Application Access Time

Contextual Access Control (CAC) based on application access time involves controlling access to applications based on specific time-related criteria. This approach adds an additional layer of security and flexibility to access policies, aligning access permissions with organizational needs and security requirements. Here’s how it can be implemented and its benefits:

Implementation of Contextual Access Control based on Application Access Time

Time-Based Access Policies: Organizations can define policies that restrict or allow access to applications based on the time of day, day of the week, or specific dates. For example:

  • Business Hours Access: Allow access to critical business applications only during standard business hours (e.g., 9 AM to 5 PM).
  • After-Hours Restrictions: Restrict access to sensitive or less frequently used applications during non-business hours or weekends.

Benefits of Contextual Access Control based on Application Access Time

Enhanced Security: By restricting access to applications based on time, organizations reduce the attack surface during off-hours and weekends when security resources may be limited.

Granular Control: Time-based policies provide granular control over access permissions, allowing organizations to align access with operational requirements and reduce unnecessary exposure to sensitive data.

Compliance Adherence: Helps organizations meet regulatory requirements by enforcing access controls that limit access to sensitive applications and data only during authorized times.

Steps to implement the Application Access Time policy in ZTAA

  1. Create a dataset of type "Application Access Time"
  2. click on the "Configuration" tab on the left menu.
  3. In the "Data Management" tab, click on the '+' icon.
  4. From the 'Select Variable' dropdown, select 'Application Access Time'.
  5. Provide a name for the dataset and click on the 'Add dataset' button.
  6. Once the dataset is created, select the dataset and click on 'Edit'.
  7. Browse to the 'Records' tab of the dataset.
  8. Click on the check against the days of the week, the application accces needs to be granted.
  9. Provide the 'Start Time' and 'End Time' between which the application access needs to be granted in UTC format.

The below screenshot displays a sample configuration for the Application Access Time dataset.

  1. Add the created "Application Access Time" dataset in the Device Compliance profile.
  2. Browse to Perimeter Management -> Devices.
  3. Click on the 'Device Compliance Profiles' tab.
  4. Select the configured 'Device Compliance' profile or create a new one.
  5. Click on 'Edit' and browse to the 'Rules' tab.
  6. Click on the '+ Rule' button.
  7. Select "Agent Access Time" from the dropdown.
  8. From the "Agent Access Time" dropdown, select the "Application Access Time" dataset created in Step 1.
  9. Click on the 'Update' button.

When end users try to connect to the ZTNA agent outside of the day/time range defined in the "Application Access Time" dataset then they will be presented with the below message.

In conclusion, contextual access control based on application access time is a valuable component of a comprehensive security strategy. It helps organizations optimize resource protection, maintain compliance, and enhance overall cybersecurity posture by aligning access permissions with business needs and security policies.