Overview of NetApp CMode/cluster/Vserver CIFS server auditing

A NetApp cluster is a storage system that consists of one or more nodes grouped together (as HA pairs) and runs on NetApp's proprietary operating system, ONTAP. Clusters allow resource pooling and enhance scalability. As a single management entity, they enable easier administration of enterprise storage.

ManageEngine ADAudit Plus is a real-time, UBA-driven change auditor that can monitor the CIFS file-based protocols over a network by scheduling reports and triggering email or SMS alerts for critical events. This helps ensure data security and streamlines compliance with regulations like HIPAA, FISMA, the GDPR, and SOX.

Supported versions

ADAudit Plus can audit the ONTAP versions below:

• NetApp ONTAP 8.2.1 and above

Audited events

ADAudit Plus audits every attempt to perform these file activities in NetApp cluster storage:

1. Create
2. Read
3. Modify
4. Write
5. Delete
6. Change file permissions
7. Rename
8. Move

This guide provides steps to configure change auditing in your NetApp CMode/cluster/Vserver using ADAudit Plus.