scheduled policies to affect existing sessions

Carracido — Tue, 17 Nov 2020 16:57:37 GMT

Dear community,

I configured schedule on policies and it seems that as per design the existing sessions are not affected by the schedule:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/objects/objects-schedules.html

Meaning that if a session was created before the schedule, the traffic will not hit the scheduled policy unless sessions are cleared.

Do you know if there´s any way to try to make the existing policies to be affected by the shedule without needing for example to clear the sessions with a script?

Thank you in advance!

Re: scheduled policies to affect existing sessions

BPry — Tue, 17 Nov 2020 17:37:30 GMT

@Carracido,

There's really no way to do what you are looking. If session rematch is enabled and a commit is done the rulebase would be re-analyzed, but that's more work then simply scripting clearing the sessions and could have unintended consequences if someone was working on the GUI/CLI and was in the middle of a change that wasn't ready to be committed.

topic scheduled policies to affect existing sessions in General Topics

scheduled policies to affect existing sessions

Re: scheduled policies to affect existing sessions