topic Re: Scheduling policies and continuous tcp sessions in General Topics

Scheduling policies and continuous tcp sessions

itbrain — Thu, 24 Sep 2009 12:26:20 GMT

Dear Gentlemen,

Does anybody know how we can configure the policies to block a continuous TCP session when the schedule runs out?

The test we are trying to do is to block a skype discussion during a scheduled time.

During the 'allowed' time, we can launch skype and discuss normally. Good.

During the 'blocked' time, we are not able to connect skype to the web. Also Good.

But a contunious session, that was previously initiated during the permit time is not blocked when the allowed schedule runs out.

Thank you,

Olivier

Re: Scheduling policies and continuous tcp sessions

mjacobsen — Thu, 24 Sep 2009 17:40:33 GMT

Olivier,

Currently the schedule for the policy is only applied at the time of

session setup. If the schedule says the session can be allowed at the

time of setup, it is allowed. The system does not have a mechanism to

go back and kill the sessions midstream when the schedule expires.

Mike

Re: Scheduling policies and continuous tcp sessions

rps — Fri, 26 Feb 2010 16:22:23 GMT

Wouldnt an enabled "rematch sessions" along with a commit just after the time is changed to disallow skype-calls fix this?

If so the followup question would be if its possible to schedule "commit force"?

Re: Scheduling policies and continuous tcp sessions

ncampagna — Tue, 09 Mar 2010 23:39:17 GMT

Yes, if you enable "rematch sessions" and then commit the configuration, the existing Skype sessions would be rematched to policy (and blocked in this case if the schedule dictates that action).

-Nick