How to disable smbv3 compression

How to disable smbv3 compression

If you want to disable Compression to unauthenticated attackers for exploiting the vulnerability, you can block the regedit file. 

If your want to disable 

open command run as Administrator type following reg file in command prompt and press enter

reg add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" /v DisableCompression /t REG_DWORD /d  0 /F 

If your want to enable 

reg add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" /v DisableCompression /t REG_DWORD /d  1 /F

·        No reboot is require after making that change.
·        This workaround solution it not does prevent exploitation of SMB clients; that is to say, this only stops the vulnerability in SMBv3 compression by being leveraged by SMBleed.

·        SMB Compression is not yet used by Windows or Windows Server, and disabling SMB Compression has no negative performance impact.

Post a Comment