Managing file policies

Displaying file policy information

To display file policy information, complete the following step.

Step	Action
1	Enter the following command: `fpolicy show` PolicyName Use `default` as the policy name for the default NetApp file screening policy. Currently, `default` is the only supported policy name.

Example of file screening policy information display

Following is an example of the information display for a file policy.

File policy default file screening is enabled.

File screen servers      Connect time   Reqs   Fails

-------------------------------------------------------

10.34.18.70 \\SCREEN1      00:00:05     1032     0

Operations monitored: File Open, File Create, File Rename.

List of extensions not to screen:

EXE, DOC

Number of files screened: 1032

Number of failures: 0

How the file screening policy specifies which files to screen

The file screening policy specifies which files to screen using a list of file extensions to exclude from screening. The default list of excluded file extensions is empty. This means that by default all files with any type of extension are screened by the file screening server before they can be opened, created, or renamed.

From the command line, you can display or change the list of excluded file extensions.

Displaying the list of excluded file extensions

To display the list of excluded file extensions, complete the following step.

Step	Action
1	Enter the following command: fpolicy ext[ensions] excl[ude] show PolicyName Use `default` as the policy name for the default NetApp file screening policy. Currently, `default` is the only supported policy name.

Excluding file extensions from file screening

To add file extensions to the list of excluded file extensions, complete the following step.

Step	Action
1	Enter the following command: *fpolicy ext[ensions] excl[ude] add PolicyName* ext[,ext]... Use `default` as the policy name for the default NetApp file screening policy. Currently, `default` is the only supported policy name. Example fpolicy ext excl add default doc,exe,txt Result Doc, exe, and txt are added to the current list of extensions not to screen. Note** The default list of excluded extensions is empty, so all files are screened by default.

Step

Action

Enter the following command:

fpolicy ext[ensions] excl[ude] add PolicyName 
ext[,ext]...

Use default as the policy name for the default NetApp file screening policy. Currently, default is the only supported policy name.

Example

fpolicy ext excl add default doc,exe,txt

Result

Doc, exe, and txt are added to the current list of extensions not to screen.

Note
The default list of excluded extensions is empty, so all files are screened by default.

Removing file extensions from the list of excluded extensions

To remove file extensions from the list of excluded file extensions, complete the following step.

Step	Action
1	Enter the following command: *fpolicy ext[ensions] excl[ude] remove PolicyName ext[,ext]...* Use `default` as the policy name for the default NetApp file screening policy. Currently, `default` is the only supported policy name. Example fpolicy ext excl remove default wav Result Files with a .wav extension are screened.

Step

Action

Enter the following command:

fpolicy ext[ensions] excl[ude] remove PolicyName 
ext[,ext]...

Use default as the policy name for the default NetApp file screening policy. Currently, default is the only supported policy name.

Example

fpolicy ext excl remove default wav

Result

Files with a .wav extension are screened.

Resetting default file screening of all files

To reset to the default file screening of all files, complete the following step.

Step	Action
1	Enter the following command: fpolicy ext[ensions] excl[ude] reset PolicyName Use `default` as the policy name for the default NetApp file screening policy. Currently, `default` is the only supported policy name. Result The list of excluded file extensions is reset to the default empty list, so no file extensions are exempted; therefore, all files are screened.

Step

Action

Enter the following command:

fpolicy ext[ensions] excl[ude] reset PolicyName

Use default as the policy name for the default NetApp file screening policy. Currently, default is the only supported policy name.

Result

The list of excluded file extensions is reset to the default empty list, so no file extensions are exempted; therefore, all files are screened.

Replacing the list of excluded file extensions

To replace the entire existing list of excluded file extensions, complete the following step.

Step	Action
1	Enter the following command: *fpolicy ext[ensions] excl[ude] set PolicyName* ext[,ext...] Use `default` as the policy name for the default NetApp file screening policy. Currently, `default` is the only supported policy name. Result The new list of extensions you enter with this command replaces the existing list of excluded extensions so that only the new extensions are excluded from screening. Note** If you don't want any files to be screened, use ??? for ext as a wildcard for "all extensions" or, alternatively, you can disable the file screening policy.

Step

Action

Enter the following command:

fpolicy ext[ensions] excl[ude] set PolicyName 
ext[,ext...]

Use default as the policy name for the default NetApp file screening policy. Currently, default is the only supported policy name.

Result

The new list of extensions you enter with this command replaces the existing list of excluded extensions so that only the new extensions are excluded from screening.

Note
If you don't want any files to be screened, use ??? for ext as a wildcard for "all extensions" or, alternatively, you can disable the file screening policy.

Requiring file screening for file access

To require files to be screened before they can be accessed, complete the following step.

Step	Action
1	Enter the following command: fpolicy options default required on Note If you turn on required file screening and no file screening servers are available, file access will be denied. This command is set to Off by default, that is, the default file policy does not require file screening for file access.

Step

Action

Enter the following command:

fpolicy options default required on

Note
If you turn on required file screening and no file screening servers are available, file access will be denied. This command is set to Off by default, that is, the default file policy does not require file screening for file access.