Define fpolicy exceptions for individual folders

sanadmin_do — Wed, 04 Jun 2025 11:04:23 GMT

We use the fpolicy configurator (version 1.0 of 2016) to exclude file extensions on SVM's. In the past, we have repeatedly had the requirement that we have to release individual file extensions for certain directories so that users can store files there. So far we have done this (quite elaborately) using the following method: Create a share from the affected directory, then create a new group of file extensions in which the file extension is missing, the file of which is to be stored in the directory. This group is then assigned to the volume in which the directory is located using fpolicy commands. All other volumes of the SVM then get the group with all locked file extensions.
Our question now is: is there an easier way to remove an extension for certain directories? Is there a tool if necessary? I hope I was able to convey our concerns clearly. If necessary, I can also provide our procedure using the commands used.

Re: Define fpolicy exceptions for individual folders

ttran — Wed, 05 Aug 2020 05:41:56 GMT

Hi Sanadmin_do,

Have you tried setting these advanced settings in the policy listed below to disable extension checks:

[-is-file-extension-check-on-directories-enabled {true|false}] - Is File Extension Check on Directories Enabled (privilege: advanced)If you specify this parameter, the command displays scope information only about the FPolicy policy or policies that use the specified file extension check on directories. If set to true, the command displays information about scopes where file extension checks on directories is enabled. If set to false, the command displays information about scopes where file extension checks on directories is disabled.

[-is-monitoring-of-objects-with-no-extension-enabled {true|false}] - Is Monitoring of Objects with No Extension Enabled (privilege: advanced)If you specify this parameter, the command displays scope information only about the FPolicy policy or policies that use the specified monitoring of objects with no extension setting. If set to true, the command displays information about scope of policy or policies for which monitoring of objects with no extension is enabled.

For your reference:

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.dot-cm-cmpr-900/vserver__fpolicy__policy__scope__modify.html

Regards,

Team NetApp

topic Define fpolicy exceptions for individual folders in ONTAP Discussions

Define fpolicy exceptions for individual folders

Re: Define fpolicy exceptions for individual folders