2 thoughts on “Firewall Rule Expiration Video

  • February 3, 2017 at 7:07 am
    Permalink

    Using Time objects within a rule disables acceleration (SecureXL) for that rule, so should be avoided if possible. Better to have to off-system way of tracking rule expiration.

  • February 8, 2017 at 12:40 am
    Permalink

    Great point. I made that video almost seven years ago and in R77 it is still an issue. Shadow Peak’s (amazing) book on page 239 does mention that time objects will still disable acceleration templates. So it would be good to keep this in mind when it comes to rule order, or if the firewall is even using SecureXL (because I find a lot of them are not…or not using it correctly).

Leave a Reply

Your email address will not be published. Required fields are marked *