microsoft ntfs file sharing

[avi_goldstain]

hi

i have 2 zones

my storage (storage is configured as cifs) is in one zone

users in other zone

i need to allow the users access to the storage  using only standard Microsoft file sharing

how can i do that ?

[Hithead]

just create a policy allowing the users (AD group, specific users or any users) from one zone to the other zone with the app ms-ds-smb (and msrpc).

also check the firewall logs. better you allow everything to your storage and then add the apps related to the logs.

[avi_goldstain]

thanks

[hshah]

Hi AVI,

I didnt find any application named NTFS in applipedia. The closed is NFS, but I am sure NTFS and NFS are different protocol.

Hence best idea is to allow everything between Storage and Users zone. Than monitor logs for interested applications.

Once configuration is done, than go to Monitor > traffic > Put filter ( zone.src eq Users ) and ( zone.dst eq Storage ) > Enter

This will list all previous logs for traffic from Users to Storage. Now look for interested applications. Now modify the rule, just to allow those application.

Regards,

Hardik Shah

[pulukas]

hshah the application for file sharing on MS is variously referred  to as either CIFS or SMB.  Hence the application noted by hithead above ms-ds-smb allows Microsoft directory services authentication to a smb file share.