Technical Tip: Configuring a Schedule Firewall policy expiration

[Vichu_94]

Description	The article describes how to configure schedule firewall policy expiration.
Scope	FortiGate.
Solution	The feature will allow to schedule a firewall policy to expire after a certain period of time for special event on the network. To configure the firewall policy expiration on the GUI. Go to Policy&Objects -> Firewall and select 'Create New'. After configuring the required source and destination interface/IP address it is possible to see an section workflow Management with Policy expiration with Default and Specify. In Default, the policy would expire in 30 minutes where whereas in Specific to configure the date and time for the expiration. To configure the same on the CLI, follow the below command.  config firewall policy     edit <Policy ID>         set policy-expiry enable         set policy-expiry-date 2022-10-03 15:45:12      end The Date and time format to be followed on the CLI would be YYY-MM-DD HH:MM:SS. Enabling workflow management. Go to System -> Feature visibility. Enable workflow management. Related document: Add Policy change summary and Policy expiration to Workflow Management