Skip to main content
NetApp Knowledge Base

Search

  • Filter results by:
    • View attachments
    Searching in
    About 57 results
    • Stealthbits fpolicy stops responding after receiving a negotiate request
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Stealthbits_fpolicy_stops_responding_after_receiving_a_negotiate_request
      Stealthbits fpolicy Stealthbits fpolicy server stops responding normally TCP connections to the fpolicy service port (default TCP/9999) are accepted ONTAP creates a connection to Stealthbits, but gets...Stealthbits fpolicy Stealthbits fpolicy server stops responding normally TCP connections to the fpolicy service port (default TCP/9999) are accepted ONTAP creates a connection to Stealthbits, but gets no application-level response ONTAP → SYN → Stealthbits Stealthbits → SYN/ACK → ONTAP ONTAP → ACK → Stealthbits ONTAP → Negotiate Request (fpolicy) → Stealthbits No response from Stealthbits for thousand of milliseconds Since Stealthbits server is not responding, ONTAP closes the connection
    • Unable to delete FPolicy policy
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Unable_to_delete_FPolicy_policy
      Applies to ONTAP 9 Issue Active FPolicy policies show up with a number instead of a name and the policy cannot be deleted cluster-01::> vserver fpolicy show-enabled Vserver Policy Name Priority ------...Applies to ONTAP 9 Issue Active FPolicy policies show up with a number instead of a name and the policy cannot be deleted cluster-01::> vserver fpolicy show-enabled Vserver Policy Name Priority ----------------------- ------------------------------ ---------- SOME_SVM_NAME 4294967294 1 SOME_SVM_NAME SomePolicy 2 cluster-01::> vserver fpolicy disable -vserver SOME_SVM_NAME -policy-name 4294967294 Error: command failed: The policy "4294967294" does not exist.
    • Error: Can’t read from source file or disk with fpolicy enabled
      https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/Error__Can_t_read_from_source_file_or_disk_with_fpolicy_enabled
      Applies to Product Model: FAS OS: Clustered Data ONTAP 8.2 Issue When opening, reading or writing to large files with fpolicy enabled the following errors might be reported: Can’t read from source fil...Applies to Product Model: FAS OS: Clustered Data ONTAP 8.2 Issue When opening, reading or writing to large files with fpolicy enabled the following errors might be reported: Can’t read from source file or disk An unexpected error is keeping you from copying the file . If you continue to receive this error, you can use the error code to search for help with this problem. Error 0c8007054F: An internal error occurred
    • Can Storage Workload Security attack detection exclude specific paths or user?
      https://kb.netapp.com/Cloud/BlueXP/DII/Can_Storage_Workload_Security_attack_detection_exclude_specific_paths_or_user
      Applies to Data Infrastructure Insights (DII) Storage Workload Security Answer No, DII Storage Workload Security attack detection (Ransomware Attack or Data Destruction - File Deletion) cannot exclude...Applies to Data Infrastructure Insights (DII) Storage Workload Security Answer No, DII Storage Workload Security attack detection (Ransomware Attack or Data Destruction - File Deletion) cannot exclude specific paths or users. Additional Information additionalInformation_text
    • What is new in ONTAP 9.8 Shared Memory Implementation for FPolicy?
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/What_is_new_in_ONTAP_9.8_Shared_Memory_Implementation_for_FPolicy
      Netapp dramatically improved Fpolicy performance in 9.8 and above releases by implementing a new Shared Memory Implementation for Fpolicy This change improved internal ONTAP Fpolicy performance by all...Netapp dramatically improved Fpolicy performance in 9.8 and above releases by implementing a new Shared Memory Implementation for Fpolicy This change improved internal ONTAP Fpolicy performance by allowing ONTAP to be able to process more inbound IOPS processing when Fpolicy is enabled When Fpolicy is enabled, this new implementation helps to avoid performance degradation for NFS and CIFS workloads both on throughput and latency
    • Varonis Fpolicy is being unexpectedly disabled without user interaction
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Varonis_Fpolicy_is_being_unexpectedly_disabled_without_user_interaction
      Varonis DatAdvantage does not receive new audit events and Varonis FPolicy is disabled in the SVM [kern_audit:info:2041] 8503e800001089e7 :: Node01:ontapi :: 10.100.100.180:59222 :: SVM01:Domain\Servi...Varonis DatAdvantage does not receive new audit events and Varonis FPolicy is disabled in the SVM [kern_audit:info:2041] 8503e800001089e7 :: Node01:ontapi :: 10.100.100.180:59222 :: SVM01:Domain\Service-Varonis :: <netapp nmsdk_language="C" nmsdk_platform="Windows Server 2016 Standard AMD64" version="1.15" xmlns="http://www.netapp.com/filer/admin" nmsdk_version="5.3.1"><fpolicy-disable-policy><policy-name>Varonis</policy-name></fpolicy-disable-policy></netapp> :: Pending:
    • High sustained latency after ONTAP upgrade to 9.8 and above due to FPolicy EAGAIN
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/High_sustained_latency_after_ONTAP_upgrade_to_9.8_and_above_due_to_FPolicy_EAGAIN
      Applies to ONTAP 9 CIFS / NFS protocols FPolicy Issue High sustained latency after ONTAP upgrade to 9.8 and degradation on multiple shares or exports Disable Fpolicy resolves unexpected high latency E...Applies to ONTAP 9 CIFS / NFS protocols FPolicy Issue High sustained latency after ONTAP upgrade to 9.8 and degradation on multiple shares or exports Disable Fpolicy resolves unexpected high latency Ensure each node has a LIF per VServer and fix any connection issues with ONTAP and the FPolicy server
    • ActiveIQ Digital Advisor risk summary shows unexpected warning about fpolicy not enabled
      https://kb.netapp.com/data-mgmt/Digital-Advisor-KBs/ActiveIQ_Digital_Advisor_risk_summary_shows_unexpected_warning_about_fpolicy_not_enabled
      Applies to ActiveIQ Digital Advisor (AIQDA) ONTAP System Manager (OSM) ONTAP 9.7+ Issue AIQDA shows the Risk FPolicy is not enabled for all vservers configured for NAS protocols The risk is shown whil...Applies to ActiveIQ Digital Advisor (AIQDA) ONTAP System Manager (OSM) ONTAP 9.7+ Issue AIQDA shows the Risk FPolicy is not enabled for all vservers configured for NAS protocols The risk is shown while the protocols are not configured in OSM or if protocol is configured but fpolicy is NOT configured on the Vserver
    • FPolicy causing Nblade.vscanBadIPPrivAccess warnings
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/FPolicy_causing_Nblade.vscanBadIPPrivAccess_warnings
      Applies to ONTAP 9 FPolicy Vscan Issue False events for "Nblade.vscanBadIPPrivAccess" when FPolicy is enabled Tue Feb 15 05:54:34 +0100 [CLUSTER_01: kernel: Nblade.vscanBadIPPrivAccess:error]: For Vse...Applies to ONTAP 9 FPolicy Vscan Issue False events for "Nblade.vscanBadIPPrivAccess" when FPolicy is enabled Tue Feb 15 05:54:34 +0100 [CLUSTER_01: kernel: Nblade.vscanBadIPPrivAccess:error]: For Vserver "svm1", the attempt to connect to the privileged ONTAP_ADMIN$ share by the client "10.10.0.25" is rejected because its IP or hostname is not configured in any of the Vserver active scanner pools. The IP Address from the above error is for the FPolicy server
    • FPolicy: What is it and what does it do?
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/FPolicy_What_is_it_and_what_does_it_do
      When there is a user or application access to a reference file, the dg file migration adapter automatically initiates a recall operation, and the reference file is replaced with the original file. The...When there is a user or application access to a reference file, the dg file migration adapter automatically initiates a recall operation, and the reference file is replaced with the original file. Therefore, in a scenario where the SVM extends over multiple nodes or if both IPv4 and IPv6 addresses are present, the FPolicy server must be ready for multiple control channel setup requests from the cluster after the FPolicy policy is enabled on the SVM.
    • SVM unable to connect to FPolicy Server because SSL was not enabled
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/SVM_unable_to_connect_to_FPolicy_Server_because_SSL_was_not_enabled
      fpolicy: fpolicy.server.disconnect:error]: Connection to the FPolicy server "10.10.10.75" is broken ( reason: "Send request to FPolicy server failed." ). Connection to the FPolicy server "10.10.10.75"...fpolicy: fpolicy.server.disconnect:error]: Connection to the FPolicy server "10.10.10.75" is broken ( reason: "Send request to FPolicy server failed." ). Connection to the FPolicy server "10.10.10.75" is broken ( reason: "Error encountered while sending a message to FPolicy to FPolicy server." ). When connection attempt is initiated from the FPolicy Server side, NetApp doesn't respond to the TLS Hello from the fpolicy server and requests TCP connection closure.