Using Time objects within a rule disables acceleration (SecureXL) for that rule, so should be avoided if possible. Better to have to off-system way of tracking rule expiration.
Great point. I made that video almost seven years ago and in R77 it is still an issue. Shadow Peak’s (amazing) book on page 239 does mention that time objects will still disable acceleration templates. So it would be good to keep this in mind when it comes to rule order, or if the firewall is even using SecureXL (because I find a lot of them are not…or not using it correctly).
R80.10 now supports time objects without disabling SecureXL
Your email address will not be published. Required fields are marked *