SMB Encryption provides end-to-end encryption of SMB data and protects against potential eavesdropping attacks on untrusted networks. Consider using SMB3 Encryption for any scenario in which sensitive data needs protection from man-in-the-middle (MITM) attacks.
SMB3 Encryption uses the Advanced Encryption Standard (AES)-CCM algorithm for both encryption and signing.
The main benefits of SMB3 Encryption are:
- No deployment requirements other than changing the SMB server settings.
- No dedicated hardware requirements unlike most storage area networks (SANs).
- Provides secure access to the server and shares.
- Protects data from eavesdropping attacks on untrusted networks.
- Provides end-to-end data encryption in-flight.
SMB3 Encryption is available only if the EVS is configured for version 3 of the SMB protocol.