Skip to content

How can we improve the SMA?

← KACE Systems Management Appliance (SMA)

Allow access to agent share after SMB Signature Required is enabled in AD

Once SMB Signature Required is enabled in Active Directory then the agent share is unable to be access. It would nice to be able to download the new agent without having to block smb signature and then have to enable smb signature again.

51 votes
Vote

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
You have left! (?) (thinking…)
Jeremy shared this idea  ·   ·  Report…  ·  Admin →
How important is this to you?

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Anonymous commented  ·   ·  Report

    This issue has been outstanding for almost 3 years? Ridiculous. Obviously it has fallen off of the radar at Kace. Is there a way to escalate the issue so that it can be addressed?

  • Rich LeBlanc commented  ·   ·  Report

    PCI Failure folks - let's go, get it fixed. One way to fix it would be to allow it to add to an AD domain, and we could remove "Everyone" from the share of client installers and replace with "Domain\Domain Users"

  • Frosty commented  ·   ·  Report

    I'm another who needs SMB Packet Signing to be supported. Like the rest here, being a PCI DSS Compliant environment, it is disappointing that the KACE appliances' functionality is impaired in this way (the file shares are inaccessible).

  • Anonymous commented  ·   ·  Report

    Also allow a different port to eliminate NETBIOS. It requires very few line changes in the samba configuration. I've done it on all my Linux boxes.

  • Tom Tucker commented  ·   ·  Report

    We also have findings about this on our windows servers. Since we patch and update the agents through KACE we cannot turn it on unless we want to manually install 3000 agents everytime there is an update.

  • Craig Willis commented  ·   ·  Report

    We need this addressed as well. SMB signing was the only finding of significance in our latest pen test. Ironic that the server that we use to push out security updates is the least secure server in our enterprise.

  • Bartek commented  ·   ·  Report

    Incredible that it hasn't been addressed yet

  • Orlando Gonzales commented  ·   ·  Report

    SMB signing was an Audit finding that was discovered in our environment when will SMB Signing be configured on KACE 1100 and 2100?

  • David Grand commented  ·   ·  Report

    In order to meet some SOC compliance, we are being asked to enforce SMB signing.

  • Pete Langlois commented  ·   ·  Report

    This is a critical component for us. SMB Signing is now mandated by various governing bodies. Adding the option to change to smb.conf file to allow digital signing would be greatly appreciated.

KACE Systems Management Appliance (SMA): Agent

Categories

Feedback and Knowledge Base

(thinking…)