Azure Compliance ControlsAzure Storage
SMB file shares should have 'SMB protocol version' set to 'SMB 3.1.1' or higher
Checks that SMB file shares use the latest SMB protocol version. Azure Storage file shares (SMB) should allow only the latest SMB protocol version, such as `SMB 3.1.1`, blocking legacy SMB versions at the storage account level.
What this control checks
Checks the SMB protocol version setting on Azure storage account file shares
Framework mappings
The clauses this control is mapped to in each framework.
- 10.1.2 Ensure 'SMB protocol version' is set to 'SMB 3.1.1' or higher for SMB file shares
- 9.1.2 Ensure 'SMB protocol version' is set to 'SMB 3.1.1' or higher for SMB file shares
- OPS-23.01B The cloud service provider regularly measures, analyses and assesses the procedures with which vulnerabilities and incidents are handled to verify their continued suitability, appropriateness and effectiveness.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
storage_account_file_share_smb_protocol_version_3_1_1 - Powerpipe Control:
azure_compliance.control.storage_account_file_share_smb_protocol_version_3_1_1 - Prowler Check:
storage_smb_protocol_version_is_latest - KICS Query:
621fc7c5-c342-4223-b3dd-d1530acb43ae
Last reviewed: 2026-10-15