Scheduling policies and continuous tcp sessions

[itbrain]

Dear Gentlemen,

Does anybody know how we can configure the policies to block a continuous TCP session when the schedule runs out?

The test we are trying to do is to block a skype discussion during a scheduled time.

During the 'allowed' time, we can launch skype and discuss normally. Good.

During the 'blocked' time, we are not able to connect skype to the web. Also Good.

But a contunious session, that was previously initiated during the permit time is not blocked when the allowed schedule runs out.

Thank you,

Olivier

[mjacobsen · Accepted solution]

Olivier,

Currently the schedule for the policy is only applied at the time of

session setup. If the schedule says the session can be allowed at the

time of setup, it is allowed. The system does not have a mechanism to

go back and kill the sessions midstream when the schedule expires.

Mike

[rps]

Wouldnt an enabled "rematch sessions" along with a commit just after the time is changed to disallow skype-calls fix this?

If so the followup question would be if its possible to schedule "commit force"?

[ncampagna]

Yes, if you enable "rematch sessions" and then commit the configuration, the existing Skype sessions would be rematched to policy (and blocked in this case if the schedule dictates that action).

-Nick