Often users in different locations of our company (e.g. a user in the US and a user in Belgium) want to use network filesharing via the mapping functionality of Windows' file-explorer. I think the ports 137 to 139 must be opened on the FW for this. But usually I try to convince my users that they should not use this mechanisms on our WAN. Does anybody has security related arguments for me to turn those requests down.
Thomas