The FPolicy server receives a notification from the storage system for file delete operations.
When a file delete request is made by a CIFS or NFS client to the storage system, the storage system conducts all the relevant checks on the file. The relevant checks include checking permissions, checking if the file is available, checking if the file is being accessed by some other client, and so on. When the checks are complete and the file passes the check, the request notification is sent to the FPolicy server. The FPolicy server receives this request and allows or blocks the file delete request, based on the configuration of the policies.
The file delete operation should be added to the monitored operations list for the FPolicy server to receive a notification from the storage system. The file delete operation can be monitored using the CLI or ONTAPI. It can also be set by the FPolicy server using a bitmask.
To enable file extension-based screening, for NFS operations, set the no_i2p option to off on the volume. This enables the inode-to-path file name translation on the volume.