Skip to main content

Securing SMB access using export policies

You can optionally use export policies to restrict SMB access to files and folders on SVM volumes. You can use export policies in combination with share-level and file-level permissions to determine effective access rights.

  • How export policies are used with SMB access
    If export policies for SMB access are enabled on the CIFS server, export policies are used when controlling access to SVM volumes by SMB clients. To access data, you can create an export policy that allows SMB access and then associate the policy with the volumes containing SMB shares.
  • How export rules work
    Export rules are the functional elements of an export policy. Export rules match client access requests to a volume against specific parameters you configure to determine how to handle the client access requests.
  • Examples of export policy rules that restrict or allow access over SMB
    The examples show how to create export policy rules that restrict or allow access over SMB on an SVM that has export policies for SMB access enabled.
  • Enabling or disabling export policies for SMB access
    You can enable or disable export policies for SMB access on storage virtual machines (SVMs). Using export policies to control SMB access to resources is optional.