topic Limit http/https user's downloads in Network Security

Limit http/https user's downloads

epasqualotto — Tue, 12 Mar 2019 09:46:37 GMT

Dear all, I've an ASA 5516 and I'm trying to limit the http based traffic download from users.

192.168.99.0/24 is my local network and I'm using these rules:

access-list global_mpc extended permit tcp any 192.168.99.0 255.255.255.0 eq www

class-map global-class1
match access-list global_mpc
!

class global-class1
inspect http
police input 100000 1500
police output 100000 1500

But it doesn't work, it works only if I remove "eq www" so limit for the download on every port.

Anyone have suggestions?

mvsheik123 — Mon, 07 Aug 2017 23:07:55 GMT

Hi,

Can you try by changing ACL to...

access-list global_mpc extended permit tcp any eq www 192.168.99.0 255.255.255.0

Thx

epasqualotto — Tue, 08 Aug 2017 06:51:08 GMT

I'll make a test on next days by using cli. With ASDM there's no option to set the source port (only destination) when configuring ACL for QoS.

Thanks