Does Empower use NTLM (NT LAN Manager) and SMB (Server Message Block) Protocols? - WKB80727
ENVIRONMENT
- Empower
- Server Message Block (SMB) Protocol
- SMB v1
- Windows NT LAN Manager (NTLM) Protocol
- NTLMv1
- Zero day exploits
ANSWER
Yes. Empower uses the SMB/NTLM protocols; it is required for client/server operations. However, customers who want to disable SMB v1 to mitigate zero day exploits should follow the instructions in this Microsoft article.
Empower does not require or directly call specific versions of these protocols. Empower relies upon the underlying Operating System to establish the necessary connections.
ADDITIONAL INFORMATION
Waters does not expect that disabling only SMB v1 will cause issues with Empower, provided the Microsoft guidance is followed.
Port 445 is the standard SMB port.
id80727, EMP2LIC, EMP2OPT, EMP2SW, EMP3GC, EMP3LIC, EMP3OPT, EMP3SW, EMPGC, EMPGPC, EMPLIC, EMPOWER2, EMPOWER3, EMPSW, SUP
if the network environment is configured such that NTLMv1 is disabled and NTLMv2 is required for all computers then Empower function should be unaffected. Similarly, if SMB1 is disabled on all nodes then SMB2/3 should be used.