How do I configure the Bandwidth Control policy?
The Bandwidth Control policy specifies how an organization's bandwidth is allocated. (See How do I control bandwidth usage?) It contains one default rule, which you can edit, but not delete. You can add rules that prioritize business critical apps and ensure that recreational or non-business critical applications do not affect productivity.
You can define the bandwidth classes that you want to include in the Bandwidth Control policy before you add rules to the policy or while you're adding the rules. To configure the Bandwidth Control policy of a location:
You can then go to the Bandwidth Control dashboard to view your organization's bandwidth usage in real time or go to Analytics > Interactive Reports to view the Bandwidth Control standard reports.
For information on the order in which the service enforces all policies, including this policy, see How does the Zscaler service enforce policies?
Enabling Bandwidth Control
Specify the maximum upload and download bandwidth limits for each location in your organization. Note that about 5% - 7% of TCP traffic is overhead, such as packet headers. The Zscaler service does not include these in its bandwidth calculations. It only includes the application traffic. Therefore, the best practice for computing a location's bandwidth is as follows:
Actual bandwidth – (5% - 7% overhead) = Upload and Download bandwidth.
Log in to the Zscaler admin portal and do the following:
You can add a rule from scratch or copy an existing rule:
- Go to Policy > Web > Bandwidth Control.
- Do one of the following:
- Add a rule from scratch.
- Copy an existing rule.
- Add a rule from scratch.
- Specify the rule attributes.
- Rule Order: Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule’s place in the order. You can change the value, but if you’ve enabled Admin Rank, your assigned admin rank determines the Rule Order values you can select.
- Admin Rank: Enter a value from 1-7 (1 is the highest rank). Your assigned admin rank determines the values you can select. You cannot select a rank that is higher than your own. The rule’s Admin Rank determines the value you can select in Rule Order, so that a rule with a higher Admin Rank always precedes a rule with a lower Admin Rank.
- Status: An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
- Specify the criteria:
- Bandwidth Classes: Select the bandwidth classes to which you want to apply this rule. Note that you first must add URLs or cloud applications to predefined or custom bandwidth classes. Select any number of bandwidth classes. You can also search for bandwidth classes or click the Add icon to add a new bandwidth class.
- Locations: Select Any to apply this rule to all locations, or select up to 8 locations. You can search for a location or click the Add icon to add a new location. Note that you must enable Bandwidth Control for these locations and specify the download and upload bandwidth limits for each location.
- Time: Select Always to apply this rule to all time intervals, or select up to two time intervals. You can also search for a time interval or click the Add icon to add a new time interval.
- Specify the action:
- Max. Concurrent Sessions: Select the number of concurrent users the service allows per bandwidth class, or select Unlimited if you don’t want to limit the number. For example, if you select 10, only 10 users can simultaneously connect to a bandwidth class. Once the limit is reached, the service blocks additional users and display a notification indicating all available connections to the site are being used.
- Min. Bandwidth: Select the minimum percentage of a location’s bandwidth you want guaranteed for each selected bandwidth class. This percentage includes bandwidth for uploads and downloads.
- Max. Bandwidth: Select the maximum percentage of a location’s bandwidth you want guaranteed for each selected bandwidth class. This percentage includes bandwidth for uploads and downloads.
- In the Description field, optionally enter additional notes or information. The description cannot exceed 10240 characters.
- Click Save and activate the change.
The Bandwidth Control policy has two predefined rules that you can edit or delete, and a default rule that you can edit but not delete. You can also edit or delete any administrator-defined rule.