Overview

1. Sophos Bandwidth Management System
2. Bandwidth Management Hardware
3. Sophos Log In

• This article describes the steps to monitor XG Firewall traffic in real time from the command line. For example, to identify what IP is using bandwidth.

1. Use the second to create a bandwidth pool on the GUEST interface and enter in a guaranteed value that is 5% of the downlink bandwidth of your internet connection with an upper limit of, for example, 50% of the downlink bandwidth. If both groups were on the same internal interface, but in two separate subnets, you would have better control.
2. In Sophos UTM version 9.1 and later, you have ability to throttle the download speed for various services and the interfaces. In some cases it is necessary to throttle the download speed for some or all services. You can also configure if one or more interfaces are affected by QoS rules.
3. In Astaro I am able to see who is downloading what via the http proxy report, and I can see total bandwidth going through the Firewall by using the Network report. But I'm not sure how to break down which IP is using how much upload bandwidth (uploads don't go through the proxy) or how to get a break down of bandwidth use by protocol.

Bandwidth management, also referred to as bandwidth control, involves measuring and controlling how bandwidth is used on the network. Bandwidth is the maximum rate at which data will transfer on a network. By using bandwidth management software, you can better control how data transfer is handled on a network, given bandwidth constraints. Use the second to create a bandwidth pool on the GUEST interface and enter in a guaranteed value that is 5% of the downlink bandwidth of your internet connection with an upper limit of, for example, 50% of the downlink bandwidth. If both groups were on the same internal interface, but in two separate subnets, you would have better control.

Sophos Bandwidth Management System

Configuration

• To monitor traffic usage in real time, do the following:
• Log in to the console interface of the Sophos XG firewall device by connecting the console wire or connecting via SSH with Putty software.
• Next enter the password to login to Sophos XG and select Option 5 and Option 3 to access Advance Shell.
• Enter the iftop command line -i IFNAME with IFNAME is the port name we need to track.
• Usually we usually monitor bandwidth at the LAN port.
• After entering the command and pressing the Enter key the following table will appear as follows.

• To stop the tool type Q to quit.
• To show the traffic separated by source and destination port, append -P to the above command:
• iftop -i IFNAME -P

Bandwidth Management Hardware

You need to turn on Sophos Central management on Sophos Firewall and accept the request on Sophos Central.

You'll need a Sophos Central account (either a license or trial).

Turn on Sophos Central management on Sophos Firewall

Sophos Log In

1. Sign in to Sophos Firewall and go to Central Synchronization.
2. Click Register and add the email address and password for your Sophos Central administrator account. Click Register.

   For instructions on how to create a Sophos Central administrator account, see the video available on Sophos Central: Getting Started.

3. Turn on Sophos Central Services.