protocol smb2 signing mode-type

transparent

Enables SMB signed packets with transparent authentication.

Transparent mode uses the secure inner channel to authenticate and secure traffic, eliminating the need to define delegation trust.

The advantage transparent mode offers over the delegation mode is that it simplifies the amount of configuration required. Delegate users do not have to be configured for this mode. Transparent mode uses NTLM end-to-end between the client and server-side SteelHead and the server-side SteelHead and the server. Note: If you have Windows 7 clients, you will need to use delegation mode.

delegation

Enables SMB signed packets with delegate user authentication. Select this mode if you have previously enabled SMB signing.

Use delegation mode if you want to optimize connections with Windows 7 clients. Using this mode requires setting up delegate users. Delegation mode uses NTLM between the client and server-side SteelHead and Kerberos between the server-side SteelHead and the server.

You can enable the RiOS SMB2 signing feature on a server-side SteelHead to alleviate latency in file access with CIFS acceleration while maintaining message security signatures. When sharing files, Windows provides the ability to sign CIFS messages to prevent man-in-the-middle attacks. Each CIFS message has a unique signature which prevents the message from being tampered with.