Authenticaion failed from AD

[Ahmed_You]

we faced today authentication failed cases for users and administrators that try to access proxy, so we access it with local account , after access proxy we found it dis joined from domain when we try to join it again it failed because SMB V1 disabled on our active directory as we disabled it since 2 days and working with SMB v3 now so please update us with suitable SMB version for proxy to join AD again. proxy version 7.7.2.3.0

[aloksard]

Hi,

Hope you are doing well.

Firstly version 7.7.2.3 is EOL/EOS version now. I suggest to upgrade to an supported version as soon as possible.

Any version below 7.7.2.7 version supports SMB v1 protocol , but these versions are now EOL.

From version 7.7.2.7  MWG supports SMB v2.

In SMB v1 case In Packet capture you will see successful TCP 3 way handshake between MWG and DC server,post which you will see MWG is initiating an NTLM Communication by sending the NTLM  'Negotiate Request'  and The AD Server instead of sending a 'Negotiate Response' would be seen sending a RESET/FIN packet back to the MWG  and connection is terminated.

NOTE:-  MWG supports SMB v2  from version 7.7.2.7 and above.

Your current MWG version is 7.7.2.3  which is the problem.

-To get connection working to this DC server, you will need to either allow SMB v1  on the DC server  or to upgrade MWG version to atleast 7.7.2.7  in order to get support for  SMB v2.


As mentioned 7.7.2.x is EOL/EOS , so better to upgrade to current minimum supported version which is 7.8.

Also current main release version is 8.2.6

Also check for some information mentioned in below link:-

https://kc.mcafee.com/corporate/index?page=content&id=KB89350

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Regards

Alok Sarda

[aloksard]

Hi,

Also to add smbv3 is not supported by MWG as of now.

Regards

Alok Sarda