How ONTAP SLAG can be used to expedite application of SACLs for CIFS auditing
Applies to
- ONTAP 9
- ntfs security-style
- Storage-Level Access Guard (SLAG)
- SACLs (perms to define CIFS auditing)
Issue
- In order to meet the requirements for CIFS auditing, a SACL must be present
- Files and directories to be monitored must have an SACL ACE matching any user and operation for which monitoring is desired
- Application of the SACLs may be accomplished via updates to the file-level permissions
- This can be time consuming, since time required to perform recursive permission updates scales with the number of objects in the directory tree
