How does BWM work with access rules

Question:

The environment is like the following:
 

•  Firewall Settings >> BWM set to Advanced
•  Firewall >> Bandwidth Objects >> "TestBWM Object" with Maximum=1Mbps
•  Two access rules:
  •  LAN (range1) -> WAN (any) with BWM object "TestBWM Object" applied
  •  LAN (range2) -> WAN (any) with BWM object "TestBWM Object" applied

 
The question is:
"TestBWM Object" applies as maximum to all rules where It is applied, Ex.: (range1 + range2) together maximum 1Mbps
Or "TestBMW Object" applies per policy, ex.: range1 maximum 1Mbps and range2 maximum 1Mbps, therefore could use 1mbps each (at the worst case, 2 Mbps = 1Mbps + 1Mbps)
 
Is it possible select the behavior of these BMW objects?

Answer:

BWM will be applied separately to each policy, so potentially a maximum bandwith should be 2Mb/s.
 
If you want 1MB/s then combine range1 and range2 into a group object an apply in a single firewall policy.
 
Within the BWM object you also have "Elemental" as an option. This allows you to assign a max bandwidth to EACH IP with the policy where the BWM object is applied.


See Also:

KB 12143: UTM: How to configure Per-IP Bandwidth Management on SonicOS 6.2 and above