Main Menu
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • English English English en
  • BLOG
  • CONTACT SALES
  • FREE TRIALS
  • English English English en
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • Menu

How can I configure Global bandwidth management?

10/14/2021 495 People found this article helpful 113,380 Views

    Download
    Print
    Share
    • LinkedIn
    • Twitter
    • Facebook
    • Email
    • Copy URL The link has been copied to clipboard

    Description

    Bandwidth management (BWM) is a means of allocating bandwidth resources to critical applications on a network. Global BWM is controlled by the SonicWall Security Appliance on ingress (inbound) and egress (outbound) traffic. It allows network administrators to guarantee minimum bandwidth
    and prioritize traffic based on access rules. Balancing the bandwidth allocated to different network traffic and then assigning priorities to traffic can improve network performance.

    Global BWM works by first enabling bandwidth management on an interface and then allocating the available bandwidth for that interface on the ingress and egress traffic. It then assigns individual limits for each class of network traffic. By assigning priorities to network traffic,applications requiring a quick response time, such as Telnet, can take precedence over traffic requiring less response time, such as FTP.

    Global BWM provides eight priority queues:

    Priority  
    0   Realtime
    1   Highest
    2   High
    3   Medium High
    4   Medium
    5   Medium Low
    6   Low
    7   Lowest

    Resolution


    Resolution for SonicOS 6.5

    This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.



    To view the BWM configuration

    1. Click Manage in the top navigation menu
    2. Navigate toFirewall Settings | Bandwidth Management page.
      Image


     TIPS:

    • This priority table is used only when global bandwidth management is selected.
    • In global BWM mode, all traffic (by default) is marked as  medium priority unless configured via firewall rule/app firewall rule. Three priority queues are set by default:
    • The default settings for this page consists of three priorities with preconfigure guaranteed and maximum bandwidth. The medium priority has the highest guaranteed value since this priority queue is used by default for all traffic not governed by a BWM enabled policy.
    • When global BWM is enabled on an interface, all of the traffic to and from that interface is bandwidth managed.


    BWM Types

    • Advanced (WAN):  Only WAN zones can have assigned guaranteed and maximum bandwidth to services and have prioritized traffic.
    • Global:  (Default) All zones can have assigned guaranteed and maximum bandwidth to services and have prioritized traffic.
    • None  :  Disables BWM.

    Configuring WAN Bandwidth Management (BWM)

    1. Login to the SonicWall management GUI.
    2. Navigate to Firewall Settings | Bandwidth Management page.
    3. Select radio-button Advanced under Bandwidth Management Type.
    4. Click Accept .

       NOTE: Every time the Bandwidth Management Type is changed, all bandwidth management settings on the Firewall Rules will be reset to the factory defaults; therefore, you must reconfigure those rules.


    Enabling Bandwidth Management on the WAN Interface

    BWM configurations begin by enabling BWM on the relevant WAN interface, and declaring the interface’s available bandwidth in Kbps (Kilobits per second).

    1. Click Manage in the top navigation menu.
    2. Navigate to  Network | Interfaces page.
    3. Click  configure under X1 (or another interface on the WAN zone).
    4. Click  Advanced tab.
    5. Set the Egress and Ingress bandwidth under the Bandwidth Management section.
      Image


       NOTE:Once BWM has been enabled on an interface, and a link speed has been defined, traffic traversing that link will be throttled—both inbound and outbound—to the declared values, even if no Access Rules are configured with BWM settings.Once one or both BWM settings are enabled on the WAN interface and the available bandwidth has been declared, a Bandwidth tab will appear on Access Rules. The Bandwidth tab will present either Inbound settings, Outbound settings, or both, depending on what was enabled on the WAN interface:


    Configuring Global Bandwidth Management (BWM)

    1. Login to the SonicWall management GUI.
    2. Click Manage in the top navigation menu.
    3. Navigate to Firewall Settings | Bandwidth Management page.
    4. Select radio-button Global under Bandwidth Management Type.
    5. Click Accept.
      Image

    6. When changing BWM settings, the following warning message will be displayed. Click OK. 
      Image



    Enabling Bandwidth Management on LAN / DMZ Interfaces 

    1. Click Manage in the top navigation menu.
    2. Navigate to Network | Interfaces page.
    3. Click  configure under X0 (or another interface on a non-WAN zone).
    4. Click Advanced tab.
    5. Set the Egress and Ingress bandwidth under the Bandwidth Management section.
      Image

       NOTE: The Bandwidth Management section will be greyed-out in non-WAN interfaces if the Bandwidth Management Type is either WAN or None, and will be configurable only when it is set to Global.


    Global BWM Option in Access Rules 

    1. The following option is available in the Ethernet BWM tab of a rule under Firewall | Access Rules when Bandwidth Management Type is set to Global. Image


       NOTE: All priorities will be displayed (Realtime – Lowest) regardless if all have been configured. Refer to the Firewall Settings | Bandwidth Management page to determine which priorities are enabled. If the Bandwidth Management Type is set to Global and you select a Bandwidth Priority that is not enabled, the traffic is automatically mapped to the level 4 priority (Medium). For a BWM Type of WAN, the default priority is level 7 (Low). 

    BWM Option in App Rules 

    A number of BWM action options are also available in the predefined, default action list. The BWM action options change depending on the Bandwidth Management Type setting on the Firewall Settings | Bandwidth Managementpage. If the Bandwidth Management Type is set to Global, all eight levels of BWM are available. If the Bandwidth Management Type is set to Advanced, the predefined actions list includes three levels of Advanced BWM. 

    The following table lists the predefined default actions that are available when adding a policy.

    1. Actions Objects when Bandwidth Management Type is set to Advanced. Image

    2. Actions Objects when Bandwidth Management Type is set to Global. Image

    3. BWM in Application Control Policies .
      Image

    Resolution for SonicOS 6.2 and Below

    The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.



    To view the BWM configuration, navigate to Firewall Settings | BWM page.

    Image

    TIPS: 

    • This priority table is used only when global bandwidth management is selected.
    • In global BWM mode, all traffic (by default) is marked as medium priority unless configured via firewall rule/app firewall rule. Three priority queues are set by default:
    • The default settings for this page consists of three priorities with preconfigure guaranteed and maximum bandwidth. The medium priority has the highest guaranteed value since this priority queue is used by default for all traffic not governed by a BWM enabled policy.
    • When global BWM is enabled on an interface, all of the traffic to and from that interface is bandwidth managed.

    BWM TYPES

    • WAN   :  Only WAN zones can have assigned guaranteed and maximum bandwidth to services and have prioritized traffic.
    • Global:  (Default) All zones can have assigned guaranteed and maximum bandwidth to services and have prioritized traffic.
    • None  :  Disables BWM.

    Configuring WAN Bandwidth Management (BWM)

    1. Login to the SonicWall management GUI.
    2. Navigate to Firewall Settings | BWM page.
    3. Select radio-button WAN under Bandwidth Management Type.
    4. Click Accept.

      NOTE: Every time the Bandwidth Management Type is changed, all bandwidth management settings on the Firewall Rules will be reset to the factory defaults; therefore, you must reconfigure those rules.



    Enabling Bandwidth Management on the WAN Interface

    BWM configurations begin by enabling BWM on the relevant WAN interface, and declaring the interface’s available bandwidth in Kbps (Kilobits per second).

    1. Navigate to  Network | Interfaces page.
    2. Click on configure under X1 (or another interface on the WAN zone).
    3. Click  Advanced tab.
    4. Set the Egress and Ingress bandwidth under the Bandwidth Management section.
      Image

      NOTE: Once BWM has been enabled on an interface, and a link speed has been defined, traffic traversing that link will be throttled—both inbound and outbound—to the declared values, even if no Access Rules are configured with BWM settings.Once one or both BWM settings are enabled on the WAN interface and the available bandwidth has been declared, a Bandwidth tab will appear on Access Rules. The Bandwidth tab will present either Inbound settings, Outbound settings, or both, depending on what was enabled on the WAN interface:


    Configuring Global Bandwidth Management (BWM)

    1. Login to the SonicWall management GUI.
    2. Navigate to Firewall Settings | BWM page.
    3. Select radio-button Global under Bandwidth Management Type.
    4. Click Accept .
      Image

    5. When changing BWM settings, the following warning message will be displayed. Click OK . 
      Image


    Enabling Bandwidth Management on LAN / DMZ Interfaces

    1. Navigate to Network | Interfaces page.
    2. Click  configure under X0 (or another interface on a non-WAN zone).
    3. Click  Advanced tab.
    4. Set the Egress and Ingress bandwidth under the Bandwidth Management section.
      Image

      NOTE: The Bandwidth Management section will be greyed-out in non-WAN interfaces if the Bandwidth Management Type is either WAN or None, and will be configurable only when it is set to Global.




    Global BWM Option in Access Rules

    1. The following option is available in the Ethernet BWM tab of a rule under Firewall | Access Rules when Bandwidth Management Type is set to Global. Image


      NOTE: All priorities will be displayed (Realtime – Lowest) regardless if all have been configured. Refer to the Firewall Settings | BWM page to determine which priorities are enabled. If the Bandwidth Management Type is set to Global and you select a Bandwidth Priority that is not enabled, the traffic is automatically mapped to the level 4 priority (Medium). For a BWM Type of WAN, the default priority is level 7 (Low). 


    BWM Option in App Rules

    A number of BWM action options are also available in the predefined, default action list. The BWM action options change depending on the Bandwidth Management Type setting on the Firewall Settings | BWM page. If the Bandwidth Management Type is set to Global, all eight levels of BWM are available. If the Bandwidth Management Type is set to WAN, the predefined actions list includes three levels of WAN BWM.

    The following table lists the predefined default actions that are available when adding a policy.

    1. Actions Objects when Bandwidth Management Type is set to WAN. 
      Image

    2. Actions Objects when Bandwidth Management Type is set to Global. 
      Image
    3. BWM in App Rules Policies .
      Image

    Related Articles

    • Switch from the Policy mode to classic mode on Gen 7 appliances
    • Analyzing TCP reset(RST)packets
    • ‘Error sending one-time password’ encountered when connecting to NetExtender

    Categories

    • Firewalls > NSa Series > Networking
    • Firewalls > NSv Series > Networking
    • Firewalls > TZ Series > Networking

    Not Finding Your Answers?

    ASK THE COMMUNITY

    Was This Article Helpful?

    YESNO

    Article Helpful Form

    Article Not Helpful Form

    Company
    • Careers
    • News
    • Leadership
    • Awards
    • Press Kit
    • Contact Us
    Popular resources
    • Communities
    • Blog
    • SonicWall Capture Labs

    Stay In Touch

    • By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. You can unsubscribe at any time from the Preference Center.
    • This field is for validation purposes and should be left unchanged.
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
    • Instagram

    © 2022 SonicWall. All Rights Reserved.

    • Legal
    • Privacy
    • English
    Scroll to top
    Trace:dd05288e52973a5809ba22c373a5ba22-70