How do I configure the Bandwidth Control policy?


How do I configure the Bandwidth Control policy?

Click to watch a video about Bandwidth Control.

The Bandwidth Control policy specifies how an organization's bandwidth is allocated. (See About Bandwidth Control). 

It contains one default rule, which you can edit, but not delete. You can add rules that prioritize business critical apps and ensure that recreational or non-business critical applications do not affect productivity.

You can define the bandwidth classes that you want to include in the Bandwidth Control policy before you add rules to the policy or while you're adding the rules.

Configuring the Bandwidth Control Policy

To configure the Bandwidth Control policy of a location:

Specify the maximum upload and download bandwidth limits for each location in your organization. Note that about 5% - 7% of TCP traffic is overhead, such as packet headers. The Zscaler service does not include these in its bandwidth calculations. It only includes the application traffic. Therefore, the best practice for computing a location's bandwidth is as follows:

Actual bandwidth – (10% - 15%  overhead) = Upload and Download bandwidth.

To enable bandwidth control for the location, follow the instructions below.

  1. Go to Administration > Resources > Locations.
  2. Edit the location.
  3. In the Edit Location dialog box, configure the following In the Bandwidth Control section:
    • Enforce Bandwidth Control: Enable to enforce bandwidth control for the location.
    • Download (Mbps): Specify the maximum bandwidth limit.  
    • Upload (Mbps): Specify the maximum bandwidth limit.
  4. Click Save and activate the change.

You can add a rule from scratch or copy an existing rule. 

To see a sample policy for bandwidth management, see Bandwidth Control Policy Example.

To add a new rule to the Bandwidth Control policy, follow the instructions below.

  1. Go to Policy Web Bandwidth Control
  2. Do one of the following:
    • Click Add Bandwidth Control Rule to add a rule from scratch.
      OR
    • Click the Duplicate icon to copy an existing rule.
  3. Specify the rule attributes.
    • Rule Order: Policy rules are evaluated in ascending numerical order (Rule 1 before Rule 2, and so on), and the Rule Order reflects this rule’s place in the order. You can change the value, but if you’ve enabled Admin Rank, your assigned admin rank determines the Rule Order values you can select.
    • Rule Name: Enter a name for the rule.
    • Admin Rank: Enter a value from 1-7 (1 is the highest rank). Your assigned admin rank determines the values you can select. You cannot select a rank that is higher than your own. The rule’s Admin Rank determines the value you can select in Rule Order, so that a rule with a higher Admin Rank always precedes a rule with a lower Admin Rank.
    • Rule Status: An enabled rule is actively enforced. A disabled rule is not actively enforced but does not lose its place in the Rule Order. The service skips it and moves to the next rule.
  4. Specify the criteria:
    • Bandwidth ClassesSelect the bandwidth classes to which you want to apply this rule. Note that you first must add URLs or cloud applications to predefined or custom bandwidth classes. Select any number of bandwidth classes. You can also search for bandwidth classes or click the Add icon to add a new bandwidth class.
    • Locations: Select Any to apply this rule to all locations, or select up to 8 locations. You can search for a location or click the Add icon to add a new location. Note that you must enable Bandwidth Control for these locations and specify the download and upload bandwidth limits for each location.
    • Time: Select Always to apply this rule to all time intervals, or select up to two time intervals. You can also search for a time interval or click the Add icon to add a new time interval.
  5. Specify the action:
    • Min. BandwidthSelect the minimum percentage of a location’s bandwidth you want guaranteed for each selected bandwidth class. This percentage includes bandwidth for uploads and downloads.
    • Max. BandwidthSelect the maximum percentage of a location’s bandwidth you want guaranteed for each selected bandwidth class. This percentage includes bandwidth for uploads and downloads.
  6. In the Description field, optionally enter additional notes or information. The description cannot exceed 10,240 characters.
  7. Click Save and activate the change.

The Bandwidth Control policy has two predefined rules that you can edit or delete, and a default rule that you can edit but not delete. You can also edit or delete any administrator-defined rule.

You can then go to the Bandwidth Control dashboard to view your organization's bandwidth usage in real time or go to Analytics > Interactive Reports to view the Bandwidth Control standard reports.

To see how this policy fits into the overall order of policy enforcement, see How does the Zscaler service enforce policies?