Varonis Fpolicy is being unexpectedly disabled without user interaction
Applies to
- ONTAP 9
- Fpolicy
- Varonis DatAdvantage
Issue
- Varonis DatAdvantage does not receive new audit events and Varonis FPolicy is disabled in the SVM
- ZAPI call for enabling Fpolicy after disabling it not received:
Example (AUDIT-MLOG.XML (AutoSupport) or security audit log show
):
[kern_audit:info:2041] 8503e800001089e7 :: Node01:ontapi :: 10.100.100.180:59222 :: SVM01:Domain\Service-Varonis :: <netapp nmsdk_language="C" nmsdk_platform="Windows Server 2016 Standard AMD64" version="1.15" xmlns="http://www.netapp.com/filer/admin" nmsdk_version="5.3.1"><fpolicy-disable-policy><policy-name>Varonis</policy-name></fpolicy-disable-policy></netapp> :: Pending:
[kern_audit:info:2041] 8503e800001089e7 :: Node01:ontapi :: 10.100.100.180:59222 :: SVM01:Domain\Service-Varonis :: fpolicy-disable-policy :: Success:
Note: An entry with fpolicy-enable-policy
was not received after the above