跳转到主内容

在没有用户交互的情况下意外禁用Varonis Fpolicy

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

  • ONTAP 9
  • Fpolicy
  • Varonis Datadvantage

问题描述

  • Varonis DatAdvantage 未收到新的审核事件 、并且已在SVM中禁用Varonis FPolicy
  • 未收到用于在禁用Fpolicy后启用Fpolicy的ZAPI调用:

示例(audy-mLOG.XML (AutoSupport)或security audit log show ):

[kern_audit:info:2041] 8503e800001089e7 :: Node01:ontapi :: 10.100.100.180:59222 :: SVM01:Domain\Service-Varonis :: <netapp nmsdk_language="C" nmsdk_platform="Windows Server 2016 Standard AMD64" version="1.15" xmlns="http://www.netapp.com/filer/admin" nmsdk_version="5.3.1"><fpolicy-disable-policy><policy-name>Varonis</policy-name></fpolicy-disable-policy></netapp> :: Pending: 

[kern_audit:info:2041] 8503e800001089e7 :: Node01:ontapi :: 10.100.100.180:59222 :: SVM01:Domain\Service-Varonis :: fpolicy-disable-policy :: Success: 

注意:  在上述情况之后、未收到带有fpolicy-enable-policy 的条目