I have a network with several servers and I've disabled SMBv1 on every server except one because an office printer/scanner is used to scan documents to a shared folder over SMB. The printer is only about 6 years old but it doesn't support SMB v2 or 3 and the vendor confirms that there is no firmware update that enables this. Naturally I don't have v1 exposed to the wider Internet but if a machine were compromised on the LAN the server is vulnerable to various exploits while v1 is enabled.
Is there a mechanism that would make it possible to allow SMB v1 traffic only from this decrepit printer while still allowing v2/3 SMB traffic to the server? My understanding is that all version of SMB run on the same port. I have a sonicwall firewall/router and DLink switches on the network if that is helpful.
Barring this, I'm looking into alternatives such as moving the scan files into place via FTP (yes, the printer doesn't support sftp) or decommissioning the hardware.