Currently our environtment has a NL400 Isilon with 8.0.0.7 OneFS version. For late year we'll upgrade all those hardware components.
Now, with theses versions we need to know if is possible to encrypt a single resource smb shares with smb3.
Its seem that only smb1 and smb2 only supported with this version.
# isi smb settings global view Access Based Share Enum: No Dot Snap Accessible Child: Yes Dot Snap Accessible Root: Yes Dot Snap Visible Child: No Dot Snap Visible Root: Yes Enable Security Signatures: No Guest User: nobody Ignore Eas: No Onefs Cpu Multiplier: 4 Onefs Num Workers: 0 Require Security Signatures: No Server Side Copy: Yes Server String: Isilon Server Support Multichannel: Yes Support NetBIOS: No Support Smb2: Yes
Please, someone could confirm that smb3 it doesnt support? What OneFS version we need for this feature? Is this possible with Isilon NL series?
2.4.1 Feature introduction OneFS 8.1.1 and above provide SMB encryption to secure access to data over untrusted networks by providing over the wire encryption between the client and PowerScale cluster. It is an on-wire data encryption which prevents an attacker from tampering with any data packet in transit without needing an extra infrastructure.
SMB encryption can be used by any clients which support SMB3 encryption from Windows Server 2012, 2012R2, 2016, Windows Client 8, and Windows 10 and does not require any extra infrastructure management. PowerScale can also be configured to allow accepting or rejecting the old clients that lack the SMB encryption support access.
Phil.Lam
4 Apprentice
•
642 Posts
•
15 Points
2678
1
Posted July 2nd, 2020 09:00
@InfraMED
NL400 can only go to OneFS 8.1.2 and it has SMB3 encryption support.
https://www.dellemc.com/resources/en-us/asset/white-papers/products/storage/h17463-wp-dell-emc-isilo... page 37.
2.4 SMB encryption
2.4.1 Feature introduction
OneFS 8.1.1 and above provide SMB encryption to secure access to data over untrusted networks by
providing over the wire encryption between the client and PowerScale cluster. It is an on-wire data encryption
which prevents an attacker from tampering with any data packet in transit without needing an extra
infrastructure.
SMB encryption can be used by any clients which support SMB3 encryption from Windows Server 2012,
2012R2, 2016, Windows Client 8, and Windows 10 and does not require any extra infrastructure
management. PowerScale can also be configured to allow accepting or rejecting the old clients that lack the
SMB encryption support access.