does DAVE11 support SMB2

[yanhuan]

hi
if DAVE11 support SMB2? if support, how can I enable it?

thanks

[TRIS3CT]

I would like to know this too...

Actually, I hope it's using SMB3.

[jim]

DAVE does not use SMB2.

When Microsoft introduced the changes to Windows networking that they called SMB2, we did extensive testing with DAVE to try and implement them. At no point was there any improvement in copy speed, so we decided to continue using the same optimized connection methods we have used for nearly 18 years without sacrificing stability or file integrity.

At this time, there are no plans to implement any changes to DAVE's CIFS.

---
Jim

[Dogstar]

Since WannaCry Microsoft recommends to disable SMB1. I think now you have to consider to switch to SMB3 because DAVE is useless otherwise.

[carl]

ADmitMac PKI, ADmitMac, and DAVE all use the same CIFS ‘backbone’, using our time tested method of connecting to Windows shares. Though there have been a few security concerns as of late that have prompted some organizations to simply disable SMB1 entirely, I’ve been led to believe that there aren’t any issues if the servers have been updated with the appropriate patches from Microsoft.

At this time, we do not have any plans to update to SMB2 or higher. Our products will continue to require that SMB1 be enabled on the Windows DCs and fileservers in order to connect to those shares. I apologize in advance for any inconvenience this may cause you.

Carl Ketterling, Thursby Software

[Dogstar]

But it's only a matter of time that Microsoft won't support SMB1 anymore.

[jakefraser]

But it's only a matter of time that Microsoft won't support SMB1 anymore.

They're already signalling this with some fairly blunt articles such as https://blogs.technet.microsoft.com/filecab/2016/09/16/stop-using-smb1/

Can we as customers using the latest version of DAVE (v13) get some kind of commitment to getting SMB2/3 support via DAVE in the next release? If we can't, we'll have to stop using DAVE altogether as we can't risk the security of having SMB1 enabled on servers for the sake of a minority of devices (Macs running DAVE).

[carl]

ADmitMac and DAVE are mature products, and at this time, we do not have any plans to update them to SMB2 or higher.

[jakefraser]

Carl
I don't think you can excuse a lack of support for a protocol introduced in 2006 due to "maturity" of a product. SMB1 has many known vulnerabilities, and any sysadmin still running SMB1 on their servers by the end of 2017 will be asking for trouble. You're asking sysadmins that have trusted your product to intentionally expose their infrastructure to SMB1 vulnerabilities. You'll lose a lot of customers very soon when every penetration test, security audit and best practice prohibits the use of SMB1 completely.
I think Thursby should be taking this a lot more seriously...