ASA5510 - Scheduled deny outbound access

[mark.johnson]

Hi All!

As per the title, is there anyway within a ASA5510 to do a scheduled deny all inbound/outbound access?

Thanks

--Mark

[mmorris11]

You could use a time range access list statement such that you define a time range:

http://www.cisco.com/en/US/customer/products/ps6120/products_command_reference_chapter09186a00805fd7f7.html#wp1275493

And then attach the time range to a access-list that is ahead in sequence of the other rules you want to negate.

HTH

[mark.johnson]

Thanks,

Yeah spotted another post (that'll teach me to look properly 1st): http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddc3b3c

Probably look something like this:

asa5510(config)# time-range midtofive

asa5510(config-time-range)#periodic sun mon tue web thur fri sat 00:30 to 05:30

asa5510(config)# access-list inbound line 1 extended deny ip any any time-range midtofive

Cheers for the post.

--Mark