Application usage – Implement Time limit

[ssarcar]

I would like to schedule certain application for user to use.  Here are the examples.

User can use You-Tube or http-audio only 30 minutes per day.

Or

User can only use You-Tube / other streaming media between 9:00-9:30 am and then 5:00pm - 6:00 am .

User can  visit gmail.com or mail.yahoo.com  only 30 minutes per day

Or

Visit gmail.com.  between 8:00 am – 9:00 am and 5:00 pm – 6:00 am.

Is there anyway  I can implement such policy  with PAN.

[skrall · Accepted solution]

The paloalto does have a scheduler.

Create a Security policy that allows or denies an application.

The very last column is "Options".

Open the "Options" field and configure the scheduler.

I am not sure about this but I believe that if you allowed youtube from 4:00 PM - 5:00 PM and somebody starts watching youtube at the end of that time frame, their session will not be interrupted. New sessions will not be allowed after 5:00 PM but old, established sessions will continue.

Steve Krall

[ssarcar]

Steve

Thanks for the reply. Yea I found the option in QOS right after I posted.

Here is our network environment ;

1)      We are in all 5 time zone

2)      We use Citrix and all 5 time zone staff connect to network  via VPN and only way they can go outside our network  ( internet) via Citrix server which are all located in Central Time zone.

3)      If I to open internet email for user beginning of their shift and stream media only during lunch hour  I have to keep the policy open almost all day for those who are in Central  and Mountain time, which I don’t want to do.

So one of the option I am thinking where I can restrict each user to use 30 minutes a day ( regardless of the time) when they can stream or check their internet email. Is that possible ?

[skrall]

This we can not do.

Steve Krall