Add a Traffic Management Action to a Policy
After you Define a Traffic Management Action in v11.8.x and Lower, you can add it to policy definitions. You can also add any existing traffic management actions to policy definitions.
To add a Traffic Management Action to a policy definition, from Fireware Web UI:
- Select Firewall > Traffic Management.
The Traffic Management page appears.
- In the Traffic Management Policies list, select one or more policies.
- In the Select action drop-down list, select the traffic management action to apply to the selected policies.
- Click Save.
You can also set connection rate limits for a policy on the Advanced tab. For more information, see Set Connection Rate Limits.
To add a Traffic Management Action to policy definitions, from Policy Manager:
- Double-click the policy for which you want to guarantee a minimum bandwidth.
- Select the Advanced tab.
- In the Traffic Management drop-down list, select a traffic management action to apply to the policy.
- Click OK to close the Edit Policy Properties dialog box.
If the sum of all guaranteed bandwidths for an interface approaches or exceeds the bandwidth limit you set for the interface, a warning message appears.
The new action appears in the Traffic Management Actions dialog box.
If you want to track the bandwidth used by a policy, go to the Service Watch tab of Firebox System Manager and specify Bandwidth instead of Connections. For more information, see Visual Display of Policy Usage (Service Watch).
If you have a multi-WAN configuration, bandwidth limits are applied separately to each interface.
Add a Traffic Management Action to Multiple Policies
When the same traffic management action is added to multiple policies, the maximum and minimum bandwidth apply to each interface in your configuration. If two policies share an action that has a maximum bandwidth of 100 kbps on a single interface, then all traffic on that interface that matches those policies is limited to 100 kbps total.
If you have limited bandwidth on an interface used for several applications, each with unique ports, you might need all the high priority connections to share one traffic management action. If you have lots of bandwidth to spare, you could create separate traffic management actions for each application.