Skip to main content
UdaM
Explorer III
April 11, 2025
Question

Crete policy for Internet access limit number of file uploaded withing mentioned time frame

  • April 11, 2025
  • 3 replies
  • 1219 views

Is there any way to block upload of the grater than 6 number of files within the 10 minutes above 25MB 

 

Thank you.

3 replies

Tauri
Explorer II
April 11, 2025
atakannatak
Explorer
April 11, 2025

Hi @UdaM ,

 

You're essentially looking to implement a rate-based upload control policy. To achieve this, you can refer to the following resources:

 

  • Rate Limiting Access to a Website or Application:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Rate-limiting-access-to-the-website-or-application/ta-p/339626

 

https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/419589/ips-configuration-options

 

  • Creating a Custom IPS Signature for Upload Control:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-custom-IPS-signature-for-a/ta-p/207522

 

https://docs.fortinet.com/document/fortigate/7.2.0/secgw-for-mobile-networks-deployment/906137/custom-ips-signatures#:~:text=To%20add%20custom%20IPS%20signatures%20in%20the%20GUI%3A,FortiGate%20assigns%20an%20available%20attack_id.

 

These articles will guide you through setting up rate limiting and defining custom IPS signatures to help control and monitor upload behavior effectively.

 

NOTE: Based on my research, the type of restriction you've requested cannot be implemented directly based on bandwidth using the standard IPS or application control methods. However, you can achieve a similar result through an alternative approach by creating a custom traffic shaping policy. Specifically, you can configure a traffic shaper to limit traffic to 25 Mbps, applying it based on source or destination criteria. This approach provides the control you're looking for, but through bandwidth allocation rather than rate-limiting at the IPS level. For detailed guidance, please refer to the following documentation:

 

https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/297431/traffic-shaping

 

BR.

 

If my answer provided a solution for you, please mark the reply as solved it so that others can get it easily while searching for similar scenarios.

 

CCIE #68781

UdaM
UdaMAuthor
Explorer III
April 12, 2025

Thank you @Tauri and @atakannatak for your feedback. ill test and update the status. 

 

Regards

UdaM