topic Re: Application usage – Implement Time limit in General Topics

Application usage – Implement Time limit

ssarcar — Wed, 15 Jun 2011 16:38:04 GMT

I would like to schedule certain application for user to use. Here are the examples.

User can use You-Tube or http-audio only 30 minutes per day.

User can only use You-Tube / other streaming media between 9:00-9:30 am and then 5:00pm - 6:00 am .

User can visit gmail.com or mail.yahoo.com only 30 minutes per day

Visit gmail.com. between 8:00 am – 9:00 am and 5:00 pm – 6:00 am.

Is there anyway I can implement such policy with PAN.

Re: Application usage – Implement Time limit

skrall — Wed, 15 Jun 2011 16:56:26 GMT

The paloalto does have a scheduler.

Create a Security policy that allows or denies an application.

The very last column is "Options".

Open the "Options" field and configure the scheduler.

I am not sure about this but I believe that if you allowed youtube from 4:00 PM - 5:00 PM and somebody starts watching youtube at the end of that time frame, their session will not be interrupted. New sessions will not be allowed after 5:00 PM but old, established sessions will continue.

Steve Krall

Re: Application usage – Implement Time limit

ssarcar — Wed, 15 Jun 2011 17:18:38 GMT

Steve

Thanks for the reply. Yea I found the option in QOS right after I posted.

Here is our network environment ;

1) We are in all 5 time zone

2) We use Citrix and all 5 time zone staff connect to network via VPN and only way they can go outside our network ( internet) via Citrix server which are all located in Central Time zone.

3) If I to open internet email for user beginning of their shift and stream media only during lunch hour I have to keep the policy open almost all day for those who are in Central and Mountain time, which I don’t want to do.

So one of the option I am thinking where I can restrict each user to use 30 minutes a day ( regardless of the time) when they can stream or check their internet email. Is that possible ?

Re: Application usage – Implement Time limit

skrall — Wed, 15 Jun 2011 18:57:23 GMT

This we can not do.

Steve Krall