config cifs profile
Description: Configure CIFS profile.
edit <name>
set server-credential-type [none|credential-replication|...]
config file-filter
Description: File filter.
set status [enable|disable]
set log [enable|disable]
config entries
Description: File filter entries.
edit <filter>
set comment {var-string}
set protocol {option1}, {option2}, ...
set action [log|block]
set direction [incoming|outgoing|...]
set file-type <name1>, <name2>, ...
next
end
end
set domain-controller {string}
config server-keytab
Description: Server keytab.
edit <principal>
set keytab {string}
next
end
next
end
Parameter Name | Description | Type | Size |
---|---|---|---|
server-credential-type | CIFS server credential type. none: Credential derivation not set. credential-replication: Credential derived using Replication account on Domain Controller. credential-keytab: Credential derived using server keytab. |
option | - |
domain-controller | Domain for which to decrypt CIFS traffic. | string | Maximum length: 63 |
Parameter Name | Description | Type | Size |
---|---|---|---|
status | Enable/disable file filter. enable: Enable file filter. disable: Disable file filter. |
option | - |
log | Enable/disable file filter logging. enable: Enable file filter logging. disable: Disable file filter logging. |
option | - |
Parameter Name | Description | Type | Size |
---|---|---|---|
comment | Comment. | var-string | Maximum length: 255 |
protocol | Protocols to apply with. cifs: Enable/disable CIFS. |
option | - |
action | Action taken for matched file. log: Allow the content and write a log message. block: Block the content and write a log message. |
option | - |
direction | Match files transmitted in the session's originating or reply direction. incoming: Match files transmitted in the session's originating direction. outgoing: Match files transmitted in the session's reply direction. any: Match files transmitted in the session's originating and reply direction. |
option | - |
file-type <name> |
Select file type. File type name. |
string | Maximum length: 39 |
Parameter Name | Description | Type | Size |
---|---|---|---|
keytab | Base64 encoded keytab file containing credential of the server. | string | Maximum length: 4095 |
config cifs profile
Description: Configure CIFS profile.
edit <name>
set server-credential-type [none|credential-replication|...]
config file-filter
Description: File filter.
set status [enable|disable]
set log [enable|disable]
config entries
Description: File filter entries.
edit <filter>
set comment {var-string}
set protocol {option1}, {option2}, ...
set action [log|block]
set direction [incoming|outgoing|...]
set file-type <name1>, <name2>, ...
next
end
end
set domain-controller {string}
config server-keytab
Description: Server keytab.
edit <principal>
set keytab {string}
next
end
next
end
Parameter Name | Description | Type | Size |
---|---|---|---|
server-credential-type | CIFS server credential type. none: Credential derivation not set. credential-replication: Credential derived using Replication account on Domain Controller. credential-keytab: Credential derived using server keytab. |
option | - |
domain-controller | Domain for which to decrypt CIFS traffic. | string | Maximum length: 63 |
Parameter Name | Description | Type | Size |
---|---|---|---|
status | Enable/disable file filter. enable: Enable file filter. disable: Disable file filter. |
option | - |
log | Enable/disable file filter logging. enable: Enable file filter logging. disable: Disable file filter logging. |
option | - |
Parameter Name | Description | Type | Size |
---|---|---|---|
comment | Comment. | var-string | Maximum length: 255 |
protocol | Protocols to apply with. cifs: Enable/disable CIFS. |
option | - |
action | Action taken for matched file. log: Allow the content and write a log message. block: Block the content and write a log message. |
option | - |
direction | Match files transmitted in the session's originating or reply direction. incoming: Match files transmitted in the session's originating direction. outgoing: Match files transmitted in the session's reply direction. any: Match files transmitted in the session's originating and reply direction. |
option | - |
file-type <name> |
Select file type. File type name. |
string | Maximum length: 39 |
Parameter Name | Description | Type | Size |
---|---|---|---|
keytab | Base64 encoded keytab file containing credential of the server. | string | Maximum length: 4095 |