Configuring the Bandwidth Control Policy


Configuring the Bandwidth Control Policy

Click to watch a video about Bandwidth Control.

The Bandwidth Control policy specifies how an organization's bandwidth is allocated. You can add rules that prioritize business-critical apps and ensure that recreational or non-business critical applications do not affect productivity. It contains a default rule, which you can edit, but not delete. To learn more, see About Bandwidth Control.

You can also define the bandwidth classes that you want to include in the Bandwidth Control policy before you add rules to the policy or while you're adding the rules. To learn more, see About Bandwidth Classes.

To see how this policy fits into the overall order of policy enforcement, see How does the Zscaler service enforce policies?

Configuring the Bandwidth Control Policy

To configure the Bandwidth Control policy of a location:

  1. Enable Bandwidth Control for the Location 
  2. Enable Bandwidth Control for a Sub-Location
  3. Add Rules to the Bandwidth Control Policy

You can then go to the Bandwidth Control dashboard to view your organization's bandwidth usage in real time or go to Analytics > Interactive Reports to view the Bandwidth Control standard reports.

Specify the maximum upload and download bandwidth limits for each location in your organization. About 5% - 7% of TCP traffic is overhead, such as packet headers. The Zscaler service does not include these in its bandwidth calculations. It only includes the application traffic that is proxied to Zscaler. Therefore, the best practice for computing a location's bandwidth is as follows:

Actual bandwidth – (10% - 15%  overhead) = Upload and Download bandwidth.

To enable bandwidth control for the location:

  1. Go to Administration > Locations
  2. Edit the location
  3. In the Edit Location dialog box, configure the following In the Bandwidth Control section:
    • Enforce Bandwidth Control: Enable to enforce bandwidth control for the location
    • Download (Mbps): Specify the maximum bandwidth limit  
    • Upload (Mbps): Specify the maximum bandwidth limit
  4. Click Save and activate the change

To enable bandwidth control for sub-locations:

  1. Go to Administration > Locations
  2. Edit the sub-location
  3. In the Edit Sub-Location dialog box, configure the following In the Bandwidth Control section:
    • Use Location Bandwidth: Enable this so that any potential bandwidth available at the location will be given to this sub-location. Sharing happens on a first come, first serve basis when using this option.
    • Override: Manually specify the maximum bandwidth limit for uploads and downloads that will be used at this sub-location  
      This configuration is common for a Guest-Wifi or Server sub-location that admins would like to set a limit for. Once this sub-location reaches the limit, it won't be allowed to exceed the specified limits. Unused bandwidth won't be allocated to other sub-locations, even if the sub-location doesn't use it all.
    • Disable: Disable bandwidth control for this sub-location
  4. Click Save and activate the change.

There are some additional features to be aware of when adding rules to sub-locations:

  • If bandwidth control is disabled on the main location, but enabled on a sub-location, then an admin will have to manually enter the upload and download limits for the sub-location.
  • If bandwidth control is enabled on the main location, and the Override option is enabled on one of the sub-locations, other locations will only be able to use the bandwidth under Unused Bandwidth (under Location settings in the Admin Portal).
  • Whenever a main location has bandwidth control enabled after a sub-location does, it needs to have upload and download limits added. The value of upload and download limits added to the main location must be greater than or equal to the total value of limits used for all of the sub-locations.
    For example, say you first enable bandwidth control on the sub-location “San Jose” and set it to have a download limit of 15 Mbps and an upload limit of 80 Mbps. If you then enable bandwidth control on the main location “California”, and San Jose is its only sub-location, then California's download and upload limits should be at least 15 Mbps and 80 Mbps respectively.
  • If you manually set the bandwidth control on a sub-location to a number that is equal to the bandwidth of the main location, bandwidth control will be disabled on all other sub-locations.