Description
This article describes how to configure the traffic shaping on the web proxy interface to limit users traffic.
Scope
Fortiproxy v7.0
Solution
Here is the way, Create traffic shaper profile with class ID in the GUI
To configure on CLI,
# config firewall shaping-profile
edit "traffic_shaping"
set default-class 2
config classes
edit "test1"
set class-id 2
set guaranteed-bandwidth 10
set maximum-bandwidth 20
next
edit "test2"
set class-id 3
set priority medium
set guaranteed-bandwidth 5
set maximum-bandwidth 10
next
end
next
end
Configure Traffic shaping on the interface with Explicit web proxy enabling in the GUI
To configure onCLI,
# config system interface
edit "port2"
set ip 10.211.1.110 255.255.252.0
set allowaccess ping https ssh http telnet
set type physical
set explicit-web-proxy enable
set inbandwidth 100000
set outbandwidth 100000
set egress-shaping-profile "traffic_shaping"
set ingress-shaping-profile "traffic_shaping"
set snmp-index 2
next
end
Speedtest result before traffic shaping applies
Speedtest result after traffic shaping applies
More info to create or edit a class, refer to
Alternative way to configure Traffic shaping with Traffic shaping policy, refer to
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.