Main Menu
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • English English English en
  • BLOG
  • CONTACT SALES
  • FREE TRIALS
  • English English English en
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • Menu

Configuring Bandwidth Management for HTTP Websites using App Rules feature

10/14/2021 1,101 People found this article helpful 101,671 Views

    Download
    Print
    Share
    • LinkedIn
    • Twitter
    • Facebook
    • Email
    • Copy URL The link has been copied to clipboard

    Description

    From SonicOS 5.8 onwards, Application Control Advanced, CFS and IPS can be configured using the SonicWall Application Firewall infrastructure under Firewall | App Rules.  This article illustrates how to configure bandwidth management to limit bandwidth for http sites using App Rules.

    Resolution

    Resolution for SonicOS 6.5

    This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

    Create a Bandwidth Object:

      To create a bandwidth Object, 

    • Navigate to Manage | Firewall Settings | Bandwidth Management
    • Set the Bandwidth Management type to Advanced and Click on Accept.

    Image

    • Navigate to Manage | Objects | Bandwidth Objects
    • Click on Add and Provide a Friendly Name
    • Guaranteed Bandwidth, Maximum Bandwidth and Traffic Priority values can be set as per your requirement.
    • Set the Violation Action to Delay and Save the Settings.

    Image

    Create an Action Object:  

    • Navigate to Manage | Objects | Action Objects.
    • Click on Add New Action Object.
    • Provide a friendly name and set the action object type to  'Bandwidth Management'
    • Bandwidth Aggregation Method needs to be set to Per Policy
    • Enable the Egress and Ingress Bandwidth Management and select the newly created bandwidth object from the drop down list and click Ok.
    • Enable Tracking Bandwidth usage.
      Image

    Create a Match Object with the Websites that needs Bandwidth limitations:

    • Navigate to Manage | Objects | Match Objects.
    • Click on 'Add New Match Object'
    • Provide a Friendly Object Name
    • Match object type should be HTTP host
    • Set the Match type to Partial Match
    • Type the websites that you want to limit and click on Add.
    • Click on OK to save the settings.
      Image

    Now we have the Action Object and Match Object created, we need to create an App Rule and apply the Address object and Match Object to the rule.


    Create an App Rule and Apply the Action object and Match Object in the Rule:

    • Navigate to Manage | Rules | App rules.
    • Check the Box 'Enable App Rules'.
    • Click on 'Add new Policy'.
    • Give a Policy Name.
    • Policy Type: HTTP Client
    • Destination Service: HTTP
    • You can exclude an Address object under 'Exclusion Address'
    • Select the recently created Match Object in the 'Match Object' drop down.
    • Select the newly created Action Object in the 'Action Objects 'drop down.
    • You can include/exclude Users/ User Groups.
    • You can schedule the rule using the schedule option.
    • Set the connection side to client side and direction to Advanced.
    • Click on OK to save the settings.
      Image
    • At this point, the Bandwidth Management should be Applied to the Websites configured in the App Rules.

    Resolution for SonicOS 6.2 and Below

    The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.



    Create a Bandwidth Object:
       
    In 5.8 Firmware versions and Below, the Bandwidth Values are entered in the Action Object itself but Firmware 5.9 and above provides option to create a Bandwidth object separately and use the same in the Action Object.

      To create a bandwidth Object, 

    • Navigate to Firewall Settings | BWM
    • Set the Bandwidth Management type to Advanced and Click on Accept.
    • Navigate to Firewall | Bandwidth Objects
    • Click on Add and Provide a Friendly Name
    • Guaranteed Bandwidth, Maximum Bandwidth and Traffic Priority values can be set as per your requirement.
    • Set the Violation Action to Delay and Save the Settings.
      Image

    Create an Action Object:  

    • Navigate to Firewall | Action Objects.
    • Click on Add New Action Object.
    • Provide a friendly name and set the action object type to  'Bandwidth Management'
    • Bandwidth Aggregation Method needs to be set to Per Policy
    • Enable the Egress and Ingress Bandwidth Management and select the newly created bandwidth object from the drop down list and click Ok.
    • Enable Tracking Bandwidth usage.
      Image

    Create a Match Object with the Websites that needs Bandwidth limitations:

    • Navigate to Firewall | Match Objects.
    • Click on 'Add New Match Object'
    • Provide a Friendly Object Name
    • Match object type should be HTTP host
    • Set the Match type to Partial Match
    • Type the websites that you want to limit and click on Add.
    • Click on OK to save the settings.
      Image

    Now we have the Action Object and Match Object created, we need to create an App Rule and apply the Address object and Match Object to the rule.


    Create an App Rule and Apply the Action object and Match Object in the Rule:

    • Navigate to Firewall | App rules.
    • Check the Box 'Enable App Rules'.
    • Click on 'Add new Policy'.
    • Give a Policy Name.
    • Policy Type: HTTP Client
    • Destination Service: HTTP
    • You can exclude an Address object under 'Exclusion Address'
    • Select the recently created Match Object in the 'Match Object' drop down.
    • Select the newly created Action Object in the 'Action Objects 'drop down.
    • You can include/exclude Users/ User Groups.
    • You can schedule the rule using the schedule option.
    • Set the connection side to client side and direction to Advanced.
    • Click on OK to save the settings.
      Image
    • At this point, the Bandwidth Management should be Applied to the Websites configured in the App Rules.

    Related Articles

    • ‘Error sending one-time password’ encountered when connecting to NetExtender
    • Supported SonicWall and 3rd party SFP and SFP+ modules that can be used with SonicWall NSsp series
    • Supported SonicWall and 3rd party SFP and SFP+ modules that can be used with SonicWall NSA series

    Categories

    • Firewalls > TZ Series > Application Firewall
    • Firewalls > SonicWall NSA Series > Application Firewall
    • Firewalls > SonicWall SuperMassive 9000 Series > Application Firewall

    Not Finding Your Answers?

    ASK THE COMMUNITY

    Was This Article Helpful?

    YESNO

    Article Helpful Form

    Article Not Helpful Form

    Company
    • Careers
    • News
    • Leadership
    • Awards
    • Press Kit
    • Contact Us
    Popular resources
    • Communities
    • Blog
    • SonicWall Capture Labs

    Stay In Touch

    • By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. You can unsubscribe at any time from the Preference Center.
    • This field is for validation purposes and should be left unchanged.
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
    • Instagram

    © 2022 SonicWall. All Rights Reserved.

    • Legal
    • Privacy
    • English
    Scroll to top
    Trace:dd05288e52973a5809ba22c373a5ba22-70