How to effetively cut off communication at a scheduled time

[LCMember4427]

Hi,

We are running a PA500 box with software at ver 6.0.4. at a boarding school.

At a certain time during the night we need to switch off internet access completely (so the students get som sleep before next day).  When we do this using schedules in security policies I understand it only denies the creation of new sessions.  Ongoing sessions will continue to flow until they are closed by the client.  Am I correct ?

As you might understand I'm looking for a way to simply 'cut off' everything at a scheduled time.  If PA interfaces could be disabled / enabled using a schedule that would be nice, but they can't.  In I see the point that users can lock themselves out...

But how can I achieve what I need?  Can I issue an external CLI command to disable an interface and enable it shortly after (I assume that ongoing sessions will timeout rather soon if the interface is switched off for 15 minutes or so)...?

Thanks a lot for comments and suggestions to remedy this situation

best regards

Tor

[panos]

Maybe someone will check and write here

You can talk to your SE for that also.