I have a Cisco ASA and cannot seem to control bandwith from the Internet to the device that well. The ASA supports Shaping, but only on outbound traffic which works great. My question is how to protect voice and video applications from FTP application, if the traffic is coming from the internet to my firewall . This would be download traffic, regarding upload traffic, the shaper works well for this.
I have also tried policing, but that just drops traffic, forcing a retransmit, so it just doubles the mount of traffic going over the WAN, which does not seem like a good solution.
I have clients who move a lot of data and from time to time it stomps on the inbound voice and video traffic.