Solved

Is it possible to encrypt CIFS?

Posted on 2007-11-20
5
2,785 Views
Last Modified: 2013-12-04
Is it possible to encrypt CIFS. From what I've read CIFS uses 445, opposed to typical smb which uses 139 and some other standard ports. Is there anyway to encrypt this like ssh? I would like to be able to setup encrypted file sharing between desktops and servers.
0
Comment
Question by:WinPE
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 31

Assisted Solution

by:Toni Uranjek
Toni Uranjek earned 200 total points
ID: 20320015
Hi!

You can implement IPSec: http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/prork/prcc_tcp_gebv.mspx?mfr=true

In domain environment you can use predefined Secure Server rule on servers and Client rule on clients. Predefined rules will use Kerberos as authentication method. I would advise that you do not enable IPSec on servers which hold multiple roles, e.g. domain controllers.

HTH

Toni
0
 

Author Comment

by:WinPE
ID: 20320245
Well this is mainly so that I can connect some of our development windows desktops to our production servers. Desktops and Servers are on two dif networks. So I need some way to encrypt the file sharing process other than ssh? I cant setup ipsec tunnels from every desktop to every server.
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 20326085
Why you can't setup tunnel from every desktop to server? If this is domain environment you can use Group Policy to assign IPSec policy. You would need two OUs, one for desktop and one for servers and two GPO with different IPSec policy settings.

Are you concerned that traffic between desktops and servers can be intercepted?
0
 
LVL 19

Accepted Solution

by:
SteveH_UK earned 300 total points
ID: 20342051
If you are talking about a remote network scenario, have you considered implementing a VPN?

VPN features are built in to Windows, so there isn't a cost issue.

You should use LT2P/IPsec for a secure service, but PPTP is also acceptable in many circumstances.
0
 

Author Closing Comment

by:WinPE
ID: 31410124
Thanks Guys for the help.
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question