microsoft ntfs file sharing

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

microsoft ntfs file sharing

L1 Bithead

hi

i have 2 zones

my storage (storage is configured as cifs) is in one zone

users in other zone

i need to allow the users access to the storage  using only standard Microsoft file sharing

how can i do that ?

4 REPLIES 4

L4 Transporter

just create a policy allowing the users (AD group, specific users or any users) from one zone to the other zone with the app ms-ds-smb (and msrpc).

also check the firewall logs. better you allow everything to your storage and then add the apps related to the logs.

thanks

Hi AVI,

I didnt find any application named NTFS in applipedia. The closed is NFS, but I am sure NTFS and NFS are different protocol.

Hence best idea is to allow everything between Storage and Users zone. Than monitor logs for interested applications.

Once configuration is done, than go to Monitor > traffic > Put filter ( zone.src eq Users ) and ( zone.dst eq Storage ) > Enter

This will list all previous logs for traffic from Users to Storage. Now look for interested applications. Now modify the rule, just to allow those application.

Regards,

Hardik Shah

hshah the application for file sharing on MS is variously referred  to as either CIFS or SMB.  Hence the application noted by hithead above ms-ds-smb allows Microsoft directory services authentication to a smb file share.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
  • 3738 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!