topic Re: Policy schedule end notification in General Topics

Policy schedule end notification

jlg — Thu, 07 Aug 2014 12:45:06 GMT

I have a policy scheduled to run for 50 days, is there a way to get a notification at the end of the schedule time period when the policy goes inactive/disabled?

Re: Policy schedule end notification

hshah — Thu, 07 Aug 2014 14:14:47 GMT

Hi Jlg,

I am not sure, but you may want to check system log for the same. If firewall has generated any notification it has to be in system log.

Regards,

Hardik Shah

Re: Policy schedule end notification

pulukas — Thu, 07 Aug 2014 20:37:37 GMT

Just ran a quick test on the lab box. And there is NO syslog event for the end of a schedule applied to an active policy.

I don't think there is any way to alarm on this.

Re: Policy schedule end notification

HULK — Thu, 07 Aug 2014 20:41:11 GMT

Hello Steven,

You are correct. I did the test in my local PAN FW and received the same result.

Thanks

Re: Policy schedule end notification

hyadavalli — Thu, 07 Aug 2014 23:27:02 GMT

Hello,

You can clone the policy and with no schedule set the action to deny and associate a tag to it.

Use the above tag in alarms under 'security policy group limits' and also enable web alarm notifications.

Hope this helps.

Regards,

Hari Yadavalli