topic Re: Rule expiration question in Firewall and Security Management

Rule expiration question

ascoyne — Thu, 22 Aug 2024 12:57:45 GMT

We have never used Time Objects or Rule Expiration so looking for information.

When we set a rule to expire using a Time Object, is the rule deleted or disabled?

Re: Rule expiration question

Tal_Paz-Fridman — Thu, 22 Aug 2024 13:16:55 GMT

When you set a rule to expire using a Time Object the rule is not deleted; it is effectively disabled. This means that once the time object expires, the rule will no longer be enforced in the policy, but it remains in the Rule Base. If you want to re-enable the rule, you would need to update the time object or create a new one.

R81.20 SmartConsole Online Help:
https://sc1.checkpoint.com/documents/R81.20/SmartConsole_OLH/EN/Topics-OLH/NZWusyHm6c__hj6NSFa-VQ2.htm

"A rule using a time object applies only to connections that begin during the time object's time frame. If the connection extends past that time frame, it is allowed to continue. The relevant time zone is that of the Security Gateway enforcing the rule."

Re: Rule expiration question

the_rock — Thu, 22 Aug 2024 13:56:50 GMT

@Tal_Paz-Fridman is 100% right. So technically, rule will NOT show as disabled per se, but will be "expired", if you will.

Andy