Setting a Time Restriction
The Time column in the DLP Rule
Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session. table holds a time object or group of time objects. The time object is the same time object as used in the Firewall Rule Base All rules configured in a given Security Policy. Synonym: Rulebase..
-
A time object defines:
-
A time period during which the DLP rule is enforced (in hours) or
-
A time period defined by activation and expiration dates.
-
-
Time objects apply for each rule.
Notes:
-
A DLP rule that incorporates a time object is not enforced when the time object expires.
-
Time objects are not supported for UTM-1 Edge appliances and QoS
Check Point Software Blade on a Security Gateway that provides policy-based traffic bandwidth management to prioritize business-critical traffic and guarantee bandwidth and control latency.. If you install a DLP policy that contains a time object in a rule, you fail. -
An object that does not have an activation or expiration date is always active.
-
Creating a time object
-
Open the Data Loss Prevention tab > Policy page.
-
Right-click in the Time column of a rule.
-
From the pop-up menu, select Time.
A window opens showing a list of existing time objects. You can select an existing time or create a new one.
Note - Existing time object can be reused.
-
Click New > Time.
-
The Time Properties window opens.
-
On the General page, enter a name for the object
-
On the Time page:
-
In the Time Period section, configure when the time object activates and expires.
-
In the Restrict to specific hour ranges section, specify up to 3 ranges when the time object enforces the DLP rule. During these periods, the related DLP rule is enforced. The time specified here refers to the local time on the Security Gateway
Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.. -
Specify days.
The days when the time object enforces the DLP rule. The time object can be enforcing the DLP rule each day, specified days of the week, a specified month or all months.
-
-
Click OK.
Creating a time group object
If you have more than one time object, you can merge them into a group. When a condition in one of the time objects in the group is met, the DLP rule is enforced.
-
Open the Data Loss Prevention
Check Point Software Blade on a Security Gateway that detects and prevents the unauthorized transmission of confidential information outside the organization. Acronym: DLP. tab > Policy page. -
Right-click in the Time column of a rule.
-
From the pop-up menu, select Group.
The Time Group window opens.
-
Enter a name for the group.
-
Add or Remove time objects from the group.
-
Click OK.