NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

scuthber's avatar
scuthber
Aspirant
May 01, 2020

ReadyNAS SMB Plus and NULL NetBIOS Sessions

I have an old RN102 that's been exposed as "vulnerable" due to the IPC$ share permitting NULL sessions. I did see another similar post but it was inconclusive...

The firmware is old (6.0.8) and I gather I need to update via 6.2.5 and 6.5.2, which I can do, but I'm puzzled about this "SMB Plus" app, that enables me to disable SMB 1.0. It's not available on my app page - is that because the firmware is so old?

 

I will probably enable Active Directory auth on it too and disable anonymous, but will this disable null NetBIOS sessions, or do I need to do something else?

 

Any help much appreciated!

 

3 Replies

  • Update the NAS first.  Then if SMB plus isn't there, just download it from https://apps.readynas.com and install it manually

     

    FWIW, you will get better performance if you do a factory reset after you finish the firmware upgrade, and then restore the files on the NAS from backup.

    • scuthber's avatar
      scuthber
      Aspirant

      I'm up to 6.1.0.3 now and I just noticed a "Legacy Windows Discovery" checkbox in SMB settings. Is this anything to do with the IPC$ share?

       

      • StephenB's avatar
        StephenB
        Guru

        scuthber wrote:

        I'm up to 6.10.3 now and I just noticed a "Legacy Windows Discovery" checkbox in SMB settings. 

         


        Windows 10 uses WS-Discovery Old versions of Windows used NetBios discovery.  The checkbox tells the NAS to also advertise using the older method.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More