FPolicy is a NetApp ONTAP framework designed for file access monitoring and management. It enables an administrator to create policies that monitor file operations (such as open, read, write, and close) on specific volumes or qtrees (folders). When a monitored event occurs, ONTAP sends a notification to an external FPolicy server. This server can then log the access event, creating a detailed audit trail for security and compliance purposes. This directly addresses the requirement to track file access within a specific folder from the storage system.

A. Implement a Vscan solution.

Vscan is an antivirus solution that scans files for malware upon access. Its primary purpose is threat prevention, not generating a detailed audit log of user access activity.

B. Use a cron job to save the audit log.

A cron job is a scheduler. It can be used to manage or archive existing log files, but it does not generate the audit data itself. This option presumes an auditing mechanism is already in place.

C. Use role-based access control to track access.

Role-Based Access Control (RBAC) is a security mechanism for controlling who can access what. It is used for authorization, not for auditing or tracking successful access events.

1. NetApp ONTAP 9 Documentation - FPolicy concepts:

"FPolicy is a file access notification framework that enables you to monitor and manage file access activity on your storage virtual machine (SVM)... FPolicy solutions are used for a variety of purposes

including file access auditing

file blocking

hierarchical storage management (HSM)

and data protection."

Source: NetApp ONTAP 9 Documentation Center

"SMB/CIFS and NFS management

" Section: "FPolicy concepts."

2. NetApp Technical Report TR-4453 - FPolicy for ONTAP:

"FPolicy is a feature of NetApp ONTAP data management software that monitors file operations on NetApp storage and can take actions based on the nature of the event... A common use case for FPolicy is to audit file access. In this scenario

the FPolicy server receives notifications from ONTAP and writes them to a log file or a database."

Source: NetApp TR-4453

"FPolicy for ONTAP

" Page 5

Section 1.2 "Use Cases."

3. NetApp ONTAP 9 Documentation - Antivirus scanning concepts:

"Antivirus scanning protects your data from being compromised by viruses or other malicious code. You can configure your Storage Virtual Machine (SVM) to use an external antivirus server to check for viruses when clients access files over SMB or NFS."

Source: NetApp ONTAP 9 Documentation Center

"Security and data encryption

" Section: "Antivirus scanning concepts." (This reference clarifies the purpose of Vscan

distinguishing it from auditing).