Configuration of custom BWM Action object for App Rule in SonicOS (5.9, 6.2 & above)
03/26/2020 
32 
11770
DESCRIPTION:
SonicOS offers an integrated traffic shaping mechanism through its Egress (outbound) and Ingress (inbound) bandwidth management (BWM) interfaces. Outbound BWM can be applied to traffic sourced from Trusted and Public Zones (such as LAN and DMZ) destined to Untrusted and Encrypted Zones (such as WAN and VPN). Inbound BWM can be applied to traffic sourced from Untrusted and Encrypted Zones destined to Trusted and Public Zones. Also the BWM can be applied to application through the App rule in SonicWall.
RESOLUTION:
Step 1: Creating Bandwidth Object.
Step 2: Enabling Bandwidth Management in the sonicwall
Step 3: Configuring Bandwidth Management in WAN Interface
Step 4: Configuring custom Action Object for BWM
Step 5: Configuring App rule with custom Action Object
Note:
Once BWM has been enabled on an interface, and a link speed has been defined, traffic traversing that link will be throttled both inbound and outbound to the declared values, even if no Access Rules are configured with BWM settings.
This article is created with assumption that WAN Download speed is 10Mbps and Upload Speed is 10Mpbs. The Ingress Guaranteed bandwidth is 5Mbps and Maximum Bandwidth is 8Mbps. The Egress Guaranteed Bandwidth
is 5Mbps and Maximum Bandwidth is 8Mbps.
Step 1: Creating Bandwidth Object:
Please login to your Sonicwall Management page and follow below steps
1. Navigate to Firewall | Bandwidth object, on the right side click Add button
Ingress Bandwidth Object
- Name: Ingress Object (Type any Friendly Name)
- Guaranteed Bandwidth: 5000 (Type the required value which should be given out of total bandwidth)
- Maximum Bandwidth: 8000 (Type the maximum value which can be given in more bandwidth available)
- Traffic Priority: 0 Realtime (Select priority out of eight default queue)
- Violation Action: Delay (Either select Delay or Drop for the traffic violating this bandwidth).
- Click OK button to create a bandwidth object
Egress Bandwidth Object
- Name: Egress Object (Type any Friendly Name)
- Guaranteed Bandwidth: 5000 (Type the required value which should be given out of total bandwidth)
- Maximum Bandwidth: 8000 (Type the maximum value which can be given in more bandwidth available)
- Traffic Priority: 0 Realtime (Select priority out of eight default queue)
- Violation Action: Delay (Either select Delay or Drop for the traffic violating this bandwidth).
- Click OK button to create a bandwidth object
Step 2: Enabling Bandwidth Management in the SonicWall
1) Navigate to Firewall Settings | BWM page
2) On the right side select Advanced radio button near Bandwidth Management Type
3) Click Accept Button at the top.
Step 3: Configuring Bandwidth Management in WAN Interface
1) Navigate to Network | Interface, on the right side configure your WAN interface to get Edit interface X1 Window.
2) Go to Advanced tab to see Bandwidth Management section
3) Select "Enable Interface Egress Bandwidth Limitation" check box
- Maximum Interface Egress Bandwidth (articleps): 10000 (Type the upload speed of your ISP in articleps)
4) Select "Enable Interface Ingress Bandwidth Limitation" check box
- Maximum Interface Egress Bandwidth (articleps): 10000 (Type the download speed of your ISP in articleps)
After configuring above information click OK button.
Step 4:
Configuring custom Action Object for BWM
Navigate to Firewall | Action Object, on the right side click Add Action Objects button- Action Name: Custom BWM (Type any friendly name which you would like to use)
- Action: Bandwidth Management
- Bandwidth Aggregation Method: Per Policy (You can select either Per Policy or Per Action)
- Select Enable Egress Bandwidth Management and select Bandwidth Object: Egress Object (Bandwidth Object which you created)
- Select Enable Ingress Bandwidth Management and select Bandwidth Object: Ingress Object (Bandwidth Object which you created)
Click OK button to save the settings
Step 5: Configuring App rule with custom Action Object
Navigate to Firewall | App Rules, on the right side click Add New Policy button
Configure your policy and you can Select Customer BWM (Action Object which you created for BWM) in Action Object area.
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Capture Security applianceAdvanced Threat Protection for modern threat landscape
Network Security ManagerModern Security Management for today’s security landscape
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
