in a DLP environment.

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Plus Suite

Issue/Introduction

There is a need to disabled SMB v1 in the environment.

Environment

DLP 15.8 and higher

Resolution

There is no requirement for SMB v1 as the latest DLP releases use SMB v2 and SMB v3.

Not only is it safe to disable SMB v1 in your environment it is highly recommended to do so and use the latest SMB versions instead. 

Additional Information

How to detect, enable and disable SMBv1, SMBv2, and SMBv3 in Windows (learn.microsoft.com)