ISA Firewall Rules and Schedules

LewisJS

Hi,

If I create a rule that blocks a certain app using certain ports at a certain time, my question is, if the user is connected and using that app over them ports and then the firewall rule comes into play at the certain time that is scheduled to will the user get disconnected or would it stay connected and only block it if he disconnected and then tried to re-connect?

Thanks.

astorrs

The firewall will drop packets as soon as the new policy comes into effect. Remember the FW is inspecting EVERY packet that flows through it (it doesn't "remember" that it allowed the last packet from that source/destination) and you are updating the allow/deny rules.