SMB Encryption provides secure access to data on SMB file shares.
For protecting data on untrusted networks, end to end encryption of SMB data “in flight”. The date is protected from eavesdropping/snooping attacks on untrusted networks.
Deployment of SMB encryption is easy at zero costs, these is no need for IPSec, specialized hardware, or WAN accelerators. The setting is available through the server manager File & Storage Services role and through Powershell
It can be configured per share or for the entire server.
Scenarios where this is useful:
- Branch Offices over WAN networks
- Application workload over unsecured networks