Document NetBIOS over TCPIP support in WARP

[csujedihy]

Added details about NetBIOS over TCPIP (NetBT) support and configuration methods for WARP settings.

Summary

Screenshots (optional)

Documentation checklist

• Is there a changelog entry (guidelines)? If you don't add one for something awesome and new (however small) — how will our customers find out? Changelogs are automatically posted to RSS feeds, the Discord, and X.
• The change adheres to the documentation style guide.
• If a larger change - such as adding a new page- an issue has been opened in relation to any incorrect or out of date information that this PR fixes.
• Files which have changed name or location have been allocated redirects.

[ranbel]

What is the rationale for turning off NetBT for on-prem profiles?

[csujedihy]

Ah, I didn't meant to suggest that it should be turned off for on-prem. I meant to describe it can be toggled with on-prem device profiles too.

[csujedihy]

Let me rephrase this a little bit.

[ranbel]

Do you mind sharing a screenshot of the new dash UI?

[csujedihy]

[tojens-ietf]

Suggested change

NetBIOS over TCPIP (NetBT) is a legacy feature in Windows primarily used for name resolution in some rare scenarios (e.g., SMBv1). It has been deprecated for decades, but Windows has not removed or disabled it by default. Cloudflare WARP disables NetBT on the tunnel interface by default for security reasons and to align with modern best practices, as the vast majority of customers are not using anything requiring NetBIOS over the WARP tunnel.

NetBIOS over TCPIP (NetBT) is a legacy feature in Windows primarily used for name resolution in some rare scenarios (e.g., SMBv1). It has been deprecated for decades, but Windows has not removed it. Cloudflare WARP disables NetBT on the tunnel interface by default for security reasons and to align with modern best practices, as the vast majority of customers are not using anything requiring NetBIOS over the WARP tunnel.

This gets tricky, as they did disable NetBIOS Name Resolution (NBNR) by default -ish, and will probably make progress on this before we want to go check and update this page. I think this is a safer statement that still makes the point.

[ranbel]

edited version: #27369