SMB security hardening

Source history: extracted from the page's source file at a commit; shared includes are not expanded

Requirements, exceptions and scope

• SMB signingRequirementException3 conditions2 passages
• SMB alternative portsException1 condition1 passage
• SMB client encryption mandate now supportedException1 condition1 passage
• SMB dialect managementException3 conditions1 passage
• SMB Firewall default port changesRequirementException1 condition1 passage
• SMB insecure guest authenticationRequirementException2 conditions2 passages
• SMB over QUIC client access controlRequirementException1 condition1 passage
• SMB over QUIC in Windows ServerRequirementException2 conditions1 passage
• SMB Remote Mailslots deprecationRequirement2 passages

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

1. 26 Sep 2024
   No longer on the page SMB over QUIC client access controlMicrosoft's source, commit 4c78bb4
2. 26 Sep 2024
   Requirement added SMB over QUIC client access controlMicrosoft's source, commit 4c78bb4
3. 26 Sep 2024
   No longer on the page SMB over QUIC in Windows ServerMicrosoft's source, commit c602124
4. 26 Sep 2024
   Requirement added SMB over QUIC in Windows ServerMicrosoft's source, commit c602124
5. 26 Sep 2024
   Exception added SMB signingMicrosoft's source, commit c602124