Recently upgraded from DOT 7.3.1 to 7.3.3 and now trying to deploy fpolicy to block mp3 file uploads to our primary CIFS storage. Have followed the instructions outlined in
http://now.netapp.com/NOW/knowledge/docs/ontap/rel801/html/ontap/filesag/GUID-0DAD7887-2918-47A3-A8AE-70D3F5308C73.html
but appears the policy is not being enforced. Have run through the steps several times and double/triple-checked our v3140's configuration, but still no luck.
Hopefully it's something simple. Output from the policy's config below:
filer> fpolicy create Media screen
File policy Media created successfully.
filer> fpolicy ext inc set Media .mp3
filer> fpolicy monitor set Media -p cifs -f create,rename
filer> fpolicy options Media required on
filer> fpolicy enable Media -f
Thu Feb 10 14:12:52 CST [hounas04: fpolicy.fscreen.enable:info]: FPOLICY: File policy Media (file screening) is enabled.
File policy Media (file screening) is enabled.
filer>
...then tried uploading various .mp3 files to filer, each of which succeeded. Then ran the below for the fpolicy:
filer> fpolicy show Media
File policy Media (file screening) is enabled.
No file policy servers are registered with the filer.
Operations monitored:
File create,File rename
Above operations are monitored for CIFS only
List of extensions to screen:
.MP3
List of extensions not to screen:
Extensions-not-to-screen list is empty.
Number of requests screened : 0
Number of screen failures : 0
Number of requests blocked locally : 0
Any advice is welcomed!
