Enabling traffic shaping in the security policy
All traffic shapers are enabled within a security policy, including the Application Control shapers. As such, the shapers go into effect after any DoS detection policies, and before any routing or packet scanning occurs.
Traffic shaping is also supported for IPv6 policies.
To enable traffic shaping - web-based manager
1. Go to Policy & Objects > Policy > IPv4.
2. Click Create New or select an existing policy and click Edit.
3. Navigate to the Traffic Shaping section, enable the Per-IP Shaper and select an option from the drop down list.
4. Select OK.
Shapers applied in the security policy affect outbound or traffic to a destination. To affect inbound, or download, traffic, enable both the
Shared Traffic Shaper and the
Reverse Shaper. For more information, see
“Reverse direction traffic shaping”.
To enable traffic shaping - CLI
config firewall policy
edit <policy_number>
...
set traffic-shaper <shaper_name>
set per-ip-shaper <per_ip_shaper_name>
end
See also