Time Based Restrictions - Best Practices

[Mike.Cifelli]

I would like to gather opinions/experiences on utilizing authz conditions such as Session: CurrentTime to achieve some sort of time-based restrictions.  I would prefer to use ISE for a small use case where I need to implement time-based restraints for on-boarded hosts.  As far as I know, I am unable to accomplish this using DACLs/SGACLs.  What are your experiences/suggestions on accomplishing this? Any help is appreciated.

[howon · Accepted solution]

Not sure if this is what you are looking for, but you can create time condition such as workhour like below:

And use it in the condition: