Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 5469 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allowing for a "free" download period for individual data use quotas

Joshua Arthurs

I've been looking for a product that allows for this, and am not sure if Sophos UTM will be able to accomplish it.  Hopefully someone could assist with this, or direct me to a product that has the functionality.

I'm in a part of the world that requires we use a satellite internet connection.  It's our only connectivity option.  The equipment is relatively expensive ($895) and data packages of course are a better value per-gigabyte the higher plan you use.  A group of about 8 of us are sharing a plan and equipment.

What I would like to do is set user-based quotas, which I've found this software can do.

What I'm unsure about is if it's possible to set a "free" download period.  The ISP allows traffic between 0100-0700 to not count towards your data quota.

Does anyone have suggestions on how to do this, or which product may make it possible?

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    Hi Joshua,

    I liked the question you asked. [Y]

    The feature that you require is not possible with Sophos UTM but, the best part is we have a product that can do this.

    Sophos XG; our next Gen firewall does have this feature. In Sophos XG, you can define a schedule inside a FW-rule along with QOS respectively. That add-on a feature to activate a firewall rule for a certain period of time to work with QOS and filters as required and alongside, it deactivates the FW rule when the schedule is over to give the network a clean access to the internet resources.

    You can learn more about our XG firewall and its home version on our website. 

    Thanks for choosing Sophos.

  • 0 in reply to sachingurung

    Sachingurung,

    Thank you as well for your response.

    I think I'm not explaining myself well, or maybe I'm misunderstanding you two. I don't want to filter traffic, ever, and want to leave access unrestricted. I am only trying to limit the amount of traffic a user can use per month between 0700-0100. Traffic between 0700-0100 is counted towards our monthly data cap, however traffic between 0100-0700 is not counted. I would like to restrict users to their monthly limit without restricting them between 0100-0700.

    I'll look more into XG.

  • +1 in reply to Joshua Arthurs

    Hi Joshua,

    I understand, language can be deceiving at times.

    You can restrict Users with a custom network quota and define it inside a user object with XG. To give you a glimpse of the same, PFA screenshot.

    We configured a Network Traffic Quota and defined it in the User object. Next step will be to configure a scheduled FW rule without filter/restriction as mentioned in your previous post. The FW rule will be considered in a TOP- DOWN approach and the scheduled rule will be active in the configured hours. It will be automatically deactivated and the traffic will flow through the next in line fw rule.

    Hope that helps :)

    Thanks

Reply
  • +1 in reply to Joshua Arthurs

    Hi Joshua,

    I understand, language can be deceiving at times.

    You can restrict Users with a custom network quota and define it inside a user object with XG. To give you a glimpse of the same, PFA screenshot.

    We configured a Network Traffic Quota and defined it in the User object. Next step will be to configure a scheduled FW rule without filter/restriction as mentioned in your previous post. The FW rule will be considered in a TOP- DOWN approach and the scheduled rule will be active in the configured hours. It will be automatically deactivated and the traffic will flow through the next in line fw rule.

    Hope that helps :)

    Thanks

Children
  • 0 in reply to sachingurung

    Sachingurung,

    If I'm understanding correctly, I will apply the quotas per user and then use a firewall rule to ignore those rules during a certain time.

    I'm curious if this continue to count traffic towards their quota -- meaning if they download 5gb between 0100-0700 (the "free" period) will it count towards their limit?

    Whatever the case, it's a good lead and I'm grabbing the ISO.

    Thanks greatly for pointing me in the direction!