Access during lunch time

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Access during lunch time

Good morning,

 

i wish know if it's possible to allow a websites during a period of time ( example between 12:00 & 14:00 PM) and then reblock the access?

 

 

Thanks in advance for your Reply

 

 

Esteban.

2 accepted solutions

Accepted Solutions

Cyber Elite
Cyber Elite

Hi @Esteban.Dambrain

 

Yes It is possible to create a schedule to allow specific access only at certain times of the day

If you go to Objects > schedules and create a schedule, then go to Policies > Security and create a new policy and in the Actions select your schedule, then commit the new policy this will work

 

There is one catch: an existing session that passes the boundary of the schedule is not automatically terminated. New sessions will be blocked as they do not match the schedule but the existing sessions live in the data processing layer where the security policy is no longer checked (unless the application changes which triggers a new policy check)

 

 

 

 

one workaround that comes to mind, if it is important any remaining sessions are closed, is to force a commit at the end time of the schedule. A commit will rematch existing sessions to the security policy

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

Community Team Member

Hi @Esteban.Dambrain,

 

Yes that is perfectly possible.

 

You can add a rule with a schedule :

 

2017-10-18_09-41-27.jpg

 

 

 

 

Schedule : To limit the days and times when the rule is in effect, select a schedule from the drop-down. To define new schedules, click New.

 

Cheers !

-Kiwi.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

View solution in original post

3 REPLIES 3

Cyber Elite
Cyber Elite

Hi @Esteban.Dambrain

 

Yes It is possible to create a schedule to allow specific access only at certain times of the day

If you go to Objects > schedules and create a schedule, then go to Policies > Security and create a new policy and in the Actions select your schedule, then commit the new policy this will work

 

There is one catch: an existing session that passes the boundary of the schedule is not automatically terminated. New sessions will be blocked as they do not match the schedule but the existing sessions live in the data processing layer where the security policy is no longer checked (unless the application changes which triggers a new policy check)

 

 

 

 

one workaround that comes to mind, if it is important any remaining sessions are closed, is to force a commit at the end time of the schedule. A commit will rematch existing sessions to the security policy

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Community Team Member

Hi @Esteban.Dambrain,

 

Yes that is perfectly possible.

 

You can add a rule with a schedule :

 

2017-10-18_09-41-27.jpg

 

 

 

 

Schedule : To limit the days and times when the rule is in effect, select a schedule from the drop-down. To define new schedules, click New.

 

Cheers !

-Kiwi.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

Thanks for your reply !

  • 2 accepted solutions
  • 2192 Views
  • 3 replies
  • 1 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!