NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled. We're excited to launch our new Community experience on July 30 and more information will follow soon. Stay connected during the transition - Join our Discord community today.
Recently upgraded from DOT 7.3.1 to 7.3.3 and now trying to deploy fpolicy to block mp3 file uploads to our primary CIFS storage. Have followed the instructions outlined in http://now.netapp.com/NOW/knowledge/docs/ontap/rel801/html/ontap/filesag/GUID-0DAD7887-2918-47A3-A8AE-70D3F5308C73.html but appears the policy is not being enforced. Have run through the steps several times and double/triple-checked our v3140's configuration, but still no luck. Hopefully it's something simple. Output from the policy's config below: filer> fpolicy create Media screen File policy Media created successfully. filer> fpolicy ext inc set Media .mp3 filer> fpolicy monitor set Media -p cifs -f create,rename filer> fpolicy options Media required on filer> fpolicy enable Media -f Thu Feb 10 14:12:52 CST [hounas04: fpolicy.fscreen.enable:info]: FPOLICY: File policy Media (file screening) is enabled. File policy Media (file screening) is enabled. filer> ...then tried uploading various .mp3 files to filer, each of which succeeded. Then ran the below for the fpolicy: filer> fpolicy show Media File policy Media (file screening) is enabled. No file policy servers are registered with the filer. Operations monitored: File create,File rename Above operations are monitored for CIFS only List of extensions to screen: .MP3 List of extensions not to screen: Extensions-not-to-screen list is empty. Number of requests screened : 0 Number of screen failures : 0 Number of requests blocked locally : 0 Any advice is welcomed!
... View more