Skip to main content

 

 

Cisco Defense Orchestrator

Time Range Objects

What is a Time Range Object?

A time range object defines a specific time consisting of a start time, an end time, and optional recurring entries. You use these objects in network policies to provide time-based access to certain features or assets. For example, you could create an access rule that allows access to a particular server during working hours only. Creating a time range does not restrict access to the device. Note that the times configured for these objects are local to the device.

You can add an absolute or recurring time ranges to this object. Recurring ranges are considered to be periodic time ranges. 

Note: If a time range has both absolute and periodic values specified, then the periodic values are evaluated only after the absolute start time is reached and they are not further evaluated after the absolute end time is reached.

 

Create an ASA Time Range Object

Use the following procedure to create a time range object for an ASA device:

  1. In the CDO navigation bar at the left, click Objects
  2. Click the blue plus button blue_cross_button.png to create an object.
  3. Click ASA > Time Range.
  4. Enter an object name.
  5. Define a time range.
  • Absolute Time Range - Enter a Start Time and an End Time for the desired time range; you can choose to execute this object over a matter of minutes, hours, days, or weeks. A time range object can only have one absolute time range. 
  • Recurring Time Ranges - click the blue_cross_button.png to add a periodic time range that will repeat throughout the week. Select the Frequency from the drop-down menu, the Days of the week the time range should go into effect, and the Start and End times. A time range object can have multiple periodic ranges. 

Note: The start and end times for a time range object are optional. If an object has no start time established, the time range goes into effect immediately. If an object has no end time established, the time range lasts indefinitely. 

  1. Click Add to create the object. 

Edit an ASA Time Range Object

Use the following procedure to edit a time range object for an ASA device:

  1. In the CDO navigation bar at the left, click Objects
  2. Filter the objects to find the object you want to edit and then select the object in the object table.
  3. In the details pane, click edit edit.png.
  4. Edit the values as needed and click Save.
  5. If the object is currently used by any policies, CDO displays the policies that will be affected by the change. Click Confirm to finalize the change to the object and any policy affected by it.
  6. If the object is used in a policy on a device, you must Deploy Configuration Changes from Defense Orchestrator to an ASA.

 

Related Articles:

  • Was this article helpful?