Kerio Tech Firewall6 manual Advanced Options, Services, 115

Models: Firewall6

1 398
Download 398 pages 11.9 Kb
Page 115
Image 115

7.2 Bandwidth Limiter configuration

Tests have discovered that the optimal usage of the Internet line capacity is reached if the value is set to approximately 90 per cent of the bandwidth. It the values are higher, the bandwidth limiter is not effective (not enough speed is reserved for other connections and services if too much big data volumes are transferred). If they are lower, full line capacity is often not employed.

Warning: For optimal configuration, it is necessary to operate with real capacity of the line. This value may differ from the information provided by ISP. One method of how to find out the real value of the line capacity is to monitor traffic charts (see chapter 18.1) when you can be almost sure that the line is fully employed.

At the bottom of the dialog box, download and upload speed limits for users with ex- ceeded traffic quota can be set. The bandwidth defined will be shared by all users with their quota exceeded. This implies that the total traffic volume of these users is limited by the bandwidth value set here.

No optimal values are known for these speed limits. WinRoute administrators decide themselves what part of the bandwidth will be reserved for these users. It is recom- mended to set the values so that activities of these users do not affect other users and services.

Note: It is also possible to block any traffic for a particular users who exceed their quota. The restriction described above are applied only if the Don’t block further traffic (Only limit bandwidth...) action is set in configuration of the particular user account. For details, see chapter 13.1.

Advanced Options

Click on Advanced to define advanced Bandwidth Limiter parameters. These parameters apply only to large data volume transfers. They do not apply to users with exceeded quota (bandwidth values set for these users are applied without exception).

Services

Certain services may seem to perform large data volume transfers, although, in fact, they don’t. Internet telephony (Voice over IP — VoIP) is a typical example. It is possible to define exceptions for such services so that the bandwidth limiter does not apply to them.

It may also be desired to apply bandwidth limiter only to certain network services (e.g. when it is helpful to limit transfers via FTP and HTTP).

The Services tab enables definition of services to which bandwidth limiter will be applied:

115

Page 115
Image 115
Kerio Tech Firewall6 manual Advanced Options, Services, 115