topic Re: Expired Security policy behaviour in General Topics

Expired Security policy behaviour

RahimAbdulRehman — Fri, 15 Apr 2022 17:39:11 GMT

What is the behaviour if schedule is expired on security policy? Existing established session terminated and new session will not established? What is the solution if existing established session not terminated after expired security policy

Re: Expired Security policy behaviour

JANARTHANAN1392 — Sat, 16 Apr 2022 09:29:34 GMT

When a Security policy rule is invoked by a defined schedule, only new sessions are affected by the applied Security policy rule. Existing sessions are not affected by the scheduled policy

Re: Expired Security policy behaviour

RahimAbdulRehman — Sat, 16 Apr 2022 11:07:55 GMT

Any solution to resolve the said issue? As per my knowledge we need to clear the session manually on firewall or idle timeout occurred. What you say?

What is idle timeout for tcp and udp on PA?

Re: Expired Security policy behaviour

BPry — Sun, 17 Apr 2022 16:59:06 GMT

@RahimAbdulRehman,

Depends on the app-id identified, individual signatures can have different time-out values specified. If you absolutely need to have sessions at the end of the schedule just build out a script to clear sessions once the schedule has expired.

Re: Expired Security policy behaviour

RahimAbdulRehman — Sun, 17 Apr 2022 18:15:15 GMT

Can you guide me what typeof script fo wr write?