topic Re: provide temporary internet access for some systems at specific period(1day) in Next-Generation Firewall Discussions

provide temporary internet access for some systems at specific period(1day)

sshivanandap — Thu, 21 Sep 2023 11:10:20 GMT

our requirement is that temporary internet access systems want to remove automatically after specific period. any options available in Palo Alto?

Re: provide temporary internet access for some systems at specific period(1day)

BPry — Thu, 21 Sep 2023 13:00:49 GMT

@sshivanandap,

You would build out a schedule and assign it to any security policies that you want to allow temporarily. When the schedule is active, the rule will match traffic, but when it isn't it won't match anything anymore because of the schedule.

The one thing to keep in mind with scheduled access is that it doesn't kill off established sessions at the end of the schedule. So if that is a requirement you would want to pair it with a scheduled script that kills off any active sessions associated under any policies associated with a schedule. Easily done through the API, just something to be mindful of as you build scheduled access out. This may, or may not, be of any consequence to what you're actually trying to establish.

Re: provide temporary internet access for some systems at specific period(1day)

sshivanandap — Fri, 22 Sep 2023 06:19:55 GMT

@BPry thanks for the update I just want a confirmation that can we give access to an user for one day which can automatically removed after the time interval which we have given. if we can where can we do this