How to create fploicy to limite only txt file?

AllenChang — Tue, 02 Jul 2024 06:18:10 GMT

I create a fpolicy to limited a volume can be store .txt file

I use this command

First I create a event

filer>vserver fpolicy policy event create -vserver fpsvm1 -event-name event1 -file-operations create,write,rename -protocol cifs

Than I create a policy

filer>vserver fpolicy policy create -vserver fpsvm1 -policy-name policy1 -events event1 -engine native -is-mandatory true -allow-privileged-access no -is-passthrough-read-enabled false

And I create a scope

filer>vserver fpolicy policy scope create -vserver fpsvm1 -policy-name policy1 -file-extensions-to-exclude txt -volumes-to-include vol1

finially I enable the policy

filer>vserver fpolicy enable -vserver fpsvm1 -policy-name policy1 -sequence-number 1

but I found the volume still can store any file

How must I modify configuration?

Re: How to create fploicy to limite only txt file?

ChLokesh — Tue, 02 Jul 2024 13:24:26 GMT

Hello,

While creating the scope, we had used the option -file-extensions-to-exclude.
This parameter specifies list of file extensions for which FPolicy processing will be excluded.

Please modify the scope and use option -file-extensions-to-include txt in place of -file-extensions-to-exclude to make Fpolicy process this file extension.

Here is the matching KB for your reference: https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/How_to_configure_native_Fpolicy_in_ONTAP_to_block_extensions

Please do let me know if it fixed the issue for you.

Cheers!

topic How to create fploicy to limite only txt file? in ONTAP Discussions

How to create fploicy to limite only txt file?

Re: How to create fploicy to limite only txt file?