restrict access to a Gateway during nighttime and early morning hours

[Michael Molina]

 restrict access to a Gateway during the late night/early morning hours (8 PM to 5 AM Colombia time) but only for a group of users - the idea is to allow the IT team to have 24-hour access to the Gateway.

[Nicola Campaci]

HI
You can try with a responder policy that responds with "401 not authorized", if the requests do not satisfy the policy expression "by AD group" && "system time evaluations"
Or you can modify the current authentication policies by adding check expressions on time as well as on groups 
I recommend not touching production but testing first in development

Example of expression:
AAA.USER.IS_MEMBER_OF("AD_Group") && SYS.TIME.BETWEEN(<time1>, <time2>)

Below is the link to "Expressions for the NetScaler system time"
https://docs.netscaler.com/en-us/citrix-adc/current-release/appexpert/policies-and-expressions/adv-policy-exp-working-with-dates-times-and-numbers/expressions-for-system-time.html