per category shapping

[hamgi]

hello, I' ve Fortigate100D OS 5.2 I want to do shaping per web-filter category (for example :video streaming) your help will be appreciated. regards

[Christopher_McMullan]

Hello, You can' t apply shaping based on FortiGuard categories, since the policy is matched before the website category is determined, based on source and destination port, address, socket, schedule, and user/device. However, you can apply shapers to applications if you utilize an Application Control sensor. You could create a different shaper for each category (social networking vs. streaming media, etc.).

[hamgi]

hello, thank you for your reply. can i do shaping per destination URL ? regards

[Christopher_McMullan]

If you create FQDN address objects as the destination for a policy, you could do it at the policy level, but if the URL needs to shape based on the directory path, you' re in the same situation: you would need to define a custom application control signature. The request process isn' t that complicated. There is an online submission request form at www.fortiguard.com. Alternately, you could open a ticket with TAC and ask for a template you could modify and apply for each site you wanted to shape. One warning about FQDN address objects, however: they rely on the FortiGate to query and resolve hostnames to the same IPs as connecting clients, and store a maximum of 32 results. For large sites (think Google, etc.), if more than 32 IPs could possibly be returned, you may have some traffic where the policy is not matched.