ONTAP Discussions

Block some files related to CryptoLocker from ONTAP shares

ErikSteffensen
1,801 Views

Hi

IHAC who wants to block some files related to CryptoLocker from ONTAP shares. It seems he can do that with native FPolicy, but they would like to be notified as well. Does anyone know if it's possible to find the block info in any log files and if it can be forwarded in any way?

Rgs Erik

1 ACCEPTED SOLUTION

hariprak
1,738 Views

Hi,

 

fpolicy & vscan have the ability to call out to 3rd party applications which are compatible, such as antivirus, change management systems, etc.
Internal engine functionality is limited to things like blocking certain extensions, or simple logging.

 

Please refer below links for more details


https://community.netapp.com/t5/Technology/FPolicy-in-Clustered-Data-ONTAP/ba-p/82687

 

https://www.reddit.com/r/sysadmin/comments/3m52l1/cryptolocker_file_screening_when_using_netapp_cifs/

 

Thanks

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.

View solution in original post

1 REPLY 1

hariprak
1,739 Views

Hi,

 

fpolicy & vscan have the ability to call out to 3rd party applications which are compatible, such as antivirus, change management systems, etc.
Internal engine functionality is limited to things like blocking certain extensions, or simple logging.

 

Please refer below links for more details


https://community.netapp.com/t5/Technology/FPolicy-in-Clustered-Data-ONTAP/ba-p/82687

 

https://www.reddit.com/r/sysadmin/comments/3m52l1/cryptolocker_file_screening_when_using_netapp_cifs/

 

Thanks

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.
Public