PDQ Deploy SMB version?
The recent Eternalblue exploit used in the Wannacrypt attacks seems like the worm behavior can be mitigated by disabling SMB v1. Would disabling SMB v1 effect PDQDeploy?
0
Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.
The recent Eternalblue exploit used in the Wannacrypt attacks seems like the worm behavior can be mitigated by disabling SMB v1. Would disabling SMB v1 effect PDQDeploy?
Comments
It shouldn't. At least not in newer operating systems. If it did, should be a simple thing to force.
PDQ replied to a thread on Reddit with the exact same question - here is there response:
"PDQ products (Deploy and Inventory) will use the latest SMB that is installed. It does work with SMB 1 but it will only use that if later versions of SMB are not installed."
https://www.reddit.com/r/sysadmin/comments/6bacmd/wannacry_megathread/dhl4s92/