Secure Connectivity Features in Windows Server 2022.
SMB has been around for a very long time, server message blocks.
This is the way servers communicate to each other,
a lot of other communications happen within this realm.
One of the improvements is AES256 will now automatically be
negotiated between clients. If both clients accept it, that
is the protocol that they use.
The good news is Windows 10 recently patched, Windows Server 2019
recently patched, both are going to support this, so your
communications just got a lot more secure.
SMB now supports compression when using Robocopy or Xcopy,
which is going to save a lot of time with large file transfers.
SMB Direct now supports encryption, and if you have a cluster,
your east‑west communications can now be encrypted and can be signed.
SMB over QUIC.
This is a large improvement here.
It's an alternative to the TCP network transport and this provides
secure, reliable connectivity to the Edge file servers over an
untrusted network like the internet. All packets are always
encrypted and the handshake is authenticated with TLS 1.3. You have
parallel streams of data, you have your reliable data,
you have your unreliable data so these two streams
make it faster. With SMB over QUIC, you have congestion control,
you have lost recovery just as you would with TCP. It uses a friendly UDP
port of 443, it's going to be open on most systems.
This is great for new VPNs because it survives changes in the
IP address or port of the client itself.
So that's a look at how networks and communication between
servers are a lot more secure now with these improvements for SMB in Windows Server 2022.