Adding a file system audit policy

One of the following security modes is shown based on the configured security mode of the EVS:

• Mixed (Windows and Unix)
• Unix (supports Windows)
• Inherited, the inherited security mode means the security mode is inherited from the EVS security mode and has not been manually changed.

For more information on security modes, see Security modes.

• SMB: Access to SMB is always allowed.
• NFSv3: Enable or disable NFSv3 protocols for audit.

This setting determines if client computers are permitted to access the file system using a protocol that does not support auditing (such as NFSv2). Select on the following options:

• Deny Access. Deny access to the file system using unauditable protocols (such as NFSv2).
• Allow Access. Allows client access to the file system using unauditable protocols (such as NFSv2), but does not create any auditing events.

Audit records, including audit log backups, are stored locally or to an external audit log server. To store records locally, set the External toggle to No and complete the following settings:

• Maximum Log File Size: Specify the maximum size of the active audit log file in KiB or MiB. The default size is 512 KiB. The maximum log file size is 50 MiB.
• Log Roll Over Policy: Specify the action when the active audit log file reaches the maximum file size.
  • Wrap: Deletes the oldest audit entry to make room for a new entry.
  • New: Creates a new active audit log file. This is the default.
• Directory: Specify the directory in which the file system audit log files are saved. Use Browse to search for an existing directory, or enter the name of a directory to be created.
• File Name: Specify the file name for the file system audit log. The file name must have an .evt extension. The default is audit.evt.

• Backup Interval (Minutes): Specify the time in minutes between automatic backups of the active audit log. The backup interval must be between 5 and 14400 minutes (10 days). A value of 0 disables the automatic backups. The default is 0.
• Number of files to retain: Specify the number of backup audit log files to retain. The default is 10. The maximum number of files to retain is 50.