Microsoft is advising administrators to disable the SMBv1 network communication protocol on Exchange servers to provide better protection against malware threats and attacks.
Since 2016, Microsoft has been recommending that administrators remove support for SMBv1 on their network as it does not contain additional security enhancements added to later versions of the SMB protocol.
These enhancements include encryption, pre-authentication integrity checks to prevent man-in-the-middle (MiTM) attacks, insecure guest authentication blocking,
and more.
In a new post to the Microsoft Tech Community, the Exchange Team
is urging admins to disable SMBv1 to protect their servers from malware threats such as TrickBot and Emotet.
... ... ...
