About FassaSRL

Hello, I use Panorama to deploy some policy rules to my 40 firewalls. Obviously some rules are the same for all firewalls, others are specific to a some of them.   Is it possible to create different groups of firewalls and deploy the rules to the groups. So if I have to add/change a FW to a panorama rule, will be sufficient to modify the group and not all rules.   Yesterday I changed a broken firewall, and I had to remove the old one from more of 50 rules and the add the new one. 😞   For example I'd like to be able to: Rule A --> deployed to FW1, FW2 Rule B --> deployed to FW1, FW2 Rule C --> deployed to FW1, FW3 Rule D --> deployed to FW1, FW3   If I have to add the FW4, and add it to all rules, it would be faster to have: Device Group X: FW1, FW2 Device Group Y: FW1, FW3 Rule A --> deployed to Group X Rule B --> deployed to Group X Rule C --> deployed to Group Y Rule D --> deployed to Group Y and add FW to the groups.   Thanks Massimiliano ... View more

Goodmorning, I need to disconnect one or more users from Global Protect VPN at a specific hour. I try to explain, I don't want that after 7pm the remote suppliers can work on my net. I can't use the scheduled policy rules becouse the sessions started before 7pm (for example Remote desktop or ultraVNC) will stay active. So I have thought to disconnect the users from Global Protect, and i can use the command " request global-protect-gateway client-logout" or API. But is it possible to create a scheduled script that runs at a specific hour and, for example, from Monday to Friday, to do that? And is it possible to parameterize this script? I thought to use "show global-protect-gateway current-user" and save in some variables the "Computer Name", "domain", ... and then passing them to "request global-protect-gateway client-logout".   Have I other easier ways to solve my need?   Thanks Massimiliano   ... View more