Skip to main content

🧠 Azure Storage File Shares SMB Protocol Version is not set to SMB 3.1.1 or higher - prod.logic.yaml 🟒

Flags​

Input Type​

TypeAPI NameExtractsExtract FilesLogic Files
πŸ”’πŸ“— Azure Storage FileCA10Z1__CaAzureStorageFile__c413

Uses​

Test Results πŸŸ’β€‹

Generated at: 2025-07-21T17:38:57.249413410Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟒001βœ”οΈ 200βœ”οΈ otherwiseβœ”οΈ null
🟒002βœ”οΈ 200βœ”οΈ otherwiseβœ”οΈ null
🟒004βœ”οΈ 200βœ”οΈ otherwiseβœ”οΈ null
🟒003βœ”οΈ 199βœ”οΈ extract('CA10Z1__protocolSettingsSmbVersions__c').contains('SMB3.1.1') && not(extract('CA10Z1__protocolSettingsSmbVersions__c').contains('SMB2.1')) && not(extract('CA10Z1__protocolSettingsSmbVersions__c').contains('SMB3.0'))βœ”οΈ null

Generation​

FileMD5
Open/ce/ca/azure/storage/snb-protocol-version/policy.yaml4D5BF0ADDE6B5CC81D38BC07D0962224
Open/ce/ca/azure/storage/snb-protocol-version/prod.logic.yaml9433E5E9F38C8CCCBB050109F3632BDC
Open/ce/ca/azure/storage/snb-protocol-version/test-data.json2EBFE3C91B8B5A370535E84F05DB5E79
Open/types/CA10Z1__CaAzureStorageFile__c/object.extracts.yaml710D57682B15A41C11105284C265F338

Generate FULL script​

java -jar repo-manager.jar policies generate FULL /ce/ca/azure/storage/snb-protocol-version/prod.logic.yaml

Generate DEBUG script​

java -jar repo-manager.jar policies generate DEBUG /ce/ca/azure/storage/snb-protocol-version/prod.logic.yaml

Generate CAPTURE_TEST_DATA script​

java -jar repo-manager.jar policies generate CAPTURE_TEST_DATA /ce/ca/azure/storage/snb-protocol-version/prod.logic.yaml

Generate TESTS script​

java -jar repo-manager.jar policies generate TESTS /ce/ca/azure/storage/snb-protocol-version/prod.logic.yaml

Execute tests​

java -jar repo-manager.jar policies test /ce/ca/azure/storage/snb-protocol-version/prod.logic.yaml

Content​

Open File

---
inputType: "CA10Z1__CaAzureStorageFile__c"
testData:
- file: test-data.json
importExtracts:
- file: /types/CA10Z1__CaAzureStorageFile__c/object.extracts.yaml
conditions:
- status: "COMPLIANT"
currentStateMessage: "SMB protocol version is set to 'SMB3.1.1'."
check:
AND:
args:
- CONTAINS:
arg:
EXTRACT: "CA10Z1__protocolSettingsSmbVersions__c"
search:
TEXT: "SMB3.1.1"
- NOT:
arg:
CONTAINS:
arg:
EXTRACT: "CA10Z1__protocolSettingsSmbVersions__c"
search:
TEXT: "SMB2.1"
- NOT:
arg:
CONTAINS:
arg:
EXTRACT: "CA10Z1__protocolSettingsSmbVersions__c"
search:
TEXT: "SMB3.0"
# if CA10Z1__protocolSettingsSmbVersions__c is empty,
# then the default maximum compatibility (that includes all values) is set
otherwise:
status: "INCOMPLIANT"
currentStateMessage: "SMB protocol version is not set to 'SMB3.1.1'."
remediationMessage: "Set SMB protocol version to 'SMB3.1.1'."