Checkpoint SMB Traffic shaping/QOS

[velo]

I have SMB gateways (Centrally managed) I want to restrict traffic to certain high traffic domains (e.g. Microsoft) so that it doesn't saturate the internet connection. On other vendors I have done this with traffic shaping, and given certain URLs and domains very low priority. 

Is it possible to achieve something similar on the SMB appliance? I found this article about QOS on SMB and in the limitations it says:

• QoS rules configured with domain names are not enforced.  

From that, it looks like I can't do what I need? Is there another way to achieve this?

https://support.checkpoint.com/results/sk/sk32176

Thanks

[Gaurav_Pandya · Accepted solution]

Hi,

Please check if below procedure helps in achieving your goal.

Try to use access control policy for domain based restriction. 

traditional QoS blades are often used for interface-level shaping. Application/domain-based limiting is best handled through the Application Control policy within the Access Control Policy.

Go to Security Policies > Access Control > Policy.
Create a new rule or edit an existing one.
In the Application/Sites column, add a new Application/Site object.
You can create a custom application group or search for specific URL categories (e.g., streaming sites, social media). To define specific domain names, select Custom Application/Site and enter the domain pattern (e.g., *.example.com).
Configure Traffic Shaping (Limitation)
In the Action column of your rule, select an action that allows traffic (e.g., Accept).
Right-click the Action and select Limit.
Define the maximum bandwidth (e.g., 500 Kbps) allowed for the matching domain/application.
Install the Policy

[velo]

This is great, thank you