fpolicy block on full filename | NetApp | Page 1

wicked glade Sep 11, 2025, 12:25 AM

#

Is there any way to block access to a specific filename, not just by extension?

I have a need to block desktop.ini via cifs.

vale cobalt Sep 11, 2025, 6:52 AM

#

not with internal fpolicy. with an external fpolicy engine this might be possible (depending on the software/implementation)

wicked glade Sep 11, 2025, 2:58 PM

#

that's a real shame, seems like a great feature to be added. I am guessing I will create a nightly cronjob to remove them from my linux machine that has the share mounted.

wicked glade Sep 11, 2025, 3:49 PM

#

I found this document: https://www.netapp.com/pdf.html?item=/media/16891-tr-4453pdf.pdf the link to the external server is defunct site. Is there a list of external fpolicy engines?

vale cobalt Sep 11, 2025, 4:41 PM

#

Personally I only know of Varonis and Cleondris

harsh belfry Sep 11, 2025, 10:34 PM

#

Netwrix maybe

wicked glade Sep 11, 2025, 11:34 PM

#

thanks, I found a couple others. To bad netapp doesn't have a list like they do for vscan vendors.

wicked glade Sep 11, 2025, 11:55 PM

#

if it's in the same sentence as Varonis, I can imagine how much Cleondris is 😄

vale cobalt Sep 12, 2025, 6:59 AM

#

From what I heard, Varonis is easily the most expensive one out there

full saddle Sep 12, 2025, 7:46 AM

#

Prolion.com is also an option

wicked glade Sep 12, 2025, 5:51 PM

#

vale cobalt From what I heard, Varonis is easily the most expensive one out there

Yes, I have done 7 POC's with Varonis and 6 of them failed. Their product could not stay connected to the fpolicy server. Nobody on their team had a clue about how it worked.

#fpolicy block on full filename