Sophos Firewall Traffic Shaping Policies

Sophos Firewall Network Traffic Shaping

• Sophos Firewall version 19.0v1 is discussed
• The document covers network traffic shaping on Sophos Firewall, including policies for rules and users
• Copyright of the document is reserved by Sophos Limited, 2022
• Sophos and the Sophos logo are registered trademarks of Sophos Limited
• Other names, logos, and marks mentioned may be trademarks or registered trademarks of Sophos Limited or other owners
• Document is subject to change without notice
• Sophos Limited is registered in England, number 2096520. Registered office: The Pentagon, Abingdon Science Park, Abingdon, Oxfordshire, OX14 3YP
• Configuring traffic shaping settings is necessary for traffic shaping policies

Knowledge and Experience

• Understanding traffic shaping settings is required
• Knowing different types of traffic shaping policies is needed

Duration

• The training material on traffic shaping uses 7 minutes

Traffic Shaping Policies

• Traffic shaping policies can be applied to users, firewall rules, web categories, and applications
• Default policy can be configured for traffic without a dedicated policy
• Policies created for traffic shaping are applied to the specified types and cannot be applied elsewhere.

Example 1: Limiting FTP

• Aims to create a policy to limit the bandwidth of FTP applications running on ports 20 and 21
• Users must be able to transfer data via FTP without excessive bandwidth consumption by more critical systems
• 2500 KB/s maximum total FTP bandwidth is the set limit

Example 1: Rule Creation

• A new traffic shaping policy named "FTP Limit Rule" is created. This rule is specifically designed to limit the traffic.
• The rule sets a priority level for processing (0 - Real-time), so this rule is processed before others.
• The limit is set to 2500 KB/s, and the bandwidth usage type is set as "Shared".

Example 1: Applying the Rule

• The created rule needs to be applied to a firewall rule.

Example 2: User Guarantee

• This example addresses the requirement of guaranteed bandwidth for specific users or groups to a critical business application (cloud application).
• The target users are members of a group called "Business Application Users"
• 1000 KB/s guaranteed bandwidth per user is required

Example 2: Policy Creation

• A new policy is created that's user-based and applied to the group.
• The guaranteed traffic priority is set to "Business Critical".
• The bandwidth usage type is set to "Individual"

Chapter Review

• Traffic shaping policies can be applied to users or traffic
• Policies can guarantee or limit traffic
• Policies have priorities which control the processing order

This quiz focuses on network traffic shaping using Sophos Firewall version 19.0v1. It covers various policies related to traffic shaping settings, necessary for effective network management. A basic understanding of traffic shaping is required to successfully answer the questions.