Search <book_title>...

Veritas Data Insight Administrator's Guide

Last Published: 2020-07-14

Product(s): Data Insight (6.1.5)

Preparing the NetApp filer for Fpolicy

The Veritas Data Insight Fpolicy server registers with the NetApp filer and receives file access events from it. Fpolicy must be enabled and configured on that NetApp filer. Veritas recommends that you automatically configure FPolicy on the filer to enable auditing when adding filers.

However if you want more control on the shares you want to monitor use the manual steps. The manual steps are valid for NetApp ONTAP version 7.0 and higher.

Note:

The steps below assume that the name of the policy is matpol.

To configure the Fpolicy on the NetApp filer using manual steps

Launch a Telnet session with the filer and run the following commands, as appropriate:
- To create a policy:
```
fpolicy create matpol screen
```
- To enable a policy:
```
fpolicy enable matpol -f
```

Use the following optional commands for monitoring:

To set the Fpolicy for CIFS to monitor specific events:

fpolicy mon add matpol -p cifs -f write, 
open,close,delete,rename,create

To set the Fpolicy for NFS to monitor specific events:

fpolicy mon add matpol -p nfs -f create,delete,rename,write,
open,link,symlink,setattr

To monitor specific events on NetApp filer versions 7.3 or higher:

Enable set attributes operation:

fpolicy mon options cifs_setattr on - add mon

fpolicy mon options nfs_setattr on - add

Add events to be monitored:

fpolicy mon add matpol -p cifs -f write, 
open,close,delete,rename,create,setattr

fpolicy mon add matpol -p nfs -f create,delete,rename,write,
open,link,symlink,setattr

To see details of a configured policy:
```
fpolicy show matpol 
```

To disable monitoring of specific events:

fpolicy mon remove matpol -p cifs -f write, 
open,close,delete,rename,create

fpolicy mon remove matpol -p nfs -f create,delete,rename,write,
open,link,symlink,setattr

To disable use of a policy:
```
fpolicy disable matpol
```
To delete a policy:
```
fpolicy destroy matpol
```

To add a domain user to the administrator's group:
```
useradmin domainuser add domain-username 
-g Administrators
```
Note:
The domain user is the user who is configured to run the Fpolicy service on the collector.
To configure a non-administrator user:
To display a list of users who are already configured:
```
useradmin domainuser list -g Administrators
```
A list with the SIDs of the configured domain users appears. To resolve the SIDs, run the following command:
```
cifs lookup SID
```

More Information

Adding filers

Preparing a non-administrator domain user on the NetApp filer for Data Insight

Configuring SMB signing