Description

This article explains why Windows 11 users may be unable to map network drives to a file server when Windows 10 users do not experience the same issue. 

Symptoms

  • Windows 11 users are unable to map network drives to the file server.
  • Windows 10 users are able to map the same network drives successfully.
  • No connectivity issues are observed for Windows 10 clients.

Below is the configuration added to allow the user traffic.

set security idp idp-policy All-Protection rulebase-exempt rule MB-AD-SMB match from-zone any
set security idp idp-policy All-Protection rulebase-exempt rule MB-AD-SMB match source-address 10.10.0.0/25
set security idp idp-policy All-Protection rulebase-exempt rule MB-AD-SMB match to-zone any
set security idp idp-policy All-Protection rulebase-exempt rule MB-AD-SMB match destination-address destination-server
set security idp idp-policy All-Protection rulebase-exempt rule MB-AD-SMB match attacks predefined-attacks SMB:OF:CVE-2009-3676-DOS

Solution

  • The Engineering team has updated the IDP signature SMB:OF:CVE-2009-3676-DOS to address this issue.
  • The necessary modifications have been made to prevent the signature from incorrectly impacting legitimate SMB traffic from Windows 11 clients.
  • The fix is included in IDP Signature Package (Sigpack) 3755 and later.

Modification History

2026-08-03 : Article Created