Configuration Steps - NetApp

1. Add a NetApp 7-Mode Component

After you have installed the Solution and configured the Lepide service to run with administrative credentials, you can add a NetApp File Server for auditing.

Component Management Window

From the Component Management window, under the Add Component section, click on the File Server icon to add this component to the solution.

The File Server Settings Console dialog box is displayed:

File Server Console

Here, you can click the Add File Server icon

Option to Add Netapp 7-Mode File Server
on the toolbar to add either of the following file servers:

  1. Windows File Server

  2. NetApp Filer

  • Click the Add File Server icon,

    Select File Server Type
    select Single then select NetApp 7-Mode.

Select a NetApp Filer

  • The Add File Server wizard starts:

SQL Server Details to add NetApp Filer

  • Either enter the name or IP Address of NetApp Filer Name manually or click Add to select a NetApp Filer from the network.

NetApp Agent Information

  • Here, you can select a domain name and click Find to list the available Filers in it.

  • Select a NetApp Filer and click OK.

  • After the required NetApp Filer is selected, enter the login credentials of a NetApp Administrator to add it.

  • Click Next to go to the next step, to provide the details of SQL Server to create a database for storing auditing logs.

List of Changes to be made for Auditing NetApp Filer

  • Click the Server Name dropdown to select the desired SQL Server.

  • There are two authentication options available:

    • Windows Authentication: This mode can be selected if SQL Server is installed on the same computer where the solution is installed.

    • SQL Server Authentication: Select this mode if SQL Server is installed on a remote or local computer. We recommend that this option is selected.

  • Provide the username and password of a SQL user, who has sufficient rights to create the database.

  • Enter a database name in the database name field to create a new database. You can also select an existing database created earlier by Lepide or another application.

  • Click Next

  • The NetApp Agent Information dialog box is displayed:

Installing the Agent for NetApp Filer

  • Enter the details of the system where you wish to install the agent to collect the changes from NetApp Filer.

NOTE: You can install the agent on another system apart from NetApp Filer. However, it is important to note that the agent can only be installed on any one client system or the domain controller. We recommend that you do not to install it on workgroup computers and the agent is installed only on the domain connected Windows Computer and not on NetApp Filer.

  • Enter the name or IP Address of the agent system.

  • Provide the Username and Password of an administrator of the agent system to allow access to the software to install the agent.

NOTE: The provided user should be a member of Administrators, Domain Admins, Group Policy Creator Owners, Enterprise Admins, and Schema Admins groups, at the agent system, to enable the auditing of NetApp Filer. If the above rights are not assigned to the user, then follow the steps below:

  • Go to Administrative Tools.

    • Open Active Directory Users and Computers.

    • Select User Properties.

    • Go to Member Of, Add Group.

    • Select any of the following groups as per the above requirements.

      • Administrators

      • Domain Admins

      • Group Policy Creator Owners

      • Enterprise Admins

      • Schema Admins

    • Click Apply and OK

  • Now you need to choose the Connection Type. Lepide provides the following two types of connections with the NetApp Filer from the agent:

    • Asynchronous: This option is quick, but it cannot capture security details. It captures the security events but does not show details.

    • Synchronous: This option captures security details, but the process slightly slows down the performance of the Filer.

NOTE: If you need the Permission Analysis of NetApp Filer, we recommend using synchronous mode to connect to NetApp Filer.

  • Certain changes are required in the Local Security Policies to allow the software to audit Filers. The software provides a checkbox to make such changes automatically from its end.

  • If you do not want to go for automatic changes or face an error in applying these changes automatically, then uncheck this option and make these manually.

  • Click the checkbox to make the changes automatically. The software displays the list of required changes in the next screen and reconfirms it.

Option to Add File Server
  • Click Yes to make these changes and to install the agent.

    • If you click No, then the changes will not be made, but still, the agent will be installed. Because of no agent installation, the audit reports will not be generated in this case.

    • To generate the audit reports after clicking No, you must make these changes manually.

Wizard to Add NetApp Cluster Mode
  • Click Finish to complete the process.

2. Add a Netapp Cluster Mode Component

Follow the steps below to add NetApp Cluster Mode for auditing.

  • Click the Add File Server button on the toolbar and click NetApp Filer.

Audit Log Configuration Settings
  • You can also click the

    Error Message while Enabling Automatic Auditing
    icon in the Right Panel, go to NetApp Filer sub-menu and click NetApp Cluster-Mode.

  • The Wizard to add NetApp Cluster Mode is displayed:

SQL Server Details to Add NetApp Cluster Mode

  • Add the following details:

    • Domain Name: Enter the name or IP Address of the domain, where the NetApp Cluster Mode is located, in the Domain text field.

    • User Name: Enter the name of a user, who is a member of Domain Admins group.

    • Password: Enter the password of the selected user.

    • Check the Box which says, I have Management Access.

  • Click Next

  • The Add File Server dialog box is displayed:

Install Agent on NetApp Cluster Mode

  • Add the following details:

    • User Name: Enter the name of a user, who has vsadmin role. You can use the default vsadmin user as well.

    • Password: Enter the password of the selected user.

    • Audit Configuration: Select Automatic Auditing. Select this option if you have not already configured auditing. You need to provide the following inputs:

      • Volume Name

      • Aggregate Name

  • Click Next to proceed. The Solution enables auditing with the following settings:

    • Log Volume Size :3 GB

      • Log format: XML

      • Log File Size: 1 MB

NOTE: The Lepide Data Security Platform needs at least 3 GB of free space at the selected aggregate to enable the auditing automatically.

NOTE: The following error message may appear when you try to apply the Automatic Auditing option.

image-20251024-161825.png
Add Rule to the File Server Wizard

 

  • To solve this issue, add the aggregate in the Vserver's list by the following command:

    • vserver modify -vserver <server_name> -aggr-list <aggregate_value>

  • To see whether the aggregate has been added to the list, use the following command:

    • vserver show -fields aggr-list

  • Click Next

  • The SQL Server Information dialog box is displayed. Here, you need to provide the details of SQL Server to create a database for storing auditing logs.

Enter Rule Name and Select File Server
  • Click the Server Name dropdown to select the desired SQL Server.
    There are two authentication options under it

    • Windows Authentication: This mode can be selected if SQL Server is installed on the same computer where the solution is installed.

    • SQL Server Authentication: Select this mode if SQL Server is installed on a remote or local computer. We recommend that this option is selected.

  • Provide the username and password of a SQL user, who has sufficient rights to create the database.

  • Enter a database name in the database name field to create a new database. You can also select an existing database created earlier by Lepide or another application.

  • Click Next

  • The installation of the agent starts:

Select Policy Type

  • Click Finish to complete the process.

3. Steps after Adding a File Server Component

A dialog box is displayed asking whether you want to apply a rule to the newly added file server:

Add Users to Rule
  • Click Yes and create a new rule from the next window.

NOTE: You need an Audit Rule to start monitoring of the newly added File Server. If you want to skip the step of creating a rule, then click No. However, the audit reports will not be generated until you create an Audit Rule and update the agent. It is necessary to Update Agent if you are creating or modifying an Audit Rule.

Summary

  • Enter a rule name and select the File Server for which you want to create the rule if it is not already selected in the File Servers drop-down menu.

  • Click Next. The audit policies dialog box is displayed:

NOTE: In this example, we are creating an audit rule with predefined policy. To create an auditing rule with a user- configured policy refer to the Advanced File Server Configuration Guide.

For this example, we will select the Audit All policy:

  • Click Next

  • Select All Users in the Audit User tab and click Next. The rule is applied to all users in this case.

  • Click Next

  • The Summary box is displayed:

  • Click Finish to complete the process. The newly added audit rule is displayed in the list.

  • Click Update Agent on all File Servers to apply new Settings notification and follow the on-screen instructions to update the agent.

NOTE: It is necessary to update the agent each time you change the applied Audit Rule. If this is not done, the auditing will not be updated, and the reports will not include the new modifications when generated.

  • After you have created the auditing rules, Restart the main console, and go to the Audit Reports tab in the main panel to view the reports.