Web Gateway 7.1.5 Product Guide - McAfee

6
Web filtering
Supporting functions
Bandwith throttling rule for downloads
The following is an example of a rule that can execute bandwidth throttling rule for downloads.
Note: The example shows approximately how the rule appears on the user interface.
Name
Limit download speed for media types on throttling list
Criteria Action Event
MediaType.EnsuredTypes at least one in list MediaType
Throttling List
–> Continue – Throttle.Server (1000)
The rule uses the Throttle.Server event to limit the speed with which downloads are performed to 1000
Kbps if the web object that should be downloaded belongs to a media type on a particular list.
In the criteria of the rule, the MediaType.EnsuredTypes property is used to detect the media type of the
web object that the web server sends. An object can also be found to belong to more than one type.
If any of these types is on the Media Type Throttling List, the criteria is matched and the rule applies.
The throttling event is then executed.
The Continue action lets rule processing continue with the next rule.
Bandwidth throttling rules and rule sets
It is recommended that you create an overall rule set for bandwidth throttling rules and embed two rule
sets in it, one for throttling uploads and another for throttling downloads. You can then let the
embedded upload rule set apply for the request cycle and the embedded download rule set for the
response cycle.
Note: Within each embedded rule set, you can have multiple throttling rules that apply to different kinds of
web objects.
The overall rule set for bandwidth throttling should be placed at the beginning of your rule set system.
If this is not done, rules in other rule sets can start unthrottled downloads of web objects before your
throttling rules are executed.
For example, a rule for virus and malware filtering could trigger the download of a web object that has
been sent by a web server in response to a user request. The web object then needs to be completely
downloaded to the appliance to see whether it is infected. If your bandwidth throttling rule set is placed
and processed after the rule set with the virus and malware filtering rule, bandwidth throttling is not
applied to that download.
232 McAfee Web Gateway 7.1.5 Product Guide