Skip to main content
Contributor I
May 14, 2017
Answered

Support for SMB v2 or v3

  • May 14, 2017
  • 108 replies
  • 23234 views
With all the recent reports and issues with the WannaCry ransomware I wanted to restrict use of SMB v1 on my home network. My NAS blocks this to the outside world but I wanted to secure things internally as well. I can configure the NAS to not support SMB v1 but this then prevents the Sonos controller app from seeing the share. When will Sonos support later versions of SMB? I had seen another thread on this somewhere and it sounded like it wasn't going anywhere. Is it possible to get an update on this please.
    This topic has been closed for further comments. You can use the search bar to find a similar topic, or create a new one by clicking Create Topic at the top of the page.
    Best answer by Phil.Coleman
    The problem is that as long as companies produce products that rely on old out of date software other companies have to continue to support them to remain relevant in the market, it's a vicious cycle.

    108 replies

    MikeV
    June 19, 2017
    If the computer doesn't have SMBv1 enabled, then your Sonos devices - which are what actually do the indexing of your music library - won't be able to connect to your computer. That might explain why the controller comes back with "Not responding" when you try to add the folders (maybe the controller is waiting for a response from the Sonos device(s) that they're able to connect and are in the process of indexing the music), but the controller itself is only telling your Sonos devices to connect to your computer, it's not actually doing anything with your music.

    BTW, a little motivation for Sonos to finally upgrade... Microsoft will be disabling SMBv1 in the Windows 10 update that will hit this fall, expected around October or November. It should be noted that this will be for NEW installations of Windows 10 (new computers, clean reinstallations, etc.)... upgrade/update installations will continue to have SMBv1 enabled if it had not been disabled by the user.

    Maybe a little more motivation... Microsoft is maintaining a list of products that require SMBv1, so they can tell people NOT to buy those products. Yes, Sonos is on that list.
    The S in IOT stands for Security.
    press250
    Prodigy III
    June 27, 2017
    Another day (June 27th), another massive attack using the SMBv1 vulnerability. Microsoft reiterated the "Disable SMBv1" for all users, corporate AND home. I bet that an upcoming Patch Tuesday will turn off SMBv1 BY DEFAULT ... which would result in a FLOOD of support issues as every Sonos user with a music library finds that it has stopped working.

    Acknowledged: some "legacy" NAS boxes use SMBv1.

    Solution: Sonos moves to SMBv3.
    Ideal solution: Sonos moves to SMBv3 AND offers a checkbox to revert back to SMBv1 under Advanced Settings.


    Staying on SMBv1 puts Sonos users at risk as we cannot follow Microsoft's strong advice to disable SMBv1. Staying on SMBv1 puts SONOS at risk of universal customer backlash should Microsoft disable SMBv1 in a Patch Tuesday.
    Lyricist I
    July 19, 2017
    Staying on SMBv1 puts SONOS at risk of universal customer backlash should Microsoft disable SMBv1 in a Patch Tuesday.

    It won't be a Patch Tuesday, but Windows Fall/Autumn edition will disable it by default.

    Of course you can look at the Windows Sonos Controller and come to the conclusion that really no-one cares about Windows clients any more ...
    Stanley_4
    Grand Maestro
    July 20, 2017
    Reading all of this SMBv1 security stuff got me thinking that just having it on an isolated LAN segment might not be enough and there could still be issues with my server. The solution for me is that I moved my Sonos music over to a Raspberry Pi computer with nothing of value on it to worry about. That let me disable the SMB on my server box.

    I'm hoping whatever Sonos decides to do here gets done before Microsoft pulls the plug, that would be ugly.
    Contributor I
    August 4, 2017
    Sonos,

    1) Linux has supported SMBv2 for a number of years now, SMBv3 is also supported
    2) As per the above statement, the ability to update the Sonos SMB support should not really be too difficult at all ... the libraries are out there. Update your Linux kernel if necessary and then the SAMBA version
    3) The September / October Windows 10 Fall release that disables SMB v1 by default is just around the corner. I sure hope that the solution is NOT to turn it back on and make your customers less secure and reliant on 30+ year old technology
    4) Your silence regarding this issue is unacceptable / communication with your customers instills trust ... that is definitely not what you're doing
    5) Please respond with a real solution, not a workaround

    Thanks,

    Robert
    Lyricist I
    August 14, 2017
    My set of speakers has largely remained unused for the three years I've had them. Evidently VLANs are another decades old technology that are too challenging for Sonos to figure out. I finally figured out how to overcome that hurdle, but now ridding my network of SMB1 has rendered them useless again. It may be too late already, but Sonos is really alienating a lot of current and potential customers. People like me who have discovered the wonders of sub $50 Chromecast Audio adapters.
    jgatie
    August 14, 2017
    Sigh.
    Lyricist I
    August 28, 2017
    I was thinking on buying some more Sonos speaker, but when they are totally unsecure and there is no change in sight, I even think about selling them again. Even if these are good speakers, but not even supporting SMBv2 ist unjustifiable!!! Especially when not only security advisors but even Microsoft explains this in detail!
    Lyricist III
    September 12, 2017
    Same here - was going to buy some Play1's for surround sound under the recent offer but my main use-case is SMB access to a Windows 2012 server that (for obvious reasons) now has SMB v1 disabled. I've got just over 1.1 TB of FLAC files on there that the Sonos can no longer access. Every CD / Vinyl I buy goes straight onto there (the latter using an M-Audio FireWire device and Audacity software)
    Lyricist I
    September 13, 2017
    I contacted support but they just DON'T CARE! They even said that just using it at home, and now it comes, IS NO RISK AT ALL!
    That said I 'm not only angry, I will even tell everyone around me to stop buying sonos!