[USG Flex H Series] - Limit bandwith for Application

Options
Maverick87
Maverick87 Posts: 481
Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
image  Master Member
in Security Ideas

Hello everyone,
into the Nebula Site, is possible to limit the bandwith usage for application.

image.png image.png

This functionality seems that is missing into the USG Flex H Series NGFW.

Is possible to apply this functionality, limiting the application bandwith for interface but also for client?

Thank you

1
Up Down
1 votes

Active · Last Updated

Comments

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,780
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    image  Zyxel Employee
    Options

    Hi @Maverick87 ,

    Thank you for the suggestion. To make sure we understand the request correctly, could you confirm a couple of points?

    • Do you mean that the Nebula portal already lets you limit application bandwidth usage for USG FLEX H devices, but this option is not currently available in the USG FLEX H’s local GUI?
    • Could you confirm whether your idea goes beyond limiting application bandwidth at the interface level — for example, limiting Facebook to 50 Mbps on the DomoDevice interface — and that you’re also looking for per-client limiting within that? For example, when Client_A connects through the DomoDevice interface and uses Facebook, you’d want that client’s rate limited to 25 Mbps specifically, separate from (and within) the overall 50 Mbps interface-level limit for Facebook?

    Zyxel_Judy

  • Maverick87
    Maverick87 Posts: 481
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
    image  Master Member
    Options

    Hi @Zyxel_Judy,

    For the first point, yes, seems that this feature is available only on Nebula portal. Seems that there is the BWM function on USG Flex local GUI, but this permit to manage the bandwith only to a precise and already defined application; instead the portal seems to analyze all of the traffic and not limited to defined applications.

    For the second point, I think you need separate the management. You can define a rule per interface or per device. For example you can limit facebook download bandwith for the whole DomoDevice interface, and instead for Instagram you can limit a client or groups of clients (you can use address object, so you can use single device or groups).

    The functionality into the GUI already exists, as explain before, and I think is BWM function. Need only to be extend to a different applications and per interface/client/group of clients.

    You can confirm this?

    Thank you

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,780
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    image  Zyxel Employee
    Options

    Hi @Maverick87 ,

    • As you know, Application Usage on Nebula Cloud is related to BWM (Bandwidth Management) on the local GUI. However, there is a difference between the two that explains why the applications shown differ: the application list under Nebula's Application Usage is updated via the signature database, so it grows and changes over time. The list of applications on GUI's BWM, on the other hand, is a fixed list.
      That’s also why you’ll notice only some of the applications visible in Nebula's Application Usage can have a rate limit applied — only those that are part of BWM’s fixed application list, not the full set shown under Application Usage.
    • Regarding rate-limiting by client or group of clients on Nebula — we will evaluate this as a feature request and look into adding support for it.

    Zyxel_Judy

  • Maverick87
    Maverick87 Posts: 481
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate
    image  Master Member
    Options

    Thank you @Zyxel_Judy

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）