Schedule firewall rule - disable it after some time automatically

Hi LHerzog,

Thank you for reaching out to Sophos Community and for the feedback.

Upon checking, there’s no such feature request; kindly contact Support to get this link to your account.

Thanks, I will. Some competitors like Sonicwall or Fortinet already have this.

Sonicwall: "once" Schedule

https://www.sonicwall.com/support/knowledge-base/configuring-schedules-in-gen7-sonicos/220630034438303

Fortinet: "firewall policy expiration"

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-a-Schedule-Firewall-policy-expiration/ta-p/222790

Hello,

If you go to the Firewall Rules, click "During scheduled time," click Add Schedule, and select One Time, you can select a Start date, end date, and time within the same calendar for the Firewall rule to work.

I believe you want like a timer that you can set, but I believe working with the above might work for you.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Profiles/Schedule/ProfilesScheduleAdd/index.html

Regards,

Hi emmosophos ,

thanks for your feedback - that one time schedule technically works for my need.

For the specific use-case of ours, the bad thing here (same with the competitors) is, that this requires the admin to first create the schedule outside the firewall rule in the profiles menu which is quite a lot of clicking. Only after that, you can add it to the firewall rule.

It would be much more convenient to have this available directly in the firewall rule like a timer toggle and a flexible option like "1 hour/minute(s) etc. upon save". Or even a "one time" schedule there.

Hi emmosophos ,

thanks for your feedback - that one time schedule technically works for my need.

For the specific use-case of ours, the bad thing here (same with the competitors) is, that this requires the admin to first create the schedule outside the firewall rule in the profiles menu which is quite a lot of clicking. Only after that, you can add it to the firewall rule.

It would be much more convenient to have this available directly in the firewall rule like a timer toggle and a flexible option like "1 hour/minute(s) etc. upon save". Or even a "one time" schedule there.

You could perform this via API at your time?  [Python] Getting Started with the Sophos Firewall SDK  

Currently I'm not using API for Sophos Fw. Probably it's possible to do it that way. I'm unsure if this is a plus in usability. Just for this special case here. e.g. it should not be required to clean up all the "one time" schedules that have been created.