This is an old revision of the document!
Table of Contents
SMB MultiChannel
Because of the way that SMBv3 multichannel works in splitting up files, customers should disable the use of multichannel file transfer for maximum protection and inspection of files. As a result, Palo Alto Networks recommends disabling SMB multichannel through the Windows PowerShell.
On the SMB client, run the following PowerShell cmdlets to verify SMB configuration
- Get-SmbClientConfiguration | Select EnableMultichannel
- Get-SmbClientNetworkInterface
On the SMB server, run the following PowerShell cmdlets:
- Get-SmbServerConfiguration | Select EnableMultichannel
- Get-SmbServerNetworkInterface
Disabling
SMB Multichannel is enabled by default and there is typically no need to disable it. However, if you want to disable SMB Multichannel (for testing purposes, for instance), you can use the following PowerShell cmdlets.
On the SMB server side, use the following cmdlets:
- Set-SmbServerConfiguration -EnableMultiChannel $false
On the SMB client side, use the following cmdlets:
- Set-SmbClientConfiguration -EnableMultiChannel $false
(NOTE: Disabling the feature on either the client or the server sides will prevent the systems from using it.)
Re-Enabling
You can re-enable SMB Multichannel after you disabled it by using the cmdlets below.
On the SMB server side, use the following cmdlets:
- Set-SmbServerConfiguration -EnableMultiChannel $true
On the SMB client side, use the following cmdlets:
- Set-SmbClientConfiguration -EnableMultiChannel $true
(NOTE: You need to enable the feature on both the client or the server sides to start using it again.)