SRX

Hello Guys,

I need your help.

I have made enhanced Web Filtering with a scheduler for access but it does not work, what configuration I have missed.

thanks.

The following configuration that I made

root@SRX# show schedulers
scheduler ScheduleWebFilter {
start-date 2020-01-27.00:00 stop-date 2020-12-31.00:00;
sunday exclude;
monday {
start-time 08:00:00 stop-time 17:00:00;
}
tuesday {
start-time 08:00:00 stop-time 17:00:00;
}
wednesday {
start-time 08:00:00 stop-time 17:00:00;
}
thursday {
start-time 08:00:00 stop-time 17:00:00;
}
friday {
start-time 08:00:00 stop-time 17:00:00;
}
saturday exclude;
}
scheduler ScheduleAllDay {
start-date 2020-01-28.00:00 stop-date 2021-01-31.00:00;
sunday all-day;
monday all-day;
tuesday all-day;
wednesday all-day;
thursday all-day;
friday all-day;
saturday all-day;
}

from-zone trust to-zone untrust {
policy trust-to-untrust {
match {
source-address any;
destination-address any;
application any;
}
then {
permit {
application-services {
utm-policy UTM-XX;
}
}
log {
session-close;
}
count;
}
scheduler-name ScheduleWebFilter;
}
policy trust-to-untrust-nowf {
match {
source-address any;
destination-address any;
application any;
}
then {
permit {
application-services {
utm-policy UTM-XX-No-WF;
}
}
log {
session-close;
}
count;
}
}
}

Hi!

On initial look, quick look and feel is... it looks fine I think. it's a little messy and not efficent but fundermentally it's there from what you provided.

Set it to the like the below but with sunday and saturday to exclude.

scheduler sche3 {
    start-date 2006-11-02.12:12 stop-date 2007-11-02.12:11;
    daily {
        start-time 10:00 stop-time 17:00
    }
    sunday {
        start-time 12:00 stop-time 14:00;
        start-time 16:00 stop-time 17:00;
    }
    monday {
        all-day;
    }
    friday {
        exclude;
    }
}

This makes it a lot easier to visualise and troubleshoot.

Also is the date and time set accordingly on the box?

KR
Adam

how do you enable this scheduling?

You need to tie it to the interfaces and security policies 🙂

KR
Adam 

Apologies on the delay @tech_mvt,  I was tied up.

Are you all set here now?

Cheers

Pooja

Hi there,

Can you confirm if that policy is being hit in the first place?

{primary:node0}
jtac@TTCFW01> show security policies hit-count from-zone trust to-zone untrust

Cheers

Pooja

Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too!!!