topic Re: Restrict Network Bandwidth in Network Security

Restrict Network Bandwidth

ray_stone — Mon, 11 Mar 2019 12:34:07 GMT

Hi, We have around 100 users in our inside network. Can we restrict on downloading or assign bandwidth speed to users like in the way of divide bandthwidth. I want if user need to download then he wont able to take highter bandwidth except upto 15 kb. Can anyone suggest which options we can use in this regard. Thanks.

Re: Restrict Network Bandwidth

ROBERTO TACCON — Sat, 19 Apr 2008 15:47:16 GMT

QoS support on PIX/ASA is very limited - if you need more features, you need IOS platform.

We can do Policing and Prioritizing on the ASA firewall, but can not do traffic shaping and bandwidth reservation upto minimum level on the ASA as of now. This is IOS feature.

Traffic shaping was ported from IOS and scheduled to be added in version 7.2(4) and 8.0(4) via the commit of CSCsk06260.

It is filed as future enhancement request. ID :- CSCsk06260.

To have more info on it, please check it with following link:-

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk06260

Re: Restrict Network Bandwidth

ROBERTO TACCON — Sat, 19 Apr 2008 16:04:52 GMT

However you can try to rate limit with your asa:

PIX/ASA 7.x and Later: Bandwidth Management(Rate Limit) Using QoS Policies

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008084de0c.shtml#rate

HTH

Re: Restrict Network Bandwidth

cisco24x7 — Sat, 19 Apr 2008 16:24:58 GMT

Pix 7.x supports very limited QoS. Furthermore,

most of the 7.x and 8.x codes are in ED

releases which I do not trust to run it in

a production enviroment.

From what I can see in your requirements,

you can use IOS. If your requirements dictates

that you must have both QoS and Firewall on the

same device, then Checkpoint firewall is

better suited for your requirements.

Checkpoint firewall comes with standard

QoS (free) or a more granular version which

is not free.

Re: Restrict Network Bandwidth

ROBERTO TACCON — Sat, 19 Apr 2008 17:29:28 GMT

If the solution need a real traffic shaper (with advanced DPI technology upgradable without security problem ...) the better solution is a product like ALLOT

http://www.allot.com

HTH