[Nebula - USG Flex H] - Why it's possible to limit bandwith only for certain applications

Maverick87

Hello everyone,
I've see in details the application usage under Nebula, and I've discovered that is possibile to limiting the bandwith usage only for a certain applications.

In this example, I can limit only Instagram, Facebook and Google but not Xbox Cloud Gaming/Speedtest

Also, speedtest and google have the same category (so seems the limitation is not based on category).

Also, if I keep an application that can be limited (click on the app name), seems that I cannot limit a single device:

In this example, I've kept Facebook app (that can be limited, as for listed before), but in this case I cannot limit the single device.
Instead, I can limit it per interface:

Other question: it's possible to apply this application limitation also into the USG Flex H Series?

Thank you

Zyxel_Tina

Hi @Maverick87,

The “Limit” option in Application Usage is based on the Bandwidth Management (BWM) feature in the local GUI of the USG FLEX H series. Not every application can be identified by BWM, which is why only some of them can be limited in Nebula. You can check the list of supported applications via the device’s local GUI.

Also, by current design, we confirm that application limits set from Nebula are configured per interface, and if the same application has two limits configured, eg., one on the firewall’s local GUI and one in Nebula, the firewall will follow the Nebula setting.

Hope this helps clarify your questions :)

Maverick87

Hi @Zyxel_Tina,
so for recap.

Nebula have an engine that could resolve all the applications used, instead the BWM engine into the flex couldn't resolve all applications, but only some.

From Nebula is possible to limit only certain applications because these are the only compatible with BWM system on the flex.

Is this right?
Is not possible to re-engineer the BWM system using the Application Usage monitor?

Thank you