Skip to main content
kimhoersted
New Member
January 26, 2025
Question

Fortigate firewall Usage quota for policy

  • January 26, 2025
  • 2 replies
  • 1229 views

Hi,

 

Is it possible to create a usage quota (either time og amount of data) for a policy.

If you, please advice me how to do this in the gui.

I am using a Fortigate 81E-POE with firmware 7.2.2

 

Thanks.

 

/Kim

2 replies

srajeswaran
Staff
Staff
January 26, 2025
Dhruvin_patel
Staff
Staff
January 26, 2025

Hello Kim,

 

To create a usage quota for a policy on a FortiGate 81E-PoE with firmware 7.2.2 in the GUI, you can follow these steps:

 

1. Go to Security Profiles > Web Filter.

2. Create a new web filter profile or edit an existing one.

3. Select "Proxy-based" as the Feature set.

4. In the FortiGuard category based filter section, locate the category you want to set the quota for.

5. Click on the category (e.g., Education) and choose the action (Monitor, Warning, or Authenticate).

6. In the Category Usage Quota section, click on "Create New."

7. In the New/Edit Quota pane, select the Category (e.g., Education).

8. Choose the Quota Type (Time or Traffic) and set the Total quota (e.g., 5 minutes for time or 256MB for traffic).

9. Click OK to save the quota.

10. Configure any other settings as needed and click OK to finalize the web filter profile. This configuration will set a usage quota for the specified category within the policy.

 

Please note that quotas are reset daily at midnight and are only available in proxy-based inspection mode.

 

Reference Document: 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-user-based-bandwidth-capping/ta-p/240218

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Imposing-data-cap-for-web-access-for-end-users/ta-p/192427

 

Best Regards!

If you have found a solution, please like and accept it to make it easily accessible for others.

kimhoersted
New Member
January 27, 2025

Thank you. Can I make this policy to apply on only certain firewall policies?

And do this proxy-based feature require fortigate license?