AppActionObjects

Firewall > Action Objects

If you do not want one of the predefined actions, you can select one of the configurable actions. The Actions Objects Settings window, shown below, provides a way to customize a configurable action with text or a URL. The predefined actions plus any configurable actions that you have created are available for selection when you create an App Rules policy. For more information about actions, see “Action Objects” .

To configure settings for an action, perform the following steps:

Step 1
In the navigation pane on the left side, click Firewall , and then click Action Objects .
Step 2
In the Action Objects screen, click Add New Action Object .
Step 3
In the Action Objects Settings window, type a descriptive name for the action.
Step 4
In the Actions drop-down list, select the action that you want.
Step 5
In the Content text box, type the text or URL to be used in the action.
Step 6
If HTTP Block Page was selected as the action, a Color drop-down list is displayed. Choose a background color for the block page from the Color drop-down list. Color choices are white, yellow, red, or blue.
Step 7
Click OK .

Configuring Application Layer Bandwidth Management

To use application layer bandwidth management, you must first enable bandwidth management on the interface that will handle the traffic.

To enable bandwidth management on an interface, perform the following steps:

Step 1
In the navigation pane on the left side, click Network , and then click Interfaces .
Step 2
In the Interface Settings table, click the icon under Configure for the desired interface.
Step 3
In the Edit Interface dialog box, click the Advanced tab. The Advanced Settings screen displays.
Step 4
Do one or both of the following:
 
•
Under Bandwidth Management, to manage outbound bandwidth, select the Enable Egress Bandwidth Management checkbox, and optionally set the Available Interface Egress Bandwidth (Kbps) field to the maximum for the interface.
Step 5
Under Bandwidth Management, to manage inbound bandwidth, select the Enable Ingress Bandwidth Management checkbox and optionally set the Available Interface Ingress Bandwidth (Kbps) field to the maximum for the interface. Click OK .

100 Megabits per second

100,000

1 Gigabit per second

1,000,000

Configuring a Bandwidth Management Action

After bandwidth management is enabled on the interface, you can configure Bandwidth Management as an action setting for an object in Application Control.

To configure Bandwidth Management as an action setting:

Step 1
In the navigation pane on the left side, click Firewall , and then click Action Objects .
Step 2
In the Action Objects screen, click Add New Action Object .
Step 3
In the Action Objects Settings window, type a descriptive name for the action.
Step 4
In the Action drop-down list, select Bandwidth Management .
Step 5
In the Bandwidth Aggregation Method drop-down list, select one of the following:
 
•
Per Policy – When multiple policies are using the same Bandwidth Management action, each policy can consume up to the configured bandwidth even when the policies are active at the same time.
 
•
Per Action – When multiple policies are using the same Bandwidth Management action, the total bandwidth is limited as configured for all policies combined if they are active at the same time.
Step 6
Do one or both of the following:
 
•
To manage outbound bandwidth, select the Enable Outbound Bandwidth Management checkbox.
 
•
To manage inbound bandwidth, select the Enable Inbound Bandwidth Management checkbox.
Step 7
To specify the Guaranteed Bandwidth , optionally enter a value either as a percentage or as kilobits per second. In the drop-down list, select either % or Kbps .

If you plan to use this custom action for rate limiting rather than guaranteeing bandwidth, you do not need to change the Guaranteed Bandwidth field.

Step 8
To specify the Maximum Bandwidth , optionally enter a value either as a percentage or as kilobits per second. In the drop-down list, select either % or Kbps .

If you plan to use this custom action for guaranteeing bandwidth rather than rate limiting, you do not need to change the Maximum Bandwidth field.

Step 9
For Bandwidth Priority , select a priority level from the drop-down list, where 0 is the highest and 7 is the lowest.
Step 10
Optionally select Enable Tracking Bandwidth Usage to track the usage. When bandwidth usage tracking is enabled, you can view the usage in the Action Properties tooltip by mousing over the BWM action of a policy on the Firewall > App Rules page.
Step 11
Click OK .

You can see the resulting action in the Action Objects screen.

Firewall > Address Objects

 
Note
For increased convenience and accessibility, the Address Objects page can be accessed either from Network > Address Objects or Firewall > Address Objects. The page is identical regardless of which tab it is accessed through. For information on configuring Address Objects, see “Network > Address Objects” .

Firewall > Service Objects

 
Note
For increased convenience and accessibility, the Service Objects page can be accessed either from Firewall > Service Objects or Network > Services. The page is identical regardless of which tab it is accessed through. For information on configuring Address Objects, see “Network > Services” .