CFS: How to configure Per Action Bandwidth Aggregation in CFS 3.0 (5.8.0.0 and above)

Description

CFS: How to configure Per Action Bandwidth Aggregation in CFS 3.0 (5.8.0.0 and above)

Cause

Resolution

 

Feature/Application:

CFS 3.0 integrates Application Firewall infrastructure to implement more granular, flexible and powerful content filter policy control. When CFS Policy Assignment is set to Via App Rules, the content filter function is controlled by Applicatin Firewall CFS policies which is defined in the Firewall  > App Rules  page. 

This article describes the method to configure Per Action bandwidth aggregation method on CFS categories With Per Action bandwidth aggregation method, multiple policies will be subject to a single aggregate bandwidth management settings when they share the same action.

Procedure: 

In the following sections we describe the method to configure per-policy bandwidth aggregation.

 


Enabling CFS using App Rules 

On the Security Services > Content Filter page, users are given a choice to select between Via User and Zone Screens and Via App Rules. Select Via App Rules and click on the Accept button to enable Application Firewall for CFS.

Image

Creating Per Action BWM object

  • Login to the SonicWall Management GUI
  • Navigate to Firewall > Action Objects.
  • Click on Add New Action Object
  • Enter a name for this object
  • Set Action as Bandwidth Management. Make sure Bandwidth Management is enabled on the WAN interface of the SonicWall.
  • Select Per Policy under Bandwidth Aggregation Method.
  • Set Guranteed and Maximum Bandwidth as 200 Kbps for both Outbound and Inbound Bandwidth Management.
  • Click on OK to save the object.

Image

Creating objects for CFS Categories

  • Navigate to Firewall > Match Objects
  • Create the following objects

ImageImage

Creating App Rules Policies

  • Navigate to Firewall > App Rules.
  • Create the following Application Firewall Policies.

ImageImage 

With the above configuration, the maximum bandwidth available for users from Staff and Guest, when accessing the above sites, would be 200 Kbps,

 

Related Articles

  • SonicOS 8.1.0 FAQ
    Read More
  • SonicWall GEN8 TZs and GEN8 NSas Settings Migration
    Read More
  • Getting started with SonicWall firewalls
    Read More
not finding your answers?