fpolicy help [ <cmd> ]
fpolicy create <PolicyName> <PolicyType>
fpolicy destroy <PolicyName>
fpolicy disable <PolicyName>
fpolicy enable <PolicyName> [-f]
fpolicy extensions { include | exclude } [ reset <Policy_Name> | set <PolicyName> ext-list | add <PolicyName> ext_list | remove <PolicyName> ext-list ]
fpolicy options <PolicyName> [required [ on | off ] | secondary_servers [ <server-list> ]]
fpolicy servers [stop <PolicyName> server-IP-address show <PolicyName> ]
fpolicy show <PolicyName>
fpolicy help [ <cmd> ]
Displays information about specific commands available in
the fpolicy subsystem of the filer. A list of commands, or
syntax for a specific command, can be obtained.
fpolicy create <PolicyName> <PolicyType> Creates a new policy. Policy names must be unique. The only file policy type supported is "screen" (file screening).
fpolicy destroy <PolicyName>
Destroys an existing policy.
fpolicy disable <PolicyName>
Disables a policy.
fpolicy enable <PolicyName> [-f]
Enables a policy. The -f force flag forces the policy to
be enabled even if there are no servers available to
enforce the policy.
fpolicy extensions { include | exclude } [ reset | set ext-list | add ext-list | remove ext-list ] ext-list is a comma separated list of three-letter file extensions. The include list determines if a given file should be screened. The exclude list determines if a given file should not be screened. If an extension is listed on both the exclude and the include list, then files with that extension are not screened. If an extension is not listed on either the include list or the exclude list, then files with that extension are not screened. The character ? is a wild card. It matches any single character or no character. For example, putting C?? into the extension list would cause the filer to screen the files ABC.C, ABC.CPP, ABC.C++ and so on.
fpolicy extensions { include | exclude } PolicyName Displays the current file extension list.
fpolicy extensions { include | exclude } reset PolicyName Restores the file extension list to a default list provided by Network Appliance.
fpolicy extensions { include | exclude } set PolicyName
ext-list
Specifies a new extension list which replaces the current
list.
fpolicy extensions { include | exclude } add PolicyName
ext-list
Adds new entries to the current file extension list.
fpolicy extensions { include | exclude } remove PolicyName
ext-list
Removes entries from the current file extension list.
fpolicy options PolicyName
Displays the current values of the file policy options.
fpolicy options PolicyName required [ on | off ] Displays the current setting for the required option. If set to "on", access to files is denied if a file policy server is not available to implement the policy. If set to "off", file operations are allowed even if it is not possible to apply the policy to the file because no file policy server is available.
fpolicy options PolicyName secondary_servers [ <server
list> ]
Displays the current setting for the secondary_servers
option. If a comma-separated list of IP addresses is provided,
then the current list is replaced by the new list.
The filer avoids the use of secondary servers to enforce
file policies unless there are no primary servers available.
fpolicy servers [ show PolicyName | stop PolicyName scan_ner-IP-address Displays a list of scanning clients which have offered to apply file policies for the filer, or terminates the connection to a specified scanning client.