I need to disconnect one or more users from Global Protect VPN at a specific hour.
I try to explain, I don't want that after 7pm the remote suppliers can work on my net. I can't use the scheduled policy rules becouse the sessions started before 7pm (for example Remote desktop or ultraVNC) will stay active.
So I have thought to disconnect the users from Global Protect, and i can use the command "request global-protect-gateway client-logout" or API.
But is it possible to create a scheduled script that runs at a specific hour and, for example, from Monday to Friday, to do that? And is it possible to parameterize this script?
I thought to use "show global-protect-gateway current-user" and save in some variables the "Computer Name", "domain", ... and then passing them to "request global-protect-gateway client-logout".
Have I other easier ways to solve my need?
I would use API.
API > Operational Commands > clear > session > all > filter > source-user
And then you can even use Windows Task Manager and let your favorite browser to open URL below at 7pm that will kill those sessions. Link below does not include API key that you need to generate first and add it to the URL. API key is used to authenticate the request.
As I see you have different possibilities:
In method 1 the users will not be able to open again the VPN connection. In method 2 and 3 the users are able to connect the vpn but will not be able to open the sessions to the internal systems.
@all : How would a sceduled deny/reset rule behave? Would existing sessions be remached to this by schedule activated security policy or will they stay alive even such a rule becomes active?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!