Applies to ONTAP 9 CIFS Auditing Answer By default, ONTAP does not audit, record, or log file access events via NAS protocols While it is possible to configure NAS auditing and/or Fpolicy for auditing...Applies to ONTAP 9 CIFS Auditing Answer By default, ONTAP does not audit, record, or log file access events via NAS protocols While it is possible to configure NAS auditing and/or Fpolicy for auditing, this must be configured prior to an access event Events can not retroactively be audited if an auditing configuration did not exist at the time of file access Additional Information NAS auditing - FAQ SMB and NFS auditing and security tracing FPolicy: What is it and what does it do?