<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Using Fpolicy as a layer against Ransomware in ONTAP Discussions</title>
    <link>https://community.netapp.com/t5/ONTAP-Discussions/Using-Fpolicy-as-a-layer-against-Ransomware/m-p/158066#M35938</link>
    <description>&lt;P&gt;So im looking at setting up fpolicy to add in another layer to hopefully prevent Ransomware.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Netapp has a good blog article about it.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;A href="https://blog.netapp.com/fighting-ransomware-tools" target="_blank"&gt;https://blog.netapp.com/fighting-ransomware-tools&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;My question is looking around there seems to be about 4000 rough known&lt;/P&gt;
&lt;P&gt;extensions now.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;looking a the command to add in extensions&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;vserver fpolicy policy scope create -vserver svm1 -policy-name blacklist_-file-extensions-to-include WNCRY,locky&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;is there a way we could tell FPolicy to use a file as the list ??&lt;/P&gt;</description>
    <pubDate>Wed, 04 Jun 2025 10:59:00 GMT</pubDate>
    <dc:creator>Greg_Wilson</dc:creator>
    <dc:date>2025-06-04T10:59:00Z</dc:date>
    <item>
      <title>Using Fpolicy as a layer against Ransomware</title>
      <link>https://community.netapp.com/t5/ONTAP-Discussions/Using-Fpolicy-as-a-layer-against-Ransomware/m-p/158066#M35938</link>
      <description>&lt;P&gt;So im looking at setting up fpolicy to add in another layer to hopefully prevent Ransomware.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Netapp has a good blog article about it.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;A href="https://blog.netapp.com/fighting-ransomware-tools" target="_blank"&gt;https://blog.netapp.com/fighting-ransomware-tools&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;My question is looking around there seems to be about 4000 rough known&lt;/P&gt;
&lt;P&gt;extensions now.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;looking a the command to add in extensions&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;vserver fpolicy policy scope create -vserver svm1 -policy-name blacklist_-file-extensions-to-include WNCRY,locky&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;is there a way we could tell FPolicy to use a file as the list ??&lt;/P&gt;</description>
      <pubDate>Wed, 04 Jun 2025 10:59:00 GMT</pubDate>
      <guid>https://community.netapp.com/t5/ONTAP-Discussions/Using-Fpolicy-as-a-layer-against-Ransomware/m-p/158066#M35938</guid>
      <dc:creator>Greg_Wilson</dc:creator>
      <dc:date>2025-06-04T10:59:00Z</dc:date>
    </item>
    <item>
      <title>Re: Using Fpolicy as a layer against Ransomware</title>
      <link>https://community.netapp.com/t5/ONTAP-Discussions/Using-Fpolicy-as-a-layer-against-Ransomware/m-p/158101#M35956</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Unfortunately, The fpolicy&amp;nbsp;feature blocks files based only on extension. You can check the TR below for any additional information needed:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;A href="https://www.netapp.com/us/media/tr-4429.pdf" target="_blank"&gt;https://www.netapp.com/us/media/tr-4429.pdf&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 31 Jul 2020 02:07:16 GMT</pubDate>
      <guid>https://community.netapp.com/t5/ONTAP-Discussions/Using-Fpolicy-as-a-layer-against-Ransomware/m-p/158101#M35956</guid>
      <dc:creator>hmoubara</dc:creator>
      <dc:date>2020-07-31T02:07:16Z</dc:date>
    </item>
  </channel>
</rss>

