Can I disable SMB-in firewall rule?

[pufferdude]

I was hoping to disable access to our VeeamB&R / VeeamOne Windows server via admin shares (or any other inbound remote file access ala \\server\c$ or similar) but I noticed that the VeeamOne install created an allow inbound SMB-in (TCP 445) rule in the Windows firewall.

What would break if I disabled this rule? I'm trying to think what external client would need inbound file share access to the VeeamOne server, but coming up blank. Is this a necessary hole in the firewall?

[HannesK]

Hello,
The user guide mentions the Veeam ONE client as reason for 445 . If you don't use it remotely, then I would give it a try.

Best regards,
Hannes

[pufferdude]

Cool, thanks!