Skip to main content

SMB/CIFS and NFS Auditing and Security Tracing Guide

This document is available in PDF format:

SMB/CIFS and NFS Auditing and Security Tracing Guide PDF

  • Deciding whether to use the SMB/CIFS and NFS Auditing and Security Tracing Guide
    This guide describes the file access auditing features available for the SMB/CIFS and NFS protocols with ONTAP: native auditing and file policy management using FPolicy. It includes a conceptual overview, planning guidance, and detailed implementation instructions.
  • Auditing NAS events on SVMs
    Auditing for NAS events is a security measure that enables you to track and log certain CIFS and NFS events on storage virtual machines (SVMs). This helps you track potential security problems and provides evidence of any security breaches. You can also stage and audit Active Directory central access policies to see what the result of implementing them would be.
  • Using FPolicy for file monitoring and management on SVMs
    FPolicy is a file access notification framework that is used to monitor and manage file access events on storage virtual machines (SVMs).
  • Using security tracing to verify or troubleshoot file and directory access
    You can add permission tracing filters to instruct ONTAP to log information about why the SMB/CIFS and NFS servers on a storage virtual machine (SVM) allows or denies a client or user's request to perform an operation. This can be useful when you want to verify that your file access security scheme is appropriate or when you want to troubleshoot file access issues.
  • Where to find additional information
    After you have successfully tested CIFS client access, you can perform advanced CIFS configuration or add SAN access. After you have successfully tested NFS client access, you can perform advanced NFS configuration or add SAN access. When protocol access is complete, you should protect the root volume of SVM. There are express guides, comprehensive guides, and technical reports to help you achieve these goals.
  • Contacting Support
    You can contact Support to obtain help for your issue.
  • Notices
    Lenovo may not offer the products, services, or features discussed in this document in all countries. Consult your local Lenovo representative for information on the products and services currently available in your area.