I would also recommend Cymphonics NetworkComposer. It's a hardware
solution that allows blocking, filtering, and modeling bandwidth based
on user, category, destination, etc. Very helpful applicance.

Andrew

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
On Behalf Of Todd Haverkos
Sent: Thursday, January 12, 2012 1:39 PM
To: Khaled Al-Ghamdi
Cc: peterquid (at) gmail (dot) com [email concealed]; security-basics (at) securityfocus (dot) com [email concealed]
Subject: Re: Managing Network bandwidth

Khaled Al-Ghamdi <alsaher99 (at) hotmail (dot) com [email concealed]> writes:
> Hi Peter
>
> I suggest to use first net flow application which it will help to keep

> monitoring all your routers and switches and it will help you also to
> see which computer ip address is utilize most of the bandwidth.
>
> Also you can purchase any proxy server like bluecoat which will help
> manage the internet sites and blocked non work-related sites and add
> policy and restriction for downloading from the internet.

Bluecoat ProxySG can also manage bandwidth rather well in addition to
the policy/category based blocking it can do. You can have a bucket,
say for streaming media, and put a cap on that subset of traffic, a
separate bucked for large iso/rar/zip downloads and have a separate cap
on that total, and go from there. It's pretty handy.

Now, the interface is ugly, and little bug issues might drive you to an
early grave though (I have a good friend who's spent the last month
debugging a randon reboot issue that BC can't seem to solve, and I've
had similar less severe headaches with em too). Whatever you do, don't
let them sell you on an undersized piece of hardware--force them to do a
traffic analysis on your current network traffic and not just handwave
based on # of users. And do get out your checkbook.

Better price and performance proxy solutions exist, but none that I've
found have as nice built in bandwidth management. Give em a proof of
concept spin if it's in your budget.

To all: any other proxies out there that do bw management like I've
described?

Best Regards,
--
Todd Haverkos, LPT MsCompE
http://haverkos.com/

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate In this guide
we examine the importance of Apache-SSL and who needs an SSL
certificate. We look at how SSL works, how it benefits your company and
how your customers can tell if a site is secure. You will find out how
to test, purchase, install and use a thawte Digital Certificate on your
Apache web server. Throughout, best practices for set-up are highlighted
to help you ensure efficient ongoing management of your encryption keys
and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442

f727d1
------------------------------------------------------------------------

[This email (including any attachments) is confidential and may also be
privileged. If this email has been sent to you in error, please delete
it immediately and notify us. Please do not copy, distribute or
disseminate part or whole of this email if you are not the intended
recipient or if you have not been authorised to do so. We reserve the
right, to the extent and under circumstances permitted by applicable
laws, to retain, monitor and intercept email messages to and from our
systems. Thank you.]

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]