Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 18 replies
  • Subscribers 2 subscribers
  • Views 51092 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

how do I limit bandwidth for a particular server/rule?

pesos
Hi all,

How do I limit total bandwidth available for a server (in this case Exchange) to 15 mbits?  On a Juniper I could simply specify traffic shaping right on the rule.

On our SG230 I created a traffic selector for any->any->NetworkGroupThatContainsMyExchangeServersUntrustIPs

And then a bandwidth pool with 15000 set for both guaranteed and upper limit.

Will that do the trick?
Thanks!


This thread was automatically locked due to age.
Parents
  • 0
    HTTPS is a bit of a different beast than SMTP, Wes.  With web surfing, a small request can generate a lot of return traffic.  You will also need the opposite service, "HTTPS-Response" = "443->1:65535" which you can use in the Bandwidth Pool in place of HTTPS.  I'm assuming that you don't need to worry about inbound HTTPS  uploads.

    If you have other HTTPS servers behind the UTM, you might want to take a different approach.  Instead of modifying that Bandwidth Pool, create a Download Throttling rule on the Trust (LAN) interface for 'Exchange -> HTTPS-Response -> Internet'.

    Cheers - Bob
    PS For IPsec tunnels, look on the 'Advanced' tab of QoS.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    HTTPS is a bit of a different beast than SMTP, Wes.  With web surfing, a small request can generate a lot of return traffic.  You will also need the opposite service, "HTTPS-Response" = "443->1:65535" which you can use in the Bandwidth Pool in place of HTTPS.  I'm assuming that you don't need to worry about inbound HTTPS  uploads.

    If you have other HTTPS servers behind the UTM, you might want to take a different approach.  Instead of modifying that Bandwidth Pool, create a Download Throttling rule on the Trust (LAN) interface for 'Exchange -> HTTPS-Response -> Internet'.

    Cheers - Bob
    PS For IPsec tunnels, look on the 'Advanced' tab of QoS.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Cookie Information Banner