Need to block SMBv1 protocol

Hello All,

We have a requirement of Blocking SMBv1 Protocol from SEP Level.

Currently we are blocking SMBv1 from Windows Group Policy while allowing SMBv2 (More Secure).

Issue is that we have a lot of machines that are not part of our domain, and hence do not get Group policies.

We would like to block SMBv1 while keeping SMBv2 open from SEP client level itself.

They do use the same port 445, so not sure how to get this done.

Any Help would be appreciated.

Thanks

AJ