- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
Configuration of custom BWM Action object for App Rule in SonicOS (5.9, 6.2 & above)
07/01/2021 
34 People found this article helpful
98,925 Views
Description
SonicOS offers an integrated traffic shaping mechanism through its Egress (outbound) and Ingress (inbound) bandwidth management (BWM) interfaces. Outbound BWM can be applied to traffic sourced from Trusted and Public Zones (such as LAN and DMZ) destined to Untrusted and Encrypted Zones (such as WAN and VPN). Inbound BWM can be applied to traffic sourced from Untrusted and Encrypted Zones destined to Trusted and Public Zones. Also the BWM can be applied to application through the App rule in SonicWall.
Resolution
Step 1: Creating Bandwidth Object.
Step 2: Enabling Bandwidth Management in the sonicwall
Step 3: Configuring Bandwidth Management in WAN Interface
Step 4: Configuring custom Action Object for BWM
Step 5: Configuring App rule with custom Action Object
Note: Once BWM has been enabled on an interface, and a link speed has been defined, traffic traversing that link will be throttled both inbound and outbound to the declared values, even if no Access Rules are configured with BWM settings.
This article is created with assumption that WAN Download speed is 10Mbps and Upload Speed is 10Mpbs. The Ingress Guaranteed bandwidth is 5Mbps and Maximum Bandwidth is 8Mbps. The Egress Guaranteed Bandwidth is 5Mbps and Maximum Bandwidth is 8Mbps.
This article is created with assumption that WAN Download speed is 10Mbps and Upload Speed is 10Mpbs. The Ingress Guaranteed bandwidth is 5Mbps and Maximum Bandwidth is 8Mbps. The Egress Guaranteed Bandwidth is 5Mbps and Maximum Bandwidth is 8Mbps.
Step 1: Creating Bandwidth Object:
Please login to your Sonicwall Management page and follow below steps
1. Navigate to Firewall | Bandwidth object, on the right side click Add button
Ingress Bandwidth Object
Ingress Bandwidth Object
- Name: Ingress Object (Type any Friendly Name)
- Guaranteed Bandwidth: 5000 (Type the required value which should be given out of total bandwidth)
- Maximum Bandwidth: 8000 (Type the maximum value which can be given in more bandwidth available)
- Traffic Priority: 0 Realtime (Select priority out of eight default queue)
- Violation Action: Delay (Either select Delay or Drop for the traffic violating this bandwidth).
- Click OK button to create a bandwidth object
Egress Bandwidth Object
- Name: Egress Object (Type any Friendly Name)
- Guaranteed Bandwidth: 5000 (Type the required value which should be given out of total bandwidth)
- Maximum Bandwidth: 8000 (Type the maximum value which can be given in more bandwidth available)
- Traffic Priority: 0 Realtime (Select priority out of eight default queue)
- Violation Action: Delay (Either select Delay or Drop for the traffic violating this bandwidth).
- Click OK button to create a bandwidth object
Step 2: Enabling Bandwidth Management in the SonicWall
1) Navigate to Firewall Settings | BWM page
2) On the right side select Advanced radio button near Bandwidth Management Type
3) Click Accept Button at the top.
Step 3: Configuring Bandwidth Management in WAN Interface
2) On the right side select Advanced radio button near Bandwidth Management Type
3) Click Accept Button at the top.
Step 3: Configuring Bandwidth Management in WAN Interface
1) Navigate to Network | Interface, on the right side configure your WAN interface to get Edit interface X1 Window.
2) Go to Advanced tab to see Bandwidth Management section
3) Select "Enable Interface Egress Bandwidth Limitation" check box
- Maximum Interface Egress Bandwidth (articleps): 10000 (Type the upload speed of your ISP in articleps)
4) Select "Enable Interface Ingress Bandwidth Limitation" check box
- Maximum Interface Egress Bandwidth (articleps): 10000 (Type the download speed of your ISP in articleps)
After configuring above information click OK button.
Step 4: Configuring custom Action Object for BWM
Navigate to Firewall | Action Object, on the right side click Add Action Objects button
Step 5: Configuring App rule with custom Action Object
- Action Name: Custom BWM (Type any friendly name which you would like to use)
- Action: Bandwidth Management
- Bandwidth Aggregation Method: Per Policy (You can select either Per Policy or Per Action)
- Select Enable Egress Bandwidth Management and select Bandwidth Object: Egress Object (Bandwidth Object which you created)
- Select Enable Ingress Bandwidth Management and select Bandwidth Object: Ingress Object (Bandwidth Object which you created)
Click OK button to save the settings
Step 5: Configuring App rule with custom Action Object
Navigate to Firewall | App Rules, on the right side click Add New Policy button
Configure your policy and you can Select Customer BWM (Action Object which you created for BWM) in Action Object area.
Related Articles
- Analyzing TCP reset(RST)packets
- ‘Error sending one-time password’ encountered when connecting to NetExtender
- Supported SonicWall and 3rd party SFP and SFP+ modules that can be used with SonicWall NSsp series
Categories
- Firewalls > TZ Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall NSA Series
YES
NO