cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Bandwidth limit per app /category

hello

i have a cluster of 2 firewalls, they have enabled only the application blade, without the URL blade.

i want to limit the bandwidth for the category media streams and media sharing in the following way.

the thing is that is applied and installed but I have no idea on how to check if this is actually working.

i tried to look at the applications and sites but i dont see anything related to traffic being rate limited.

on the logs i do see that the traffic matches the rule created on the application layer but as i said, i have no idea on how to check if the limit is applied or not.

can someone guide me ?

Regards 

0 Kudos
13 Replies

Re: Bandwidth limit per app /category

That is a nice question

One way can be , if you have monitor blade enable  from top source view  compare the bandwith in use by single host

But someone can be more helpful than me on this

0 Kudos

Re: Bandwidth limit per app /category

i am looking more to an answer similar to this Smiley Happy

How to monitor bandwidth limit for application control 

0 Kudos

Re: Bandwidth limit per app /category

Please see my recent post in this thread, your monitoring options are somewhat "limited":

How to monitor bandwidth limit for application control 

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Re: Bandwidth limit per app /category

you ask for monitoring bandwith and not for dropped packet  Smiley Happy ofc Tim reply was more in deep no doubt about that

0 Kudos

Re: Bandwidth limit per app /category

Hello can you edit the profile in the smartlog to check for further information about traffic.

Re: Bandwidth limit per app /category

thanks for the feedback all, unfortunately this is not working for me.

i am not able to see any discarded packet on the smartview or smartlog.

also monitoring this through CLI as Tim Hall‌  fw ctl zdebug +drop | grep APPI_LIMIT i am not able to find a thing either.

so here it goes my question, is this really working? can media stream traffic be throttled ?

Regards 

0 Kudos
Admin
Admin

Re: Bandwidth limit per app /category

This is more of a General Product Topics‌ question.

You won't necessarily see drops in SmartLog when traffic is limited.

From the notes I've seen internally, this is what you should be looking at to validate that limiting is happening (granted, this is from R75.40:

fw ctl zdebug -m APPI all > dbg.txt

In dbg.txt, look for: fw_appi_limit_set_matched_data: Set new rule_id: (rule_num)

This will tell you that traffic is being matched to a rule with limit.

Note this debug can be overwhelming on gateways with a lot of traffic, so I would only run it fairly briefly. 

Re: Bandwidth limit per app /category

just a follow up, i managed to get logs on the zdebug.

now my question is , is there a way to  to have this in a nice report in the smartevent with the views/reports?

Regards 

0 Kudos
Admin
Admin

Re: Bandwidth limit per app /category

What are you trying to get into the reports, exactly, that bandwidth was actually limited?

Since this isn't logged in the logs (to the best of my knowledge), I assume you can't run a report on it.

0 Kudos

Re: Bandwidth limit per app /category

i was hope to get something like this :img

0 Kudos
Admin
Admin

Re: Bandwidth limit per app /category

As I said, it's not something we currently log, therefore not something we can report on.

It's something we can look at adding in a later release. 

0 Kudos

Re: Bandwidth limit per app /category

thanks!

0 Kudos

Re: Bandwidth limit per app /category

To the best of my knowledge the fact that you use Accounting on the rule means you will have log entries that also contain information about the amount of triffic.

However this may no tell you anything about the bandwidth usage.

0 Kudos