3

I'm trying to limit internet users by traffic quota in fortigate firewall.Is there a way to limit users traffic usage and set quota for them in fortigate?

i think there is no built-in feature for this,but i guess by means of an external AAA server it may be possible.

i've used cisco ACS before ,but i don't know how to configure it for this scenario. and i don't know if fortigate support CoA or Packet of Disconnect either.

Thanks

Improve this question
1
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer. – Ron Maupin♦ Dec 31 '20 at 19:42
3

What version of fortios are you using? and what model de you have? FortiOs 5.0 and 5.2 (i think) have what are you looking for which includes an UTM options of client reputation (in other words, users rating) not just by traffic, by malware, network applications or IPS.

Hope Helps!

Improve this answer
3

I've used FortiGate in the past and you can do that with UTM like M4niac said. One thing to be careful with, maybe you've already experienced this, is Forti units are slow to process changes. In my experience, you do something in the configuration and it takes a couple of minutes before actually applying. Especially when speaking of UTM features. It looks like sessions needs to be dropped then initiated again on the new feature you just applied.

If you are under licensing, you can post a question to their support. They are quite helpful. I've done it a couple times for config issues. :)

Improve this answer
1

Yes ! there is a feature name "traffic shapping" in fortigate firewall . Traffic utilisation can be restricted as per our requirements we can restrict bandwidth utilisation as per users basic,

We can define bandwidth utilisation per user with help of traffic shapping

We can even configuration traffic shapping on specific incoming and outgoing policy too . So traffic on that policy for each session bandwidth is limited .

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.