Policy and network locations + Time schedules

rv@kaufmann.dk

Hi,

I have a policy where mfa is not required, if comming from a "known" ip location added under Network Locations.

If i add a Time Schedule to this policy, say 8am to 8pm all days how does this work with the network location option?

I read it as mfa is not required from these known ip adresses within the provided time frame or?

Regards
Robert

james.carson

Hi Robert,

If the policy has a time option, and it isn't in the timeframe that you selected, the policy is just skipped.

I would suggest making two policies if you're looking to enable MFA after hours.

-During normal hours, have your network location and time in one policy.
-After hours, just have the time and no location, so MFA will not be exempted.

https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/authpoint/policies_about.html

rv@kaufmann.dk

@james.carson

Thank you.

/Robert