Seperate down/up default bandwidth - Feature Request

Hi Trony,

Greetings.

The settings that you referred are Global configurations for QoS on Sophos.

We do limit Bandwidth seperately for different entities.

I request you to refer some link below to understand our traffic shaping module further:

https://www.sophos.com/en-us/support/knowledgebase/123059.aspx

https://www.sophos.com/en-us/support/knowledgebase/123058.aspx

https://community.sophos.com/kb/en-US/123062

https://community.sophos.com/kb/en-US/123061

https://www.sophos.com/en-us/support/knowledgebase/123060.aspx

Hope that helps.

Let me know if you have any further questions.

Thanks

Sachin Gurung

Thank you Sachin for explaning different traffic shaping policies and uses.

In some cases, download and upload speed is different, it is not symmetric. How can we configure it on WAN interface?

In my case I have 50Mb/10Mb. How can I setup 10Mb on upload side?

See screenshot.

Thank you Sachin for the traffic shaping information.  The ask is really about specifying the bandwidth limits on the actual WAN links.  This is the missing piece to the formula for the firewall to control the traffic correctly in/out of the WAN interface.  The traffic shaping policies are part of the puzzle but they could overwhelm (or underwhelm) the WAN link if the firewall does not know actual interface limits, hence the ask.

It does not seem the feature is currently available (that I've seen) in XG so I don't expect an immediate answer.  I do hope it's a strongly considered feature in future versions.

Again, thank you.

Hi Luk/ Trony,

The concerned Traffic Shaping Settings page is used to configure default Traffic Shaping settings.

This setting is not used to control the bandwidth (ingress & egress) for a WAN link; it is generally a sum of all WAN links' maximum limits. 

The Administrator can enforce the handling of all internet-bound traffic by any Traffic Shaping Policy (ref. previous links) applied to it. If there is no Policy applied to the traffic, it will be handled by the Default Policy. Hence, The Default Policy will be applicable to the traffic which does not have any Traffic Shaping Policy applied.

Yes, Upload Limit is not available which can be reported as a Feature Request, but I am not certain why someone will Limit any available bandwidth (ingress or egress) from a default settings option. It should be defined explicitly for granular hosts. 

Feature Request link:

http://feature.astaro.com/forums/330219-sophos-xg-firewall

Thanks

Sachin Gurung

Sachin,

thank you for your explanation. On UTM, on WAN interface, you set the Download and Upload bandwidth available, in this way UTM know how much bandwidth has in both direction and also when you create traffic shaping rules, it displays a message when you override the limit.

How can the XG know how much Upload bandwidth does it have? Maybe we or you are missing some concepts![:S]

I will open the feature request!

http://feature.astaro.com/forums/330219-sophos-xg-firewall/suggestions/10778022-configure-bandwith-provided-by-the-isp-in-each-wa

Vote the feature request. Was already opened!