Preparing the NetApp filer for Fpolicy


Preparing the NetApp filer for Fpolicy
Prev	Configuring NetApp file server monitoring	Next

The Symantec Data Insight Fpolicy server registers with the NetApp filer and receives file access events from it. Fpolicy has to be enabled and configured on that NetApp filer. Symantec recommends that you automatically enable auditing when adding filers.

However if you want more control on the shares you want to monitor use the manual steps. The manual steps are valid for Netapp ONTAP version 7.0 and higher.

Note:

The steps below assume that the name of the policy is matpol.

To configure the Fpolicy on the NetApp filer using manual steps

Launch a Telnet session with the filer and run the following commands, as appropriate:
- To create a policy:
```
fpolicy create matpol screen
```
- To enable a policy:
```
fpolicy enable matpol -f
```

Use the following optional commands for monitoring:

To set the Fpolicy for CIFS to monitor specific events:

fpolicy mon add matpol -p cifs -f write, 
open,close,delete,rename,create

To set the Fpolicy for NFS to monitor specific events:

fpolicy mon add matpol -p nfs -f create,delete,rename,write,
open,link,symlink,setattr

To monitor specific events on NetApp filer versions 7.3 or higher:

Enable set attributes operation:

fpolicy options cifs_setattr on

fpolicy options nfs_setattr on

Add events to be monitored:

fpolicy mon add matpol -p cifs -f write, 
open,close,delete,rename,create,setattr

fpolicy mon add matpol -p nfs -f create,delete,rename,write,
open,link,symlink,setattr

To see details of a configured policy:
```
fpolicy show matpol 
```

To disable monitoring of specific events:

fpolicy mon remove matpol -p cifs -f write, 
open,close,delete,rename,create

fpolicy mon remove matpol -p nfs -f create,delete,rename,write,
open,link,symlink,setattr

To disable use of a policy:
```
fpolicy disable matpol
```
To delete a policy:
```
fpolicy destroy matpol
```

To add a domain user to the administrator's group:
```
useradmin domainuser add domain-username 
-g Administrators
```
Note:

The domain user is the user who is configured to run the Fpolicy service on the collector.

To configure a non-administrator user:
To display a list of users who are already configured:
```
useradmin domainuser list -g Administrators
```
A list with the SIDs of the configured domain users appears. To resolve the SIDs, run the following command:
```
cifs lookup SID
```

Prev	Up	Next
Preparing Symantec Data Insight for Fpolicy	Home	Preparing the NetApp vfiler for Fpolicy