Watchguard Firebox X5-W Betriebsanweisung PDF herunterladen (Seite 110)

Managing Network Traffic

94 Firebox X Edge e-Series

Traffic Categories

The Firebox® X Edge e-Series allows you to limit data sent through services and Traffic Control filters. A

service can allow or deny all data of a specified type. Traffic Control does not allow or deny data, but cre-

ates “filters” that separate important network traffic from other data. For example, you can create a filter

that identifies e-mail (SMTP) traffic or secure shell (SSH) connections.

When you create a filter, you must select the priority for the traffic it identifies. There are four categories

of network traffic: interactive, high, medium, and low. You can create as many as 100 traffic filters in

each traffic category. Filters can be based on the IP protocol type, the source or destination IP address,

and the source or destination port.

Interactive traffic is routed before all other traffic. Bandwidth not used for interactive traffic is divided

between high, medium, and low priority traffic. Unused bandwidth is automatically given to other cate-

gories. For example, if there is no interactive or low priority traffic, all of the bandwidth is divided

between high and medium priority traffic.

Interactive traffic

Interactive traffic is sent before any other traffic and is only limited by the speed of your connection. Use

the interactive category for traffic that must have low latency. Some examples of interactive traffic are

Telnet, Secure Shell (SSH), video communication, and Voice over Internet Protocol (VoIP).

High priority

High priority traffic is given 75% of the bandwidth not used by interactive traffic. Use the high priority

category for traffic that is very important to your company or uses a lot of bandwidth. Some examples of

high priority traffic are secure HTTP (HTTPS) and virtual private network (VPN ) traffic.

Medium priority

Medium priority traffic is given 20% of the bandwidth not used by interactive traffic. When traffic con-

trol is enabled, any traffic that is not in a different filter is automatically put in the medium category. This

traffic is represented by the “All other traffic” entry on the Traffic Control page.

Low priority

Low priority traffic is given 5% of the bandwidth not used by interactive traffic. Use the low priority cat-

egory for low priority traffic that does not use much bandwidth, or is not important. Some examples of

low priority traffic are peer-to-peer (P2P) file transfers or instant messaging (IM).

Configuring Traffic Control

The Firebox® X Edge e-Series has three traffic control options:

Traffic control is off

The Edge sends network traffic in the sequence it was received.

Traffic control is on, but prioritization is off

This option limits all traffic to the upstream bandwidth limit.

1 2 ... 105 106 107 108 109 110 111 112 113 114 115 ... 233 234

Keine Kommentare

Watchguard Firebox X5-W Betriebsanweisung Seite 110