Traffic Shaping for Rules not working in SOPHOS xg v19.5.1

Hello Muhammad Abdullah Siddiqui ,

Thank you for reaching out to the community, please refer the recommended read - Sophos Firewall: How to Configure QoS and understanding the conceptual difference between the shared and individual

Hi Vivek,

Thanks for sharing. I've configured traffic shaping exactly the same but what I'm experiencing is that the bandwidth is being shared over multiple users although bandwidth usage type is set to individual. I've achieved this in previous firmware of v17 where this same traffic shaping was working for individual IP hosts in the firewall rule but now it's sharing the bandwidth over the whole subnet select in the firewall rule as source Networks. Maybe a change from sophos? Please confirm as same has to be shared with customer 

Regards,

Nope, there has been no change since v17, you can double check the rules once again and I have also explained the difference between the shared and individual so please go through once and revert us again if any issue persist !

Hi Vivek,

As far as I remembered, In v17 firmware we have tested the scenario where we applied traffic shaping on "policy association: rule and usage type: individual" and it allocated the bandwidth on per IP host with a single firewall rule. Means, 10Mbps traffic shaping rule was not sharing bandwidth but allocating 10Mbps per IP host when the whole /24 subnet was called in a single firewall rule with traffic shaping applied. Nonetheless, can we achieve traffic shaping on "policy association: rule" for whole subnet with a single firewall rule? As we have multiple subnets and cannot have rules for individual's separately.

Regards,

Abdullah 

Hi Vivek,

As far as I remembered, In v17 firmware we have tested the scenario where we applied traffic shaping on "policy association: rule and usage type: individual" and it allocated the bandwidth on per IP host with a single firewall rule. Means, 10Mbps traffic shaping rule was not sharing bandwidth but allocating 10Mbps per IP host when the whole /24 subnet was called in a single firewall rule with traffic shaping applied. Nonetheless, can we achieve traffic shaping on "policy association: rule" for whole subnet with a single firewall rule? As we have multiple subnets and cannot have rules for individual's separately.

Regards,

Abdullah 

Please refer this should clarify the basics explained here -  and how you can achieve the speed with various firewall rulesQOS Sanity Check : Policy Rules->Individual BW Usage Type->Individual Limit Separately-> Enable
To convert Mbps to KB/s, there is a link - https://www.gbmb.org/mbps-to-kbs