Expired Security policy behaviour

[RahimAbdulRehman]

What is the behaviour if schedule is expired on security policy? Existing established session terminated and new session will not established? What is the solution if existing established session not terminated after expired security policy 

[JANARTHANAN1392]

When a Security policy rule is invoked by a defined schedule, only new sessions are affected by the applied Security policy rule. Existing sessions are not affected by the scheduled policy

[RahimAbdulRehman]

Any solution to resolve the said issue? As per my knowledge we need to clear the session manually on firewall  or idle timeout occurred.  What you say?

What is idle timeout for tcp and udp on PA?

[BPry]

@RahimAbdulRehman,

Depends on the app-id identified, individual signatures can have different time-out values specified. If you absolutely need to have sessions at the end of the schedule just build out a script to clear sessions once the schedule has expired. 

[RahimAbdulRehman]

Can you guide me what typeof script fo wr write?