在没有用户交互的情况下意外禁用Varonis Fpolicy
适用场景
- ONTAP 9
- Fpolicy
- Varonis Datadvantage
问题描述
- Varonis DatAdvantage 未收到新的审核事件 、并且已在SVM中禁用Varonis FPolicy
- 未收到用于在禁用Fpolicy后启用Fpolicy的ZAPI调用:
示例(audy-mLOG.XML (AutoSupport)或security audit log show
):
[kern_audit:info:2041] 8503e800001089e7 :: Node01:ontapi :: 10.100.100.180:59222 :: SVM01:Domain\Service-Varonis :: <netapp nmsdk_language="C" nmsdk_platform="Windows Server 2016 Standard AMD64" version="1.15" xmlns="http://www.netapp.com/filer/admin" nmsdk_version="5.3.1"><fpolicy-disable-policy><policy-name>Varonis</policy-name></fpolicy-disable-policy></netapp> :: Pending:
[kern_audit:info:2041] 8503e800001089e7 :: Node01:ontapi :: 10.100.100.180:59222 :: SVM01:Domain\Service-Varonis :: fpolicy-disable-policy :: Success:
注意: 在上述情况之后、未收到带有fpolicy-enable-policy
的条目