Home
Microsoft

First published on TECHNET on Jun 01, 2017
Hi folks, Ned here again. This blog post contains all products requiring SMB1, where the vendor explicitly states this in their own documentation or communications, or where a customer has reported it and shown some degree of proof without vendor refutation. This list is not complete and you should never treat it as complete; check back often. All products arranged in alphabetical order, by vendor, by product, with a URL to their documentation stating SMB1 requirements. Vendor – Product - Documentation

    • Aerohive - HiveManager not affected, it does not use SMB. HiveOS 8.2r1 and later no longer requires SMB1 (available 28th December 2017). HiveOS versions prior to 8.2r1 are affected. All info here provided directly by Aerohive to MS.

 

 

 

    • Applied Systems - TAM - Customer reported after contacting TAM Support - Vendor does not publicly document their requirement for SMB1

 

 

    • ASUS - Wireless Routers with USB storage connection - Customer reported after contacting ASUS Support - Vendor does not publicly document their requirement for SMB1

 

 

    • Axis Communications - Various security & surveillance cameras, using firmware older than 5.8x. Axis' firmware list shows around half of all devices do not support at least firmware 5.8+: https://www.axis.com/global/en/support/firmware - Customer reported after contacting Axis Support - Vendor does not publicly document their requirement for SMB1

 

    • Barracuda - Load Balancer, perhaps other products that support backups (backups to SMB, using at least 6.0 firmware) - Customer reported after contacting Barracuda Support - Vendor does not publicly document their requirement for SMB1

 

 

 

    • Belkin - all routers with USB storage connection - Microsoft confirmed with Belkin support

 

    • Bitdefender - Gravity Zone (Antivirus)  - Customer reported after contacting Bitdefender Support - Vendor does not publicly document their requirement for SMB1

 

 

 

    • Carestream Health - SoftDent - Customer reported after contacting Carestream Support - Vendor does not publicly document their requirement for SMB1

 

 

 

 

 

 

 

    • ClearSwift - Secure Web Gateway 4.6 (domain join) - Customer reported after contacting ClearSwift Support - Vendor does not publicly document their requirement for SMB1

 

 

 

 

 

 

 

 

    • Epicor - At least Epicor ERP 10.2.1 and older - Customer reported after contacting Epicor & showing management UI screenshot to MS - Vendor does not publicly document their requirement for SMB1.

 

    • Epson - WF-3640, WF-5620, perhaps others (when accessing memory card interface) - Customer reported after contacting Epson & showing SMB1 error screenshot to MS - Vendor does not publicly document their requirement for SMB1.

 

 

 

    • FAST - LTA Silent Cubes - Customer reported after contacting FAST Support - Vendor does not publicly document their requirement for SMB1

 

 

 

    • Fujitsu - FX devices DMP-X and below (Herakles) do not support SMB2. DMP-XI-1a (Seito, Herakles2) and later support SMB2. Customer reported after contacting Fujitsu Support - Vendor does not publicly document their requirement for SMB1

 

 

 

 

 

 

 

    • Ignite Technologies - SenSage AP (Windows Retriever) does not support SMB2.  Customer reported after contacting Fujitsu Support - Vendor does not publicly document their requirement for SMB1

 

 

 

 

 

    • Konica Minolta - Bizhub , C284e series, C3350 series, likely others still for sale - Customer reported after contacting Konica Minolta Support - Vendor does not publicly document their requirement for SMB1.

 

    • Kyocera - Some models do support SMb2+ when running latest firmware; others require SMb1. Vendor maintains a complete list available to their customers. Contact vendor via http://www.kyoceradocumentsolutions.com/support/ . Vendor does not make list public

 

 

    • Linksys - All routers with USB storage - Microsoft confirmed with Linksys support.

 

 

 

    • McAfee - Rogue Detection System (RDS), all versions (required when scanning remote systems on a subnet that do not themselves have McAfee products installed) - Vendor does not publicly document their requirement for SMB1 but confirmed with audit logs.

 

 

    • McKesson/Change Healthcare - Portico Provider Manager (7.1 and older at least) - Customer reported after contacting McKesson Support - Vendor does not publicly document their requirement for SMB1, but stated that upgrading to latest version would remove need for SMB1. Version not stated.

 

    • Microsoft - Windows XP, Windows Server 2003 (and older), Windows Embedded Standard 2009

 

 

    • Multi-Tech Systems - Faxfinder - Customer reported after contacting Multi-Tech Support - Vendor does not publicly document their requirement for SMB1

 

 

 

 

    • Nexenta - NexentaStor - SMB1 required for domain join for version 4.0.4-FP5 and older, first resolved in version 4.0.5-FP3

 

 

 

 

    • Open GI - ICP - Customer reported after contacting Open GI Support - Vendor does not publicly document their requirement for SMB1.

 

 

 

 

 

 

 

 

 

 

    • Seagate - Seagate Central - Confirmed by customer conversation with vendor

 

 

    • ShoreTel - ShoreTel Server - Customer reported after contacting ShoreTel Support - Vendor does not publicly document their requirement for SMB1.

 

 

    • Sony - HAP-S1 and HAP-Z1ES h igh-Resolution Audio HDD players - Customer reported after contacting Sony support - Vendor does not publicly document their requirement for SMB1.

 

    • Sophos - Sophos has now updated all products to no longer require SMB1, as long as you update to Sophos XG Firewall 16.05 MR6 (16.05.6.266), Sophos UTM 9.5 MR2 (9.502), Sophos Web Appliance 4.3.3, Sophos Anti-Virus for Linux 9.13.2, Sophos Anti-Virus for vShield 2.1.10, Sophos for Virtual Environments 1.0.1 - https://community.sophos.com/kb/en-us/126757

 

 

 

 

 

 

    • Toshiba - E-Studio MFP line, 6508a - Customer reported after contacting Toshiba Support - Vendor does not publicly document their requirement for SMB1.

 

 

 

 

 

 

    • Wolters Kluwer Financial Services (acquired Svenson) - Svenson Financial Reporting Products - Customer reported after contacting support - Vendor does not publicly document their requirement for SMB1

 

 

 

    • Zebra - Zebra Label Printers, ZPL formats, & Eltron/EPL formats -  Customer reported after contacting Zebra Support - Vendor does not publicly document their requirement for SMB1.

 

 



To update this list, please email StillNeedsSMB1@microsoft.com or tweet @nerdpyle with hashtag #StillNeedsSMB1 . Adding a product to this list ideally requires direct quote or documentation from the vendor of that product, including their website, knowledgebase, support forums, or other vendor channels; third party forums are not enough to qualify. Alternatively, if your vendor has responded to you in a support case that SMB1 is required but does not provide public documentation, products will be added case-by-case. Consult your vendor for updates and newer product versions that support at least SMB 2.02. If you are a vendor and wish to report requirements for SMB1 or if information above has changed, email StillNeedsSMB1@microsoft.com . There are vendors who are not publishing their SMB1 requirements. It is up to you, their customer, to have them publish this information - Microsoft cannot make them do so. If a vendor does not state if they require SMB1 but you believe they do, please contact that vendor directly. If you need assistance getting a vendor response, email StillNeedsSMB1@microsoft.com and we will try our best to assist. Politeness works best; the person you are speaking to at a vendor is extremely unlikely to have put SMB1 into the product & probably isn't any happier about it than you are! For more information on why using SMB1 is unsafe, see StopUsingSMB1 . SMB1 has been deprecated for years and will be removed by default from many editions and SKUs of Windows 10 and Windows Server 2016 in the RS3 release.

Important: if your vendor requires disabling SMB2 in order to force SMB1, they will also often require disabling oplocks. Disabling Oplocks is not recommended by Microsoft, but required by some older software, often due to using legacy database technology. Windows 10 RS3 and Windows Server 2016 RS3 allow a special oplock override workaround now for these scenarios - see https://twitter.com/NerdPyle/status/876880390866190336 . This is only a workaround - just like SMB1 oplock disable is only a workaround - and your vendor should update to not require it.

Be safe out there,

- Ned Pyle, Principal Program Manager of the SMB protocol family at Microsoft