Check Point UTM-1 Edge - Setting up Traffic Shaper

Setting Up Traffic Shaper
256 Check Point UTM-1 Edge User Guide
Traffic Shaper allows you to give a class a bandwidth limit. A class's bandwidth limit is the
maximum amount of bandwidth that connections belonging to that class may use together.
Once a class has reached its bandwidth limit, connections belonging to that class will not
be allocated further bandwidth, even if there is unused bandwidth available. For example,
you can limit all traffic used by Peer-To-Peer file-sharing applications to a specific rate,
such as 512 kilobit per second. Traffic Shaper also allows you to assign a “Delay
Sensitivity” value to a class, indicating whether connections belonging to the class should
be given precedence over connections belonging to other classes.
Traffic Shaper supports DiffServ (Differentiated Services) Packet Marking. DiffServ
marks packets as belonging to a certain Quality of Service class. These packets are then
granted priority on the public network according to their class.
Setting Up Traffic Shaper
To set up Traffic Shaper
1. Enable Traffic Shaper for the Internet connection.
You can enable Traffic Shaper for incoming or outgoing connections.
See Using Internet Setup on page
113.
Note: Traffic Shaper cannot control the number or type of packets it receives from
the Internet; it can only affect the rate of incoming traffic by dropping received
packets. This makes the shaping of inbound traffic less accurate than the shaping
of outbound traffic. It is therefore recommended to enable traffic shaping for
incoming traffic only if necessary.
2. Define QoS classes that reflect your communication needs. Alternatively, use
the four built-in QoS classes.
See Adding and Editing a Class on page
259.
3. Use Allow or Allow and Forward rules to assign different types of connections
to QoS classes.
For example, if Traffic Shaper is enabled for outgoing traffic, and you create an Allow
rule associating all outgoing VPN traffic with the Urgent QoS class, then Traffic