Managing native file blocking

Create a file policy as described in Managing file policies.

Example

To create a policy to prevent CIFS users from placing MP3 files on the storage system, enter the following commands:

fpolicy create mp3blocker screen

fpolicy ext inc set mp3blocker mp3

fpolicy options mp3blocker required on

Set the operations and protocols monitored by the policy using the fpolicy monitor command.

Example

Specify the create option to prevent creation of MP3 files. In addition, to ensure that an MP3 file is not copied onto the storage system with a different extension and renamed, also specify the rename option. Enter the following command:

fpolicy monitor set mp3blocker -p cifs create,rename

Ensure that the new policy is enabled as described in Enabling and disabling file screening.

Example

fpolicy enable mp3blocker -f

Result

When a user tries to create or rename a file with an MP3 extension, the operation fails. They might see a message indicating that the operation cannot be completed or that access is denied.