Network Management

SMB Signing in relation to the SolarWinds Platform platform

This article describes an issue related to an SMB vulnerability. Some customers need to perform a hardening in their SolarWinds environment, and this changes the SMB signing registry keys.

First published date

11/21/2018 8:51 PM

Last published date

4/9/2025 5:36 PM

Overview

This article describes an issue related to an SMB vulnerability.

Product section

Orion Platform

Resolution

Some customers need to perform a hardening in their SolarWinds environment, and this changes the SMB signing registry keys.

SMB signing is not related to configuration inside of SolarWinds Platform products but it is related to hardening the customer's environment.

SMB signing needs to be enabled on their domain controller and on the server where the SolarWinds Platform is running.

SolarWinds is just using Windows LogonUser function. Which operating system is used is specific to the customer's environment.

This article shows how to set up SMB signing on different OS versions:

Require SMB Security Signatures

This blog article shows how to check SMB signing in Wireshark:

Using Wireshark to examine SMB Signing Requirements

It is not possible to predict what will happen in the SolarWinds environment after the application of this hardening. However, SolarWinds recommends always performing a backup of SolarWinds application servers and SolarWinds Platform database before performing changes to the environment configuration.
Monitor the behavior of the environment for the following 24 to 48 hours.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.