Overview of NetApp filer auditing

NetApp filer network-attached storage (NAS) devices, also known as NetApp fabric-attached storage (FAS), are storage systems that use NetApp's proprietary operating system, ONTAP. A vFiler unit is a partition of a storage system and the associated network resources. Each vFiler partition appears to the user as a separate storage system on the network, and functions as a storage system.

ManageEngine ADAudit Plus, a user behavior analytics (UBA)-driven change auditor, provides real-time visibility into your NetApp 7Mode/vFiler CIFS servers. It delivers detailed reports on user activity in NetApp files and shares, analyzes permission changes, and automates instant responses to security incidents. It also streamlines compliance with numerous regulations such as HIPAA, FISMA, GDPR, SOX, CCPA, and more.

Supported versions

ADAudit Plus can monitor these ONTAP versions:

NetApp ONTAP 7.2 and above

Audited events

ADAudit Plus audits every attempt to perform these file activities in NetApp filers:

• Create
• Read
• Modify
• Write
• Delete
• Change file permissions
• Rename
• Move

This guide provides steps to configure change auditing in your NetApp 7Mode/vFiler CIFS servers using ADAudit Plus.