Description

How to Enable SMB protocol (lateral movement) inspection on JATP traffic (web) collector and all-in-one appliances.

Solution

  1. Log into the JATP collector CLI as admin

    Welcome admin. It is now Fri Apr  3 13:04:01 PDT 2020
    JATP#

  2. Enter collector mode

    JATP# collector
    Entering the Collector configuration mode...
    JATP#(collector)#

  3. Check the protocols status

    JATP#(collector)# show protocols
    http parser is enabled
    smb parser is disabled
    JATP#(collector)#

  4. Enable SMB protocol

    JATP#(collector)# set protocols smb on
    JATP#(collector)#

  5. Verify protocols status

    JATP#(collector)# show protocols
    http parser is enabled
    smb parser is enabled
    JATP#(collector)#