Understanding file screening

File screening in Data ONTAP

File screening in Data ONTAP is the coordination of a Data ONTAP file screening policy with file screening software. The Data ONTAP file screening policy is set on a filer and specifies the types of CIFS files you want to screen. The file screening software runs on a client that functions as a file screening server.

Prerequisite for file screening

Before you use file screening, you need to obtain client file screening software that works with Data ONTAP. You can check for client file screening software on the NetApp Partners page at http://www.netapp.com/partners/.

About file policies

A file policy determines how the filer handles requests from individual client systems for operations such as open, rename, and create. The filer maintains a set of properties for a file policy, including, for example, the policy name and whether the policy is active. You can set these properties for the file policy using console commands on the filer.

The only file policy supported on NetApp filers is file screening for CIFS access. The only policy name supported is "default."

How file screening works

You use the file screening policy to specify that certain types of CIFS files are screened before they can be opened, created, or renamed. For example, you might use file screening to block users from creating audio or graphics files by specifying that audio and graphics files be screened.

Once your policy is set, when the filer receives a request to open, create, or rename a file, the filer checks its file screening policy. If the policy specifies screening for that file based on its extension, the file name is sent to the file screening server to be screened. The file screening server applies policies to the file name to determine whether the filer should allow the requested file operation. The file screening server then sends a response to the filer to either allow or block the requested file operation.