Policy: Azure > CIS v4.0 > 10 - Storage Services > 10.01 - Azure Files > 10.01.02 - Ensure 'SMB protocol version' is set to 'SMB 3.1.1' or higher for SMB file shares

Configures auditing against a CIS Benchmark item.

Level: 1

SMB (Server Message Block) protocol is used for file sharing in Azure Files. SMB 3.1.1 is the latest and most secure version of the SMB protocol, providing encryption, integrity verification, and protection against man-in-the-middle attacks.

Using SMB 3.1.1 or higher ensures that file transfers are secured with modern encryption standards and protects against known vulnerabilities in older SMB versions.

Primary Policy

This policy is used with the following primary policy:

Azure > CIS v4.0 > 10 - Storage Services > 10.01 - Azure Files

Controls

Setting this policy configures this control:

Azure > CIS v4.0 > 10 - Storage Services > 10.01 - Azure Files > 10.01.02 - Ensure 'SMB protocol version' is set to 'SMB 3.1.1' or higher for SMB file shares

Policy Specification

Schema Type	`string`
Default	`Per Azure > CIS v4.0 > 10 - Storage Services > 10.01 - Azure Files`
Valid Values [YAML]	`Per Azure > CIS v4.0 > 10 - Storage Services > 10.01 - Azure Files` `Skip` `Check: Benchmark`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/v070302

Policy Type URI

tmod:@turbot/azure-cisv4-0#/policy/types/r100102

GraphQL

query policyType(id: "tmod:@turbot/azure-cisv4-0#/policy/types/r100102") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-cisv4-0#/policy/types/r100102'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-cisv4-0#/policy/types/r100102'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-cisv4-0#/policy/types/r100102"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cisv4-0#/policy/types/r100102"