A library after-hours batch job should be allowed only during a nightly window. What is the correct NSX-T firewall approach?
Select an answer to reveal the explanation.
Short Explanation
NSX already has a timer on the rule—use it. Time-based Distributed Firewall windows open the after-hours path and close it without a cron that deletes policy. Quarantining sensors or killing the whole firewall is swinging a sledgehammer at a library batch job.
Full Explanation
NSX-T supports time-based firewall policy so rules are enforced only during configured windows. That is the supported way to allow a library batch during off-hours without deleting and recreating rules. Cron-driven delete/recreate races the management plane and leaves gaps. Carbon Black quarantine and disabling Distributed Firewall globally are unrelated and overly destructive controls.