Create a time range object

Establish a time range object so policies apply only during specified periods, enabling precise control of network traffic.

If you want a policy to apply only during a specified time range, create a time range object and specify that object in the policy. This object works on Firewall Threat Defense devices only.

You can specify time range objects only in certain policy types, which are listed in this topic.

Note

The timezone represents the device's local time and is used only for applying the time ranges in rules in the policies that support the time ranges. The timezone does not change the configured time of the device. To verify the configuration, in the Firewall Threat Defense CLI, use the show time-range timezone and show time commands (see the Cisco Secure Firewall Threat Defense Command Reference guide). In addition, the timezone of a chassis overrides the management center timezone.

Before you begin

Time ranges operate based on the time zone associated with the device that processes the traffic. By default, this is UTC. To change the time zone associated with a device, go to Devices > Platform Settings.

Procedure

Step 1

Choose Objects > Time Range from the list of object types.

Step 2

Click Add Time Range.

Step 3

Enter the object name and specify the desired time periods.

  • If you see a red error box around the object name you have entered, mouse over the Name field to see naming restrictions.

  • All times are in UTC, unless you specify a time zone for the device in Devices > Platform Settings.

  • Enter times using a 24-hour clock; for example, enter 13:30 for 1:30 PM.

  • To specify a single continuous range, such as typical weekend hours (Fridays at 5pm through Mondays at 8am, including evenings and nights), choose Range Type Range.

  • To specify part of multiple days, such as Monday through Friday from 8am to 5pm (excluding evenings, nights, and early mornings every day), choose Range Type Daily Interval.

  • You may specify up to 28 periods per object.

  • For multiple noncontiguous times of day or different hours for different days, create multiple recurring intervals. For example, to apply a policy at all times other than standard working hours, create a single time range object with the following two recurring intervals:

    • A Daily Interval for Monday through Friday from 5pm through 8am, and

    • A Range recurring interval for Friday at 5pm through Monday at 8am.

Step 4

Click Save.

What to do next

Configure time ranges in any of these:

  • Access control rules

  • Prefilter rules

  • Tunnel rules

  • VPN group policy

In a VPN group policy object, specify the time range object using the Access Hours field. For details, see Configure a group policy object and Advanced group policy option fields and values.