Bandwidth limit per app /category

[ovidiu_catrina]

hello

i have a cluster of 2 firewalls, they have enabled only the application blade, without the URL blade.

i want to limit the bandwidth for the category media streams and media sharing in the following way.

the thing is that is applied and installed but I have no idea on how to check if this is actually working.

i tried to look at the applications and sites but i dont see anything related to traffic being rate limited.

on the logs i do see that the traffic matches the rule created on the application layer but as i said, i have no idea on how to check if the limit is applied or not.

can someone guide me ?

Regards 

[Marco_Valenti]

That is a nice question

One way can be , if you have monitor blade enable  from top source view  compare the bandwith in use by single host

But someone can be more helpful than me on this

[ovidiu_catrina]

i am looking more to an answer similar to this

How to monitor bandwidth limit for application control 

[Timothy_Hall]

Please see my recent post in this thread, your monitoring options are somewhat "limited":

How to monitor bandwidth limit for application control 

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

[Marco_Valenti]

you ask for monitoring bandwith and not for dropped packet  ofc Tim reply was more in deep no doubt about that

[Pablo_Barriga]

Hello can you edit the profile in the smartlog to check for further information about traffic.

[ovidiu_catrina]

thanks for the feedback all, unfortunately this is not working for me.

i am not able to see any discarded packet on the smartview or smartlog.

also monitoring this through CLI as Tim Hall‌  fw ctl zdebug +drop | grep APPI_LIMIT i am not able to find a thing either.

so here it goes my question, is this really working? can media stream traffic be throttled ?

Regards 

[PhoneBoy]

This is more of a General Product Topics‌ question.

You won't necessarily see drops in SmartLog when traffic is limited.

From the notes I've seen internally, this is what you should be looking at to validate that limiting is happening (granted, this is from R75.40:

fw ctl zdebug -m APPI all > dbg.txt

In dbg.txt, look for: fw_appi_limit_set_matched_data: Set new rule_id: (rule_num)

This will tell you that traffic is being matched to a rule with limit.

Note this debug can be overwhelming on gateways with a lot of traffic, so I would only run it fairly briefly. 

[ovidiu_catrina]

just a follow up, i managed to get logs on the zdebug.

now my question is , is there a way to  to have this in a nice report in the smartevent with the views/reports?

Regards 

[PhoneBoy]

What are you trying to get into the reports, exactly, that bandwidth was actually limited?

Since this isn't logged in the logs (to the best of my knowledge), I assume you can't run a report on it.

[ovidiu_catrina]

i was hope to get something like this :img

[PhoneBoy]

As I said, it's not something we currently log, therefore not something we can report on.

It's something we can look at adding in a later release. 

[ovidiu_catrina]

thanks!

[Hugo_vd_Kooij]

To the best of my knowledge the fact that you use Accounting on the rule means you will have log entries that also contain information about the amount of triffic.

However this may no tell you anything about the bandwidth usage.