Network and Storage Protocols
I would like to limit user to store some file extension (just like mp3, etc). I find the solution is to use fpolicy by CLI but how to do it? Any other alternative like WebGUI to manage it? Is it apply all CIFS volume or dedicate volume/qtree?
here is an example of creating a native block.... I use doc and pdf as the extensions which wouldn't be typical...just for an example of multiple extensions..
fas3170*> options fpolfpolicy.enable onfpolicy.i2p_ems_interval 60fas3170*>
fas3170*> fpolicy create nativeblock screenFile policy nativeblock created successfully.
fas3170*> fpolicy ext inc set nativeblock doc,pdf
fas3170*> fpolicy options nativeblock required on
fas3170*> fpolicy monitor set nativeblock -p cifs,nfs create,renameWarning: User requests may be denied because there are no file screening servers registered with the filer. Are you sure? yes
fas3170*> fpolicy enable nativeblock -fMon Mar 16 14:35:00 PDT last message repeated 2 timesMon Mar 16 14:37:44 PDT [fas3170: fpolicy.fscreen.enable:info]: FPOLICY: File policy nativeblock (file screening) is enabled.File policy nativeblock (file screening) is enabled.
All volumes are on by default... to turn on/off a volume... see below to turn off for a volume...
fas3170*> fpolicy vol exc set nativeblock test
fas3170*> fpolicy vol inc show nativeblockList of volume specifications to screen: List empty - All volumes are being monitored.
fas3170*> fpolicy vol exc show nativeblockList of volume specifications not to screen: test
how do I block *.catpart and *.igs from saving to my filers using fpolicy? I run ontab 8.1.3
Let's walk you through the new & improved Knowledge Base and further enrich your experience with NetApp Products.
Join our Discord Community