Scan-to-folder with SMB 1.0 / CIFS disabled?

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Cipher
    It's not easy being green

    1,000+ Posts
    • May 2006
    • 1309
    #1

    Scan-to-folder with SMB 1.0 / CIFS disabled?

    One of our customers with an iR C5255i has disabled SMB v1 on their server due to the WannaCry malware attacks and their scan to folder shares has stopped working.

    I've re-created this in our workshop on an iR C5235i connected to a Windows 10 laptop via a crossover cable (firewall disabled).
    I can browse my laptop shares on the Canon and scan into them just fine with SMB 1.0 / CIFS enabled, but after disabling SMB 1.0 / CIFS all I get is a ' no response ' error message.

    Both the customers machine and our workshop machine have been updated to the same and latest firmware version on SIMS (v46.01.02).

    Any one come across a solution for this?
    (Apart from leaving SMB v1 enabled of coarse).

    Cheers.
    • Knowledge not shared, is eventually knowledge that becomes lost... like tears in the rain.

    Fully qualified technician for Ricoh - Canon - Sharp - HP - Brother
    Tags: None
    • teckat
      Field Supervisor

      Site Contributor
      10,000+ Posts
      • Jan 2010
      • 16084
      #2
      Re: Scan-to-folder with SMB 1.0 / CIFS disabled?

      Windows 10 tip: Stop using the horribly insecure SMBv1 protocol | ZDNet


      WannaCry Ransomware has become very active in May 2017. It looks to be targeting servers using the SMBv1 protocol.

      SMBv1 is an outdated protocol that should be disabled on all networks.
      One of the big lessons from this Ransomware outbreak is that it is vital that you have monitoring in place on your network.
      You need to be able to quickly identify suspicious activity.

      There are six things to watch out for when it comes to detecting WannaCry Ransomware:
      1. Check for SMBv1 use
      2. Check your web and DNS traffic for any attempts to connect to these domains:
        • iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com.
        • ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com
        • ayylmaotjhsstasdfasdfasdfasdfasdfasdfasdf.com
        • iuqssfsodp9ifjaposdfjhgosurijfaewrwergwea.com
        • iuqerfsodp9ifjaposdfjhgosurijfaewrwergweb.com

      3. Check for an increase in the rate of file renames on your network
      4. Look out for any outbound traffic on TCP 445. This really should be blocked
      5. Check for any instances of the file @Please_Read_Me@.txt on your file shares
      6. Check for any instances of files with these extensions
        • .wnry
        • .wcry
        • .wncry
        • .wncryt

      SMBv1 is deprecated
      **Knowledge is time consuming, exhausting and costly for a trained Tech.**

        Comment

        • Cipher
          It's not easy being green

          1,000+ Posts
          • May 2006
          • 1309
          #3
          Re: Scan-to-folder with SMB 1.0 / CIFS disabled?

          According to Canon support.

          Gen 2 models only support SMB v1.
          Later models (Gen 2.5) support SMB v2.
          And Gen 3 models support SMB v2 and will add support for SMB v3 when updated.
          • Knowledge not shared, is eventually knowledge that becomes lost... like tears in the rain.

          Fully qualified technician for Ricoh - Canon - Sharp - HP - Brother

            Comment

            • teckat
              Field Supervisor

              Site Contributor
              10,000+ Posts
              • Jan 2010
              • 16084
              #4
              Re: Scan-to-folder with SMB 1.0 / CIFS disabled?

              Originally posted by Cipher
              According to Canon support.

              Gen 2 models only support SMB v1.
              Later models (Gen 2.5) support SMB v2.
              And Gen 3 models support SMB v2 and will add support for SMB v3 when updated.
              SMBv1 is an outdated protocol that should be disabled on all networks.
              **Knowledge is time consuming, exhausting and costly for a trained Tech.**

                Comment

                • Cipher
                  It's not easy being green

                  1,000+ Posts
                  • May 2006
                  • 1309
                  #5
                  Re: Scan-to-folder with SMB 1.0 / CIFS disabled?

                  Your answer has nothing to do with my original question.

                  Of coarse v1 should not be used.
                  • Knowledge not shared, is eventually knowledge that becomes lost... like tears in the rain.

                  Fully qualified technician for Ricoh - Canon - Sharp - HP - Brother

                    Comment

                    • 20 year tech
                      Senior Tech

                      500+ Posts
                      • May 2014
                      • 580
                      #6
                      Re: Scan-to-folder with SMB 1.0 / CIFS disabled?

                      I believe you can use FTP

                        Comment

                        • yazj
                          Technician
                          • Aug 2011
                          • 29
                          #7
                          Re: Scan-to-folder with SMB 1.0 / CIFS disabled?

                          Hi Guys,

                          Anything we can do with this. we advice my customer to user the following FTP/Email/WebDAV

                          but my customer is insisting the Scan to Folder, but this is the limitation of Canon Gen2 Devices which will not support SMB2.

                          do we have any device adapter or any device that can do the conversion of protocol just attached to this devices and we can do the scanning to SMB v2?

                          any advice will be highly appreciated.

                          thank

                          Jason

                            Comment

                            Previous template Next
                            Working...