The SMB Signing not required when detected with a vulnerability scanner will report it as a CVSSv3.0 5.3.
CVSS is a scoring system for vulnerability systems, its an industry standard scoring system to mark findings against a specific number ranging from 0 to 10. They are shown as:
Signing is not required on the remote SMB server. Enforce message signing in the host's configuration. On Windows, this is found in the policy setting 'Microsoft network server: Digitally sign communications (always)'. On Samba, the setting is called 'server signing'.
Stop the CIFS server using clish (CIFS> server stop)
Add below line in /opt/VRTSnas/conf/smbglobal.conf file on both the nodes server signing ='mandatory'
Start the CIFS server using clish (CIFS> server start)
Verify if the entry is present in the /etc/samba/smb,conf file on both the nodes
# cat /etc/samba/smb.conf | grep signing