Recently upgraded from DOT 7.3.1 to 7.3.3 and now trying to deploy fpolicy to block mp3 file uploads to our primary CIFS storage. Have followed the instructions outlined in http://now.netapp.com/NOW/knowledge/docs/ontap/rel801/html/ontap/filesag/GUID-0DAD7887-2918-47A3-A8AE-70D3F5308C73.html but appears the policy is not being enforced. Have run through the steps several times and double/triple-checked our v3140's configuration, but still no luck. Hopefully it's something simple. Output from the policy's config below: filer> fpolicy create Media screen File policy Media created successfully. filer> fpolicy ext inc set Media .mp3 filer> fpolicy monitor set Media -p cifs -f create,rename filer> fpolicy options Media required on filer> fpolicy enable Media -f Thu Feb 10 14:12:52 CST [hounas04: fpolicy.fscreen.enable:info]: FPOLICY: File policy Media (file screening) is enabled. File policy Media (file screening) is enabled. filer> ...then tried uploading various .mp3 files to filer, each of which succeeded. Then ran the below for the fpolicy: filer> fpolicy show Media File policy Media (file screening) is enabled. No file policy servers are registered with the filer. Operations monitored: File create,File rename Above operations are monitored for CIFS only List of extensions to screen: .MP3 List of extensions not to screen: Extensions-not-to-screen list is empty. Number of requests screened : 0 Number of screen failures : 0 Number of requests blocked locally : 0 Any advice is welcomed!
... View more